last executing test programs: 16m38.799643847s ago: executing program 2 (id=969): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) r1 = syz_io_uring_setup(0x1766, &(0x7f0000000080)={0x0, 0x0, 0x10300}, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x1005c20, &(0x7f0000000240)={0x0, 0x0, 0x13290, 0x3}, &(0x7f0000000100), &(0x7f0000000000)) io_uring_enter(r1, 0xc1, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)={0x14, 0x15, 0x1, 0x0, 0x0, "", [@generic='\v']}, 0x14}], 0x1}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0xfffffffd, 0x0}, 0x6400c810) sched_setattr(0x0, 0x0, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000040)={@multicast2, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a"}, 0x3c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x4010, 0xffffffffffffffff, 0x0) unshare(0x22020600) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000080)=@ethtool_coalesce={0xf, 0x6, 0x16d20415, 0x8, 0xfffffffb, 0x1000, 0xb2e2, 0x6, 0xffff, 0x0, 0x9, 0x5b7d, 0xd8, 0x6, 0x3ff, 0x7, 0x0, 0x4ad, 0x101, 0x55e2, 0xffff, 0x3ff, 0x5}}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="0200000002000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000"], 0x18c) syz_open_procfs(0x0, &(0x7f0000000100)='gid_map\x00') 16m37.758663033s ago: executing program 2 (id=976): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r2, 0x7}}, 0x48) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x4000080) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0x1, r7, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e20, 0x7, @remote, 0x3}, r7, 0x5}}, 0x48) close(0x3) fcntl$lock(r0, 0x3, &(0x7f0000000000)={0x2, 0x3, 0x8}) fcntl$lock(r0, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000500a8000600200006400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce000bace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f295ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x1000000, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r10, 0x0, &(0x7f0000000080)=@chain) add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r10) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x20, 0x20}, [@RTA_UID={0x8}]}, 0x24}}, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) 16m37.068985581s ago: executing program 2 (id=978): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r2, &(0x7f00000025c0)={0xfc, {"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", 0x1000}}, 0x1006) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x3}) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r5 = socket$key(0xf, 0x3, 0x2) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000340)={0x0, 0xf5, "922589022c895f663dade3fa1f18bfa126cd334a4b1ad8e01ab7cb387d43907220c9ae46a7750e77daf630c1c6b245d04c5855ec91e876e2cd06898d6babcaeb6f217aae8e9a0b6e90216050fa78314f93092597efa6f74bd29418380e7bb09e22c3ee1e83630f495b877f005b712e36b9232829c9060ba7c05b7c85a0570592d8bf526731f860941ce2e0250c2e2163ec24303658cf40d7b806e4b70984aa43106f42cfa607df35a844fd9419c5564225af2909e5c92a0e38a11ccdb9bcf0376f7e77026b2c1abb6afa4aa3955e619a4bf51387b99e61eea6ec91c311c6573566f4e5832234095bb6fc78bf6bec1de3d1cac8ad78"}, &(0x7f0000000200)=0xfd) ioctl$KVM_NMI(r4, 0xae9a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) close(0x3) r8 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r8, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000300)="80", 0x1}], 0x1}, 0x0) clock_gettime(0x0, &(0x7f0000000500)) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) r9 