last executing test programs: 6m34.075671138s ago: executing program 3 (id=744): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000040)={'\x00', 0x4, 0x9, 0x0, 0x1000, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x2, r0, 0x1, 0x0) r1 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) unshare(0x22020600) openat$vmci(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) flistxattr(r2, &(0x7f0000000040)=""/14, 0xe) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) r5 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) pread64(r5, &(0x7f0000001840)=""/4096, 0x1000, 0x1) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) syz_open_dev$tty1(0xc, 0x4, 0x1) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x3}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r6 = inotify_init() r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x3c, r8, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x3c}}, 0x0) inotify_rm_watch(r6, 0x0) openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) preadv(r6, &(0x7f00000011c0)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1, 0x7f, 0x1b) r9 = userfaultfd(0x1) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r9, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 6m32.165417826s ago: executing program 3 (id=750): ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000100)}) unshare(0x40600) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {}, {0x2, 0xffff}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x1ff}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40014}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000080), 0x4) 6m31.906130303s ago: executing program 3 (id=752): syz_usb_connect$uac1(0x0, 0x99, &(0x7f0000000300)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x87, 0x3, 0x1, 0x0, 0xb0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@feature_unit={0x7, 0x24, 0x6, 0x9}, @output_terminal={0x9}, @selector_unit={0x9, 0x24, 0x5, 0x1, 0x0, "f8431cfd"}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x307, 0x0, 0x4, 0xfc}, @selector_unit={0x6, 0x24, 0x5, 0x4, 0x0, "fd"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x4, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x2f}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x0, 0xcd8}}}}}}}]}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c0000800600010002000000080002"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80) sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000015000504e1ff4319918e00352d"], 0x2c}}, 0x60040050) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) r3 = syz_open_dev$usbfs(&(0x7f0000000640), 0x5, 0x10a00) ioctl$USBDEVFS_REAPURBNDELAY(r3, 0x4004550d, &(0x7f0000000680)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0xfffffffffffffff9, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="b80000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000009000128009000100766c616e00000000800002800c0002000e0000000a000000340004800c00010017900000020000000c000100f04ae965cb0b00000c00010004000000002000000c000100001000000900000006000100020000000c0002000a0000000c000000280003800c00010008000000090000000c00010009000000030000000c000100090000000080000008000500", @ANYRES8=r5], 0xb8}}, 0x2) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x24dfdbfe, {{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x20, 0x1d}, {@in6=@private1, 0xfe, 0x32}, @in6=@empty, {0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x0, 0x9, 0x0, 0x542}, {0x4, 0x7fffffffffffffff}, {0x2}, 0x70bd2c, 0x3501, 0xa, 0x0, 0x0, 0x50}, [@encap={0x1c, 0x4, {0x7, 0x4e24, 0x4e20, @in6=@dev={0xfe, 0x80, '\x00', 0x2d}}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000100)={{0xffff0000, 0x0, 0x8, 0x0, 0x7f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xddccb000, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6a, 0x0, 0x4c, 0xe, 0x0, 0x3}, {0x10b002, 0x2000, 0xc, 0x0, 0x80, 0x0, 0x43}, {0x1000, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x1a, 0xa8}, {0x10000, 0x200000, 0xd, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0xfc, 0x86, 0xfe}, {0xeeee8000, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x4}, {0xd000, 0x41000, 0x9, 0xff, 0x0, 0x10, 0x4, 0xe}, {0x80a0000, 0x801}, {0x1, 0xfffe}, 0x0, 0x0, 0x0, 0x10, 0x1, 0x0, 0x900, [0x0, 0x0, 0x10000, 0x3]}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_SET_SREGS2(r7, 0x4140aecd, &(0x7f0000000240)={{0x3000, 0x60000, 0x8, 0x3, 0x4, 0x0, 0x6e, 0x2, 0x2, 0x5, 0x1, 0x2}, {0x70000, 0x58000, 0xb, 0x8, 0x3, 0x0, 0x8, 0x5, 0x1, 0x8, 0x3, 0x8}, {0x2000, 0x9000, 0xb, 0x31, 0x8, 0x8, 0x4, 0x8, 0x9, 0x9d, 0x5, 0x80}, {0x4000, 0x100000, 0x3, 0x5, 0x5, 0x8, 0x74, 0xcf, 0x4, 0x3, 0x65, 0x8c}, {0x80a0000, 0x1000, 0x2, 0xfe, 0x5, 0x4, 0xf9, 0x2, 0x6, 0x9, 0x5, 0x3}, {0xeeee8000, 0x8080000, 0xc, 0x1, 0x0, 0x34, 0x2, 0x5, 0xb, 0xc, 0x2e, 0xb2}, {0x54000, 0xb000, 0x3, 0x9, 0x3, 0x5, 0x9, 0x3, 0x8, 0x1, 0x1, 0x6e}, {0x41000, 0x8080000, 0xe, 0x4, 0xde, 0x4, 0x80, 0x1c, 0xb6, 0x9, 0x8, 0x7}, {0xeeef0000, 0x5}, {0x26000, 0x60}, 0x40000, 0x0, 0x100000, 0x402000, 0x9, 0xbc01, 0xdddd0000, 0x1, [0x3, 0xa672, 0x9, 0x70ba]}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000019080)={[0x3, 0x7, 0x400, 0x10, 0x5ba9, 0x6f7, 0x800, 0x5, 0x401, 0x5d, 0x0, 0x9, 0x4, 0xa2e2, 0x7, 0xffffffffffffffff], 0xe000, 0x380000}) ioctl$KVM_SET_MSRS(r7, 0x4140aecd, &(0x7f0000000100)) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r1, &(0x7f0000002700), 0x1, 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r9, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000004c0)={0x10c, 0x1, 0x9, 0x5, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x5}}, @NFCTH_STATUS={0x8}, @NFCTH_TUPLE={0x5c, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @NFCTH_TUPLE={0x58, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x8}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x400}}, @NFCTH_STATUS={0x8}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r10 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r10, &(0x7f0000004800)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x3, @remote, 0xfffffe01}, 0x1c, 0x0, 0x0, &(0x7f0000001300)=[@tclass={{0x10, 0x29, 0x43, 0xfffff1d2}}], 0x10}}], 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) 6m27.871545267s ago: executing program 3 (id=758): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000077ee000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) ioctl$LOOP_SET_FD(r3, 0x4c05, r3) dup2(r2, r0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x2) r4 = socket$inet6(0xa, 0xa, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x300, 0x0, 0x2, 0x9, 0x0, 0x4}, 0x20) 6m27.227193859s ago: executing program 3 (id=761): unshare(0x40600) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000080), 0x4) (fail_nth: 2) 6m26.639123378s ago: executing program 3 (id=766): socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) (fail_nth: 20) 6m26.130196159s ago: executing program 32 (id=766): socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) (fail_nth: 20) 3m36.211032584s ago: executing program 2 (id=1284): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) io_setup(0x7, &(0x7f0000000280)=0x0) (async) r3 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/pm_async', 0x42, 0x8) io_submit(r2, 0x1, &(0x7f0000000500)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, r3, 0x0, 0x0, 0x400000004, 0x0, 0x2, r3}]) io_pgetevents(r2, 0x2, 0x3b, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000003d) (async) mkdir(&(0x7f00000000c0)='./file0\x00', 0x16) chdir(&(0x7f0000000140)='./file0\x00') (async) openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x515001, 0x488) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000841) (async) openat(0xffffffffffffff9c, 0x0, 0x0, 0x20) r4 = socket$isdn(0x22, 0x2, 0x25) bind$isdn(r4, &(0x7f0000000200)={0x22, 0x7f, 0x6, 0x3, 0x5}, 0x6) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008b40)={0x34, 0x40, 0x1, 0x70bd25, 0x4, {0x4}, [@nested={0x4, 0x48}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x5, 0xb, 0x0, 0x0, @str='\x00'}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r8, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) (async) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}}, 0x20}, 0x1, 0xba01, 0x0, 0x4000050}, 0x0) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback, 0x2000}}, 0x0, 0x0, 0x1a, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) bind$inet6(r6, 0x0, 0x0) listen(r6, 0x0) 3m34.985834395s ago: executing program 2 (id=1289): openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x42401, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_TIMEOUT={0x8}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x49b, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x7, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x40}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x24, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x40}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5, 0x84}}}, 0xb0}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r7, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x0, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000881}, 0x100) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4007, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r4, 0x40f6, 0x4f7c, 0x0, 0x0, 0xffffffffffffffca) 3m33.737835423s ago: executing program 2 (id=1294): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x10000000001) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8101, 0x0, 0x7, 0x0, 0x3ff, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f00000002c0)=0x3) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) r7 = socket(0x40000000015, 0x5, 0x0) connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r7, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x18}}, 0x0) getsockopt(r7, 0x7, 0xb60, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r6, 0x1, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x0, @loopback, 0x10000bff}, @ib={0x1b, 0xd9, 0x100fff, {"4a50abf0c8ed50f638facd57de629163"}, 0x8000000000000001, 0x2, 0x3}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r6, 0x4734}}, 0x10) 3m31.529779185s ago: executing program 2 (id=1301): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x20d036, 0x0, 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r8, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x28}}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r9) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r10, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r3, &(0x7f0000000100)='./file0\x00', 0x220) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2c, r12, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0x118, r12, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}]}, @TIPC_NLA_MEDIA={0x9c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x698a}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x800}]}]}, 0x118}}, 0x44051) ioctl$TCXONC(r1, 0x540a, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) 3m31.326626737s ago: executing program 2 (id=1303): socket$inet_udp(0x2, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x40080c0) syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="12012002daf08d08981490a00f4801"], 0x0) pipe(&(0x7f0000000140)) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 3m30.869769405s ago: executing program 2 (id=1305): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000080), 0x10) openat$fb0(0xffffff9c, &(0x7f0000000440), 0x1a902, 0x0) sendmsg$can_bcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001200)=ANY=[@ANYBLOB="0500000008000000ed00000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000004"], 0x48}, 0x1, 0x0, 0x0, 0x2000c014}, 0x800) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, r2}, 0x10, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='\a'], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8001) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r3, 0x0) r4 = syz_usb_connect(0x1, 0x7e1, &(0x7f0000001b80)={{0x12, 0x1, 0x110, 0x1e, 0x0, 0x4a, 0x20, 0xbb4, 0xcf, 0x6c50, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7cf, 0x1, 0x4, 0x1, 0x10, 0x58, [{{0x9, 0x4, 0x6a, 0x0, 0x10, 0x20, 0x59, 0xc5, 0x9, [@uac_as={[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x7f, 0x2, 0x21, 0x2, "e448f4", "fe"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x7, 0x2, 0x6, 0x40, "4acd65bf5cfa9282"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x6, 0x5, 0x7, "a7"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x0, 0xfffd, 0x99, "d53c3489efcb8d1a"}]}], [{{0x9, 0x5, 0x8, 0x0, 0x20, 0x3, 0x22, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x5}]}}, {{0x9, 0x5, 0x5, 0x10, 0x8, 0x9, 0x0, 0x6, [@generic={0xb1, 0x4, "d3e83b6928e6b7a60056be4abde3f8ce0b3389ab326f21f22adf3f4cf351b6e500c17e130d53547fdc80263c4d3e51ac08f19eeaa07f48c1b714e13c57cf4d69bae9b15e4adca695d071a53ca822d9c9a91cdb6d28417adde275dd9f399baeeefafaddea21c05436d907eb73f354e91d18f464e8ca723b6349ba8439f043e53b35afe8146eb57b0843f191db7dbeba455236c617b6c1eae3f1589c030f77ec3a5597ba2f3dc0980ee092b26581f260"}, @generic={0xd6, 0x21, "ee79f08abddfcd6ffead7773f955a50baa8e3a7be9ad85ac89f29d18a9fcfec39bc7a3222d28b641794c916b0cd9db526401d98804f80ffd1b45839ad9e1e5a11f88fc727430d3590ffbafdd70555b0287fcbd44b5c3437642bdaa1724c62cd3b85893c7d4e25683fe3c171a96baaf9ba7dcbcfe49be98ee5efb14d71e9d77f1c14fd0f6d14b2eb5f2dfeec9f76d08ace61ac907a9bfae264cfe9c7dcf9176a969009f06744336a39829b92046ebc652f09f4806f88aaae15c9bdf5ad1de18b7233e7230d8c1d1cfa0e77ff8ab4016d6d2ef3298"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x6, 0x7, 0x90, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0xfff8}]}}, {{0x9, 0x5, 0x5, 0x0, 0x600, 0x2, 0x7, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x10, 0x2}]}}, {{0x9, 0x5, 0x0, 0x10, 0x8, 0x2, 0x10, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x9b0c}]}}, {{0x9, 0x5, 0xf, 0x27c1c7d221d1efd, 0x460, 0x1, 0x10, 0x8b, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x1}]}}, {{0x9, 0x5, 0x1, 0x0, 0x400, 0xff, 0x6, 0x5, [@generic={0xa, 0x8, "d792866a982b89d8"}, @generic={0x8f, 0xd, "e11810c20daed4b78addce4dbe7f8dea36326b850e1737f04f062475da2c045a93e51b6ef9b8e2e379edd34727f8f69fb3e6d2d1d2c5ba4b7cd7bd80468e001595a02b5bd892a3afcf4e9df48eddec14c536f76ee19bd4bda1172bbbb863138a1612721ff86143bdf81aa05726087e093b62d41d8c282186262f5c4f32ba277bb3f712105cc962b76fbb9005ba"}]}}, {{0x9, 0x5, 0xb, 0x3, 0x10, 0x0, 0x2, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x5, 0x1000}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0xb1, 0x5}]}}, {{0x9, 0x5, 0x6, 0x10, 0x40, 0x7, 0xcf, 0x1, [@generic={0x79, 0x1, "980d1dff840e60f67340ec4c116f0621ec1eac08f8c7968633de7d12e99b8c3bae70628ca0b62f73f863fd89fa4c0fd9e064faa8af6a01a4dd1ccd2cf308650578b8bc1124fcfec89ae96aada5012aa5cc4d4364a8a37077246a279c745b3ebf6e85a76a0c1a18bdfa61ef380355bfc388cbaf3689b1c4"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x62, 0x80}]}}, {{0x9, 0x5, 0xa, 0x0, 0x40, 0x7, 0xf, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x6, 0x2}]}}, {{0x9, 0x5, 0x8e, 0x0, 0x40, 0x9, 0x10, 0x5, [@generic={0xea, 0x23, "f9d3f2c754a6677d8ee8f76f2d07684014f07d1067a8127fa903aa869b9cc21b769f290d9d77a89bc129740d1d60d8e664984784ba70ab5db1d7eca72e237a369aa13410632ae463e4576b29ed92e8157f90e3e309e32290897a187913743c5a48575749f53dec56c0d7157ceecb366a21afb9e9553981dbb3250d607c5a8d229e76fad774b234e0510c3bc5f291dc5ace9e12c52480eb2251539c045058a64143ff2653fad956e685ed1b4c778433071ceaf512b6880651204b90df1709a276dec796cf4619c267450a46f789fa5f5c86fae5a09cb993eea70d913bda7c0b1ca4b8cefe83e542f2"}, @generic={0x80, 0x23, "add0665b1b28f525c1919f8174ac63d7c3373a2759530e1f9d163e840bdfc175083a9ad91173a9b7312322c598829aa1e0a0e67249f9872874906744bc96488e20d365858a7418800bb58162884cfe748c2517dd640ef3039b6a01d0eac0189e5dae9187c1d4ff4f8b74f07947ed17f676750423d056f49196ab6736251c"}]}}, {{0x9, 0x5, 0xd, 0x1, 0x40, 0x7f, 0x9, 0x60, [@uac_iso={0x7, 0x25, 0x1, 0x40, 0xd, 0x200}, @generic={0xd2, 0x7, "0149b2bb23907a964eb124455ba0f3e1904e1fdae45602ee8b5c10e4d45c8e4e93533abecd676752ac2d8bde401f6fd03ee75cd9006d297b4eef700b06c3d99db6d0e023951b2b48e509de9da9680fa31d5dd8ad7691990991d1fa10a4efe526dd7cc9d55b9c2f5a8e9935087e451de2cba58cc0a26d2804a4b0bbe559822abbf09d63e1ba639b8e897341812cc03b18e388d06257327f5bfdb3dde18e216976a48a0a67219c19faab940499e11578858e11714f76e62d29528d3783e41e80b02d2ce7f4866ccbe2d59e95403102d2e8"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x3ff, 0x7, 0x2, 0x9, [@generic={0xaa, 0x3, "5853b74189048a94b28072866a1a346a3c7a41df5262b0686571335e840f49a0090419cd66ec0f8839c24a6c294cb1fdd9c33a9083ca3f811e4550b71c7131c9359541199b32fe3ac7a333b04b2a0c856f9e25ee159da0430d10561c80defacf06768ff4822e6bf7f9ea21ed42ab3947cebf2d19a05ab21d8befbbf9889cbc435fa5a1b5f2c1d3a37c0007407c3e529f71603e27bcf24cbe4c2033ff36d8955532e03d48de8037f5"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x3ff, 0x8, 0x1, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4}, @generic={0xea, 0xd, "497ca01b520dcccd66cf65520b4a2efd85ee991b7759b7089f669cc5f0ae9d33b992f0e42ceef69bbe7d718096d84fa7a81ff4ad75b9532be0158c40d890fe842bc85f9e6190aa6e604b98d3e4f85bcf9b9750cc8800182b3fcc21f3efcf0b0ebfa1c6d916e646a6f5aa19c452b6cc8790a176c11495741d4c39e2bfd87954bebb2537652582a3be6bcef71502ea9763f7580b1dca90b5f296f126423352b0529ade027d90cb142c24c11ca5fc6b97f1e77e0a8cdbd67a11c70cf3621f4db2e49b6fd87f639b2b9fde8ab975ab6357c510fad0b506b8b8ea4d0b852de75ed59fc128935ac0cc3ecf"}]}}, {{0x9, 0x5, 0x8b, 0x0, 0x0, 0x7, 0x2a, 0x96, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x400}]}}, {{0x9, 0x5, 0x6, 0x10, 0x3ff, 0xd5, 0x2, 0x7f, [@generic={0x32, 0x24, "ac788dca488430db2b2e6d7179398dd16e7f88b02a1af353ec3cc4dca12616b2a55927a99ac75f09823d56aaf98e01bb"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x5, 0xcc3}]}}]}}]}}]}}, &(0x7f00000009c0)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x110, 0x3, 0x0, 0x2, 0x40, 0x5}, 0x89, &(0x7f0000000880)={0x5, 0xf, 0x89, 0x3, [@generic={0x5c, 0x10, 0xb, "9a7bbea50b0f52e0a82660591456174bbb028be80ac9c5cc9f5716ee70671c2c7aaeb0d6be2f7a418eb498df57bfc0ae6b3e94079afefce2f8d79f6407bfa565d1c5678d77e2bf97b1975264cc5131c9b80d137ef7b72ca10d"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "0f260ee7cfc579dfdd26bba6e44afa23"}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "4358be4bf22e23f157fd307ce49228ff"}]}, 0x1, [{0x57, &(0x7f0000000940)=@string={0x57, 0x3, "1db25a9f190bf331526be51e617e695c5e43c7ca9b9715ea00417e3ab8a077bf7b6a89f6e16832ba5aefb22d7379d4e0a8a2898516a03586dc7a03d32ffaa13620b0d3ed8bbadacfdc61ce9c7748f1579c90e0f1e1"}}]}) syz_usb_disconnect(r4) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/131, 0x83}, {&(0x7f0000003500)=""/182, 0xb6}, {&(0x7f00000054c0)=""/4077, 0xfed}, {&(0x7f0000000600)=""/76, 0x4c}, {&(0x7f0000000680)=""/281, 0x119}, {&(0x7f0000000180)=""/64, 0x40}, {&(0x7f00000002c0)=""/86, 0x56}, {&(0x7f00000007c0)=""/182, 0xb6}, {&(0x7f00000004c0)=""/139, 0x8b}, {&(0x7f0000000b80)=""/4096, 0x1000}], 0xa}, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029ea69801d76ab0a272a2a788bab6c95f79725074", 0xd5}], 0x1}, 0x0) 3m29.814164861s ago: executing program 33 (id=1305): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000080), 0x10) openat$fb0(0xffffff9c, &(0x7f0000000440), 0x1a902, 0x0) sendmsg$can_bcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001200)=ANY=[@ANYBLOB="0500000008000000ed00000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000004"], 0x48}, 0x1, 0x0, 0x0, 0x2000c014}, 0x800) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, r2}, 0x10, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='\a'], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8001) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r3, 0x0) r4 = syz_usb_connect(0x1, 0x7e1, &(0x7f0000001b80)={{0x12, 0x1, 0x110, 0x1e, 0x0, 0x4a, 0x20, 0xbb4, 0xcf, 0x6c50, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7cf, 0x1, 0x4, 0x1, 0x10, 0x58, [{{0x9, 0x4, 0x6a, 0x0, 0x10, 0x20, 0x59, 0xc5, 0x9, [@uac_as={[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x7f, 0x2, 0x21, 0x2, "e448f4", "fe"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x7, 0x2, 0x6, 0x40, "4acd65bf5cfa9282"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x6, 0x5, 0x7, "a7"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x0, 0xfffd, 0x99, "d53c3489efcb8d1a"}]}], [{{0x9, 0x5, 0x8, 0x0, 0x20, 0x3, 0x22, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x5}]}}, {{0x9, 0x5, 0x5, 0x10, 0x8, 0x9, 0x0, 0x6, [@generic={0xb1, 0x4, "d3e83b6928e6b7a60056be4abde3f8ce0b3389ab326f21f22adf3f4cf351b6e500c17e130d53547fdc80263c4d3e51ac08f19eeaa07f48c1b714e13c57cf4d69bae9b15e4adca695d071a53ca822d9c9a91cdb6d28417adde275dd9f399baeeefafaddea21c05436d907eb73f354e91d18f464e8ca723b6349ba8439f043e53b35afe8146eb57b0843f191db7dbeba455236c617b6c1eae3f1589c030f77ec3a5597ba2f3dc0980ee092b26581f260"}, @generic={0xd6, 0x21, "ee79f08abddfcd6ffead7773f955a50baa8e3a7be9ad85ac89f29d18a9fcfec39bc7a3222d28b641794c916b0cd9db526401d98804f80ffd1b45839ad9e1e5a11f88fc727430d3590ffbafdd70555b0287fcbd44b5c3437642bdaa1724c62cd3b85893c7d4e25683fe3c171a96baaf9ba7dcbcfe49be98ee5efb14d71e9d77f1c14fd0f6d14b2eb5f2dfeec9f76d08ace61ac907a9bfae264cfe9c7dcf9176a969009f06744336a39829b92046ebc652f09f4806f88aaae15c9bdf5ad1de18b7233e7230d8c1d1cfa0e77ff8ab4016d6d2ef3298"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x6, 0x7, 0x90, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0xfff8}]}}, {{0x9, 0x5, 0x5, 0x0, 0x600, 0x2, 0x7, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x10, 0x2}]}}, {{0x9, 0x5, 0x0, 0x10, 0x8, 0x2, 0x10, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x9b0c}]}}, {{0x9, 0x5, 0xf, 0x27c1c7d221d1efd, 0x460, 0x1, 0x10, 0x8b, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x1}]}}, {{0x9, 0x5, 0x1, 0x0, 0x400, 0xff, 0x6, 0x5, [@generic={0xa, 0x8, "d792866a982b89d8"}, @generic={0x8f, 0xd, "e11810c20daed4b78addce4dbe7f8dea36326b850e1737f04f062475da2c045a93e51b6ef9b8e2e379edd34727f8f69fb3e6d2d1d2c5ba4b7cd7bd80468e001595a02b5bd892a3afcf4e9df48eddec14c536f76ee19bd4bda1172bbbb863138a1612721ff86143bdf81aa05726087e093b62d41d8c282186262f5c4f32ba277bb3f712105cc962b76fbb9005ba"}]}}, {{0x9, 0x5, 0xb, 0x3, 0x10, 0x0, 0x2, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x5, 0x1000}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0xb1, 0x5}]}}, {{0x9, 0x5, 0x6, 0x10, 0x40, 0x7, 0xcf, 0x1, [@generic={0x79, 