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0x3cfa, 0x0, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r9, 0x47f6, 0x0, 0x2, 0x0, 0x0) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="020d000018000000000000000000000005000600000000000a00000000000000fc010000000000000000000000000000000000000000000005000500000000000a000000000000000000000000000000000000000000000000000000000000000800120002000200000000000000000010002b00020300000000000000000000fe880000000000000000000000000001fc01000000000000000000000000000604000400"/192], 0xc0}}, 0x0) setsockopt$inet6_int(r3, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) 16m35.569076692s ago: executing program 2 (id=982): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000800014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad800d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x8000) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000000)=0x573b, 0x4) sendmmsg$unix(r2, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000046c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, 0x0}}], 0x2, 0x40480c0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000880)={0x16, 0x98, 0xfa00, {0x0, 0x3, 0xffffffffffffffff, 0x2c, 0x0, @in6={0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x3}}}, 0xa0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) write$tcp_mem(0xffffffffffffffff, &(0x7f00000000c0)={0x800000008, 0x20, 0x53, 0x20, 0x6d}, 0x48) io_setup(0x66, &(0x7f0000000400)=0x0) r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_submit(r5, 0x1, &(0x7f0000000100)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xe, r6, &(0x7f00000000c0)='-5', 0x12, 0x0, 0x0, 0x4}]) umount2(&(0x7f0000000200)='./file0/../file0/../file0/../file0\x00', 0x1) r7 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$UHID_INPUT(r8, &(0x7f00000010c0)={0x8, {"eddd025b60fdc30a063f172d718c2bd6b3645eadae0f767eb61f2421975b0064d30faba72ba63ab33c4ee2a6cb2f0cb187830255738dd670e8e178672a7473488a157b83ca0ed9657299e98243c15b6b8e08f34570dda445b526949a9b3aebdb97dda475e54a098f1ae57c4774c8ef81d36c77d309e0c817fba3415591dd26a637e43bec5f0fb193d8671889d89ac77bd90ee5efac63bf9eafc61f393e33aaa503760afad0e395042048defbc27ecc254790f419072feb3d5fb4815364072248a42bb88952f316952ea727ae850143819fb80a77407a2309c90ee7894bee7c5862bf14672cc9036bf0ccba7769b5d57b757b550180000000000000a7f0840d7040084b449eb5445ea40b3b9811a66d5228839907fba91ba8a5ca95b4600fcd98f93af794a412e97404d6f40a61e802f6112ff259a29ca8fb98ffce8fd12509883e812e7edb4a643fe4aac56bb01f69823bd6f4ebd618d81cb3d463eea2c9bae30b888a824043a71d5f3319b146848d63a5415f5ed47b33cafa473cc2c91c425a2d24bf5d8e627e6fc63f58a7b08180ce16e5aa7015478cfbebba3045ec5dd620f69659f3fe11af23b095b43ced6a48afaf3d9a78762d40ada3b1fead7884620e213f28a9a2e6bcda0b88347c8eb3f6be8be3fc2d507eaae0430ccd836d4790038d25d65091e6e7ee9bec612b4a5d90e9e878c9c57fd1aa28ee9fab64d2d3bec12ae68a974c0f64365548a5db8a1d8fc9e32b38df32e826a3d2a88ae824a5faa87d7a25373728da5322ebc73db3d9ac8c64db9c90b18d67b7770966a3b8a1079f5b83f21482ff8b1cc1c699a0a5a135b6fe2791abb556603e3255e89922de5bca02d57ace9f6d486a363891b6c15e3c0000000047e9617351e98a040f2e7019ddee08f2d6cdc9de2f7a32ea65d266513fa7821c24c90ae39268757eefacfe94d53c740747c86429eadbead0a3576549442f4f77d846df8d54b37fc280bd5b9320f872756706357b9813318a6bfeb77d4ddec55ab5592da2c6d05b3c021182485b96a634013c5ad5ba55f07d07211c0db03ccb5981f5955df2e86cd0f62f6ba66fe4abf695ebc6629e42f6ce96a132883f148eeeacdff13b1cbfa73cbc70b8c5b677682d7c60d1a1311b1222aef1edb4e231c869a18f9ae8eeba4eb4cba8a4a56703cd90710b2208bce8e9a18aaf4e7c47474c08ff85c307d660607bddfe49ac714e0fcdfefedddafa452dfe0341c8a8f07e62e4486699a740feda4b7b2bc635308eb6990f3dfa9065aa8b26ad0ac66fe86dbf2dfb5f0c4b0cad557d4fa4b61116aa57a285a705e1d87d3f8d560b5fd3f8c5df3dc22bd4edb36c1c2e78c0b69863f576d3053ceb21ecb287faf64bb7a3cfe3c28eb7c2335a3af5a29308dac5f7d6f48f46da8370124c37e5a3c9fdfd3d78a082030b2233f02fae54012d2ad2b1c1ec2a35a130a5d3f76b5f9a10a4d31ca41c5c2f58a40c058a48e5dd8a71adbabcbca341e46a6ad538491025e79db3c59350b229ae433537e54b62968ff582f041080719fb88778884da1c79ff28398d8edfcd931043b64bf75b944e735d6d0fa62ed1e3550fe9fa5c1f063b06fb8e13909c87efffe72481ada2d01522a93c70266aa3991c7141ecca2bc618fe54d7529a0c2a46469ca4b2086e112fdf4e1266ca6b5fd4b0fbea280dd246f622f0da6d0f3e3b0357dc0744132e66d8b035662ad5cd3faedd2f743e24ecfed2efd6fd3aed1402bdbc66af3c0b77b7962966649591d7d5985c81a063d46ddf07656f2b049f5811b310e567027bc1b6d44fc892d37aeda8cacc704c1dcc1a7ef759937416e01163027b81befa86772ddf576c37f3151792c4358d1fa418bcd250dc41effa988116589b110d31a59486123769e50f5b3985b4660919f08dd5c96ab8ab03322d0c61890f90e56970f0aa13a96bcfa97139d5627ed6a5558dee292bf0a6e5ad23341c7dc3464a05b9045cc3abbfc0448bf9ca044fd188569cc0c57e07105d1fa1efd44529b6592fa718e092c1a3fa3e56689c9c5168a5619bf2109bde2dca59ad16735e597402c1896d4e24f56c9d4bbc1f0b3a0135b7028a402c6a1a78de57a838b1871477d7b43dff3779fdb50b2ec9a3ae11fab7f715e7979e64a0f0d54d025105d1f768cdad112aeb2eac1c8042aff6fb975a16c64080ba4e0de0af9b8a975a2b6af6a05dff8ae848f6b80f2bd80c56e4683e67a3aaad0e72242b0f0f07d7d7a64a8669e75a99ba4fdb2ba239c5ef28c8f1dc0b2459698b374f1035a75eafde3d90d69afa489ee2d7f7958a5cc51e574203bab464ddd4d08abbb77c8874c6ce692d078bdc309d73ccb49c9d60a269c77601e82e1c824fca2a43605f8453943d23794785096da2ff56547389009e27a908cfcea03ede09c392e0bafa30891e23fbacdf08b49cbd2f4083f94c3c71877ffac86d426e5fe08fa9541f837f2de8440e0b2226b664a45a564f1357e804c24cd2cef95564a1e0041736ced508a63af4e9f4ae9f690084f8c67db3b3569fb86225b6cce291da8057200d1f86899081ebfa5274625ada6ee793fe4246d97157d608099a6adf81eb88bb37cdb64a18ed0e13a0cfeea3af2164a59b8a90a4a1dfad6f03cc27ccbcc879c2b54a57a6d81e01dbd9d7440e9f1a1f608617a308214b58a9090022b7c6631cda308a0aa13dd68159bd8578afeb5402b0e227ef709d8c58929fba262ff4ec70c3a8f68b98f92380201112f560c216d5dc61ad466ee08c1af18982617597436c6a0e0077bb2dab8932175fb30aafceb4d63b4b8aa4a1c2f3867a83855d418ae75b3029dff960a5a4fcbe0fb84828633d535413e0c70a26b2485dddaa7c52256ad85d5f71778af39692fb8553850bbac096d8d9c9145e0ed7903b5d530005f29493a5aa7e0c04b62cc07f2bcfa31a48ce7c167abdd145af8c25fb882b64e41a9b51ae77209d82a9095e1d80711e1c802302b92ad8e413bc9b200e57c6038a46bfc9468b5fdda7f3e57e676c99d4dde6b3a86ed2cb9a55cf199835ef9d858f5a692c4036b32ea07c76c29faa5e2241afab129340b6e2ad94baea982429225cfac726dbf137f6477432a31808a281c9af3c4bef4a2f508721ec71fc1c374fca4d4e25ed9754a41ebfcaaac7637caa13791a64ff995d3cd984ed8cecccc491de80596f8db8d3fe6a6f2b208d065fb6fbb5569bf7cd8a8162271ca5e5ed2b3b98f28d81b3b498345c48492c8fe2e6181f527bbe4ce6600f9e33fb65609bc4318ecf4ca151d3095232820a84704311f0bd3532178cf1e6ef9483b1f52ec2992e84aaf1239c99faeab989bd9848223e90093e71eb650660255fce7bd85872e413fe219859d18ef67f1f07a590ceadc1c687820c3c7cf9e2ff9609199c4b49fd74553507c1c7f45b5b1b40c96c0c984977f476ed686f8710248677847f5c0989df0eca6be3df498acfcfbca85bb986c8d844c19f62b06b95d8d6f4e4367040d45e494271f29546f1086f88fdc549402bd669e9aed5fe000000ef7668d3abeadb430d30534aef0a3a9a125bdeaa11647bafe6e1303b967d29718ac301cadbb43654a36b78ff91836584a5