0x1, "980d1dff840e60f67340ec4c116f0621ec1eac08f8c7968633de7d12e99b8c3bae70628ca0b62f73f863fd89fa4c0fd9e064faa8af6a01a4dd1ccd2cf308650578b8bc1124fcfec89ae96aada5012aa5cc4d4364a8a37077246a279c745b3ebf6e85a76a0c1a18bdfa61ef380355bfc388cbaf3689b1c4"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x62, 0x80}]}}, {{0x9, 0x5, 0xa, 0x0, 0x40, 0x7, 0xf, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x6, 0x2}]}}, {{0x9, 0x5, 0x8e, 0x0, 0x40, 0x9, 0x10, 0x5, [@generic={0xea, 0x23, "f9d3f2c754a6677d8ee8f76f2d07684014f07d1067a8127fa903aa869b9cc21b769f290d9d77a89bc129740d1d60d8e664984784ba70ab5db1d7eca72e237a369aa13410632ae463e4576b29ed92e8157f90e3e309e32290897a187913743c5a48575749f53dec56c0d7157ceecb366a21afb9e9553981dbb3250d607c5a8d229e76fad774b234e0510c3bc5f291dc5ace9e12c52480eb2251539c045058a64143ff2653fad956e685ed1b4c778433071ceaf512b6880651204b90df1709a276dec796cf4619c267450a46f789fa5f5c86fae5a09cb993eea70d913bda7c0b1ca4b8cefe83e542f2"}, @generic={0x80, 0x23, "add0665b1b28f525c1919f8174ac63d7c3373a2759530e1f9d163e840bdfc175083a9ad91173a9b7312322c598829aa1e0a0e67249f9872874906744bc96488e20d365858a7418800bb58162884cfe748c2517dd640ef3039b6a01d0eac0189e5dae9187c1d4ff4f8b74f07947ed17f676750423d056f49196ab6736251c"}]}}, {{0x9, 0x5, 0xd, 0x1, 0x40, 0x7f, 0x9, 0x60, [@uac_iso={0x7, 0x25, 0x1, 0x40, 0xd, 0x200}, @generic={0xd2, 0x7, "0149b2bb23907a964eb124455ba0f3e1904e1fdae45602ee8b5c10e4d45c8e4e93533abecd676752ac2d8bde401f6fd03ee75cd9006d297b4eef700b06c3d99db6d0e023951b2b48e509de9da9680fa31d5dd8ad7691990991d1fa10a4efe526dd7cc9d55b9c2f5a8e9935087e451de2cba58cc0a26d2804a4b0bbe559822abbf09d63e1ba639b8e897341812cc03b18e388d06257327f5bfdb3dde18e216976a48a0a67219c19faab940499e11578858e11714f76e62d29528d3783e41e80b02d2ce7f4866ccbe2d59e95403102d2e8"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x3ff, 0x7, 0x2, 0x9, [@generic={0xaa, 0x3, "5853b74189048a94b28072866a1a346a3c7a41df5262b0686571335e840f49a0090419cd66ec0f8839c24a6c294cb1fdd9c33a9083ca3f811e4550b71c7131c9359541199b32fe3ac7a333b04b2a0c856f9e25ee159da0430d10561c80defacf06768ff4822e6bf7f9ea21ed42ab3947cebf2d19a05ab21d8befbbf9889cbc435fa5a1b5f2c1d3a37c0007407c3e529f71603e27bcf24cbe4c2033ff36d8955532e03d48de8037f5"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x3ff, 0x8, 0x1, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4}, @generic={0xea, 0xd, "497ca01b520dcccd66cf65520b4a2efd85ee991b7759b7089f669cc5f0ae9d33b992f0e42ceef69bbe7d718096d84fa7a81ff4ad75b9532be0158c40d890fe842bc85f9e6190aa6e604b98d3e4f85bcf9b9750cc8800182b3fcc21f3efcf0b0ebfa1c6d916e646a6f5aa19c452b6cc8790a176c11495741d4c39e2bfd87954bebb2537652582a3be6bcef71502ea9763f7580b1dca90b5f296f126423352b0529ade027d90cb142c24c11ca5fc6b97f1e77e0a8cdbd67a11c70cf3621f4db2e49b6fd87f639b2b9fde8ab975ab6357c510fad0b506b8b8ea4d0b852de75ed59fc128935ac0cc3ecf"}]}}, {{0x9, 0x5, 0x8b, 0x0, 0x0, 0x7, 0x2a, 0x96, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x400}]}}, {{0x9, 0x5, 0x6, 0x10, 0x3ff, 0xd5, 0x2, 0x7f, [@generic={0x32, 0x24, "ac788dca488430db2b2e6d7179398dd16e7f88b02a1af353ec3cc4dca12616b2a55927a99ac75f09823d56aaf98e01bb"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x5, 0xcc3}]}}]}}]}}]}}, &(0x7f00000009c0)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x110, 0x3, 0x0, 0x2, 0x40, 0x5}, 0x89, &(0x7f0000000880)={0x5, 0xf, 0x89, 0x3, [@generic={0x5c, 0x10, 0xb, "9a7bbea50b0f52e0a82660591456174bbb028be80ac9c5cc9f5716ee70671c2c7aaeb0d6be2f7a418eb498df57bfc0ae6b3e94079afefce2f8d79f6407bfa565d1c5678d77e2bf97b1975264cc5131c9b80d137ef7b72ca10d"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "0f260ee7cfc579dfdd26bba6e44afa23"}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "4358be4bf22e23f157fd307ce49228ff"}]}, 0x1, [{0x57, &(0x7f0000000940)=@string={0x57, 0x3, "1db25a9f190bf331526be51e617e695c5e43c7ca9b9715ea00417e3ab8a077bf7b6a89f6e16832ba5aefb22d7379d4e0a8a2898516a03586dc7a03d32ffaa13620b0d3ed8bbadacfdc61ce9c7748f1579c90e0f1e1"}}]}) syz_usb_disconnect(r4) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/131, 0x83}, {&(0x7f0000003500)=""/182, 0xb6}, {&(0x7f00000054c0)=""/4077, 0xfed}, {&(0x7f0000000600)=""/76, 0x4c}, {&(0x7f0000000680)=""/281, 0x119}, {&(0x7f0000000180)=""/64, 0x40}, {&(0x7f00000002c0)=""/86, 0x56}, {&(0x7f00000007c0)=""/182, 0xb6}, {&(0x7f00000004c0)=""/139, 0x8b}, {&(0x7f0000000b80)=""/4096, 0x1000}], 0xa}, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029ea69801d76ab0a272a2a788bab6c95f79725074", 0xd5}], 0x1}, 0x0) 10.601499765s ago: executing program 0 (id=2021): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x10000000001) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8101, 0x0, 0x7, 0x0, 0x3ff, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f00000002c0)=0x3) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) r7 = socket(0x40000000015, 0x5, 0x0) connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r7, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x18}}, 0x0) getsockopt(r7, 0x7, 0xb60, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r6, 0x1, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x0, @loopback, 0x10000bff}, @ib={0x1b, 0xd9, 0x100fff, {"4a50abf0c8ed50f638facd57de629163"}, 0x8000000000000001, 0x2, 0x3}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r6, 0x4734}}, 0x10) close_range(r5, r5, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 8.794581236s ago: executing program 0 (id=2027): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000a40)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) r3 = accept4$alg(r2, 0x0, 0x0, 0x80800) recvmmsg(r3, &(0x7f0000006300)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x2, 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') pread64(r4, &(0x7f0000000280)=""/86, 0x56, 0x4000000000000f3) r5 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) r6 = dup(r5) r7 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0xc075, 0x0, 0xffffffff, 0x4}, &(0x7f00000003c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r6, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r7, 0x47f5, 0x0, 0x0, 0x0, 0x0) 8.746289449s ago: executing program 6 (id=2028): r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, 0x0, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x2a441, 0x40) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x84, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e22, 0x5, @empty, 0xfc}}, 0x6, 0x400}, &(0x7f0000000480)=0x90) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'batadv_slave_1\x00', 0x1000}) socket(0x22, 0xa, 0xffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x40, 0x2c, 0x4, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x8, 0xffff}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20048081}, 0xc0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) socket$nl_route(0x10, 0x3, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYRES16=r2, @ANYRESOCT=r1], 0x7a) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r11 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$kcm(r11, &(0x7f00000000c0)={&(0x7f0000000840)=@un=@abs={0x0, 0x0, 0x4e20}, 0x80, &(0x7f0000000480)=[{&(0x7f00000002c0)='\x00@', 0x2}], 0x1}, 0x4) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1a5401, 0x92) 7.061827547s ago: executing program 6 (id=2030): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r1 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0xc000, 0x0) r2 = syz_io_uring_setup(0x49aa, &(0x7f0000000080)={0x0, 0x7cd4, 0x0, 0x2, 0x276, 0x0, r1}, &(0x7f0000000100), &(0x7f0000000140)) r3 = fsopen(&(0x7f0000000180)='logfs\x00', 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000200)={0xffff, 0x0, &(0x7f00000001c0)=[r3, r0]}, 0x2) read(r1, 0x0, 0x0) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000340)={&(0x7f0000000c00)=[{0x63, 0x2000, 0x0, 0x0}, {0x1, 0xc011, 0x0, 0x0}], 0x2}) 7.005970514s ago: executing program 5 (id=2031): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_emit_ethernet(0x36, &(0x7f0000000ac0)={@broadcast, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @mcast1, @mcast2}}}}, 0x0) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000040)={{{@in=@rand_addr=0x64010100, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e23, 0x0, 0xffff, 0x8000, 0x2}, {0x0, 0x1, 0x0, 0x1000000000000, 0x5, 0xfffffffffffffffa}, {0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x1, 0x0, 0x3}, {{@in=@empty, 0x0, 0x33}, 0xa, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x7c, 0xfffffffe}}, 0xe8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) setregid(r2, r2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a000004fc3b88cc2fc3e1311d938d740900012e00797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001", @ANYRESDEC=r0, @ANYRES32, @ANYRESDEC=0x0], 0x84}, 0x1, 0x0, 0x0, 0x4000810}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001080)=ANY=[@ANYBLOB="400000000d0a010800000000000000000a0000000900020073797a31000000000900010073797a310000000014000380100000800c00018005000100e20016f7"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffff70) 6.762957961s ago: executing program 0 (id=2032): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x10000000001) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8101, 0x0, 0x7, 0x0, 0x3ff, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r4 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f00000002c0)=0x3) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) r7 = socket(0x40000000015, 0x5, 0x0) bind$inet(r7, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$nl_xfrm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x18}}, 0x0) getsockopt(r7, 0x7, 0xb60, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r6, 0x1, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x0, @loopback, 0x10000bff}, @ib={0x1b, 0xd9, 0x100fff, {"4a50abf0c8ed50f638facd57de629163"}, 0x8000000000000001, 0x2, 0x3}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r6, 0x4734}}, 0x10) close_range(r5, r5, 0x0) 6.592656912s ago: executing program 6 (id=2033): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xfc, {"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", 0xffffffffffffff34}}, 0x1006) 6.283071055s ago: executing program 6 (id=2034): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') open_tree(r0, &(0x7f0000006180)='./mnt\x00', 0x1) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f00000002c0)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) listen(0xffffffffffffffff, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket(0x10, 0x3, 0x0) readlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)=""/121, 0x79) socket(0x200000000000011, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) futex(0x0, 0xa, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r6, &(0x7f0000004100)={0x2020, 0x0, 0x0, 0x0}, 0x2020) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000090600"/20, @ANYRES32=r7, @ANYRESOCT=r8], 0x40}}, 0x20004001) socket$inet_udp(0x2, 0x2, 0x0) 4.919709225s ago: executing program 1 (id=2036): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, 0x0, 0x0) 4.798725083s ago: executing program 5 (id=2037): socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r0, &(0x7f0000000180), 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB="00000087682059a5e134c8000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x10, 0x0, 0x0, 0x7fff0000}]}) r2 = fanotify_init(0x200, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close(0x3) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x1, 0x20, r3, 0x0) fanotify_mark(r2, 0x1, 0x12, r1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newsa={0x19c, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@private, 0x0, 0xecdf}, {@in=@broadcast, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x80000000}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4c}, [@algo_crypt={0x48, 0x2, {{'cbc(serpent)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a, 0x0, 0x0, 0x0, 0x101}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x80}}]}, 0x19c}}, 0x0) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = eventfd(0x8000) r10 = eventfd(0xa) ioctl$KVM_IRQFD(r8, 0x4020ae76, &(0x7f0000000180)={r9, 0x7, 0x0, r10}) ioctl$KVM_IRQFD(r8, 0x4020ae76, &(0x7f0000000040)={r10, 0x7, 0x2, r9}) ioctl$KVM_IRQFD(r8, 0x4020ae76, &(0x7f0000000140)={r9, 0x6, 0x1, r10}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x9}, 0x14) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x1, 0xfa, 0x41b}}}, 0x7) 4.692104291s ago: executing program 1 (id=2038): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)={0x2c, r1, 0x1, 0x60bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x34}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048854}, 0x4000000) (fail_nth: 3) 4.346436012s ago: executing program 1 (id=2039): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x49b, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x7, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x40}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x24, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x40}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5, 0x84}}}, 0xb0}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x0, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000881}, 0x100) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4007, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r3, 0x40f6, 0x4f7c, 0x0, 0x0, 0xffffffffffffffca) 4.270153789s ago: executing program 0 (id=2040): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x5, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5, r2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) readv(r3, &(0x7f0000000040)=[{0x0}], 0x1) 4.241723751s ago: executing program 6 (id=2041): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="10007d80", @ANYRES32=r0], 0x2c}, 0x1, 0x0, 0x0, 0x440c0}, 0x0) 4.169225187s ago: executing program 6 (id=2042): socket$inet6(0xa, 0x3, 0xff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) futex_waitv(&(0x7f00000047c0)=[{0x5, 0x0, 0x82}], 0x1, 0x0, 0x0, 0x1) syz_open_dev$video(&(0x7f0000000140), 0xd, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000880)=0x1) ppoll(&(0x7f0000000140)=[{r2, 0x400}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newtclass={0x24, 0x28, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0x1}, {0xd, 0x9}, {0xd, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20040080) r3 = openat$khugepaged_scan(0xffffff9c, 0x0, 0x1, 0x0) write$khugepaged_scan(r3, &(0x7f0000000040), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f4070009040081000000fe000000000000000800040001", 0x21) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="2800000009000000000000000000000001"], 0x28) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) socket(0xa, 0x1, 0x1000) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000001040)={0x1a, {"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", 0x1000}}, 0x1006) r8 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r8, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r8, 0x0, &(0x7f0000000780)={0x24, &(0x7f0000000400)={0x40, 0xa, 0x1, "ef"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) 3.280572086s ago: executing program 4 (id=2044): sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="05df"], 0x2c}, 0x1, 0x0, 0x0, 0x4000801}, 0xc0c4) r0 = socket(0x2, 0x805, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') openat$dir(0xffffff9c, &(0x7f0000000100)='./file0\x00', 0x102, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f00000026c0)=[{{&(0x7f0000000440)=@qipcrtr={0x2a, 0x0, 0x7ffe}, 0x80, &(0x7f0000000700)=[{&(0x7f00000004c0)="fd4fc3f3766a0d55", 0x8}, {&(0x7f0000000500)="863b371040e78edd396fb46e05a36211616668c58f4a238c58bf1964211db8b2b4b4c651f15fd1d3484e5a5a2ecac6f31f9439fd1113cfb19d28dd428fc9cfa9b22526e678a538ef1e3891bd", 0x4c}, {&(0x7f00000005c0)="2f9f9f0d3a77f1186a55d9293fc8e9bff0ebac16516f92cb61b3956311716b4f35f14bb8673feab1d037330324d6da4fe9f30315adda27ff6f04edf1c0f620f35578198c5307d1345a3574831e4d78994ce6b9d86ea3f7a1ddcd17599fc862c84222e8c6ffb7794540dce6d341a3a11bf3988d5005fe4af4d7853b2409824f2591e00d673b306ee6d9b6720a2efe3fd734cde216068fcc01768ffd9287d969b8b8f80d1625184facb7154def5d5f281210", 0xb1}, {&(0x7f0000000680)="389017bf1b6c5291993e2bc8d505d2dc59007f073d10e257b34ba88fdea74cb234e74148f6ec9c599c160221a0ddf2ad16faf7d558e12f79b3ebefceb862bbd7576adfb68dc72819a553bd9b6338fd", 0x4f}], 0x4}}, {{&(0x7f0000000740)=@in={0x2, 0x4e21, @multicast1}, 0x80, &(0x7f0000000880)=[{&(0x7f00000007c0)="28bd2a0db2a108fafbb212b18532d4081cca11c7edd75046b5a692135bfc6c21930ff416ab6fad17242d880e1b84faac224cb731caaf2c7adb6a9be5c292afd67a63dfe303cb10711377f3eac21791c0504f6d737b603b2c2e92140c4a9895fc5540110819518e47b966f83d88d4bb45deda42655ed7a39bb41f420fd831abd086a6ebf516679d1957d89d948df010f619579bfac1c3e3f3454d2882", 0x9c}, {&(0x7f00000010c0)="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", 0x1000}], 0x2, &(0x7f00000008c0)=[{0x14, 0x104, 0x80, "8e52b7854d082a77"}, {0x94, 0x10c, 0x8, "c03349388dcbaa733de9c3d48e97f83e12ca63d84f8e6e7c98e4e4219222d9a2277ede27354d6ba6816f467e7530f3f9281a6f87083f494715a238a0eeee088c4f5130aff72d6d582f1fbb631a89ec80408d83a563fbb71d941b6e25b7fcecd11dcdf6ac8135012be730ba545293e06953e8fa1d806a3e08981a3bfba42d45c6c4a583e12b253524"}, {0x30, 0x115, 0x43, "7e499dfd27c5d9050473a6b5cdc55ca4d84d7652cb9bbb0aa609a60a0ca3614bf4e0"}], 0xd8}}, {{&(0x7f00000009c0)=@vsock={0x28, 0x0, 0x2711, @local}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000a40)="db2bbb60ff3f8c37ee00c5b972a1e7cbb6129217cf32544729c11c4b468c1b5a65a31393f11e8114b6", 0x29}, {&(0x7f0000000a80)="eab7941c8635bc9e42a5e1d7c00495ec9373a839f533289b8f57c50dfc23d217b7d84710eafcae936db72cd66e94753e8b6b1ca25d0bfbb857e09ae2f6c1eb8cc5850b2704685f5e2786832c596fbaaa93d9bd2a3c2f93f50b68a8711557a39ca9e10e4cb7ff0c28d28a8d07df90f3f5cd0e1c1915f53c5f514675ca867d3c5756fec40b8e29681c479322ef72a04db8a42959", 0x93}], 0x2, &(0x7f0000000b80)=[{0xe8, 0x108, 0x2, "6e940534e6f9fa8afb536e040a744beba0940decff24eef053b2401e5604f37a2e24c2151e33bdfbf23f7b3a3602c164d92ae7de166c31a361c11e1263bb3885972ca2486d3e46dae4f7f75cc19502e483873a7a3b96fa8ecfac44c93eda4ed82293f068741709cb309f851d10d792de350f285fa56ed2187e15c5cce180e849b7fe12fa6d02febfd7bafeaa1b0f81d1367b241e73fcddd3f0db0e5dda3220839ff25e3489a2eadc59851ad6fe829a28e3990eb59e54cea4ba164174ae62fe0d621927c554b489eba047cc98b01c922c5ddd2b46d982aa7f65bc4d"}, {0x70, 0x10d, 0x80000001, "b8f7352a965da956de7ed5ddeb41dc940e9db7d9a164a29346e1be99e04797bb52ef871fbdaab54bc92bc0c5b52b136652ba1b0fd11e9460cb2b2e17b250fadc0b846f2066d552f1c598fc1b6f975334e9e222fad08cc9e22bb7c225055f80aa3a3c7c"}], 0x158}}, {{&(0x7f0000000d00)=@phonet={0x23, 0x2, 0x3, 0x10}, 0x80, &(0x7f0000001000)=[{&(0x7f0000000d80)="5cf88534f8b595854aceb18003a6e8ef9540c28d5b97cc5a8fc4197d9dead871745386a0ea26a8de941a02421607dc28ee252863fdff64f1ecaae1c8f4721d47da310514ac054523371ff77d6610bb4dc3d89c35dbfadb99d0e1041685df78b594ea5bf211499bee0178444e91800b521cf97c4f19436654c8bc82334904a5ee1543881618379292bcf60cb4149e243bcf00645bbb999118205848351c648afde254a13abb9520", 0xa7}, {&(0x7f0000000e40)="1f4d27209ee8d610db8dc6ba97f93414", 0x10}, {&(0x7f0000000e80)="aa3a0c7cb5383b38dd4723ee6112892eda47472da88c592d51fa3aa6e312aa47c45c07a998ff6f7c7c05116c70d982875510027d76695b90215837c35df46d6f934f72967d6e1d70be96fe2a3ee3dc286c57e0a681e77588aaf5b4db4ec22baf2869fe0dc8fdbd7f9a13069192867d57c7d2b787e0842901ab45bb424f5388d943a924952c6c0247f5f6c1b281adc54b7bac9882712c93e4584a0e61116dd09ff90023c1dbe168657b80f9a9a873e34b9508d75a02bc7371260f67cf82618e06909306c01ff73b26d3411170d73e536ac528c46112205b06f345ef6cee168f5406fc58c471ea41b541b36816a3f37119b5723f9b36", 0xf5}, {&(0x7f00000020c0)="d2d69592950f2caf4147643d8b99c62e0d8630a951a77aafd2d681e6ff5fb7a1f52aa9ba65ea4492c74c3cb0d00c4550637c91974f3af0291da14849852d0e0d3356a6760e03206346eef04a1531bb4a184115e278a8be993058059ea9e3c1d88bce681dbe9faf0756840a30a05ef3faf7cb5c8a2e3f87c3ab43d89561fde7a0a295e3935b75b1341aecd716088bbe657da85f72d45053d217f32e9729a1d72a4215c058a308850f3f22099108a525487ade94dd1392717687e8956383683d0031d60fbdc32511ce24067c2be1a3a69a1a05a482d1c47895e2b8812ce883f53a8ac42dbc51a032c6870c03f56727cd614b177c0e64", 0xf5}, {&(0x7f00000021c0)="0f54c03061a6c63c90da84491bb97950926a072af629348f90c0d80ed6e3a0adbb94645eb9dab20a95624fed2c85f07f54c0ebc46f1577ee3387e79fc61afee3b6031b3d152cc7dee27b9de9e0855655b41a839ceac0e8a32d1689b6955b2b40022fc50025a2f875e211762a30ca9d68d33cd5bad6e51c9e1faebdca2f48ce894f9db1b2bdf98c45f43172409cd9874c20b3ed7194d17963a5b401536cddfd", 0x9f}, {&(0x7f0000000fc0)="6a4e7f631ce0beb56bbc6741c0e7218a89ab06471195c14040ff3b7f", 0x1c}, {&(0x7f0000002280)="20c88b787d2ed03e2ebae3a03f4299df85f65e6140e8d8133867a243407dd9a0db8e5db00aa452dfd548f3d65a9ebb3f064eae98eacaeb314c77af6916ecae731f8f7422fa0b25ac5a798e7c340c76a032159b12ca0c42bc8a842cbdfe050e5969c50ae76a9a", 0x66}], 0x7, &(0x7f0000002300)=[{0x90, 0x117, 0x6, "55f500864ba6d2272b80efb5a81921fde5ca1b6b3422f4d6b6566f05e00fc88c2756e208924b9240dd519f0bc8f4b6b9bf30b5ba7ac3a91fc5c20b6c88676c509aecd006fc13bbc7d1aa7a703e5423d41a8e8611c9c86922b474da95d58c4e81be034aefc185c9c27a8c02a5ed68fc739ea3deacba4b2a0f578d4143f535667f803bae"}, {0x9c, 0x108, 0x3aa5, "c71f9d64295dff9eea878776705169e96b77259b9bb8e8232703eeddb71b575b48e08a6df6cbc218f57597c578f196e86f7022fb3f481c44292cb5ae6d9e774f6f150c00f2a41bb8ef252cd07cb1971a4743860341378c21edab945e3696990450ca3e18cc474752cfcc2915d694a6ad8e04b561437b611ee7facce9c1ed3c064b308b4a796223c75e4776c2ab0e89"}, {0xfc, 0x9, 0x77, "9273e31795adfa57a23176cf1eade3f3bf467b53d180036670c600ecc5262a4df665684c00e74cc229cf302a1992ea927dba99b0682f3db3579099f0c964ae86e22c6b5e6fa948d1e2b6bf7104e63387470cc34301c06b82cd4472ba368c2178b1914697fec8af028eae2d15e2ff18ac653e4c21f48d476c73d62427230e6376b06c570edb54c2aa7323a1cb29b028d4ac853e6e4a38a015fbbab430c771fa044f2fd867fbaf5e04104e3f3818a4be6005d64d41f1e09be8e08c4c99082915481882b5bd24d7cc64878a1a5494f8daec28dd77806e8b88cfa86d04a33344b152e1e48aa93751bbbda239d2386f85"}, {0x60, 0x114, 0xa9f4, "20318330d8d8c1fc40ad8d4ea996b26e3c52f340304ffd684352abff65fb9b3cd906177e4f5f3f0aae40e4ed97b08754701b1c2bd3420c3b732c683b77d1e85228fe5d06feb1dd8d861e85acb837a0617d"}, {0x108, 0x0, 0x0, "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"}], 0x390}}], 0x4, 0x40081) getpeername$l2tp6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000400)=0x20) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) r3 = syz_open_dev$video(&(0x7f0000000280), 0x80, 0x68c02) r4 = syz_io_uring_setup(0x1e20, &(0x7f0000000100)={0x0, 