e3472db8db4ded526ecfef2efa2279c17639d3aef1587d5b8bbc8abec3a28dba276613c514a50fe243a588ecdb77ab1525088507f5a0537ba59062416beb479538806f04e70bc192c1fd46377c6105116cd21b75f29f91b67317ce4bd67dea18f560765dabf8f0cebfb770339aa2558df698e1ee22adc7b81b16b2e7fb06e7b5c2ca98c71aec18bc23b11d3b84c6a10aa866c5f438fc2d928fc89ce0902492cd79d6a1ffce27a66031cc24d1b82e9e8b6bdcb6b37f89531e048ae5ee10483dccbb734ba20a15b145fdeadfc461e146d8882133b4e6c6ba30d316ee0bf0bf40f26639077d090d1df3b943e78ba5ece82fcd4576cf3a87d7a9ad080b2cce7371e5bd671ad37e35ff03dfb6684ac0d4eda69154444aef2a173ba093bc87839e41388b2101f72a9b6cf675efbb231b007c11a7b452df89a584f459b23340c0dae21a4146968b66ac9b08d2408830ccec4e6fb1dd665c3023a3b32042b1facfb0bd4d5b9861fe5b0abee3313264b5abe61b1e145bc11121dc87bf1a6008433dedd4d7977b082400136bfceb33a2a3ceea9a6b67b8f85b604970c3ad474db7356f802bc840afe833c9056c037b2ea240b5846149682e14e4e126c7f88b9eb2c7384da631fbab63754611d52b4107dfd10fdf46e557be95a07e6ae64cbeb2d420bcfd87a2f52ecbfe5eba301e3c86761c1545b876e5951106e91be75e9d22301674bca4d729fffd9812cb984910b976c2a74966caf3d75ba7dc7f4275d24caf3bc94376a3579e8575c69401ea75d14e27f98eb7a05eccebd36ea89c4ac0dec65eb613d7f052c6b75b398c65249449b0693164a51c0c224ac1bb4f0781d2d10b96519131b6df9541aa1e7511820f71ab1d497234862f475356d9664a9fbbf0285738a143842820d5b795dcca64a24de4bae802fae01d82fec5548e108c4e750e8f1580d2ebd6bde06622db32c1f47eca183a81ecfde3b6a187c47f7984d2c6051f2ace7ac2bfc5da0cd4b0e57e69bf39551cc5443e12e9ce113cff2cecdd2802e5b9c5a1107e1ed982b93b8e986afa379ac1c6a5ee67e966c72bf149f9ba1c169bafe3d58e18e56438ad4a4db4826edb5eb4ff27808ddd7f87eb31cf232effc9bfff7305d91696e17058217d2d5596ae9082a1cc98d60b854b2ff76718d981c20d68ecf4f1a8dcd5f9f06162df324b84b246e5e11d6722003f32e3396e30c11724db17210c37dfa080c1be2fbeea1c92e084f72386fb29856bc25a16a53f97f44a5e81fd55872772eebdd0db3a5bdf0c28d34a48f8d707a97a3b89367c98e30dbe9c02444177a8fbaa605c6051157e41fade8432af5233ee030ad6fb7572ee4e7bd687dd855fe112ac46a7b1abe88771eb3b49e3d583efe7b79394ca4687acfc262af45dbf4736e9e17d39ea5f8e81f6ed7f242c5a09da7f22f37ce9d5e6222fa71aed8ee69e501d30cd98f5c5275d5dcc1f112c3dbd2cca465f7442d952353613ac5b30222cf153c598c15c102b0dd0d99e45595d98ab365fda3f6e3bdf29b66a8d0a43c1c6a109e3056015a49e4f9ed7522163da86b9e2bf14d7c0ff026261f96feabc0b1c64ba130acb2c4927a783bed9f4e1d38f0a1351000334010b99585c24fb9a7a24809e4bffc3448c778dbeeed816225b2173fae0975e1b9c19213dc33bab3a9bbe8f62e306a1aecac5484d3f23421f5064c16aa4fa67de32222115928c0f3b114593dd0c791c590be61e0b97ed0b0e0dcdb238eb1290466d9c10dfaa8c7fcd0bf659897d945df86d936c67e42924d47a4245fb3d6f8ec538d59c100c6e52100317ea41a1fd253ddd54b13b6a2807ea729d3fd7e1b0461cc78b2c7c889b9ad3ec0398399ff645f3ab988b8a52d9f09a430cfa0390c4c5ad3a392ef28a9f4056d77b712df09b69d7d93617c4783133f9abab2d6935d54f59d0c1b5ea4dba28af7bbfeaf29009618c436ddec116f8966b4ae89ceca545daef5a48f1668231731af7abc502df9f7d308998b92adbfdf0937186a9cbcd4267dc1d0e399b27dacc07ca37f76ceb42f13e4de89dd484a91dc8a2bebece95c6400fde8bdc6d2857454f562f04422b632925c84fb501998ab096363acafea06790c298a76267ca63d81763343fa1fbbbeecba24ca939b3f4d577a5129fd3c407cada9151a12b04e76d664b232cf05c9ad000", 0x1000}}, 0x1006) r9 = getpid() r10 = syz_pidfd_open(r9, 0x0) process_madvise(r10, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000280)='!', 0x1}], 0x2, 0xe, 0x0) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f00000002c0)={r8, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fcffffffffffffff2000b8785d960000000000000000000000000f00000000000100000000000000000000000000000200", "2809e897bdb2128bfc82525edd665240f45f819e01982861ac0000000000000000001100", "90be8b1c551265406c7f306003d8a0f4bd00", [0x1, 