0x86f6, 0x10100, 0x0, 0x3cf}, &(0x7f00000002c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x4007, @fd=r3, 0x4, &(0x7f00000000c0)='i', 0x1, 0x4}) io_uring_enter(r4, 0x48ed, 0x0, 0x2, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x8, 0xfff1}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x80100, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xd, 0xb}, {0x5, 0x5}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xfffffffffffffe86}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8021}, 0x4008000) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101242, 0x0) writev(r7, &(0x7f0000000080)=[{&(0x7f00000000c0)="5bffd08307d80c79b1cb7b5f0c5b4d719c69c8513f748fbe425a7bc388c9019bef114779f7a10dc03a883d6e16a0a704f74297f381ff1db75098a9b38bb67206a7ff22e6ca46dc760bdad8a79d5951988c55a368dd1132ba7f129c2e65441eaa27492c069488df0881f123ca01ae873f5b36eb0fddb8f07420f5484d81cabde167c87ffbab6a94b24b5537bb1a08d56469f516fd4b7c66e2ac50d5ff4e52c628d0a89e53d0e78582a5ab2a2c714f66", 0xfe7c}], 0x1) ioctl$BLKZEROOUT(r7, 0x127f, &(0x7f0000000240)={0x2000, 0x1000000}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000100)={r8, @in={{0x2, 0x4e21, @empty}}, 0xbdef, 0x1}, &(0x7f0000000000)=0x90) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r11, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000040)={0x24, r10, 0xe096044a3fc9e6f1, 0x70bd2a, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c0}, 0x80) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x11, &(0x7f0000000100)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xfffd}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}}, 0xb8}}, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000001000ffff28bd7040fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1517e75f010000000000002000128009359d80766c616e00000000100002800600010001000000040003800881f8000500", @ANYRES32=r13, @ANYBLOB], 0x48}}, 0x8048802) 3.279619792s ago: executing program 5 (id=2054): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r1 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0xc000, 0x0) r2 = syz_io_uring_setup(0x49aa, &(0x7f0000000080)={0x0, 0x7cd4, 0x0, 0x2, 0x276, 0x0, r1}, &(0x7f0000000100), &(0x7f0000000140)) r3 = fsopen(&(0x7f0000000180)='logfs\x00', 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000200)={0xffff, 0x0, &(0x7f00000001c0)=[r3, r0]}, 0x2) read(r1, 0x0, 0x0) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000340)={&(0x7f0000000c00)=[{0x63, 0x2000, 0x0, 0x0}, {0x1, 0xc011, 0x0, 0x0}], 0x2}) 2.881158664s ago: executing program 5 (id=2045): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x10000000001) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8101, 0x0, 0x7, 0x0, 0x3ff, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f00000002c0)=0x3) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) r7 = socket(0x40000000015, 0x5, 0x0) bind$inet(r7, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$nl_xfrm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x18}}, 0x0) getsockopt(r7, 0x7, 0xb60, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r6, 0x1, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x0, @loopback, 0x10000bff}, @ib={0x1b, 0xd9, 0x100fff, {"4a50abf0c8ed50f638facd57de629163"}, 0x8000000000000001, 0x2, 0x3}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r6, 0x4734}}, 0x10) close_range(r5, r5, 0x0) 2.823560899s ago: executing program 4 (id=2046): sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000340)=[{0x20, 0xc, 0x77, 0xfffff010}, {0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x0, 0x0, 0x2}]}, 0x8) sendmmsg(r2, &(0x7f000000bd00)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000440)="0a1057d48a", 0x5}], 0x1}}], 0x1, 0x48844) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f00000003c0)='dns_resolver\x00', 0x0, &(0x7f0000000080)='\x00\x00', 0x2, r4) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x2c020400) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="5245434c45560a50484ff56669d0a7611c4545414b455220274344272049303030303030303030303030303030303030300a4449474954414c32202706006e652043617074557265272030313030303034303030303030303030303030300a20"], 0xb8) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r6, r5, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r9, @ANYBLOB="1c005e80080002000100000008000100", @ANYRES64=r9], 0x38}, 0x1, 0x0, 0x0, 0x20048000}, 0x801) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x66, 0x0, 0x0) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r10 = syz_clone3(&(0x7f0000001500)={0x8100, 0x0, 0x0, 0x0, {}, &(0x7f0000000480)=""/4096, 0x1000, 0x0, &(0x7f00000014c0)=[0x0], 0x1}, 0x58) poll(0x0, 0x0, 0x8000007) r11 = syz_open_procfs(r10, &(0x7f0000000100)='net/anycast6\x00') mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000003, 0x4010, r11, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0) 2.502568202s ago: executing program 1 (id=2047): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) keyctl$set_reqkey_keyring(0x6, 0xfffffffffffffffb) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000080)='cubic', 0x4) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) socket(0x1e, 0x5, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) readv(r5, &(0x7f0000000180)=[{&(0x7f0000000540)=""/4114, 0x1012}], 0x1) setsockopt$inet6_buf(r1, 0x29, 0x6, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="240000002100df4c2abd70c6270000220000e900104e88cb7634ce58ea22000000000100"], 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r6 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x2ffe, 0x2) socket$unix(0x1, 0x5, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f00000000c0)=@mmap={0x1, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x5, 0x0, 0x1, "bf631e4b"}}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000000)=0x1) 1.95907596s ago: executing program 0 (id=2048): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, 0x0, 0x0) 1.859468315s ago: executing program 4 (id=2049): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000010026bd7000000000000300000028000180222e"], 0x3c}}, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xe, 0x8010, r2, 0x95303000) write$FUSE_INIT(r2, &(0x7f0000000080)={0x50, 0x0, r3, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f000000a300)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="3801000000000000f9ffffffffffffff0100000000000000030000000000000000010000000000003ce371790000000001000080060000000200000000000000020000000000000003000000000000000100000000000000f4080000000000009e0c00000000000000000000090000000180000000c0000007000000", @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="090000000800000000000000000000000000000000040000000000008b000000000200002e7adc7bd90010881789f5ee6ce3d4e2da03930cc2a0018a7d22a1c102d4fee05ab763e641c7ddc7b71b3119154cec5c1c6a41543cbc26e9736f3fb44cb2635f816612778705c95bd7e05369d53879e5313885a6a6368b521db65e87ba28371d112aed9bda47152644c2bdfaa8a645f6e604ec0f6b1f1bff8eda90c747f31198e1bb189c4cb6c8db0735a20000000000"], 0x0, 0x0, 0x0}) getdents64(r6, 0x0, 0x18) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELSETELEM={0x1474, 0xe, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x1458, 0x3, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_USERDATA={0x21, 0x6, 0x1, 0x0, "d7b50723beceda160f131c261423e4f4a450794c41212ffc933828d373"}]}, {0x4}, {0x174, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x3c, 0x7, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x8}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x94}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x55}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x3}]}}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x34, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}]}, @NFTA_SET_ELEM_USERDATA={0xe9, 0x6, 0x1, 0x0, "66e0c068bd2c0c293c920fee6aec385639a1da02c86d6a764825f4e186f699acf88af46132e7391e0a4861b291f0b8a596294f2f4dc9f7b7006d76b8d0568f81dab20001000d2f7dba83925ffadf3210e3656a44324e47b01b607b50aef908387e98c3fda0e992a0275165f5de477a04d4205318ef878d97ad3c82909d4abaa2cfe27d987dd4d452a24794fdcd1ba62e5a654d81b9ddcebd68aa2c37f9fa2a2d8d5f8fbde8d442ef30c388259bca779ae9d38e199ffd88c59400ad0ff6a7faf4135e2cf4c031d56a4c9585018c5fd29a4f0e0af8a31e865fcb67cb470befd8a16552d67895"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0xfc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xf5, 0x6, 0x1, 0x0, "98e7e82b0a45bdc06a755cc46ca9b697b6c2297ec23302dfbfb2fae1dc658d1a149cc6fad927fb3d10116d9f6048ada097c521048590f800c9a7f1717e2f142d059c2cbda626367934f3464e44b09d00c58eea71654ea3c7501e0d510ce7b294c82b21a788329c9e641989f1f669f28c1c44897b928e2202a27c4d2605ab05f778e2777717ea4bdb6141d3b258680bfd77cfd5fb399f901bf56202134ba4de8f96edde9697cfd74e65a703cae3e2fd49f125fe440912451d03a7703d414b345e7a8555ff2d8b9f555c2a1c122d0d89d828569e4acc2396e26332e2066324c43cb8045e6c0b94fcf0d7f5e5d48b09cf026c"}]}, {0x11a0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x1040, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_KEY_END={0x84, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_KEY_END={0xcc, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc8, 0x1, "ee073f87445b9e8e52725de7973519e9a236d70adfc5fcc16fba9df9c21b721d0076b2f8d834032c8a4cb4de7893d8004180e944c8cbbf92d8040ac5ca489eb265b409520e751f819339bd691ef93040ff6845273cf67d7780255b77e8567624ca23cf09ec7d4fa72433063a31034f00d7120dd3d7a1415f20179fa0688444872d0a556bb18bb06e027e7b660538615a0e12073f0c3ecf1ebccec182867c533572874a19f758ee599040e3a791a96b5130cc97b911ca89f824d9c3c9c640c1bd9b0faa66"}]}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x15}}, 0x149c}, 0x1, 0x0, 0x0, 0x24000004}, 0x0) 1.498142366s ago: executing program 0 (id=2050): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x18, &(0x7f0000000180)=ANY=[@ANYBLOB="202317000000170410150f3f13ea5ad60af744acb54adc63bca5a9bcb2"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x2, 0x40, 0x40, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)="f242d72f369babc1046bc51a047edb28622fef5cc87adcd8f25244edaa4241bdbc32e53df80b916371af159201a2c1ecdaca8975e9873c031b8b23c8838855c12658c683fc1447a42fab08", &(0x7f0000000000), 0x1000, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x7, r1}, 0x38) r2 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000080)="44f9", 0x2}], 0x1) 876.023416ms ago: executing program 4 (id=2051): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0xf0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [], {0x14, 0x11, 0x15}}, 0x28}, 0x1, 0x0, 0x0, 0x24000004}, 0x0) 811.619899ms ago: executing program 5 (id=2052): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="10007d80", @ANYRES32=r0], 0x2c}, 0x1, 0x0, 0x0, 0x440c0}, 0x0) (fail_nth: 3) 681.864554ms ago: executing program 1 (id=2053): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r3, 0x6b, 0x3, &(0x7f0000000080)=0x7, 0x4) (async) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x10, 0x0, 0x7}, {0x10, 0x0, 0x3fb}]}) (async) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000000)) 529.987657ms ago: executing program 4 (id=2055): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) (fail_nth: 3) 185.857552ms ago: executing program 1 (id=2056): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640), 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5f, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r3}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r5, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001200)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) preadv(r7, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) 141.153218ms ago: executing program 4 (id=2057): syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0xffffffffffffffff, &(0x7f0000000000)=0x6d) lsm_get_self_attr(0x64, &(0x7f0000000000)={0x0, 0x0, 0xfd, 0xdd, ""/221}, &(0x7f0000000100)=0xfd, 0x1) r1 = openat$vcsu(0xffffff9c, &(0x7f0000000040), 0xc000, 0x0) r2 = syz_io_uring_setup(0x49aa, &(0x7f0000000080)={0x0, 0x7cd4, 0x0, 0x2, 0x276, 0x0, r1}, &(0x7f0000000100), &(0x7f0000000140)) r3 = fsopen(&(0x7f0000000180)='logfs\x00', 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000200)={0xffff, 0x0, &(0x7f00000001c0)=[r3, r0]}, 0x2) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='pagemap\x00') getrandom(&(0x7f0000000600)=""/12, 0xc, 0x3) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000340)={&(0x7f0000000c00)=[{0x63, 0x2000, 0x0, 0x0}, {0x1, 0xc011, 0x0, 0x0}], 0x2}) 0s ago: executing program 5 (id=2058): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x49b, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x7, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x40}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x24, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x40}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5, 0x84}}}, 0xb0}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x0, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000881}, 0x100) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4007, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r3, 0x40f6, 0x4f7c, 0x0, 0x0, 0xffffffffffffffca) kernel console output (not intermixed with test programs): wMaxPacketSize 0 [ 541.100701][ T5916] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 541.117387][ T5916] usb 7-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 541.129946][ T5916] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.153680][T12116] FAULT_INJECTION: forcing a failure. [ 541.153680][T12116] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 541.186190][ T5916] usb 7-1: config 0 descriptor?? [ 541.234865][T12116] CPU: 1 UID: 0 PID: 12116 Comm: syz.0.1652 Tainted: G L syzkaller #0 PREEMPT(full) [ 541.234913][T12116] Tainted: [L]=SOFTLOCKUP [ 541.234920][T12116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 541.234933][T12116] Call Trace: [ 541.234942][T12116] [ 541.234951][T12116] dump_stack_lvl+0xe8/0x150 [ 541.234983][T12116] should_fail_ex+0x412/0x560 [ 541.235014][T12116] _copy_from_user+0x2d/0xb0 [ 541.235044][T12116] get_compat_msghdr+0xb3/0x4c0 [ 541.235075][T12116] ? __pfx_get_compat_msghdr+0x10/0x10 [ 541.235101][T12116] ? rcu_is_watching+0x15/0xb0 [ 541.235120][T12116] ? ___sys_recvmsg+0x224/0x590 [ 541.235155][T12116] ___sys_recvmsg+0x1dd/0x590 [ 541.235188][T12116] ? __pfx____sys_recvmsg+0x10/0x10 [ 541.235220][T12116] ? __fget_files+0x2a/0x420 [ 541.235275][T12116] do_recvmmsg+0x3a5/0x800 [ 541.235311][T12116] ? __pfx_do_recvmmsg+0x10/0x10 [ 541.235371][T12116] __sys_recvmmsg+0x1a5/0x290 [ 541.235401][T12116] ? __pfx___sys_recvmmsg+0x10/0x10 [ 541.235425][T12116] ? ksys_write+0x242/0x270 [ 541.235470][T12116] ? __pfx_ksys_write+0x10/0x10 [ 541.235501][T12116] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 541.235532][T12116] __do_fast_syscall_32+0x1d2/0x540 [ 541.235556][T12116] ? lockdep_hardirqs_on+0x7a/0x110 [ 541.235575][T12116] ? do_fast_syscall_32+0x33/0x70 [ 541.235596][T12116] ? asm_int80_emulation+0x1a/0x20 [ 541.235614][T12116] ? do_int80_emulation+0x20e/0x400 [ 541.235639][T12116] do_fast_syscall_32+0x33/0x70 [ 541.235661][T12116] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 541.235685][T12116] RIP: 0023:0xf7f22539 [ 541.235703][T12116] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 541.235722][T12116] RSP: 002b:00000000f53e650c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 541.235745][T12116] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001740 [ 541.235759][T12116] RDX: 0000000004000210 RSI: 0000000000000002 RDI: 0000000000000000 [ 541.235772][T12116] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 541.235784][T12116] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 541.235797][T12116] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 541.235828][T12116] [ 541.731939][T12130] random: crng reseeded on system resumption [ 541.788328][ T5916] redragon 0003:0C45:760B.0017: unknown main item tag 0x6 [ 541.802314][ T5916] redragon 0003:0C45:760B.0017: item fetching failed at offset 7/133 [ 541.812135][ T5916] redragon 0003:0C45:760B.0017: probe with driver redragon failed with error -22 [ 541.831080][T12134] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1655'. [ 541.843585][T12134] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1655'. [ 542.017371][T12107] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1648'. [ 542.167427][T12139] kvm: kvm [12137]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x7 [ 542.187242][ T5916] usb 7-1: USB disconnect, device number 22 [ 543.280981][T12157] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1661'. [ 543.437918][T12162] vlan0: entered promiscuous mode [ 545.523211][T12190] fuse: Bad value for 'user_id' [ 545.528106][T12190] fuse: Bad value for 'user_id' [ 546.409833][T12208] bridge0: port 1(macvlan2) entered blocking state [ 546.416753][T12208] bridge0: port 1(macvlan2) entered disabled state [ 546.438366][T12208] macvlan2: entered allmulticast mode [ 546.463668][T12208] macvlan2: left allmulticast mode [ 547.105792][T12235] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1685'. [ 547.115871][T12235] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1685'. [ 547.151195][ T10] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 547.487634][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 547.531545][ T10] usb 6-1: config 0 has an invalid interface number: 217 but max is 0 [ 547.551489][ T10] usb 6-1: config 0 has no interface number 0 [ 547.573190][ T10] usb 6-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice=bf.ea [ 547.611213][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.639594][ T10] usb 6-1: Product: syz [ 547.662076][ T10] usb 6-1: Manufacturer: syz [ 547.701466][ T10] usb 6-1: SerialNumber: syz [ 547.739994][ T10] usb 6-1: config 0 descriptor?? [ 547.763289][ T10] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.217/input/input24 [ 548.498634][ T984] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 548.904001][ T5181] bcm5974 6-1:0.217: could not read from device [ 548.918663][ T984] usb 7-1: Using ep0 maxpacket: 32 [ 548.931401][ T5181] bcm5974 6-1:0.217: could not read from device [ 548.939115][ T10] usb 6-1: USB disconnect, device number 32 [ 548.950028][ T984] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 548.968854][ T984] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 549.011054][ T984] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 549.052978][ T984] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 549.106573][ T984] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 549.118651][ T984] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.148144][ T984] usb 7-1: Product: syz [ 549.168350][ T984] usb 7-1: Manufacturer: syz [ 549.188901][ T984] usb 7-1: SerialNumber: syz [ 549.227297][ C0] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 549.250775][ T984] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/input/input25 [ 549.271818][T12256] netlink: 'syz.4.1693': attribute type 10 has an invalid length. [ 549.283434][T12256] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1693'. [ 549.313007][T12256] bridge0: port 3(bond0) entered blocking state [ 549.323335][T12256] bridge0: port 3(bond0) entered disabled state [ 549.333999][T12256] bond0: entered allmulticast mode [ 549.344119][T12256] bond_slave_0: entered allmulticast mode [ 549.360004][T12256] bond_slave_1: entered allmulticast mode [ 549.376228][T12256] mac80211_hwsim hwsim15 wlan1: entered allmulticast mode [ 549.436522][T12256] bond0: left allmulticast mode [ 549.443772][T12256] bond_slave_0: left allmulticast mode [ 549.458677][T12256] bond_slave_1: left allmulticast mode [ 549.464431][T12256] mac80211_hwsim hwsim15 wlan1: left allmulticast mode [ 549.500152][ T984] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 549.527447][ T984] (id 0x00) [ 549.719382][ T984] rc_core: IR keymap rc-imon-pad not found [ 549.735891][ T984] Registered IR keymap rc-empty [ 549.762154][ T984] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 549.802320][ T984] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 550.161288][ T984] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0 [ 550.216752][ T984] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0/input27 [ 550.257175][T12272] FAULT_INJECTION: forcing a failure. [ 550.257175][T12272] name failslab, interval 1, probability 0, space 0, times 0 [ 550.295620][T12272] CPU: 0 UID: 0 PID: 12272 Comm: syz.0.1697 Tainted: G L syzkaller #0 PREEMPT(full) [ 550.295655][T12272] Tainted: [L]=SOFTLOCKUP [ 550.295663][T12272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 550.295675][T12272] Call Trace: [ 550.295684][T12272] [ 550.295694][T12272] dump_stack_lvl+0xe8/0x150 [ 550.295726][T12272] should_fail_ex+0x412/0x560 [ 550.295756][T12272] should_failslab+0xa8/0x100 [ 550.295781][T12272] __kmalloc_noprof+0xde/0x7e0 [ 550.295799][T12272] ? rcu_is_watching+0x15/0xb0 [ 550.295819][T12272] ? copy_splice_read+0x16f/0xaa0 [ 550.295839][T12272] ? trace_contention_end+0x39/0x100 [ 550.295865][T12272] copy_splice_read+0x16f/0xaa0 [ 550.295889][T12272] ? _parse_integer_limit+0x1ae/0x1f0 [ 550.295918][T12272] ? __pfx_aa_file_perm+0x10/0x10 [ 550.295945][T12272] ? __pfx_copy_splice_read+0x10/0x10 [ 550.295967][T12272] ? __pfx___mutex_lock+0x10/0x10 [ 550.295999][T12272] ? get_pid_task+0x20/0x1f0 [ 550.296031][T12272] splice_file_to_pipe+0x446/0x6b0 [ 550.296067][T12272] do_splice+0x116f/0x1910 [ 550.296117][T12272] ? __pfx_do_splice+0x10/0x10 [ 550.296150][T12272] __se_sys_splice+0x353/0x490 [ 550.296180][T12272] ? __pfx___se_sys_splice+0x10/0x10 [ 550.296206][T12272] ? __secure_computing+0xe1/0x2a0 [ 550.296233][T12272] ? __ia32_sys_splice+0x21/0xf0 [ 550.296259][T12272] __do_fast_syscall_32+0x1d2/0x540 [ 550.296281][T12272] ? lockdep_hardirqs_on+0x7a/0x110 [ 550.296299][T12272] ? do_fast_syscall_32+0x33/0x70 [ 550.296320][T12272] ? asm_int80_emulation+0x1a/0x20 [ 550.296337][T12272] ? do_int80_emulation+0x20e/0x400 [ 550.296358][T12272] ? rcu_is_watching+0x15/0xb0 [ 550.296380][T12272] do_fast_syscall_32+0x33/0x70 [ 550.296408][T12272] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 550.296431][T12272] RIP: 0023:0xf7f22539 [ 550.296449][T12272] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 550.296466][T12272] RSP: 002b:00000000f53e650c EFLAGS: 00000206 ORIG_RAX: 0000000000000139 [ 550.296489][T12272] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000000 [ 