0xfffffffffffffffc]}}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'vcan0\x00', 0x2}) ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f0000000480)={"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"}) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) r11 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x40000) ioctl$SG_IO(r11, 0x2285, &(0x7f0000000440)={0x53, 0x0, 0x10, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000380)="aa1666ce20db", 0x0, 0x10, 0x39, 0x0, 0x0}) 16m35.068806108s ago: executing program 2 (id=986): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$vbi(0x0, 0x0, 0x2) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0cc5640, &(0x7f0000001a00)={0x1, @pix={0x5, 0x1, 0x32344d59, 0xb, 0x2, 0x1, 0x2, 0x2, 0x0, 0x8, 0x1, 0x1}}) ioctl$F2FS_IOC_RESIZE_FS(r2, 0x4008f510, &(0x7f00000001c0)=0x7c31) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x14, 0x2e, 0x1, 0xf0bd1f, 0x25dfdbfd, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x20008809}, 0x20008090) sendmmsg$unix(r4, &(0x7f0000003dc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9802}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) write$nbd(0xffffffffffffffff, 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000240)=0x1) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) openat$dlm_monitor(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fgetxattr(r7, &(0x7f0000000000)=@known='system.sockprotoname\x00', &(0x7f0000000040)=""/111, 0xfffffffffffffd73) 16m34.263926066s ago: executing program 2 (id=993): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000121000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006c617374000000000400028008000340000001"], 0xe4}}, 0x20050800) 16m33.731044162s ago: executing program 32 (id=993): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000121000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006c617374000000000400028008000340000001"], 0xe4}}, 0x20050800) 15.760705399s ago: executing program 3 (id=5183): socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x60080, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x20303, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x20000, &(0x7f00000007c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB="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"/294, @ANYRES32=r0, @ANYBLOB="a85d164eb496fc6758ba8b03846432521ece8715a836d16d200eeed8e6ebf4858fb8800dbc7be1596309dffcaf867ea84ea0f07a643048db408dd65cb56ba63ec9f42d78abea22b446917576619fd00021ea8ca28d2d5e6264878e635336130650555da7154ec981f60dbf220fa9c9fb789238e4a2c4c8a84c0df524cfd2b5796f46d3bf9dbcfeb39f", @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000300)={0x50, 0x0, r6, {0x7, 0x1f, 0xe0000001, 0x20845084, 0xfffe, 0xdfff, 0x1, 0x8, 0x0, 0x0, 0x80, 0x8}}, 0x50) syz_fuse_handle_req(r5, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) dup3(r5, r7, 0x6700000000000000) syz_fuse_handle_req(r4, &(0x7f0000008340)="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", 0x2000, &(0x7f0000001500)={&(0x7f00000003c0)={0x50, 0xfffffffffffffffe, 0x6, {0x7, 0x2b, 0x0, 0x402202, 0x0, 0xff, 0x8000, 0x8, 0x0, 0x0, 0x4, 0x40000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r8, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e21, 0x3, @local, 0x3}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1000060000000000000066d7ee1d4775ef5458001062e1fd850000b42b0839969266cd84372a5cc120364ad318b0703aab006ce77d8834c6194c927db7cffc0ba482155f595266aec1d23053cd867ba0bc12330c815bb1e2783fc892619c2fad0e8fea3a0297348b3a9e5d1c3907481015a6b58584f4f3a5bfa2beebd201b38d5a0270ce0aa13a6ee0465dde0909b782b66f737f1452ac624c07df1ec900f54da320fd805be49f7e60f45ba5582bcd743cda4711dc4c6897a6b32333133233b687f7ac7275df33607c9e69cd00c9a28b4c25adf5ec58ac9fbf7b104a02535af4c62099c800fc0648c96cee1b392a75f351ee98e134f5cdf601af22620bb87da91e53bcdabfdb1a34839a07d64b73e930e71307f7ed323b035a20e3fe35d8d9981261614b43cb0a6f605479a6f0250c1721aa3cc2362d665ea393ea17b58e1f8a0bbba44f40d793a0c1845673e63e9febe18069cd12719e399ff7b5fa92a9f3d2dfdb7f4aad2e247f61cf87b74f0a50b30cec65283721ae776b50c1013036bb758ee2483a4c6cc6"], 0x10}, 0x40) recvmsg(r8, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x405c5504, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b567189d306e2f215fc78c87c49eb9d0a4975"], 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x800, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) socket(0x22, 0x2, 0x3) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 12.613530523s ago: executing program 3 (id=5191): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r3, 0x4038ae7a, &(0x7f0000000000)={0x0, 0x40000105, 0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9688d00000f01c166b80d010f00d8650f0767660fc777b70f1c74f41a0f8be5000000c4e3c56b8a76f485b9ae66b81e010f00d00f01c80f09", 0x3e}], 0x1, 0x5a, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x14, &(0x7f0000000080)={0x20, 0x11, 0x17, {0x17, 0x22, "8192ab81083d435504de50f485070ef290487a8300"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x441}}, &(0x7f0000000100)={0x0, 0x22, 0x1d, {[@main=@item_4={0x3, 0x0, 0xc, "6dd9100d"}, @main=@item_4={0x3, 0x0, 0xc, "90a85120"}, @local=@item_4={0x3, 0x2, 0x3, "0db5c901"}, @local=@item_012={0x0, 0x2, 0x7}, @local=@item_012={0x0, 0x2, 0x8}, @local=@item_012={0x2, 0x2, 0x3, ':\"'}, @main=@item_012={0x0, 0x0, 0xa}, @global=@item_4={0x3, 0x1, 0x0, "1608ec0c"}, @global=@item_012={0x2, 0x1, 0x8, "8557"}]}}, &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x8, 0x1, {0x22, 0xae3}}}}, &(0x7f0000000440)={0x18, &(0x7f0000000240)={0x20, 0x9, 0xcb, "38b13de1a2b85ea4241273b0401203f99fb1bf83997be9867275f6bd2ebfd476067cdc2b8e48819b4a257e48df91a6e6131623bd9bdb8ba8ac1f0f9957b2d0bd5cfbb7f99df968dce050bbd908f74f495504c3cc69363d1734498038a10437e1092886e7bee3d893a5041ad3d4fc5192efb84d073bba0d988430c8ad447404db4f0f4a435e8e18cc749efc9c2ba0d8f80786dcbd59c1de53884b104b77abfb73a225bbb05d4be1b7c2ad08dd9ec4ff8f8d8206da864cd801cf6a147128d4a7cbc5f637474de9084c4ca462"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000380)={0x20, 0x1, 0x73, "daeabf41b67a1c39e2d2e5e0c48a7468c832df01d27b723315eaa21648c76d054bd1183cd56f415f96ec53841ede7e31aec50965db3a9aacb77324f4ea485d296b5d0d3a8315c138b51fcb6b4ac4b9975952e04fb4c5623238de4ffece4d36ac3471e8649303232ce46cc3818e4883ac3dc903"}, &(0x7f0000000400)={0x20, 0x3, 0x1, 0xe0}}) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, 0x0) 10.056823214s ago: executing program 5 (id=5201): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x14, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1, 0x70c}, {r2, 0x2}, {r3, 0x4}], 0x3, &(0x7f00000001c0)={r4, r5+60000000}, &(0x7f0000000380)={[0xa66e, 0xfffffffc]}, 0x8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x49, 0x0, 0x0) ioctl$KVM_SET_CLOCK(r7, 0x4030ae7b, &(0x7f0000000040)={0x4, 