550.296501][T12272] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000007ffff000 [ 550.296513][T12272] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 550.296525][T12272] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 550.296546][T12272] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 550.296578][T12272] [ 550.569180][ T984] imon 7-1:155.0: iMON device (15c2:ffdc, intf0) on usb<7:23> initialized [ 552.160461][ T5916] usb 7-1: USB disconnect, device number 23 [ 554.205671][ T30] audit: type=1326 audit(1770206070.425:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12306 comm="syz.5.1707" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d539 code=0x7ffc0000 [ 554.701587][ T30] audit: type=1326 audit(1770206070.425:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12306 comm="syz.5.1707" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d539 code=0x7ffc0000 [ 555.135527][ T30] audit: type=1326 audit(1770206070.425:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12306 comm="syz.5.1707" exe="/root/syz-executor" sig=0 arch=40000003 syscall=105 compat=1 ip=0xf745d539 code=0x7ffc0000 [ 555.209047][ T30] audit: type=1326 audit(1770206070.425:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12306 comm="syz.5.1707" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d539 code=0x7ffc0000 [ 555.239368][ T30] audit: type=1326 audit(1770206070.425:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12306 comm="syz.5.1707" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d539 code=0x7ffc0000 [ 555.261683][ T30] audit: type=1326 audit(1770206070.425:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12306 comm="syz.5.1707" exe="/root/syz-executor" sig=0 arch=40000003 syscall=183 compat=1 ip=0xf745d539 code=0x7ffc0000 [ 555.284920][ T30] audit: type=1326 audit(1770206070.425:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12306 comm="syz.5.1707" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d539 code=0x7ffc0000 [ 555.318877][ T30] audit: type=1326 audit(1770206070.425:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12306 comm="syz.5.1707" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d539 code=0x7ffc0000 [ 556.483222][T12331] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1717'. [ 558.264778][T12353] FAULT_INJECTION: forcing a failure. [ 558.264778][T12353] name failslab, interval 1, probability 0, space 0, times 0 [ 558.344095][T12353] CPU: 0 UID: 0 PID: 12353 Comm: syz.5.1723 Tainted: G L syzkaller #0 PREEMPT(full) [ 558.344123][T12353] Tainted: [L]=SOFTLOCKUP [ 558.344128][T12353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 558.344136][T12353] Call Trace: [ 558.344141][T12353] [ 558.344148][T12353] dump_stack_lvl+0xe8/0x150 [ 558.344169][T12353] should_fail_ex+0x412/0x560 [ 558.344188][T12353] should_failslab+0xa8/0x100 [ 558.344203][T12353] __kmalloc_noprof+0xde/0x7e0 [ 558.344215][T12353] ? vb2_core_create_bufs+0x474/0xe30 [ 558.344233][T12353] vb2_core_create_bufs+0x474/0xe30 [ 558.344254][T12353] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 558.344273][T12353] ? vb2_set_flags_and_caps+0x309/0x5f0 [ 558.344289][T12353] vb2_create_bufs+0x593/0xa70 [ 558.344311][T12353] ? __pfx_vb2_create_bufs+0x10/0x10 [ 558.344326][T12353] ? v4l_sanitize_format+0x5d6/0x9f0 [ 558.344345][T12353] v4l_create_bufs+0x18c/0x290 [ 558.344361][T12353] __video_do_ioctl+0x889/0xc50 [ 558.344389][T12353] ? __pfx___video_do_ioctl+0x10/0x10 [ 558.344406][T12353] ? trace_kmalloc+0x1f/0xb0 [ 558.344415][T12353] ? __kmalloc_noprof+0x42d/0x7e0 [ 558.344425][T12353] ? do_vfs_ioctl+0x1166/0x1530 [ 558.344445][T12353] video_usercopy+0x876/0x1400 [ 558.344466][T12353] ? __pfx___video_do_ioctl+0x10/0x10 [ 558.344481][T12353] ? __pfx_video_usercopy+0x10/0x10 [ 558.344506][T12353] ? __fget_files+0x2a/0x420 [ 558.344530][T12353] v4l2_ioctl+0x18d/0x1e0 [ 558.344568][T12353] v4l2_compat_ioctl32+0x1d7/0x280 [ 558.344602][T12353] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 558.344622][T12353] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 558.344643][T12353] ? __fget_files+0x3a0/0x420 [ 558.344660][T12353] ? fput+0xa0/0xd0 [ 558.344674][T12353] ? ksys_write+0x242/0x270 [ 558.344692][T12353] ? __pfx_ksys_write+0x10/0x10 [ 558.344714][T12353] __do_fast_syscall_32+0x1d2/0x540 [ 558.344728][T12353] ? lockdep_hardirqs_on+0x7a/0x110 [ 558.344739][T12353] ? do_fast_syscall_32+0x33/0x70 [ 558.344751][T12353] ? asm_int80_emulation+0x1a/0x20 [ 558.344762][T12353] ? do_int80_emulation+0x20e/0x400 [ 558.344778][T12353] do_fast_syscall_32+0x33/0x70 [ 558.344791][T12353] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 558.344805][T12353] RIP: 0023:0xf745d539 [ 558.344817][T12353] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 558.344828][T12353] RSP: 002b:00000000f548650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 558.344843][T12353] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0f8565c [ 558.344852][T12353] RDX: 0000000080000280 RSI: 0000000000000000 RDI: 0000000000000000 [ 558.344859][T12353] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 558.344866][T12353] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 558.344873][T12353] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 558.344892][T12353] [ 559.723864][ T5917] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 559.893431][ T5917] usb 7-1: config 156 has no interfaces? [ 559.900717][ T5917] usb 7-1: New USB device found, idVendor=0457, idProduct=0151, bcdDevice= 1.00 [ 559.919602][ T5917] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.017023][T12376] FAULT_INJECTION: forcing a failure. [ 560.017023][T12376] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 560.067908][T12376] CPU: 0 UID: 0 PID: 12376 Comm: syz.5.1731 Tainted: G L syzkaller #0 PREEMPT(full) [ 560.067944][T12376] Tainted: [L]=SOFTLOCKUP [ 560.067953][T12376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 560.067965][T12376] Call Trace: [ 560.067972][T12376] [ 560.067980][T12376] dump_stack_lvl+0xe8/0x150 [ 560.068007][T12376] should_fail_ex+0x412/0x560 [ 560.068035][T12376] _copy_to_user+0x31/0xb0 [ 560.068060][T12376] simple_read_from_buffer+0xe1/0x170 [ 560.068081][T12376] proc_fail_nth_read+0x1bb/0x230 [ 560.068105][T12376] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 560.068129][T12376] ? rw_verify_area+0x2a6/0x4d0 [ 560.068150][T12376] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 560.068176][T12376] vfs_read+0x20c/0xa70 [ 560.068195][T12376] ? fdget_pos+0x246/0x320 [ 560.068216][T12376] ? __pfx___mutex_lock+0x10/0x10 [ 560.068234][T12376] ? __pfx_vfs_read+0x10/0x10 [ 560.068256][T12376] ? __fget_files+0x2a/0x420 [ 560.068275][T12376] ? __fget_files+0x3a0/0x420 [ 560.068293][T12376] ? __fget_files+0x2a/0x420 [ 560.068320][T12376] ksys_read+0x150/0x270 [ 560.068343][T12376] ? __pfx_ksys_read+0x10/0x10 [ 560.068367][T12376] ? asm_int80_emulation+0x1a/0x20 [ 560.068384][T12376] ? asm_int80_emulation+0x1a/0x20 [ 560.068408][T12376] do_int80_emulation+0x111/0x400 [ 560.068426][T12376] ? clear_bhb_loop+0x60/0xb0 [ 560.068442][T12376] ? clear_bhb_loop+0x60/0xb0 [ 560.068462][T12376] asm_int80_emulation+0x1a/0x20 [ 560.068476][T12376] RIP: 0023:0xf71c572b [ 560.068490][T12376] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 560.068511][T12376] RSP: 002b:00000000f54864bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 560.068534][T12376] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54865d0 [ 560.068548][T12376] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 560.068560][T12376] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 560.068572][T12376] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 560.068583][T12376] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 560.068614][T12376] [ 560.317740][ T5917] usb 7-1: string descriptor 0 read error: -71 [ 560.358231][ T5917] usb 7-1: USB disconnect, device number 24 [ 560.477436][T12384] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1734'. [ 561.218605][ T5917] usb 7-1: new full-speed USB device number 25 using dummy_hcd [ 561.400635][ T5917] usb 7-1: config 0 has an invalid interface number: 148 but max is 0 [ 561.437535][ T30] audit: type=1326 audit(1770206077.635:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12398 comm="syz.0.1739" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22539 code=0x7ffc0000 [ 561.468820][ T5917] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 561.623238][ T5917] usb 7-1: config 0 has no interface number 0 [ 561.658431][ T30] audit: type=1326 audit(1770206077.635:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12398 comm="syz.0.1739" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22539 code=0x7ffc0000 [ 561.690605][ T5917] usb 7-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.ec [ 561.719788][ T5917] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.778604][ T5917] usb 7-1: Product: syz [ 561.798647][ T30] audit: type=1326 audit(1770206077.635:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12398 comm="syz.0.1739" exe="/root/syz-executor" sig=0 arch=40000003 syscall=258 compat=1 ip=0xf7f22539 code=0x7ffc0000 [ 561.825230][ T5917] usb 7-1: Manufacturer: syz [ 561.839169][ T5917] usb 7-1: SerialNumber: syz [ 561.851429][ T5917] usb 7-1: config 0 descriptor?? [ 561.885800][ T30] audit: type=1326 audit(1770206077.635:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12398 comm="syz.0.1739" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22539 code=0x7ffc0000 [ 561.911613][ T5917] kobil_sct 7-1:0.148: required endpoints missing [ 561.957854][ T30] audit: type=1326 audit(1770206077.635:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12398 comm="syz.0.1739" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f22539 code=0x7ffc0000 [ 561.988024][ T30] audit: type=1326 audit(1770206077.635:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12398 comm="syz.0.1739" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22539 code=0x7ffc0000 [ 561.998644][ T10] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 562.013185][ T30] audit: type=1326 audit(1770206077.635:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12398 comm="syz.0.1739" exe="/root/syz-executor" sig=0 arch=40000003 syscall=289 compat=1 ip=0xf7f22539 code=0x7ffc0000 [ 562.045366][ T30] audit: type=1326 audit(1770206077.635:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12398 comm="syz.0.1739" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22539 code=0x7ffc0000 [ 562.107334][ T5908] usb 7-1: USB disconnect, device number 25 [ 562.111266][ T30] audit: type=1326 audit(1770206077.635:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12398 comm="syz.0.1739" exe="/root/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f22539 code=0x7ffc0000 [ 562.187654][ T30] audit: type=1326 audit(1770206077.635:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12398 comm="syz.0.1739" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22539 code=0x7ffc0000 [ 562.298269][ T10] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 562.319197][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.327487][ T10] usb 5-1: Product: syz [ 562.331860][ T10] usb 5-1: Manufacturer: syz [ 562.336672][ T10] usb 5-1: SerialNumber: syz [ 562.349969][ T10] usb 5-1: config 0 descriptor?? [ 562.560982][ T10] hso 5-1:0.0: Failed to find INT IN ep [ 562.567205][ T10] usb-storage 5-1:0.0: USB Mass Storage device detected [ 562.788220][ T10] usb 5-1: USB disconnect, device number 82 [ 562.963784][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.970192][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.126458][T12430] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1747'. [ 563.958832][ T10] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 564.109765][ T10] usb 7-1: device descriptor read/64, error -71 [ 564.348653][ T10] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 564.479715][ T10] usb 7-1: device descriptor read/64, error -71 [ 564.578199][T12457] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1756'. [ 564.600956][T12457] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1756'. [ 564.619218][ T10] usb usb7-port1: attempt power cycle [ 564.961107][ T10] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 565.038831][ T10] usb 7-1: device descriptor read/8, error -71 [ 565.153810][T12468] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1760'. [ 565.258665][T12470] syzkaller0: entered promiscuous mode [ 565.264235][T12470] syzkaller0: entered allmulticast mode [ 565.282948][T12470] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1761'. [ 565.293388][T12470] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1761'. [ 565.318623][ T10] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 565.339044][ T10] usb 7-1: device descriptor read/8, error -71 [ 565.449055][ T10] usb usb7-port1: unable to enumerate USB device [ 565.488602][ T5903] usb 5-1: new full-speed USB device number 83 using dummy_hcd [ 565.650570][ T5903] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 565.661037][ T5903] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 565.670992][ T5903] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 565.680998][ T5903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.691884][ T5903] usb 5-1: config 0 descriptor?? [ 565.701001][ T5903] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 565.707761][ T5903] dvb-usb: bulk message failed: -22 (3/0) [ 565.718055][ T5903] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 565.730299][ T5903] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 565.737429][ T5903] usb 5-1: media controller created [ 565.743983][ T5903] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 565.762794][ T5903] dvb-usb: bulk message failed: -22 (6/0) [ 565.769077][ T5903] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 565.781492][ T5903] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input28 [ 565.802528][ T5903] dvb-usb: schedule remote query interval to 150 msecs. [ 565.818578][ T5903] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 565.953613][ T5903] usb 5-1: USB disconnect, device number 83 [ 566.014749][ T5903] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 566.646536][T12484] xt_l2tp: unknown flags: 51 [ 566.658765][ T5916] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 566.830977][ T5916] usb 2-1: Using ep0 maxpacket: 8 [ 566.890620][ T5916] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 566.908593][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.918624][ T5916] usb 2-1: Product: syz [ 566.946988][T12496] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1767'. [ 566.957637][ T5916] usb 2-1: Manufacturer: syz [ 566.963689][ T5916] usb 2-1: SerialNumber: syz [ 566.994991][ T5916] usb 2-1: config 0 descriptor?? [ 567.226055][T12504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.235428][ T5916] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 567.267634][T12504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.387152][ T5916] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 567.440902][ T5916] usb 2-1: USB disconnect, device number 63 [ 567.547213][ T10] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 567.684009][T12500] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1765'. [ 567.867669][ T10] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 567.884489][ T10] usb 5-1: config 0 has no interface number 0 [ 567.908980][ T10] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 567.983302][ T10] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 567.992838][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.008724][ T10] usb 5-1: Product: syz [ 568.013000][ T10] usb 5-1: Manufacturer: syz [ 568.017638][ T10] usb 5-1: SerialNumber: syz [ 568.039567][ T10] usb 5-1: config 0 descriptor?? [ 568.114655][ T10] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 568.168891][ T5916] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 568.365850][ T5916] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 568.384568][ T5916] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 568.396849][ T5916] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 568.411994][ T5916] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 568.438879][ T5916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.489800][ T5916] usb 2-1: config 0 descriptor?? [ 568.612578][T12524] loop9: detected capacity change from 0 to 7 [ 568.621223][T12524] Buffer I/O error on dev loop9, logical block 0, async page read [ 568.651982][T12524] Buffer I/O error on dev loop9, logical block 0, async page read [ 568.674394][T12524] Buffer I/O error on dev loop9, logical block 0, async page read [ 568.705342][T12524] Buffer I/O error on dev loop9, logical block 0, async page read [ 568.724164][T12524] Buffer I/O error on dev loop9, logical block 0, async page read [ 568.755498][T12524] Buffer I/O error on dev loop9, logical block 0, async page read [ 568.786295][T12524] Buffer I/O error on dev loop9, logical block 0, async page read [ 568.794751][T12524] ldm_validate_partition_table(): Disk read failed. [ 568.819258][T12524] Buffer I/O error on dev loop9, logical block 0, async page read [ 568.835751][T12524] Buffer I/O error on dev loop9, logical block 0, async page read [ 568.845919][T12524] Buffer I/O error on dev loop9, logical block 0, async page read [ 568.854938][T12524] Dev loop9: unable to read RDB block 0 [ 568.863277][T12524] loop9: unable to read partition table [ 568.873746][T12524] loop9: partition table beyond EOD, truncated [ 568.882458][T12524] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 568.882458][T12524] ) failed (rc=-5) [ 568.918423][ T5916] holtek_kbd 0003:04D9:A055.0018: unknown main item tag 0x0 [ 568.926848][ T5916] holtek_kbd 0003:04D9:A055.0018: unknown main item tag 0x0 [ 568.982549][ T5916] holtek_kbd 0003:04D9:A055.0018: hidraw0: USB HID v10.00 Device [HID 04d9:a055] on usb-dummy_hcd.1-1/input0 [ 569.145251][T12518] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 569.159532][ T5916] usb 2-1: USB disconnect, device number 64 [ 570.158778][ T5825] Bluetooth: hci3: command 0x0406 tx timeout [ 570.242264][T12539] hub 9-0:1.0: USB hub found [ 570.249548][T12539] hub 9-0:1.0: 1 port detected [ 570.337585][T12538] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1776'. [ 571.309998][ T10] usb 5-1: USB disconnect, device number 84 [ 571.342667][ T10] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 571.684160][T12555] FAULT_INJECTION: forcing a failure. [ 571.684160][T12555] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 571.767751][T12555] CPU: 1 UID: 0 PID: 12555 Comm: syz.1.1782 Tainted: G L syzkaller #0 PREEMPT(full) [ 571.767787][T12555] Tainted: [L]=SOFTLOCKUP [ 571.767795][T12555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 571.767807][T12555] Call Trace: [ 571.767816][T12555] [ 571.767825][T12555] dump_stack_lvl+0xe8/0x150 [ 571.767857][T12555] should_fail_ex+0x412/0x560 [ 571.767887][T12555] _copy_from_user+0x2d/0xb0 [ 571.767918][T12555] do_tcp_setsockopt+0x4f3/0x2060 [ 571.767946][T12555] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 571.767969][T12555] ? __pfx_aa_sk_perm+0x10/0x10 [ 571.767996][T12555] ? __fget_files+0x2a/0x420 [ 571.768017][T12555] ? aa_sock_opt_perm+0xff/0x1a0 [ 571.768053][T12555] ? sock_common_setsockopt+0x36/0xc0 [ 571.768073][T12555] ? tcp_setsockopt+0x3d/0xe0 [ 571.768090][T12555] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 571.768113][T12555] do_sock_setsockopt+0x17c/0x1b0 [ 571.768145][T12555] __ia32_sys_setsockopt+0x13d/0x1b0 [ 571.768176][T12555] __do_fast_syscall_32+0x1d2/0x540 [ 571.768208][T12555] ? lockdep_hardirqs_on+0x7a/0x110 [ 571.768227][T12555] ? do_fast_syscall_32+0x33/0x70 [ 571.768247][T12555] ? asm_int80_emulation+0x1a/0x20 [ 571.768265][T12555] ? do_int80_emulation+0x20e/0x400 [ 571.768292][T12555] do_fast_syscall_32+0x33/0x70 [ 571.768316][T12555] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 571.768338][T12555] RIP: 0023:0xf7f82539 [ 571.768356][T12555] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 571.768374][T12555] RSP: 002b:00000000f542550c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 571.768397][T12555] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000006 [ 571.768411][T12555] RDX: 0000000000000019 RSI: 0000000080000080 RDI: 0000000000000004 [ 571.768424][T12555] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 571.768435][T12555] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 571.768447][T12555] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 571.768477][T12555] [ 572.819364][T12568] FAULT_INJECTION: forcing a failure. [ 572.819364][T12568] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 572.832911][T12568] CPU: 0 UID: 0 PID: 12568 Comm: syz.5.1787 Tainted: G L syzkaller #0 PREEMPT(full) [ 572.832943][T12568] Tainted: [L]=SOFTLOCKUP [ 572.832950][T12568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 572.832965][T12568] Call Trace: [ 572.832974][T12568] [ 572.832982][T12568] dump_stack_lvl+0xe8/0x150 [ 572.833010][T12568] should_fail_ex+0x412/0x560 [ 572.833036][T12568] _copy_from_user+0x2d/0xb0 [ 572.833063][T12568] get_compat_msghdr+0xb3/0x4c0 [ 572.833085][T12568] ? aa_file_perm+0x12d/0x1630 [ 572.833111][T12568] ? __pfx_get_compat_msghdr+0x10/0x10 [ 572.833145][T12568] ___sys_sendmsg+0x201/0x360 [ 572.833168][T12568] ? __lock_acquire+0x6b5/0x2cf0 [ 572.833205][T12568] ? __pfx____sys_sendmsg+0x10/0x10 [ 572.833233][T12568] ? kstrtoull+0x12f/0x1d0 [ 572.833283][T12568] ? __fget_files+0x2a/0x420 [ 572.833305][T12568] ? __fget_files+0x3a0/0x420 [ 572.833336][T12568] __sys_sendmmsg+0x2e7/0x4e0 [ 572.833367][T12568] ? __pfx___sys_sendmmsg+0x10/0x10 [ 572.833399][T12568] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 572.833436][T12568] ? ksys_write+0x242/0x270 [ 572.833466][T12568] ? __pfx_ksys_write+0x10/0x10 [ 572.833494][T12568] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 572.833520][T12568] __do_fast_syscall_32+0x1d2/0x540 [ 572.833542][T12568] ? lockdep_hardirqs_on+0x7a/0x110 [ 572.833560][T12568] ? do_fast_syscall_32+0x33/0x70 [ 572.833580][T12568] ? asm_int80_emulation+0x1a/0x20 [ 572.833597][T12568] ? do_int80_emulation+0x20e/0x400 [ 572.833623][T12568] do_fast_syscall_32+0x33/0x70 [ 572.833643][T12568] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 572.833663][T12568] RIP: 