0x0, 0x6, 0x7, 0x2}) setsockopt$inet_int(r3, 0x0, 0x12, &(0x7f0000000300)=0x1, 0x4) sendto$inet(r3, &(0x7f0000000000)="f461c5bbd75c3583", 0x8, 0x20040000, &(0x7f0000000100)={0x2, 0x4e22, @empty}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000100001002dbd7000fedbdf251f9ee44a2f11d4e50254d25a30362b94b5bfacdff8b1460471fe7e3c361179ff8b56f6088297fdb6ba5ab5c8fa70b68475561997d1beca4b879b3750b582a36708da4a82f2a47ebc4c70676ba46c147f69c42f741412e68e2b1405904484d793de221dad7ca3e3c75b240d3fd7b5ff9585ac0803", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800800010073697400140002800800030064010100080014002f000000"], 0x40}}, 0x0) recvmmsg(r3, &(0x7f000000e280), 0x58a, 0x42, 0x0) 8.254111537s ago: executing program 5 (id=5208): read$FUSE(0xffffffffffffffff, &(0x7f00000003c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000002400)={{0x4, 0x0, 0x8, 0x4}, 0x5, 0x100, 0x1ff, r0, 0x9, 0x1, 'syz0\x00', &(0x7f0000000100)=['\x00', '{\x00', '$\'\x00', '\x00', '-#}@{*\'\x00', '}\x00', '[{-%\xbe/+&#^\x00', 'm\x10@', '+]\x00'], 0x22}) r1 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r3 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) r4 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) shmat(r4, &(0x7f0000dbf000/0x2000)=nil, 0x4000) shmctl$SHM_INFO(r4, 0xe, &(0x7f0000000000)=""/25) shmat(r4, &(0x7f0000ffd000/0x1000)=nil, 0x4000) shmctl$SHM_UNLOCK(r3, 0xc) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x80000) openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file4\x00', &(0x7f0000000380)={0x40440, 0x15c, 0x12}, 0x18) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000080)=0x0) waitid(0x0, r5, 0x0, 0x2, &(0x7f0000000280)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000240)) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) 8.045183114s ago: executing program 3 (id=5210): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)=0x84000000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000003c0)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$nullb(0xffffff9c, &(0x7f0000000100), 0x420000, 0x0) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, 0x0) r2 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r2, 0x48e9, 0x0, 0x2, 0x0, 0x0) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)='\x00!', 0x2}], 0x1, 0x73a, 0x20000001) r5 = socket$kcm(0x29, 0x5, 0x0) r6 = syz_io_uring_setup(0x90c, &(0x7f0000000200)={0x0, 0x5885, 0x0, 0x0, 0xfd}, &(0x7f0000000740)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) r11 = dup3(r9, r10, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000380)=@setlink={0x40, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x649}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x4}]}}}]}, 0x40}}, 0x0) sendmsg$AUDIT_DEL_RULE(r11, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000040)={&(0x7f0000000300)={0x424, 0x3f4, 0x200, 0x70bd2d, 0x25dfdbfe, {0x5, 0x1, 0x2, [0x68f9, 0x89e0, 0x8001, 0x0, 0x0, 0x10, 0x2, 0x7, 0x54572b32, 0x7fff, 0x7, 0x2, 0x4, 0x8, 0x0, 0xb6c, 0x6bf, 0x1, 0xffff2037, 0x4, 0x77, 0xe0000, 0x9, 0x5db0, 0x6, 0x5, 0x9, 0x1, 0x5, 0x2, 0xb, 0x9, 0xfff, 0x7, 0xffff8001, 0x3ff, 0x100, 0xc, 0x8, 0xffffff7d, 0x1, 0x7f, 0x5, 0x100, 0xfffffff8, 0xe, 0x1, 0x8, 0x7, 0x10001, 0x10001, 0x6, 0x8, 0x50c7fb86, 0xac1, 0x9, 0x3, 0x9917, 0xa5a, 0x8, 0x8, 0x57, 0x29c, 0x8000], [0x43, 0x8, 0x100, 0x2, 0x1, 0x2, 0x181, 0x2, 0x3, 0x3, 0x9, 0x4, 0x6, 0x5, 0x7238, 0x2, 0x7, 0x6, 0x1, 0x9, 0x6, 0x7, 0x30, 0xfffffff9, 0xa, 0x1, 0x7, 0x1ac9, 0x0, 