0023:0xf745d539 [ 572.833678][T12568] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 572.833692][T12568] RSP: 002b:00000000f548650c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 572.833713][T12568] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 572.833726][T12568] RDX: 0000000000000235 RSI: 0000000000000000 RDI: 0000000000000000 [ 572.833736][T12568] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 572.833747][T12568] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 572.833759][T12568] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 572.833788][T12568] [ 573.555305][T12577] netlink: 'syz.4.1790': attribute type 4 has an invalid length. [ 573.563214][T12577] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1790'. [ 573.630565][T12577] delete_channel: no stack [ 573.815814][ T10] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 574.118847][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 574.129070][ T10] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 574.137447][ T10] usb 6-1: config 0 has no interface number 0 [ 574.152638][ T10] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 574.166023][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.184239][ T10] usb 6-1: Product: syz [ 574.194903][ T10] usb 6-1: Manufacturer: syz [ 574.206215][ T10] usb 6-1: SerialNumber: syz [ 574.285879][ T10] usb 6-1: config 0 descriptor?? [ 574.334046][ T10] smsc95xx v2.0.0 [ 574.552659][T12575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 574.576994][T12575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 574.847387][T12575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 575.081863][T12575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 575.264303][T12593] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1791'. [ 575.282122][T12593] netlink: 203340 bytes leftover after parsing attributes in process `syz.1.1791'. [ 575.338032][T12575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 575.399136][T12575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 575.706136][ T10] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 575.764994][ T10] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 575.804105][ T10] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 575.857364][ T10] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 575.917828][ T10] usb 6-1: USB disconnect, device number 33 [ 576.072230][T12597] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 576.131472][T12600] FAULT_INJECTION: forcing a failure. [ 576.131472][T12600] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 576.198665][T12600] CPU: 1 UID: 0 PID: 12600 Comm: syz.6.1796 Tainted: G L syzkaller #0 PREEMPT(full) [ 576.198700][T12600] Tainted: [L]=SOFTLOCKUP [ 576.198708][T12600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 576.198721][T12600] Call Trace: [ 576.198730][T12600] [ 576.198739][T12600] dump_stack_lvl+0xe8/0x150 [ 576.198769][T12600] should_fail_ex+0x412/0x560 [ 576.198796][T12600] _copy_from_user+0x2d/0xb0 [ 576.198824][T12600] ucma_disconnect+0x93/0x470 [ 576.198849][T12600] ? __pfx_ucma_disconnect+0x10/0x10 [ 576.198879][T12600] ucma_write+0x24e/0x2f0 [ 576.198905][T12600] ? __pfx_ucma_write+0x10/0x10 [ 576.198926][T12600] ? security_file_permission+0x75/0x260 [ 576.198947][T12600] ? rw_verify_area+0x255/0x4d0 [ 576.198975][T12600] vfs_writev+0x4bd/0x990 [ 576.198997][T12600] ? __pfx_ucma_write+0x10/0x10 [ 576.199022][T12600] ? __pfx_vfs_writev+0x10/0x10 [ 576.199066][T12600] ? __fget_files+0x2a/0x420 [ 576.199093][T12600] ? __fget_files+0x3a0/0x420 [ 576.199113][T12600] ? __fget_files+0x2a/0x420 [ 576.199143][T12600] do_writev+0x154/0x2e0 [ 576.199166][T12600] ? __pfx_do_writev+0x10/0x10 [ 576.199188][T12600] ? __pfx_ksys_write+0x10/0x10 [ 576.199224][T12600] __do_fast_syscall_32+0x1d2/0x540 [ 576.199248][T12600] ? lockdep_hardirqs_on+0x7a/0x110 [ 576.199266][T12600] ? do_fast_syscall_32+0x33/0x70 [ 576.199287][T12600] ? asm_int80_emulation+0x1a/0x20 [ 576.199305][T12600] ? do_int80_emulation+0x20e/0x400 [ 576.199332][T12600] do_fast_syscall_32+0x33/0x70 [ 576.199355][T12600] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 576.199379][T12600] RIP: 0023:0xf744d539 [ 576.199407][T12600] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 576.199426][T12600] RSP: 002b:00000000f547650c EFLAGS: 00000206 ORIG_RAX: 0000000000000092 [ 576.199448][T12600] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000000 [ 576.199463][T12600] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000000 [ 576.199475][T12600] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 576.199487][T12600] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 576.199499][T12600] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 576.199529][T12600] [ 576.838915][ T10] usb 6-1: new low-speed USB device number 34 using dummy_hcd [ 576.851197][T12604] hub 9-0:1.0: USB hub found [ 576.858032][T12604] hub 9-0:1.0: 1 port detected [ 577.008670][ T10] usb 6-1: Invalid ep0 maxpacket: 16 [ 577.229256][ T10] usb 6-1: new low-speed USB device number 35 using dummy_hcd [ 577.400351][ T10] usb 6-1: Invalid ep0 maxpacket: 16 [ 577.427345][ T10] usb usb6-port1: attempt power cycle [ 578.428953][ T10] usb 6-1: new low-speed USB device number 36 using dummy_hcd [ 578.529999][ T10] usb 6-1: Invalid ep0 maxpacket: 16 [ 578.555574][T12626] netlink: 7 bytes leftover after parsing attributes in process `syz.6.1802'. [ 578.565591][T12626] netlink: 7 bytes leftover after parsing attributes in process `syz.6.1802'. [ 578.698862][ T10] usb 6-1: new low-speed USB device number 37 using dummy_hcd [ 578.730613][ T10] usb 6-1: Invalid ep0 maxpacket: 16 [ 578.736409][ T10] usb usb6-port1: unable to enumerate USB device [ 579.838911][ T10] usb 2-1: new full-speed USB device number 65 using dummy_hcd [ 579.999293][T12637] kvm: pic: non byte read [ 580.177371][ T10] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 580.217372][ T10] usb 2-1: config 0 has no interface number 0 [ 580.278720][ T10] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 580.301163][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.355775][T12644] bridge0: left allmulticast mode [ 580.369263][T12645] bridge_slave_0: left allmulticast mode [ 580.375023][T12645] bridge_slave_0: left promiscuous mode [ 580.380958][T12645] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.402257][ T10] usb 2-1: Product: syz [ 580.504660][ T10] usb 2-1: Manufacturer: syz [ 580.554444][ T10] usb 2-1: SerialNumber: syz [ 580.722135][T12645] bridge_slave_1: left allmulticast mode [ 580.744556][T12645] bridge_slave_1: left promiscuous mode [ 580.746054][ T10] usb 2-1: config 0 descriptor?? [ 580.781945][T12649] FAULT_INJECTION: forcing a failure. [ 580.781945][T12649] name failslab, interval 1, probability 0, space 0, times 0 [ 580.794719][T12649] CPU: 1 UID: 0 PID: 12649 Comm: syz.6.1808 Tainted: G L syzkaller #0 PREEMPT(full) [ 580.794741][T12649] Tainted: [L]=SOFTLOCKUP [ 580.794746][T12649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 580.794754][T12649] Call Trace: [ 580.794761][T12649] [ 580.794767][T12649] dump_stack_lvl+0xe8/0x150 [ 580.794788][T12649] should_fail_ex+0x412/0x560 [ 580.794805][T12649] should_failslab+0xa8/0x100 [ 580.794819][T12649] ? __pfx_ip6_dst_gc+0x10/0x10 [ 580.794837][T12649] kmem_cache_alloc_noprof+0x87/0x6e0 [ 580.794854][T12649] ? ip6_pol_route+0x160/0x13d0 [ 580.794866][T12649] ? dst_alloc+0x105/0x170 [ 580.794882][T12649] ? __pfx_ip6_dst_gc+0x10/0x10 [ 580.794900][T12649] dst_alloc+0x105/0x170 [ 580.794919][T12649] ip6_pol_route+0xafb/0x13d0 [ 580.794931][T12649] ? ip6_pol_route+0x160/0x13d0 [ 580.794945][T12649] ? __pfx_ip6_pol_route+0x10/0x10 [ 580.794956][T12649] ? __lock_acquire+0x6b5/0x2cf0 [ 580.794975][T12649] ? __pfx_ip6_compressed_string+0x10/0x10 [ 580.794987][T12649] ? is_bpf_text_address+0x292/0x2b0 [ 580.795000][T12649] ? is_bpf_text_address+0x26/0x2b0 [ 580.795015][T12649] fib6_rule_lookup+0x222/0x730 [ 580.795029][T12649] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 580.795041][T12649] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 580.795054][T12649] ? ip6_route_output_flags+0x2e/0x5d0 [ 580.795067][T12649] ? ip6_route_output_flags+0x2e/0x5d0 [ 580.795086][T12649] ip6_route_output_flags+0x364/0x5d0 [ 580.795099][T12649] ? ip6_route_output_flags+0x2e/0x5d0 [ 580.795112][T12649] ip6_dst_lookup_tail+0x1c3/0x15a0 [ 580.795140][T12649] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 580.795154][T12649] ? sk_dst_check+0x25/0x480 [ 580.795169][T12649] ? sk_dst_check+0x25/0x480 [ 580.795183][T12649] ? sk_dst_check+0x25/0x480 [ 580.795193][T12649] ? sk_dst_check+0x30e/0x480 [ 580.795207][T12649] ip6_sk_dst_lookup_flow+0x72b/0x9c0 [ 580.795223][T12649] ? udpv6_sendmsg+0x17dd/0x25a0 [ 580.795239][T12649] udpv6_sendmsg+0x19c8/0x25a0 [ 580.795256][T12649] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 580.795272][T12649] ? __lock_acquire+0x6b5/0x2cf0 [ 580.795290][T12649] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 580.795308][T12649] ? ip6_datagram_release_cb+0x7c/0x550 [ 580.795334][T12649] ? lockdep_hardirqs_on+0x7a/0x110 [ 580.795346][T12649] ? inet_send_prepare+0x1b9/0x270 [ 580.795361][T12649] ? __local_bh_enable_ip+0xd0/0x130 [ 580.795372][T12649] ? inet_send_prepare+0x1b9/0x270 [ 580.795389][T12649] ? inet6_sendmsg+0xe4/0x120 [ 580.795401][T12649] ____sys_sendmsg+0x62c/0xad0 [ 580.795421][T12649] ? __pfx_____sys_sendmsg+0x10/0x10 [ 580.795444][T12649] ___sys_sendmsg+0x2a5/0x360 [ 580.795459][T12649] ? __lock_acquire+0x6b5/0x2cf0 [ 580.795477][T12649] ? __pfx____sys_sendmsg+0x10/0x10 [ 580.795494][T12649] ? kstrtoull+0x12f/0x1d0 [ 580.795523][T12649] ? __fget_files+0x2a/0x420 [ 580.795535][T12649] ? __fget_files+0x3a0/0x420 [ 580.795553][T12649] __sys_sendmmsg+0x2e7/0x4e0 [ 580.795572][T12649] ? __pfx___sys_sendmmsg+0x10/0x10 [ 580.795593][T12649] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 580.795615][T12649] ? ksys_write+0x242/0x270 [ 580.795638][T12649] ? __pfx_ksys_write+0x10/0x10 [ 580.795664][T12649] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 580.795688][T12649] __do_fast_syscall_32+0x1d2/0x540 [ 580.795706][T12649] ? lockdep_hardirqs_on+0x7a/0x110 [ 580.795717][T12649] ? do_fast_syscall_32+0x33/0x70 [ 580.795729][T12649] ? asm_int80_emulation+0x1a/0x20 [ 580.795744][T12649] ? do_int80_emulation+0x20e/0x400 [ 580.795760][T12649] do_fast_syscall_32+0x33/0x70 [ 580.795773][T12649] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 580.795787][T12649] RIP: 0023:0xf744d539 [ 580.795799][T12649] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 580.795809][T12649] RSP: 002b:00000000f547650c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 580.795823][T12649] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 580.795832][T12649] RDX: 0000000000000001 RSI: 0000000004004840 RDI: 0000000000000000 [ 580.795840][T12649] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 580.795847][T12649] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 580.795854][T12649] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 580.795870][T12649] [ 581.246304][T12645] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.347515][T12645] bond0: (slave bond_slave_0): Releasing backup interface [ 581.409136][T12645] bond_slave_0: left allmulticast mode [ 581.418263][T12647] qrtr: Invalid version 203 [ 581.424269][T12645] bond_slave_0: left promiscuous mode [ 581.476124][T12647] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1810'. [ 581.502177][T12645] team0: Port device team_slave_0 removed [ 581.565421][T12645] team0: Port device team_slave_1 removed [ 581.641742][T12645] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 581.738668][T12645] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 581.826390][T12645] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 581.844446][T12645] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 581.910762][T12645] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 583.540994][ T10] keyspan 2-1:0.133: Keyspan 1 port adapter converter detected [ 583.553679][T12709] hub 9-0:1.0: USB hub found [ 583.859271][T12709] hub 9-0:1.0: 1 port detected [ 583.904277][ T10] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 81 [ 583.930815][ T10] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 1 [ 583.946430][ T10] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 2 [ 583.996260][T12650] netlink: 180 bytes leftover after parsing attributes in process `syz.5.1806'. [ 584.035736][ T10] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 584.100495][ T10] usb 2-1: USB disconnect, device number 65 [ 584.121928][T12715] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1817'. [ 584.134008][ T10] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 584.237155][T12650] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.1806'. [ 584.277934][ T10] keyspan 2-1:0.133: device disconnected [ 586.138845][ T10] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 586.288996][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 586.300462][ T10] usb 7-1: config 0 has an invalid interface number: 85 but max is 0 [ 586.319773][ T10] usb 7-1: config 0 has no interface number 0 [ 586.325910][ T10] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 586.347512][ T10] usb 7-1: config 0 interface 85 has no altsetting 0 [ 586.391985][ T10] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 586.416096][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.440896][ T10] usb 7-1: Product: syz [ 586.447329][ T10] usb 7-1: Manufacturer: syz [ 586.467529][ T10] usb 7-1: SerialNumber: syz [ 586.478738][ T5917] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 586.505816][ T10] usb 7-1: config 0 descriptor?? [ 586.658200][ T5917] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 586.678588][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.686639][ T5917] usb 5-1: Product: syz [ 586.718768][ T5917] usb 5-1: Manufacturer: syz [ 586.723430][ T5917] usb 5-1: SerialNumber: syz [ 586.760617][ T10] appletouch 7-1:0.85: Failed to read mode from device. [ 586.779584][ T10] appletouch 7-1:0.85: probe with driver appletouch failed with error -5 [ 587.234751][T12772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 587.245794][T12772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 587.319363][T12747] Invalid argument reading file caps for ./file0 [ 587.351837][T12773] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1836'. [ 587.391305][ T5917] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 587.406690][ T5917] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 587.419247][ T5917] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 587.435436][ T5917] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 587.525354][ T5917] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 587.544213][ T5917] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 587.568833][ T5917] usb 5-1: USB disconnect, device number 85 [ 587.712401][T12766] syz.1.1835 (12766): drop_caches: 2 [ 588.068835][ T5917] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 588.218604][ T5917] usb 2-1: Using ep0 maxpacket: 32 [ 588.226320][ T5917] usb 2-1: unable to get BOS descriptor or descriptor too short [ 588.252614][ T5917] usb 2-1: config 1 has an invalid interface number: 169 but max is 0 [ 588.261470][ T5917] usb 2-1: config 1 has no interface number 0 [ 588.470347][ T5917] usb 2-1: config 1 interface 169 has no altsetting 0 [ 588.489144][ T5917] usb 2-1: New USB device found, idVendor=0ace, idProduct=1608, bcdDevice=4c.20 [ 588.501836][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.519752][ T5917] usb 2-1: Product: syz [ 588.527129][ T5917] usb 2-1: Manufacturer: syz [ 588.534959][ T5917] usb 2-1: SerialNumber: syz [ 588.772791][ T5917] cdc_acm 2-1:1.169: skipping garbage [ 588.792727][ T5917] usb 2-1: USB disconnect, device number 66 [ 588.868913][ T10] usb 7-1: USB disconnect, device number 30 [ 589.044099][T12784] FAULT_INJECTION: forcing a failure. [ 589.044099][T12784] name failslab, interval 1, probability 0, space 0, times 0 [ 589.137484][T12784] CPU: 0 UID: 0 PID: 12784 Comm: syz.6.1840 Tainted: G L syzkaller #0 PREEMPT(full) [ 589.137519][T12784] Tainted: [L]=SOFTLOCKUP [ 589.137526][T12784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 589.137538][T12784] Call Trace: [ 589.137547][T12784] [ 589.137556][T12784] dump_stack_lvl+0xe8/0x150 [ 589.137588][T12784] should_fail_ex+0x412/0x560 [ 589.137618][T12784] should_failslab+0xa8/0x100 [ 589.137642][T12784] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 589.137672][T12784] ? __alloc_skb+0x193/0x390 [ 589.137695][T12784] ? __alloc_skb+0x1d7/0x390 [ 589.137715][T12784] ? __local_bh_enable_ip+0xd0/0x130 [ 589.137735][T12784] ? __alloc_skb+0x193/0x390 [ 589.137758][T12784] __alloc_skb+0x1d7/0x390 [ 589.137785][T12784] netlink_sendmsg+0x5d4/0xb40 [ 589.137817][T12784] ? __pfx_netlink_sendmsg+0x10/0x10 [ 589.137842][T12784] ? aa_sock_msg_perm+0xf1/0x1b0 [ 589.137869][T12784] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 589.137892][T12784] ? __pfx_netlink_sendmsg+0x10/0x10 [ 589.137912][T12784] ____sys_sendmsg+0xa68/0xad0 [ 589.137947][T12784] ? __pfx_____sys_sendmsg+0x10/0x10 [ 589.137977][T12784] ? kstrtoull+0x12f/0x1d0 [ 589.138008][T12784] ___sys_sendmsg+0x2a5/0x360 [ 589.138033][T12784] ? __lock_acquire+0x6b5/0x2cf0 [ 589.138064][T12784] ? __pfx____sys_sendmsg+0x10/0x10 [ 589.138093][T12784] ? get_pid_task+0x20/0x1f0 [ 589.138113][T12784] ? get_pid_task+0x20/0x1f0 [ 589.138132][T12784] ? get_pid_task+0x20/0x1f0 [ 589.138181][T12784] ? __fget_files+0x2a/0x420 [ 589.138212][T12784] ? __fget_files+0x3a0/0x420 [ 589.138244][T12784] __sys_sendmsg+0x183/0x260 [ 589.138272][T12784] ? __pfx___sys_sendmsg+0x10/0x10 [ 589.138311][T12784] ? __pfx_ksys_write+0x10/0x10 [ 589.138348][T12784] __do_fast_syscall_32+0x1d2/0x540 [ 589.138371][T12784] ? lockdep_hardirqs_on+0x7a/0x110 [ 589.138389][T12784] ? do_fast_syscall_32+0x33/0x70 [ 589.138409][T12784] ? asm_int80_emulation+0x1a/0x20 [ 589.138427][T12784] ? do_int80_emulation+0x20e/0x400 [ 589.138454][T12784] do_fast_syscall_32+0x33/0x70 [ 589.138476][T12784] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 589.138503][T12784] RIP: 0023:0xf744d539 [ 589.138519][T12784] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 589.138536][T12784] RSP: 002b:00000000f547650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 589.138557][T12784] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000300 [ 589.138572][T12784] RDX: 0000000000008844 RSI: 0000000000000000 RDI: 0000000000000000 [ 589.138585][T12784] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 589.138597][T12784] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 589.138609][T12784] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 589.138640][T12784] [ 589.614986][T12788] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1841'. [ 590.018738][ T5917] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 590.248971][ T5917] usb 5-1: Using ep0 maxpacket: 8 [ 590.259541][ T5917] usb 5-1: unable to get BOS descriptor or descriptor too short [ 590.268269][ T5917] usb 5-1: config 0 has no interfaces? [ 590.276414][ T5917] usb 5-1: New USB device found, idVendor=1498, idProduct=a090, bcdDevice=48.0f [ 590.296508][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.388980][T12808] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 590.440888][ T5917] usb 5-1: Product: syz [ 590.445112][ T5917] usb 5-1: Manufacturer: syz [ 590.451564][ T5917] usb 5-1: SerialNumber: syz [ 590.618961][ T5908] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 590.688979][ T5917] usb 5-1: config 0 descriptor?? [ 590.832239][T12813] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1850'. [ 590.988679][ T5908] usb 6-1: config 0 has an invalid interface number: 217 but max is 1 [ 591.010871][ T5917] usb 5-1: USB disconnect, device number 86 [ 591.015600][ T5908] usb 6-1: config 0 has no interface number 1 [ 591.258980][ T5908] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 591.340038][ T5908] usb 6-1: config 0 interface 217 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 591.358873][ T5908] usb 6-1: New USB device found, idVendor=0c45, idProduct=628f, bcdDevice=1f.44 [ 591.374434][ T5908] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.417227][ T5908] usb 6-1: config 0 descriptor?? [ 591.452572][ T5908] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:628f [ 591.968873][ T5908] gspca_sn9c20x: Write register 1000 failed -110 [ 591.975239][ T5908] gspca_sn9c20x: Device initialization failed [ 592.008330][ T5908] gspca_sn9c20x 6-1:0.0: probe with driver gspca_sn9c20x failed with error -110 [ 592.263471][T12824] kvm: pic: non byte read [ 592.642119][ T984] usb 6-1: USB disconnect, device number 38 [ 592.928631][ T5908] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 593.088800][ T5908] usb 7-1: Using ep0 maxpacket: 8 [ 593.114725][ T5908] usb 7-1: unable to get BOS descriptor or descriptor too short [ 593.124425][ T5908] usb 7-1: no configurations [ 593.129495][ T5908] usb 7-1: can't read configurations, error -22 [ 593.229896][ T5916] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 593.482449][ T5916] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 593.558122][ T5916] usb 2-1: config 0 has no interface number 0 [ 593.584703][ T5916] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 593.712525][ T5916] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 593.904011][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.925111][ T984] IPVS: starting estimator thread 0... [ 594.025035][ T5916] usb 2-1: Product: syz [ 594.030682][ T5916] usb 2-1: Manufacturer: syz [ 594.035584][ T5916] usb 2-1: SerialNumber: syz [ 594.050926][ T5916] usb 2-1: config 0 descriptor?? [ 594.081961][ T5916] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0 [ 594.089896][T12847] IPVS: using max 49 ests per chain, 117600 per kthread [ 594.278842][ T984] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 594.477397][ T5916] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 594.689756][ T984] usb 5-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 594.730685][ T984] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.755327][ T984] usb 5-1: Product: syz [ 594.770099][ T984] usb 5-1: Manufacturer: syz [ 594.783296][ T984] usb 5-1: SerialNumber: syz [ 594.789247][ T5916] usb 6-1: Using ep0 maxpacket: 8 [ 594.855035][T12841] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1857'. [ 594.889665][T12841] loop9: detected capacity change from 0 to 7 [ 594.903009][T12841] buffer_io_error: 9 callbacks suppressed [ 594.903071][T12841] Buffer I/O error on dev loop9, logical block 0, async page read [ 594.928841][ T984] usb 5-1: config 0 descriptor?? [ 594.948450][T12841] Buffer I/O error on dev loop9, logical block 0, async page read [ 595.219012][ T984] int51x1 5-1:0.0: probe with driver int51x1 failed with error -22 [ 595.274066][ T5916] usb 6-1: unable to get BOS descriptor or descriptor too short [ 595.290565][ T5916] usb 6-1: no configurations [ 595.322567][ T5916] usb 6-1: can't read configurations, error -22 [ 595.374230][T12841] Buffer I/O error on dev loop9, logical block 0, async page read [ 595.398736][T12841] Buffer I/O error on dev loop9, logical block 0, async page read [ 595.430338][T12841] Buffer I/O error on dev loop9, logical block 0, async page read [ 595.477030][T12841] Buffer I/O error on dev loop9, logical block 0, async page read [ 595.493853][T12841] Buffer I/O error on dev loop9, logical block 0, async page read [ 595.506223][ T5916] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 595.520119][T12841] ldm_validate_partition_table(): Disk read failed. [ 595.541286][T12841] Buffer I/O error on dev loop9, logical block 0, async page read [ 595.556809][T12841] Buffer I/O error on dev loop9, logical block 0, async page read [ 595.569040][T12841] Buffer I/O error on dev loop9, logical block 0, async page read [ 595.581238][T12841] Dev loop9: unable to read RDB block 0 [ 595.587161][T12841] loop9: unable to read partition table [ 595.593760][T12841] loop9: partition table beyond EOD, truncated [ 595.600403][T12841] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 595.600403][T12841] ) failed (rc=-5) [ 595.681946][T12855] fuse: Unknown parameter '01777777777777777777777' [ 595.802656][T12856] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1863'. [ 595.816903][ T5916] usb 6-1: Using ep0 maxpacket: 8 [ 595.831280][ T5916] usb 6-1: unable to get BOS descriptor or descriptor too short [ 595.849592][ T5916] usb 6-1: no configurations [ 595.874514][ T5916] usb 6-1: can't read configurations, error -22 [ 595.898267][ T5916] usb usb6-port1: attempt power cycle [ 596.328616][ T5916] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 596.359934][ T5916] usb 6-1: Using ep0 maxpacket: 8 [ 596.368890][ T5916] usb 6-1: unable to get BOS descriptor or descriptor too short [ 596.377469][ T5916] usb 6-1: no configurations [ 596.382979][ T5916] usb 6-1: can't read configurations, error -22 [ 596.529485][ T5916] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 596.548665][ T984] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 596.569434][ T5916] usb 6-1: Using ep0 maxpacket: 8 [ 596.576789][ T5916] usb 6-1: unable to get BOS descriptor or descriptor too short [ 596.584968][ T5916] usb 6-1: no configurations [ 596.589980][ T5916] usb 6-1: can't read configurations, error -22 [ 596.596921][ T5916] usb usb6-port1: unable to enumerate USB device [ 596.690049][ T984] usb 7-1: device descriptor read/64, error -71 [ 596.938718][ T984] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 597.150412][ T984] usb 7-1: device descriptor read/64, error -71 [ 597.348117][ T984] usb usb7-port1: attempt power cycle [ 597.683630][ T5917] usb 5-1: USB disconnect, device number 87 [ 597.767467][ T10] usb 2-1: USB disconnect, device number 67 [ 597.797917][ T10] yurex 2-1:0.50: USB YUREX #0 now disconnected [ 597.808596][ T984] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 597.839584][ T984] usb 7-1: device descriptor read/8, error -71 [ 597.843747][T12868] netlink: 'syz.5.1867': attribute type 29 has an invalid length. [ 597.884659][T12868] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1867'. [ 597.924682][T12868] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1867'. [ 598.031888][T12876] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1870'. [ 598.085236][ T984] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 598.129634][ T984] usb 7-1: device descriptor read/8, error -71 [ 598.196752][T12881] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 598.370399][ T984] usb usb7-port1: unable to enumerate USB device [ 600.542722][T12909] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1877'. [ 600.584191][ T5903] hid-generic 0006:0004:0009.0019: unknown main item tag 0x0 [ 600.599427][ T5903] hid-generic 0006:0004:0009.0019: unknown main item tag 0x0 [ 600.607678][T12912] FAULT_INJECTION: forcing a failure. [ 600.607678][T12912] name failslab, interval 1, probability 0, space 0, times 0 [ 600.638345][ T5903] hid-generic 0006:0004:0009.0019: unknown main item tag 0x0 [ 600.649612][ T5903] hid-generic 0006:0004:0009.0019: unknown main item tag 0x1 [ 600.657058][ T5903] hid-generic 0006:0004:0009.0019: unknown main item tag 0x0 [ 600.666788][ T5903] hid-generic 0006:0004:0009.0019: unknown main item tag 0x0 [ 600.674859][ T5903] hid-generic 0006:0004:0009.0019: unknown main item tag 0x0 [ 600.683261][T12912] CPU: 1 UID: 0 PID: 12912 Comm: syz.1.1878 Tainted: G L syzkaller #0 PREEMPT(full) [ 600.683292][T12912] Tainted: [L]=SOFTLOCKUP [ 600.683299][T12912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 600.683311][T12912] Call Trace: [ 600.683320][T12912] [ 600.683328][T12912] dump_stack_lvl+0xe8/0x150 [ 600.683361][T12912] should_fail_ex+0x412/0x560 [ 600.683390][T12912] should_failslab+0xa8/0x100 [ 600.683415][T12912] kmem_cache_alloc_noprof+0x87/0x6e0 [ 600.683445][T12912] ? alloc_empty_file+0x55/0x1d0 [ 600.683467][T12912] ? kernel_text_address+0xa5/0xe0 [ 600.683494][T12912] alloc_empty_file+0x55/0x1d0 [ 600.683518][T12912] path_openat+0x11e/0x3e20 [ 600.683556][T12912] ? stack_trace_save+0xa9/0x100 [ 600.683579][T12912] ? __pfx_stack_trace_save+0x10/0x10 [ 600.683614][T12912] ? kasan_save_track+0x4f/0x80 [ 600.683629][T12912] ? kasan_save_track+0x3e/0x80 [ 600.683644][T12912] ? __kasan_slab_alloc+0x6c/0x80 [ 600.683662][T12912] ? kmem_cache_alloc_noprof+0x370/0x6e0 [ 600.683688][T12912] ? getname_flags+0xb7/0x540 [ 600.683707][T12912] ? do_sys_openat2+0xca/0x220 [ 600.683730][T12912] ? __pfx_path_openat+0x10/0x10 [ 600.683760][T12912] ? __lock_acquire+0x6b5/0x2cf0 [ 600.683802][T12912] do_filp_open+0x22d/0x490 [ 600.683831][T12912] ? __pfx_do_filp_open+0x10/0x10 [ 600.683877][T12912] ? _raw_spin_unlock+0x28/0x50 [ 600.683905][T12912] ? alloc_fd+0x64b/0x6c0 [ 600.683938][T12912] do_sys_openat2+0x12f/0x220 [ 600.683964][T12912] ? __pfx_do_sys_openat2+0x10/0x10 [ 600.683991][T12912] ? ksys_write+0x242/0x270 [ 600.684024][T12912] __ia32_compat_sys_openat+0x131/0x160 [ 600.684056][T12912] __do_fast_syscall_32+0x1d2/0x540 [ 600.684078][T12912] ? lockdep_hardirqs_on+0x7a/0x110 [ 600.684106][T12912] ? do_fast_syscall_32+0x33/0x70 [ 600.684127][T12912] ? asm_int80_emulation+0x1a/0x20 [ 600.684145][T12912] ? do_int80_emulation+0x20e/0x400 [ 600.684170][T12912] do_fast_syscall_32+0x33/0x70 [ 600.684193][T12912] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 600.684216][T12912] RIP: 0023:0xf7f82539 [ 600.684233][T12912] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 600.684250][T12912] RSP: 002b:00000000f542550c EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 600.684273][T12912] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000240 [ 600.684287][T12912] RDX: 0000000000454102 RSI: 0000000000000000 RDI: 0000000000000000 [ 600.684300][T12912] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 600.684312][T12912] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 600.684325][T12912] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 600.684356][T12912] [ 600.961655][ T5903] hid-generic 0006:0004:0009.0019: unknown main item tag 0x0 [ 600.969889][ T5903] hid-generic 0006:0004:0009.0019: unknown main item tag 0x0 [ 600.977331][ T5903] hid-generic 0006:0004:0009.0019: unknown main item tag 0x0 [ 600.984836][ T5903] hid-generic 0006:0004:0009.0019: item fetching failed at offset 16/17 [ 600.993994][ T5903] hid-generic 0006:0004:0009.0019: probe with driver hid-generic failed with error -22 [ 601.057015][T12918] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1880'. [ 601.348672][ T984] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 601.539545][ T984] usb 5-1: Using ep0 maxpacket: 8 [ 601.556060][ T984] usb 5-1: unable to get BOS descriptor or descriptor too short [ 601.574067][ T984] usb 5-1: config 8 has an invalid interface number: 158 but max is 0 [ 601.582668][ T984] usb 5-1: config 8 has an invalid interface number: 158 but max is 0 [ 601.597486][ T984] usb 5-1: config 8 has no interface number 0 [ 601.604049][ T984] usb 5-1: config 8 interface 158 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 601.635273][ T984] usb 5-1: too many endpoints for config 8 interface 158 altsetting 48: 120, using maximum allowed: 30 [ 601.673206][ T984] usb 5-1: config 8 interface 158 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 120 [ 601.695265][ T984] usb 5-1: config 8 interface 158 has no altsetting 0 [ 601.716761][ T984] usb 5-1: New USB device found, idVendor=1199, idProduct=685a, bcdDevice=56.af [ 601.716931][T12927] netlink: 'syz.6.1883': attribute type 29 has an invalid length. [ 601.791215][ T984] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.818471][ T984] usb 5-1: Product: syz [ 601.846650][T12930] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1883'. [ 601.861021][ T984] usb 5-1: Manufacturer: syz [ 601.867306][ T984] usb 5-1: SerialNumber: syz [ 601.880648][T12927] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1883'. [ 602.105535][ T984] sierra 5-1:8.158: Sierra USB modem converter detected [ 602.135035][ T984] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 602.167530][ T984] usb 5-1: USB disconnect, device number 88 [ 602.217983][ T984] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 602.244072][ T984] sierra 5-1:8.158: device disconnected [ 602.307628][T12938] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 602.787802][T12944] macvtap0: entered allmulticast mode [ 602.797724][T12944] veth0_macvtap: entered allmulticast mode [ 603.178616][ T984] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 603.541942][ T984] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 603.550376][ T915] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 603.558813][ T984] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 603.574506][ T984] usb 6-1: config 0 has no interface number 0 [ 603.581443][ T984] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 603.593088][ T984] usb 6-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 603.611055][ T984] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=ad.aa [ 603.625166][ T984] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.635290][ T984] usb 6-1: Product: syz [ 603.665685][ T984] usb 6-1: Manufacturer: syz [ 603.670556][ T984] usb 6-1: SerialNumber: syz [ 603.718591][ T915] usb 5-1: Using ep0 maxpacket: 32 [ 603.727481][ T984] usb 6-1: config 0 descriptor?? [ 603.780780][ T984] adutux 6-1:0.55: interrupt endpoints not found [ 603.789878][ T915] usb 5-1: config 4 has an invalid interface number: 228 but max is 0 [ 603.807387][ T915] usb 5-1: config 4 has no interface number 0 [ 603.816948][ T915] usb 5-1: config 4 interface 228 altsetting 4 endpoint 0x7 has invalid wMaxPacketSize 0 [ 603.837770][ T915] usb 5-1: config 4 interface 228 altsetting 4 bulk endpoint 0x7 has invalid maxpacket 0 [ 603.849545][ T915] usb 5-1: config 4 interface 228 has no altsetting 0 [ 603.863123][ T915] usb 5-1: New USB device found, idVendor=0499, idProduct=a9a2, bcdDevice=c4.e8 [ 603.874386][ T915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.885022][ T915] usb 5-1: Product: syz [ 603.890218][ T915] usb 5-1: Manufacturer: syz [ 603.895006][ T915] usb 5-1: SerialNumber: syz [ 604.021125][T12946] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1890'. [ 604.115732][ T984] usb 6-1: USB disconnect, device number 43 [ 604.253951][T12948] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1891'. [ 604.263784][T12948] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1891'. [ 604.680914][ T915] usb 5-1: USB disconnect, device number 89 [ 605.123051][ T5880] udevd[5880]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:4.228/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 605.256212][T12980] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 605.959651][ T915] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 606.148603][ T915] usb 2-1: Using ep0 maxpacket: 8 [ 606.156510][ T915] usb 2-1: unable to get BOS descriptor or descriptor too short [ 606.168879][ T915] usb 2-1: no configurations [ 606.173526][ T915] usb 2-1: can't read configurations, error -22 [ 606.281064][T12991] FAULT_INJECTION: forcing a failure. [ 606.281064][T12991] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 606.329048][ T915] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 606.377863][T12991] CPU: 0 UID: 0 PID: 12991 Comm: syz.0.1904 Tainted: G L syzkaller #0 PREEMPT(full) [ 606.377895][T12991] Tainted: [L]=SOFTLOCKUP [ 606.377903][T12991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 606.377915][T12991] Call Trace: [ 606.377923][T12991] [ 606.377932][T12991] dump_stack_lvl+0xe8/0x150 [ 606.377962][T12991] should_fail_ex+0x412/0x560 [ 606.377991][T12991] _copy_from_iter+0x1d3/0x1670 [ 606.378024][T12991] ? trace_kmem_cache_alloc+0x1f/0xb0 [ 606.378057][T12991] ? __pfx__copy_from_iter+0x10/0x10 [ 606.378083][T12991] ? __build_skb_around+0x22d/0x3c0 [ 606.378109][T12991] ? __alloc_skb+0x193/0x390 [ 606.378131][T12991] ? netlink_sendmsg+0x650/0xb40 [ 606.378148][T12991] ? skb_put+0x11b/0x210 [ 606.378175][T12991] netlink_sendmsg+0x6c0/0xb40 [ 606.378205][T12991] ? __pfx_netlink_sendmsg+0x10/0x10 [ 606.378229][T12991] ? aa_sock_msg_perm+0xf1/0x1b0 [ 606.378255][T12991] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 606.378276][T12991] ? __pfx_netlink_sendmsg+0x10/0x10 [ 606.378301][T12991] ____sys_sendmsg+0xa68/0xad0 [ 606.378335][T12991] ? __pfx_____sys_sendmsg+0x10/0x10 [ 606.378364][T12991] ? kstrtoull+0x12f/0x1d0 [ 606.378394][T12991] ___sys_sendmsg+0x2a5/0x360 [ 606.378418][T12991] ? __lock_acquire+0x6b5/0x2cf0 [ 606.378449][T12991] ? __pfx____sys_sendmsg+0x10/0x10 [ 606.378475][T12991] ? get_pid_task+0x20/0x1f0 [ 606.378495][T12991] ? get_pid_task+0x20/0x1f0 [ 606.378513][T12991] ? get_pid_task+0x20/0x1f0 [ 606.378560][T12991] ? __fget_files+0x2a/0x420 [ 606.378580][T12991] ? __fget_files+0x3a0/0x420 [ 606.378612][T12991] __sys_sendmsg+0x183/0x260 [ 606.378640][T12991] ? __pfx___sys_sendmsg+0x10/0x10 [ 606.378675][T12991] ? __pfx_ksys_write+0x10/0x10 [ 606.378710][T12991] __do_fast_syscall_32+0x1d2/0x540 [ 606.378741][T12991] ? lockdep_hardirqs_on+0x7a/0x110 [ 606.378758][T12991] ? do_fast_syscall_32+0x33/0x70 [ 606.378778][T12991] ? asm_int80_emulation+0x1a/0x20 [ 606.378796][T12991] ? do_int80_emulation+0x20e/0x400 [ 606.378823][T12991] do_fast_syscall_32+0x33/0x70 [ 606.378846][T12991] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 606.378869][T12991] RIP: 0023:0xf7f22539 [ 606.378887][T12991] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 606.378904][T12991] RSP: 002b:00000000f53e650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 606.378927][T12991] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800010c0 [ 606.378942][T12991] RDX: 0000000000048000 RSI: 0000000000000000 RDI: 0000000000000000 [ 606.378954][T12991] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 606.378965][T12991] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 606.378976][T12991] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 606.379006][T12991] [ 606.748660][ T915] usb 2-1: Using ep0 maxpacket: 8 [ 606.755846][ T915] usb 2-1: unable to get BOS descriptor or descriptor too short [ 606.764184][ T915] usb 2-1: no configurations [ 606.769204][ T915] usb 2-1: can't read configurations, error -22 [ 606.776109][ T915] usb usb2-port1: attempt power cycle [ 606.788300][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 606.788322][ T30] audit: type=1326 audit(1770206123.005:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12993 comm="syz.4.1906" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61539 code=0x7ffc0000 [ 606.829745][ T30] audit: type=1326 audit(1770206123.055:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12993 comm="syz.4.1906" exe="/root/syz-executor" sig=0 arch=40000003 syscall=183 compat=1 ip=0xf7f61539 code=0x7ffc0000 [ 606.939724][ T30] audit: type=1326 audit(1770206123.055:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12993 comm="syz.4.1906" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61539 code=0x7ffc0000 [ 607.007238][ T30] audit: type=1326 audit(1770206123.055:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12993 comm="syz.4.1906" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61539 code=0x7ffc0000 [ 607.223953][T13010] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1910'. [ 607.254075][ T5908] hid_parser_main: 4 callbacks suppressed [ 607.254093][ T5908] hid-generic 0006:0004:0009.001A: unknown main item tag 0x0 [ 607.277027][ T915] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 607.291710][ T5908] hid-generic 0006:0004:0009.001A: unknown main item tag 0x0 [ 607.305007][ T5908] hid-generic 0006:0004:0009.001A: unknown main item tag 0x0 [ 607.312684][ T5908] hid-generic 0006:0004:0009.001A: unknown main item tag 0x1 [ 607.321333][ T915] usb 2-1: Using ep0 maxpacket: 8 [ 607.339828][T13007] tipc: Enabled bearer , priority 10 [ 607.348967][T13007] tipc: Enabled bearer , priority 0 [ 607.369302][ T5908] hid-generic 0006:0004:0009.001A: unknown main item tag 0x0 [ 607.387854][ T915] usb 2-1: unable to get BOS descriptor or descriptor too short [ 607.428772][ T5908] hid-generic 0006:0004:0009.001A: unknown main item tag 0x0 [ 607.436282][ T915] usb 2-1: no configurations [ 607.444052][ T915] usb 2-1: can't read configurations, error -22 [ 607.468574][ T5917] usb 6-1: new full-speed USB device number 44 using dummy_hcd [ 607.540879][ T5908] hid-generic 0006:0004:0009.001A: unknown main item tag 0x0 [ 607.568129][ T5908] hid-generic 0006:0004:0009.001A: unknown main item tag 0x0 [ 607.585566][ T5908] hid-generic 0006:0004:0009.001A: unknown main item tag 0x0 [ 607.611601][ T5908] hid-generic 0006:0004:0009.001A: unknown main item tag 0x0 [ 607.623705][ T5908] hid-generic 0006:0004:0009.001A: item fetching failed at offset 16/17 [ 607.647885][ T5908] hid-generic 0006:0004:0009.001A: probe with driver hid-generic failed with error -22 [ 607.688842][ T915] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 607.710378][ T915] usb 2-1: Using ep0 maxpacket: 8 [ 607.717884][ T915] usb 2-1: unable to get BOS descriptor or descriptor too short [ 607.749078][ T915] usb 2-1: no configurations [ 607.753727][ T915] usb 2-1: can't read configurations, error -22 [ 607.766325][ T915] usb usb2-port1: unable to enumerate USB device [ 607.828070][ T5917] usb 6-1: config 0 has an invalid interface number: 133 but max is 0 [ 607.841818][ T5917] usb 6-1: config 0 has no interface number 0 [ 607.852184][ T5917] usb 6-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 607.866476][ T5917] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.874695][ T5917] usb 6-1: Product: syz [ 607.879198][ T5917] usb 6-1: Manufacturer: syz [ 607.883798][ T5917] usb 6-1: SerialNumber: syz [ 607.919802][ T5917] usb 6-1: config 0 descriptor?? [ 608.458675][ T5916] tipc: Node number set to 446510641 [ 608.603696][ T5908] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 608.624090][T13027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1915'. [ 608.769405][ T5908] usb 7-1: Using ep0 maxpacket: 8 [ 608.785204][ T5908] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 608.819036][ T5908] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 608.892703][ T5908] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 609.035539][ T5908] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 609.062254][ T5908] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 609.084214][ T5908] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.715352][ T5908] usb 7-1: GET_CAPABILITIES returned 0 [ 609.723307][ T5908] usbtmc 7-1:16.0: can't read capabilities [ 609.928668][ T5908] usb 7-1: USB disconnect, device number 37 [ 610.051004][ T5917] keyspan 6-1:0.133: Keyspan 1 port adapter converter detected [ 610.090677][ T5917] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 81 [ 610.124046][ T5917] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 1 [ 610.140453][ T30] audit: type=1326 audit(1770206126.365:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13039 comm="syz.0.1919" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22539 code=0x7ffc0000 [ 610.148616][ T5917] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 2 [ 610.209027][ T30] audit: type=1326 audit(1770206126.365:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13039 comm="syz.0.1919" exe="/root/syz-executor" sig=0 arch=40000003 syscall=183 compat=1 ip=0xf7f22539 code=0x7ffc0000 [ 610.210629][ T5917] usb 6-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 610.289024][ T30] audit: type=1326 audit(1770206126.365:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13039 comm="syz.0.1919" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22539 code=0x7ffc0000 [ 610.330473][ T5917] usb 6-1: USB disconnect, device number 44 [ 610.364324][ T30] audit: type=1326 audit(1770206126.365:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13039 comm="syz.0.1919" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22539 code=0x7ffc0000 [ 610.369548][ T5917] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 610.397814][T13049] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1922'. [ 610.462405][ T5917] keyspan 6-1:0.133: device disconnected [ 610.528464][T13054] netlink: 144 bytes leftover after parsing attributes in process `syz.5.1923'. [ 610.604011][T13057] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1924'. [ 610.639820][ T5903] hid-generic 0006:0004:0009.001B: item fetching failed at offset 16/17 [ 610.660686][ T5903] hid-generic 0006:0004:0009.001B: probe with driver hid-generic failed with error -22 [ 610.669685][T13056] netlink: 'syz.5.1923': attribute type 21 has an invalid length. [ 610.705430][T13056] netlink: 'syz.5.1923': attribute type 6 has an invalid length. [ 610.727675][T13056] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1923'. [ 610.808623][ T915] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 610.982756][ T915] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 610.994319][ T915] usb 5-1: config 0 has no interface number 0 [ 611.005406][ T915] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 611.032716][ T915] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 611.051971][ T915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.067353][ T915] usb 5-1: Product: syz [ 611.075112][ T915] usb 5-1: Manufacturer: syz [ 611.083717][ T915] usb 5-1: SerialNumber: syz [ 611.096401][ T915] usb 5-1: config 0 descriptor?? [ 611.108609][ T5903] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 611.130771][ T915] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 611.258608][ T5903] usb 7-1: Using ep0 maxpacket: 8 [ 611.268271][ T5903] usb 7-1: unable to get BOS descriptor or descriptor too short [ 611.288649][ T5903] usb 7-1: no configurations [ 611.293518][ T5903] usb 7-1: can't read configurations, error -22 [ 611.449485][ T5903] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 611.574779][T13070] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:4096x16 (0x33424752, 6, 0, 0, 0) [ 611.618674][ T5903] usb 7-1: Using ep0 maxpacket: 8 [ 611.646728][ T5903] usb 7-1: unable to get BOS descriptor or descriptor too short [ 611.654929][ T5903] usb 7-1: no configurations [ 611.661429][ T5903] usb 7-1: can't read configurations, error -22 [ 611.672187][T13053] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1921'. [ 611.690827][T13053] loop9: detected capacity change from 0 to 7 [ 611.698418][T13053] buffer_io_error: 9 callbacks suppressed [ 611.698446][T13053] Buffer I/O error on dev loop9, logical block 0, async page read [ 611.712796][T13053] Buffer I/O error on dev loop9, logical block 0, async page read [ 611.723785][T13053] Buffer I/O error on dev loop9, logical block 0, async page read [ 611.733414][T13053] Buffer I/O error on dev loop9, logical block 0, async page read [ 611.741930][T13053] Buffer I/O error on dev loop9, logical block 0, async page read [ 611.750039][T13053] Buffer I/O error on dev loop9, logical block 0, async page read [ 611.758044][T13053] Buffer I/O error on dev loop9, logical block 0, async page read [ 611.766032][T13053] ldm_validate_partition_table(): Disk read failed. [ 611.773066][T13053] Buffer I/O error on dev loop9, logical block 0, async page read [ 611.781214][T13053] Buffer I/O error on dev loop9, logical block 0, async page read [ 611.789481][T13053] Buffer I/O error on dev loop9, logical block 0, async page read [ 611.797712][T13053] Dev loop9: unable to read RDB block 0 [ 611.803826][T13053] loop9: unable to read partition table [ 611.810334][T13053] loop9: partition table beyond EOD, truncated [ 611.816644][T13053] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 611.816644][T13053] ) failed (rc=-5) [ 611.902323][ T5903] usb usb7-port1: attempt power cycle [ 612.175024][T13076] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 612.278685][ T5903] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 612.291948][ T30] audit: type=1326 audit(1770206128.515:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13077 comm="syz.1.1932" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82539 code=0x7ffc0000 [ 612.300525][ T5908] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 612.319934][ T30] audit: type=1326 audit(1770206128.515:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13077 comm="syz.1.1932" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82539 code=0x7ffc0000 [ 612.345133][ T5903] usb 7-1: Using ep0 maxpacket: 8 [ 612.358778][ T30] audit: type=1326 audit(1770206128.545:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13077 comm="syz.1.1932" exe="/root/syz-executor" sig=0 arch=40000003 syscall=183 compat=1 ip=0xf7f82539 code=0x7ffc0000 [ 612.381876][ T30] audit: type=1326 audit(1770206128.545:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13077 comm="syz.1.1932" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82539 code=0x7ffc0000 [ 612.404371][ T5903] usb 7-1: unable to get BOS descriptor or descriptor too short [ 612.413980][ T5903] usb 7-1: no configurations [ 612.418800][ T5903] usb 7-1: can't read configurations, error -22 [ 612.426022][ T30] audit: type=1326 audit(1770206128.545:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13077 comm="syz.1.1932" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82539 code=0x7ffc0000 [ 612.501060][ T5908] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 612.520810][ T5908] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 612.541174][ T5908] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 612.550749][ T5908] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 612.558740][ T5903] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 612.567539][ T5908] usb 6-1: SerialNumber: syz [ 612.580759][ T5903] usb 7-1: Using ep0 maxpacket: 8 [ 612.592467][ T5903] usb 7-1: unable to get BOS descriptor or descriptor too short [ 612.604111][ T5903] usb 7-1: no configurations [ 612.615186][ T5903] usb 7-1: can't read configurations, error -22 [ 612.624533][ T5903] usb usb7-port1: unable to enumerate USB device [ 612.686630][T13084] : entered promiscuous mode [ 612.810317][ T5908] usb 6-1: 0:2 : does not exist [ 612.836718][ T5908] usb 6-1: USB disconnect, device number 45 [ 612.873948][ T5880] udevd[5880]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 613.509350][ T915] usb 5-1: USB disconnect, device number 90 [ 613.533714][ T915] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 613.633595][T13086] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1935'. [ 613.692798][T13086] : entered promiscuous mode [ 614.247582][T13107] [U]  [ 614.250824][T13107] [U] K{ [ 614.254763][T13107] [U] T 1ŠFFˊ`GJǘGO/MC [ 614.263821][T13107] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 614.288864][T13107] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 614.302182][T13107] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 614.344965][ T915] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 614.519646][T13107] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 614.630525][T13107] [U] T_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 614.643580][T13107] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 614.656554][ T915] usb 5-1: Using ep0 maxpacket: 8 [ 614.662559][T13107] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`ƦMX"\ [ 614.764036][T13107] [U] {; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 614.788762][ T915] usb 5-1: unable to get BOS descriptor or descriptor too short [ 614.797720][ T915] usb 5-1: no configurations [ 614.803386][ T915] usb 5-1: can't read configurations, error -22 [ 614.838373][T13107] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 614.853117][T13107] [U] 22Ʃ۩X?0;3U [ 614.858333][T13107] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 614.891619][T13107] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 614.905623][T13107] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 615.048813][T13107] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 615.055445][T13107] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 615.082076][T13107] [U] EC [ 615.120155][T13107] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 615.227951][T13102] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 615.506249][T13117] FAULT_INJECTION: forcing a failure. [ 615.506249][T13117] name failslab, interval 1, probability 0, space 0, times 0 [ 615.519612][T13117] CPU: 1 UID: 0 PID: 13117 Comm: syz.4.1944 Tainted: G L syzkaller #0 PREEMPT(full) [ 615.519633][T13117] Tainted: [L]=SOFTLOCKUP [ 615.519653][T13117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 615.519661][T13117] Call Trace: [ 615.519667][T13117] [ 615.519672][T13117] dump_stack_lvl+0xe8/0x150 [ 615.519693][T13117] should_fail_ex+0x412/0x560 [ 615.519711][T13117] should_failslab+0xa8/0x100 [ 615.519726][T13117] __kmalloc_cache_noprof+0x83/0x6e0 [ 615.519738][T13117] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 615.519752][T13117] ? sctp_add_bind_addr+0x8c/0x370 [ 615.519766][T13117] sctp_add_bind_addr+0x8c/0x370 [ 615.519780][T13117] sctp_copy_local_addr_list+0x314/0x4f0 [ 615.519794][T13117] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 615.519806][T13117] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 615.519819][T13117] ? sctp_v6_is_any+0x64/0x80 [ 615.519832][T13117] ? sctp_copy_one_addr+0x93/0x360 [ 615.519846][T13117] sctp_bind_addr_copy+0xb3/0x3c0 [ 615.519858][T13117] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 615.519877][T13117] sctp_connect_new_asoc+0x2ff/0x6b0 [ 615.519894][T13117] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 615.519913][T13117] ? sctp_inet6_send_verify+0x23a/0x300 [ 615.519924][T13117] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 615.519940][T13117] __sctp_connect+0x5cb/0xdc0 [ 615.519961][T13117] ? __pfx___sctp_connect+0x10/0x10 [ 615.519974][T13117] ? security_sctp_bind_connect+0x7e/0x2c0 [ 615.519988][T13117] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 615.520008][T13117] sctp_getsockopt_connectx3+0x227/0x360 [ 615.520019][T13117] ? lock_sock_nested+0x6a/0x100 [ 615.520032][T13117] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 615.520049][T13117] ? __local_bh_enable_ip+0xd0/0x130 [ 615.520063][T13117] sctp_getsockopt+0x984/0xb90 [ 615.520076][T13117] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 615.520090][T13117] do_sock_getsockopt+0x2d3/0x3f0 [ 615.520107][T13117] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 615.520122][T13117] ? __fget_files+0x3a0/0x420 [ 615.520135][T13117] ? __fget_files+0x2a/0x420 [ 615.520151][T13117] __ia32_sys_getsockopt+0x1a4/0x240 [ 615.520172][T13117] __do_fast_syscall_32+0x1d2/0x540 [ 615.520185][T13117] ? lockdep_hardirqs_on+0x7a/0x110 [ 615.520204][T13117] ? do_fast_syscall_32+0x33/0x70 [ 615.520216][T13117] ? asm_int80_emulation+0x1a/0x20 [ 615.520227][T13117] ? do_int80_emulation+0x20e/0x400 [ 615.520243][T13117] do_fast_syscall_32+0x33/0x70 [ 615.520256][T13117] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 615.520270][T13117] RIP: 0023:0xf7f61539 [ 615.520282][T13117] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 615.520292][T13117] RSP: 002b:00000000f542650c EFLAGS: 00000206 ORIG_RAX: 000000000000016d [ 615.520307][T13117] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000084 [ 615.520315][T13117] RDX: 000000000000006f RSI: 0000000080000200 RDI: 0000000080000240 [ 615.520323][T13117] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 615.520330][T13117] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 615.520337][T13117] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 615.520354][T13117] [ 617.125984][T13134] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1949'. [ 618.219034][ T5903] usb 6-1: new full-speed USB device number 46 using dummy_hcd [ 618.414216][ T5903] usb 6-1: not running at top speed; connect to a high speed hub [ 618.436371][ T5903] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 618.460207][ T5903] usb 6-1: config 1 has no interface number 1 [ 618.466378][ T5903] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 618.625248][ T5903] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 618.657564][ T5903] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.681234][ T5903] usb 6-1: Product: syz [ 618.711531][ T5903] usb 6-1: Manufacturer: syz [ 619.318672][ T5903] usb 6-1: SerialNumber: syz [ 619.535875][T13165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 619.600102][T13165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 619.614129][ T5903] usb 6-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 619.649080][ T5903] usb 6-1: failed to enable PITCH for EP 0x82 [ 619.789010][ T5903] usb 6-1: USB disconnect, device number 46 [ 619.870219][ T5894] udevd[5894]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 619.990807][T13169] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1958'. [ 620.017419][T13169] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1958'. [ 620.598584][ T5908] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 620.818764][ T5908] usb 6-1: Using ep0 maxpacket: 8 [ 620.865425][ T5908] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 620.897359][ T5908] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 620.934157][ T5908] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.982626][ T5908] usb 6-1: Product: syz [ 620.998616][ T5908] usb 6-1: Manufacturer: syz [ 621.013492][ T5908] usb 6-1: SerialNumber: syz [ 621.046026][ T5908] usb 6-1: config 0 descriptor?? [ 621.077733][ T5908] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 621.124061][ T5908] usb 6-1: setting power ON [ 621.137553][ T5908] dvb-usb: bulk message failed: -22 (2/0) [ 621.160544][ T5908] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 621.202348][T13184] loop5: detected capacity change from 0 to 7 [ 621.243796][T13184] loop5: [ 621.253156][T13184] loop5: partition table partially beyond EOD, truncated [ 621.287595][ T5908] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 621.783340][T13193] dvb-usb: bulk message failed: -22 (3/0) [ 621.999523][ T5908] usb 6-1: media controller created [ 622.052327][ T5908] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 622.144138][ T5908] usb 6-1: selecting invalid altsetting 6 [ 622.370071][ T5908] usb 6-1: digital interface selection failed (-22) [ 622.506493][T13210] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:4096x16 (0x33424752, 6, 0, 0, 0) [ 622.588336][ T5908] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 622.675385][ T5908] usb 6-1: setting power OFF [ 622.692737][ T5196] loop5: [ 622.695821][ T5196] loop5: partition table partially beyond EOD, truncated [ 622.710508][ T5908] dvb-usb: bulk message failed: -22 (2/0) [ 622.753235][ T5908] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 622.825119][ T5908] (NULL device *): no alternate interface [ 623.122462][ T5908] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 623.151404][ T5908] usb 6-1: USB disconnect, device number 47 [ 624.088675][ T5908] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 624.115954][ T5196] loop5: [ 624.120495][ T5196] loop5: partition table partially beyond EOD, truncated [ 624.239150][ T5908] usb 2-1: Using ep0 maxpacket: 16 [ 624.246244][ T5908] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 624.254436][ T5908] usb 2-1: can't read configurations, error -61 [ 624.327014][ T30] audit: type=1326 audit(1770206140.545:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13225 comm="syz.5.1972" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d539 code=0x7ffc0000 [ 624.356025][ T30] audit: type=1326 audit(1770206140.575:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13225 comm="syz.5.1972" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d539 code=0x7ffc0000 [ 624.383299][ T30] audit: type=1326 audit(1770206140.575:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13225 comm="syz.5.1972" exe="/root/syz-executor" sig=0 arch=40000003 syscall=304 compat=1 ip=0xf745d539 code=0x7ffc0000 [ 624.409456][ T5908] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 624.409593][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.417340][ T30] audit: type=1326 audit(1770206140.575:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13225 comm="syz.5.1972" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d539 code=0x7ffc0000 [ 624.423459][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.518223][ T30] audit: type=1326 audit(1770206140.575:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13225 comm="syz.5.1972" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d539 code=0x7ffc0000 [ 624.542856][ T30] audit: type=1326 audit(1770206140.575:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13225 comm="syz.5.1972" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d539 code=0x7ffc0000 [ 624.567450][ T30] audit: type=1326 audit(1770206140.575:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13225 comm="syz.5.1972" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d539 code=0x7ffc0000 [ 624.616254][ T30] audit: type=1326 audit(1770206140.575:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13225 comm="syz.5.1972" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf745d539 code=0x7ffc0000 [ 624.638877][ T5908] usb 2-1: Using ep0 maxpacket: 16 [ 624.645552][ T30] audit: type=1326 audit(1770206140.575:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13225 comm="syz.5.1972" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d539 code=0x7ffc0000 [ 624.670346][ T5908] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 624.678335][ T5908] usb 2-1: can't read configurations, error -61 [ 624.684997][ T5908] usb usb2-port1: attempt power cycle [ 624.692059][ T30] audit: type=1326 audit(1770206140.575:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13225 comm="syz.5.1972" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d539 code=0x7ffc0000 [ 624.953583][T13233] FAULT_INJECTION: forcing a failure. [ 624.953583][T13233] name failslab, interval 1, probability 0, space 0, times 0 [ 624.966872][T13233] CPU: 1 UID: 0 PID: 13233 Comm: syz.6.1974 Tainted: G L syzkaller #0 PREEMPT(full) [ 624.966912][T13233] Tainted: [L]=SOFTLOCKUP [ 624.966920][T13233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 624.966932][T13233] Call Trace: [ 624.966940][T13233] [ 624.966950][T13233] dump_stack_lvl+0xe8/0x150 [ 624.966984][T13233] should_fail_ex+0x412/0x560 [ 624.967013][T13233] should_failslab+0xa8/0x100 [ 624.967038][T13233] kmem_cache_alloc_noprof+0x87/0x6e0 [ 624.967065][T13233] ? __netlink_lookup+0xc6/0x8b0 [ 624.967088][T13233] ? skb_clone+0x212/0x3a0 [ 624.967119][T13233] skb_clone+0x212/0x3a0 [ 624.967149][T13233] __netlink_deliver_tap+0x404/0x850 [ 624.967184][T13233] ? netlink_deliver_tap+0x2e/0x1b0 [ 624.967206][T13233] netlink_deliver_tap+0x19c/0x1b0 [ 624.967229][T13233] netlink_unicast+0x7e3/0x9b0 [ 624.967267][T13233] ? __pfx_netlink_unicast+0x10/0x10 [ 624.967295][T13233] ? __alloc_skb+0x193/0x390 [ 624.967318][T13233] ? netlink_sendmsg+0x650/0xb40 [ 624.967337][T13233] ? skb_put+0x11b/0x210 [ 624.967365][T13233] netlink_sendmsg+0x813/0xb40 [ 624.967396][T13233] ? __pfx_netlink_sendmsg+0x10/0x10 [ 624.967421][T13233] ? aa_sock_msg_perm+0xf1/0x1b0 [ 624.967448][T13233] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 624.967471][T13233] ? __pfx_netlink_sendmsg+0x10/0x10 [ 624.967490][T13233] ____sys_sendmsg+0xa68/0xad0 [ 624.967527][T13233] ? __pfx_____sys_sendmsg+0x10/0x10 [ 624.967558][T13233] ? kstrtoull+0x12f/0x1d0 [ 624.967590][T13233] ___sys_sendmsg+0x2a5/0x360 [ 624.967614][T13233] ? __lock_acquire+0x6b5/0x2cf0 [ 624.967645][T13233] ? __pfx____sys_sendmsg+0x10/0x10 [ 624.967673][T13233] ? get_pid_task+0x20/0x1f0 [ 624.967695][T13233] ? get_pid_task+0x20/0x1f0 [ 624.967713][T13233] ? get_pid_task+0x20/0x1f0 [ 624.967772][T13233] ? __fget_files+0x2a/0x420 [ 624.967799][T13233] ? __fget_files+0x3a0/0x420 [ 624.967832][T13233] __sys_sendmsg+0x183/0x260 [ 624.967860][T13233] ? __pfx___sys_sendmsg+0x10/0x10 [ 624.967898][T13233] ? __pfx_ksys_write+0x10/0x10 [ 624.967936][T13233] __do_fast_syscall_32+0x1d2/0x540 [ 624.967959][T13233] ? lockdep_hardirqs_on+0x7a/0x110 [ 624.967978][T13233] ? do_fast_syscall_32+0x33/0x70 [ 624.967998][T13233] ? asm_int80_emulation+0x1a/0x20 [ 624.968017][T13233] ? do_int80_emulation+0x20e/0x400 [ 624.968043][T13233] do_fast_syscall_32+0x33/0x70 [ 624.968066][T13233] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 624.968089][T13233] RIP: 0023:0xf744d539 [ 624.968107][T13233] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 624.968124][T13233] RSP: 002b:00000000f547650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 624.968147][T13233] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 624.968162][T13233] RDX: 000000004f559e4e RSI: 0000000000000000 RDI: 0000000000000000 [ 624.968175][T13233] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 624.968186][T13233] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 624.968199][T13233] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 624.968229][T13233] [ 624.968354][T13233] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1974'. [ 625.209626][ T5908] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 625.363930][ T5908] usb 2-1: Using ep0 maxpacket: 16 [ 625.377940][ T5908] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 625.391914][ T5908] usb 2-1: can't read configurations, error -61 [ 625.489159][ T915] usb 7-1: new full-speed USB device number 43 using dummy_hcd [ 625.548915][ T5908] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 625.569296][ T5908] usb 2-1: Using ep0 maxpacket: 16 [ 625.646329][ T5908] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 625.656103][ T915] usb 7-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 625.690168][ T5908] usb 2-1: can't read configurations, error -61 [ 625.696717][ T915] usb 7-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 625.713298][ T5908] usb usb2-port1: unable to enumerate USB device [ 625.723000][ T915] usb 7-1: config 0 interface 0 has no altsetting 0 [ 625.732933][ T915] usb 7-1: New USB device found, idVendor=056e, idProduct=019b, bcdDevice= 0.00 [ 625.836246][ T915] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.920968][ T915] usb 7-1: config 0 descriptor?? [ 626.404295][ T915] usbhid 7-1:0.0: can't add hid device: -71 [ 626.410468][ T915] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 626.449899][ T915] usb 7-1: USB disconnect, device number 43 [ 626.573353][ T5196] loop5: [ 626.576462][ T5196] loop5: partition table partially beyond EOD, truncated [ 628.042517][ T5196] loop5: [ 628.046797][ T5196] loop5: partition table partially beyond EOD, truncated [ 628.255236][T13272] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1983'. [ 628.326527][T13266] could not allocate digest TFM handle sha1-neon [ 628.388709][ T5196] loop5: [ 628.391727][ T5196] loop5: partition table partially beyond EOD, truncated [ 628.835751][T13280] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:4096x16 (0x33424752, 6, 0, 0, 0) [ 629.120063][T13287] binder: 13279:13287 unknown command 0 [ 629.140520][T13287] binder: 13279:13287 ioctl c0306201 80000080 returned -22 [ 629.959019][ T5196] loop5: [ 629.978620][ T5196] loop5: partition table partially beyond EOD, truncated [ 632.176426][ T5196] loop5: [ 632.179563][ T5196] loop5: partition table partially beyond EOD, truncated [ 632.678885][ T5916] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 632.688708][ T5196] loop5: [ 632.691709][ T5196] loop5: partition table partially beyond EOD, truncated [ 632.838718][ T5916] usb 5-1: device descriptor read/64, error -71 [ 632.919262][ T5196] loop5: [ 632.931588][ T5196] loop5: partition table partially beyond EOD, truncated [ 633.108719][ T5916] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 633.288878][ T5916] usb 5-1: device descriptor read/64, error -71 [ 633.463671][ T5916] usb usb5-port1: attempt power cycle [ 634.099483][ T5916] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 634.338848][ T5916] usb 5-1: device descriptor read/8, error -71 [ 634.529032][ T5917] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 634.618633][ T5916] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 634.653001][ T5916] usb 5-1: device descriptor read/8, error -71 [ 634.698594][ T5917] usb 2-1: Using ep0 maxpacket: 16 [ 634.719552][ T5917] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 634.757356][ T5917] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 634.779077][ T5916] usb usb5-port1: unable to enumerate USB device [ 634.788549][ T5917] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 634.818662][ T5917] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 634.837021][ T5917] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 634.865451][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.886321][ T5196] loop5: [ 634.889499][ T5196] loop5: partition table partially beyond EOD, truncated [ 634.895590][ T5917] usb 2-1: Product: syz [ 634.913735][ T5917] usb 2-1: Manufacturer: syz [ 634.932125][ T5917] usb 2-1: SerialNumber: syz [ 637.132916][ T5196] loop5: [ 637.135955][ T5196] loop5: partition table partially beyond EOD, truncated [ 637.142000][ T5917] usb 2-1: USB disconnect, device number 76 [ 637.235721][ T5880] udevd[5880]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 637.374333][T13370] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2011'. [ 637.534931][T13370] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2011'. [ 637.544629][ T5916] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 637.629296][ T5917] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 637.646807][ T5196] loop5: [ 637.658293][ T5196] loop5: partition table partially beyond EOD, truncated [ 637.689355][ T5916] usb 5-1: device descriptor read/64, error -71 [ 637.810084][ T5917] usb 2-1: Using ep0 maxpacket: 32 [ 637.836871][ T5917] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 637.860545][ T5917] usb 2-1: config 0 has no interface number 0 [ 637.887139][ T5917] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 637.897908][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.908797][ T5917] usb 2-1: Product: syz [ 637.913005][ T5917] usb 2-1: Manufacturer: syz [ 637.917705][ T5917] usb 2-1: SerialNumber: syz [ 637.934621][ T5917] usb 2-1: config 0 descriptor?? [ 637.940298][ T5916] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 637.953987][ T5917] smsc95xx v2.0.0 [ 638.148617][ T5916] usb 5-1: device descriptor read/64, error -71 [ 638.269441][ T5916] usb usb5-port1: attempt power cycle [ 638.511081][ T5917] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 638.532665][ T5917] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 638.674523][ T5916] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 638.709736][ T5916] usb 5-1: device descriptor read/8, error -71 [ 638.996092][T13389] netlink: 'syz.0.2016': attribute type 2 has an invalid length. [ 639.004953][T13389] netlink: 'syz.0.2016': attribute type 1 has an invalid length. [ 639.031940][T13389] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2016'. [ 639.144581][ T5916] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 639.172751][ T5916] usb 5-1: device descriptor read/8, error -71 [ 639.200225][ T24] usb 7-1: new full-speed USB device number 44 using dummy_hcd [ 639.288897][ T5916] usb usb5-port1: unable to enumerate USB device [ 639.380732][ T24] usb 7-1: unable to get BOS descriptor or descriptor too short [ 639.396439][ T24] usb 7-1: not running at top speed; connect to a high speed hub [ 639.421797][ T24] usb 7-1: config 249 has an invalid interface number: 203 but max is 0 [ 639.439932][ T24] usb 7-1: config 249 has an invalid descriptor of length 0, skipping remainder of the config [ 639.466584][ T24] usb 7-1: config 249 has no interface number 0 [ 639.506216][T13395] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:4096x16 (0x33424752, 6, 0, 0, 0) [ 639.550038][ T24] usb 7-1: config 249 interface 203 altsetting 184 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 639.581875][ T24] usb 7-1: config 249 interface 203 altsetting 184 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 639.714953][ T24] usb 7-1: config 249 interface 203 has no altsetting 0 [ 639.739005][ T24] usb 7-1: New USB device found, idVendor=0411, idProduct=0012, bcdDevice=90.39 [ 639.753228][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.808551][ T24] usb 7-1: Product: syz [ 639.812828][ T24] usb 7-1: Manufacturer: syz [ 639.817469][ T24] usb 7-1: SerialNumber: syz [ 639.906002][ T5196] loop5: [ 639.921478][ T5196] loop5: partition table partially beyond EOD, truncated [ 640.097566][ T24] rtl8150 7-1:249.203: couldn't find required endpoints [ 640.112254][ T24] rtl8150 7-1:249.203: probe with driver rtl8150 failed with error -5 [ 640.145035][ T24] usb 7-1: USB disconnect, device number 44 [ 640.959352][T13367] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 641.410825][T13408] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:4096x16 (0x33424752, 6, 0, 0, 0) [ 641.770551][ T5917] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 641.789196][ T5917] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 641.898949][ T5917] usb 2-1: USB disconnect, device number 77 [ 642.979369][ T5196] loop5: [ 642.982517][ T5196] loop5: partition table partially beyond EOD, truncated [ 643.486145][ T5196] loop5: [ 643.489265][ T5196] loop5: partition table partially beyond EOD, truncated [ 645.284598][ T5196] loop5: [ 645.287602][ T5196] loop5: partition table partially beyond EOD, truncated [ 645.418656][T13195] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 645.602124][T13195] usb 5-1: Using ep0 maxpacket: 32 [ 645.609720][T13195] usb 5-1: config 4 has an invalid interface number: 228 but max is 0 [ 645.618286][T13195] usb 5-1: config 4 has no interface number 0 [ 645.635379][T13195] usb 5-1: config 4 interface 228 altsetting 4 endpoint 0x7 has invalid wMaxPacketSize 0 [ 645.672433][T13195] usb 5-1: config 4 interface 228 altsetting 4 bulk endpoint 0x7 has invalid maxpacket 0 [ 645.803998][T13195] usb 5-1: config 4 interface 228 has no altsetting 0 [ 645.829262][T13195] usb 5-1: New USB device found, idVendor=0499, idProduct=a9a2, bcdDevice=c4.e8 [ 645.840607][T13195] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.854607][T13195] usb 5-1: Product: syz [ 645.861898][T13195] usb 5-1: Manufacturer: syz [ 645.878920][T13195] usb 5-1: SerialNumber: syz [ 646.727945][T13442] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2031'. [ 646.808269][T13440] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2029'. [ 646.820119][T13440] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2029'. [ 647.485039][ T5196] loop5: [ 647.488073][ T5196] loop5: partition table partially beyond EOD, truncated [ 647.771938][ T52] Bluetooth: hci0: unexpected event for opcode 0x041b [ 647.866552][T13195] usb 5-1: USB disconnect, device number 101 [ 647.895494][ T5880] udevd[5880]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:4.228/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 648.823045][ T5196] loop5: [ 648.854940][ T5196] loop5: partition table partially beyond EOD, truncated [ 649.058774][T13195] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 649.197737][T13497] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2044'. [ 649.301829][T13195] usb 7-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 649.348605][T13195] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.395111][ T5196] loop5: [ 649.412700][T13497] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2044'. [ 649.479001][T13195] usb 7-1: Product: syz [ 649.484649][ T5196] loop5: partition table partially beyond EOD, truncated [ 649.494180][T13195] usb 7-1: Manufacturer: syz [ 649.513265][T13195] usb 7-1: SerialNumber: syz [ 649.546291][T13195] usb 7-1: config 0 descriptor?? [ 649.574787][T13502] ALSA: mixer_oss: invalid OSS volume 'PHOfiЧaEEAKER' [ 649.619787][T13195] hub 7-1:0.0: bad descriptor, ignoring hub [ 649.625077][T13502] ALSA: mixer_oss: invalid OSS volume '' [ 649.664477][T13195] hub 7-1:0.0: probe with driver hub failed with error -5 [ 650.011878][T13195] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 650.145414][T13512] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:4096x16 (0x33424752, 6, 0, 0, 0) [ 650.174198][T13195] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 650.201191][T13195] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 650.230048][T13195] usb 7-1: media controller created [ 650.324022][T13195] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 651.067261][T13195] DVB: Unable to find symbol dib7000p_attach() [ 651.077368][T13195] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 651.100448][T13518] netlink: 'syz.4.2049': attribute type 1 has an invalid length. [ 651.208574][T13195] rc_core: IR keymap rc-dib0700-rc5 not found [ 651.214697][T13195] Registered IR keymap rc-empty [ 651.221054][T13195] dvb-usb: could not initialize remote control. [ 651.353256][T13195] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 651.517021][ T5196] loop5: [ 651.531453][ T5196] loop5: partition table partially beyond EOD, truncated [ 651.755022][T13529] FAULT_INJECTION: forcing a failure. [ 651.755022][T13529] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 651.807719][T13529] CPU: 0 UID: 0 PID: 13529 Comm: syz.5.2052 Tainted: G L syzkaller #0 PREEMPT(full) [ 651.807755][T13529] Tainted: [L]=SOFTLOCKUP [ 651.807764][T13529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 651.807776][T13529] Call Trace: [ 651.807784][T13529] [ 651.807793][T13529] dump_stack_lvl+0xe8/0x150 [ 651.807825][T13529] should_fail_ex+0x412/0x560 [ 651.807855][T13529] _copy_from_iter+0x1d3/0x1670 [ 651.807888][T13529] ? trace_kmem_cache_alloc+0x1f/0xb0 [ 651.807921][T13529] ? __pfx__copy_from_iter+0x10/0x10 [ 651.807947][T13529] ? __build_skb_around+0x22d/0x3c0 [ 651.807974][T13529] ? __alloc_skb+0x193/0x390 [ 651.807997][T13529] ? netlink_sendmsg+0x650/0xb40 [ 651.808016][T13529] ? skb_put+0x11b/0x210 [ 651.808044][T13529] netlink_sendmsg+0x6c0/0xb40 [ 651.808076][T13529] ? __pfx_netlink_sendmsg+0x10/0x10 [ 651.808100][T13529] ? aa_sock_msg_perm+0xf1/0x1b0 [ 651.808125][T13529] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 651.808150][T13529] ? __pfx_netlink_sendmsg+0x10/0x10 [ 651.808169][T13529] ____sys_sendmsg+0xa68/0xad0 [ 651.808205][T13529] ? __pfx_____sys_sendmsg+0x10/0x10 [ 651.808236][T13529] ? kstrtoull+0x12f/0x1d0 [ 651.808263][T13529] ___sys_sendmsg+0x2a5/0x360 [ 651.808285][T13529] ? __lock_acquire+0x6b5/0x2cf0 [ 651.808313][T13529] ? __pfx____sys_sendmsg+0x10/0x10 [ 651.808342][T13529] ? get_pid_task+0x20/0x1f0 [ 651.808372][T13529] ? get_pid_task+0x20/0x1f0 [ 651.808390][T13529] ? get_pid_task+0x20/0x1f0 [ 651.808440][T13529] ? __fget_files+0x2a/0x420 [ 651.808464][T13529] ? __fget_files+0x3a0/0x420 [ 651.808493][T13529] __sys_sendmsg+0x183/0x260 [ 651.808521][T13529] ? __pfx___sys_sendmsg+0x10/0x10 [ 651.808557][T13529] ? __pfx_ksys_write+0x10/0x10 [ 651.808592][T13529] __do_fast_syscall_32+0x1d2/0x540 [ 651.808614][T13529] ? lockdep_hardirqs_on+0x7a/0x110 [ 651.808632][T13529] ? do_fast_syscall_32+0x33/0x70 [ 651.808650][T13529] ? asm_int80_emulation+0x1a/0x20 [ 651.808668][T13529] ? do_int80_emulation+0x20e/0x400 [ 651.808693][T13529] do_fast_syscall_32+0x33/0x70 [ 651.808714][T13529] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 651.808736][T13529] RIP: 0023:0xf745d539 [ 651.808753][T13529] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 651.808769][T13529] RSP: 002b:00000000f548650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 651.808790][T13529] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000340 [ 651.808804][T13529] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 651.808816][T13529] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 651.808827][T13529] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 651.808838][T13529] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 651.808868][T13529] [ 652.245809][ T5196] loop5: [ 652.249390][ T5196] loop5: partition table partially beyond EOD, truncated [ 652.478698][ T24] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 652.709209][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 652.716542][ T24] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 652.731945][ T24] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 652.742010][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.758366][ T24] usb 5-1: Product: syz [ 652.767441][ T24] usb 5-1: Manufacturer: syz [ 652.775987][ T24] usb 5-1: SerialNumber: syz [ 652.790991][ T24] usb 5-1: config 0 descriptor?? [ 652.813996][ T24] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 652.822434][ T24] usb 5-1: setting power ON [ 652.828149][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 652.842621][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 652.861091][ T24] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 652.902589][ T24] usb 5-1: media controller created [ 653.064288][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 653.085372][ T24] usb 5-1: selecting invalid altsetting 6 [ 653.092339][ T24] usb 5-1: digital interface selection failed (-22) [ 653.102638][T13543] ------------[ cut here ]------------ [ 653.108123][T13543] usb 7-1: BOGUS control dir, pipe 80002d80 doesn't match bRequestType c0 [ 653.117647][T13543] WARNING: drivers/usb/core/urb.c:414 at usb_submit_urb+0x1052/0x18b0, CPU#1: syz.4.2057/13543 [ 653.128342][T13543] Modules linked in: [ 653.132835][T13543] CPU: 1 UID: 0 PID: 13543 Comm: syz.4.2057 Tainted: G L syzkaller #0 PREEMPT(full) [ 653.143987][T13543] Tainted: [L]=SOFTLOCKUP [ 653.148349][T13543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 653.158607][T13543] RIP: 0010:usb_submit_urb+0x1114/0x18b0 [ 653.164279][T13543] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c2 f2 ff ff 89 e9 [ 653.184672][T13543] RSP: 0018:ffffc900106b7768 EFLAGS: 00010246 [ 653.191324][T13543] RAX: 0000000000000000 RBX: ffff888055467200 RCX: 0000000080002d80 [ 653.199412][T13543] RDX: ffff88807e845ee0 RSI: ffffffff8c5dd1a0 RDI: ffffffff8ffc2fa0 [ 653.207411][T13543] RBP: 1ffff11006732030 R08: 00000000000000c0 R09: 0000000000000000 [ 653.215433][T13543] R10: ffffc900106b7860 R11: fffff520020d6f18 R12: ffff888054569100 [ 653.223451][T13543] R13: ffff888033990180 R14: 0000000080002d80 R15: ffff88807e845ee0 [ 653.231448][T13543] FS: 0000000000000000(0000) GS:ffff8881257f5000(0063) knlGS:00000000f50e4b40 [ 653.240463][T13543] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 653.247062][T13543] CR2: 0000000031618ff8 CR3: 000000007a0b2000 CR4: 00000000003526f0 [ 653.255111][T13543] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 653.263209][T13543] DR3: 00000000007a000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 653.271725][T13543] Call Trace: [ 653.275092][T13543] [ 653.278117][T13543] ? __init_swait_queue_head+0xa9/0x150 [ 653.284461][T13543] usb_start_wait_urb+0x12b/0x510 [ 653.289655][T13543] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 653.295214][T13543] usb_control_msg+0x232/0x3e0 [ 653.300048][T13543] dib0700_i2c_xfer+0xbb2/0xf80 [ 653.304936][T13543] __i2c_transfer+0x79a/0x1ee0 [ 653.309806][T13543] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 653.315747][T13543] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 653.321666][T13543] ? i2c_transfer+0xc8/0x2d0 [ 653.326299][T13543] i2c_transfer+0x1cc/0x2d0 [ 653.330834][T13543] i2cdev_ioctl_rdwr+0x460/0x740 [ 653.335809][T13543] compat_i2cdev_ioctl+0x59f/0x5c0 [ 653.340952][T13543] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 653.346677][T13543] ? __fget_files+0x3a0/0x420 [ 653.351441][T13543] ? __fget_files+0x2a/0x420 [ 653.356127][T13543] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 653.361735][T13543] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 653.367220][T13543] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 653.373957][T13543] ? __se_sys_futex_time32+0x3ab/0x440 [ 653.379880][T13543] ? rcu_is_watching+0x15/0xb0 [ 653.384677][T13543] __do_fast_syscall_32+0x1d2/0x540 [ 653.389935][T13543] ? lockdep_hardirqs_on+0x7a/0x110 [ 653.395167][T13543] ? do_fast_syscall_32+0x33/0x70 [ 653.400465][T13543] ? asm_int80_emulation+0x1a/0x20 [ 653.405651][T13543] ? do_int80_emulation+0x20e/0x400 [ 653.410954][T13543] do_fast_syscall_32+0x33/0x70 [ 653.416124][T13543] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 653.422561][T13543] RIP: 0023:0xf7f61539 [ 653.426715][T13543] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 653.446674][T13543] RSP: 002b:00000000f50e450c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 653.455305][T13543] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000707 [ 653.463394][T13543] RDX: 0000000080000340 RSI: 0000000000000000 RDI: 0000000000000000 [ 653.471500][T13543] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 653.479954][T13543] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 653.488372][T13543] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 653.496646][T13543] [ 653.499781][T13543] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 653.507236][T13543] CPU: 1 UID: 0 PID: 13543 Comm: syz.4.2057 Tainted: G L syzkaller #0 PREEMPT(full) [ 653.518349][T13543] Tainted: [L]=SOFTLOCKUP [ 653.522676][T13543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 653.533006][T13543] Call Trace: [ 653.536380][T13543] [ 653.539310][T13543] vpanic+0x1e0/0x670 [ 653.543323][T13543] panic+0xc5/0xd0 [ 653.547044][T13543] ? __pfx_panic+0x10/0x10 [ 653.551466][T13543] __warn+0x315/0x4a0 [ 653.555471][T13543] ? usb_submit_urb+0x1052/0x18b0 [ 653.560497][T13543] ? usb_submit_urb+0x1052/0x18b0 [ 653.565518][T13543] __report_bug+0x29a/0x540 [ 653.570031][T13543] ? usb_submit_urb+0x1052/0x18b0 [ 653.575089][T13543] ? __pfx___report_bug+0x10/0x10 [ 653.580120][T13543] ? lockdep_hardirqs_on+0x7a/0x110 [ 653.585316][T13543] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 653.591130][T13543] report_bug_entry+0x19a/0x290 [ 653.595979][T13543] ? usb_submit_urb+0x1114/0x18b0 [ 653.601003][T13543] ? usb_submit_urb+0x1119/0x18b0 [ 653.606136][T13543] handle_bug+0xca/0x200 [ 653.610471][T13543] exc_invalid_op+0x1a/0x50 [ 653.614976][T13543] asm_exc_invalid_op+0x1a/0x20 [ 653.619910][T13543] RIP: 0010:usb_submit_urb+0x1114/0x18b0 [ 653.625632][T13543] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c2 f2 ff ff 89 e9 [ 653.645411][T13543] RSP: 0018:ffffc900106b7768 EFLAGS: 00010246 [ 653.651477][T13543] RAX: 0000000000000000 RBX: ffff888055467200 RCX: 0000000080002d80 [ 653.659453][T13543] RDX: ffff88807e845ee0 RSI: ffffffff8c5dd1a0 RDI: ffffffff8ffc2fa0 [ 653.667446][T13543] RBP: 1ffff11006732030 R08: 00000000000000c0 R09: 0000000000000000 [ 653.675519][T13543] R10: ffffc900106b7860 R11: fffff520020d6f18 R12: ffff888054569100 [ 653.683671][T13543] R13: ffff888033990180 R14: 0000000080002d80 R15: ffff88807e845ee0 [ 653.691747][T13543] ? usb_submit_urb+0x10a3/0x18b0 [ 653.696784][T13543] ? __init_swait_queue_head+0xa9/0x150 [ 653.702331][T13543] usb_start_wait_urb+0x12b/0x510 [ 653.707403][T13543] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 653.712958][T13543] usb_control_msg+0x232/0x3e0 [ 653.717724][T13543] dib0700_i2c_xfer+0xbb2/0xf80 [ 653.722584][T13543] __i2c_transfer+0x79a/0x1ee0 [ 653.727530][T13543] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 653.733362][T13543] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 653.739359][T13543] ? i2c_transfer+0xc8/0x2d0 [ 653.744057][T13543] i2c_transfer+0x1cc/0x2d0 [ 653.748606][T13543] i2cdev_ioctl_rdwr+0x460/0x740 [ 653.753557][T13543] compat_i2cdev_ioctl+0x59f/0x5c0 [ 653.758862][T13543] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 653.764514][T13543] ? __fget_files+0x3a0/0x420 [ 653.769211][T13543] ? __fget_files+0x2a/0x420 [ 653.773815][T13543] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 653.779410][T13543] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 653.784903][T13543] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 653.790900][T13543] ? __se_sys_futex_time32+0x3ab/0x440 [ 653.796472][T13543] ? rcu_is_watching+0x15/0xb0 [ 653.801349][T13543] __do_fast_syscall_32+0x1d2/0x540 [ 653.806660][T13543] ? lockdep_hardirqs_on+0x7a/0x110 [ 653.811876][T13543] ? do_fast_syscall_32+0x33/0x70 [ 653.817013][T13543] ? asm_int80_emulation+0x1a/0x20 [ 653.822168][T13543] ? do_int80_emulation+0x20e/0x400 [ 653.827379][T13543] do_fast_syscall_32+0x33/0x70 [ 653.832365][T13543] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 653.838716][T13543] RIP: 0023:0xf7f61539 [ 653.842805][T13543] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 653.862676][T13543] RSP: 002b:00000000f50e450c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 653.871195][T13543] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000707 [ 653.879169][T13543] RDX: 0000000080000340 RSI: 0000000000000000 RDI: 0000000000000000 [ 653.887141][T13543] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 653.895121][T13543] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 653.903107][T13543] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 653.911105][T13543] [ 653.914326][T13543] Kernel Offset: disabled [ 653.918653][T13543] Rebooting in 86400 seconds..