0x4, 0x5, 0x6f9b, 0x1, 0x8, 0x5, 0xef, 0x9, 0x4, 0x3ff, 0x3, 0x8000, 0xfffffffb, 0x1ff, 0x9ca, 0xff, 0x3, 0xaba4, 0x10001, 0x4, 0xc5, 0x6, 0x40000000, 0x961, 0x4, 0x0, 0x200, 0xfe09, 0x1000, 0x10001, 0x6, 0x8001, 0xf4, 0x9, 0xf], [0x4055a342, 0x7, 0x4, 0x5, 0x97, 0x1, 0x6, 0xfffffffc, 0x1, 0xfffffeff, 0x5, 0x554, 0x8, 0xfffffff7, 0x8, 0x89, 0xff, 0x1ff, 0xfff, 0x3, 0x7, 0x7, 0x1, 0xffffffff, 0x5, 0x0, 0x6, 0x1, 0x4, 0x4, 0xfff, 0xe4, 0x4efd02d0, 0x5, 0xf, 0xfffffffb, 0x6, 0x2, 0x2, 0x0, 0x0, 0x0, 0x9, 0x5, 0x2, 0x7ff, 0x8, 0x0, 0x9, 0xb, 0x8, 0xf89, 0x0, 0x4, 0x1, 0x6, 0x2, 0x2, 0xfffffffb, 0xf, 0x40, 0x59, 0x80000001, 0x2], [0x2, 0x800, 0x1, 0x6, 0x6, 0x3622, 0x4, 0x8000, 0x7, 0xe351, 0x8e38, 0x28e4, 0x8, 0x8, 0x4, 0x2, 0x6e0, 0x7, 0x2, 0x81, 0xa7, 0x6, 0xf85f, 0x8, 0x7, 0x8, 0x3fb, 0x4, 0xd, 0x2, 0x10, 0x0, 0x0, 0xde, 0x8, 0x8, 0x5, 0x3, 0x800, 0x8, 0x0, 0x1, 0x6, 0x1, 0x2e3, 0x1, 0x0, 0x100, 0x5c, 0x1, 0xcc, 0x100, 0x1ff, 0x10001, 0x3, 0x73, 0xb7, 0x3, 0x4a8, 0x244d9423, 0x0, 0x3, 0x9, 0x40], 0x2, ['\x00', '\x00']}, ["", ""]}, 0x424}, 0x1, 0x0, 0x0, 0x20000040}, 0x2000c040) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x40, 0x0, r5, 0x0, 0x0, 0x0, 0x10, 0x1}) io_uring_enter(r6, 0x3516, 0xf2ff, 0x0, 0x0, 0x0) 7.330378691s ago: executing program 3 (id=5211): r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000045c0)={'sit0\x00', &(0x7f0000019180)={'syztnl2\x00', 0x0, 0x95cd45416977ecb4, 0x8000, 0x34, 0x207, {{0x5, 0x4, 0x2, 0x39, 0x14, 0x67, 0x2, 0x22, 0x0, 0x0, @loopback, @loopback}}}}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc}) add_key$keyring(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffe) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="78000000020601000000000600000000000000000e0003006269746d61703a697000000005acdbf738d53d78a66f000400000000000900b30073797a3000000000300007800c00028008000140ffffffff1800018014000240ff0100000000000000a5480000000001b282fdb0b7b7e5e434804c76050014"], 0x78}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) syz_emit_ethernet(0x10b, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000050011fcfc505230d81a8ddebea88d38fe418bd61b7b40efc8079473e76b80f89c2fb79803a7091c617f8f0476cceee025aaadaa29fb8bcfbc0047e0876d5388f3e32aca152635384fa9f371f5c49784e0c00ed4684fcf096bef712253fa3e8273911dfcef6d389ad4e7af204c96cc1541305078b7cb86f29e7ab25d"], 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000c00)=@filter={'filter\x00', 0x42, 0x4, 0x3a0, 0xffffffff, 0x228, 0xec, 0x228, 0xffffffff, 0xffffffff, 0x30c, 0x30c, 0x30c, 0xffffffff, 0x5, 0x0, {[{{@ip={@broadcast, @dev, 0x0, 0xffffff00, 'bridge_slave_1\x00', 'nr0\x00'}, 0x3127, 0xc8, 0xec, 0x1ba, {0x46010000}, [@common=@addrtype={{0x2c}}, @common=@addrtype={{0x2c}}]}, @REJECT={0x24}}, {{@uncond, 0x287, 0xdc, 0x13c, 0x0, {0x0, 0x4}, [@common=@unspec=@connlabel={{0x24}, {0x3, 0x2}}, @common=@unspec=@ipvs={{0x48}, {@ipv4=@private=0xa010102, [0xff000000, 0xff, 0xff0000ff], 0x4e24, 0xc, 0x2, 0x4e24, 0x1, 0x8}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x1], 0x1, 0x1}, {0x0, [0x4, 0x0, 0x5, 0x1, 0x5, 0x4], 0x4, 0x3}}}}, {{@ip={@multicast1, @broadcast, 0x0, 0xff000000, 'lo\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6c}, 0x0, 0xc0, 0xe4, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x1, 0x1, 0x1}}]}, @REJECT={0x24}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x3fc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x1) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r8, &(0x7f0000000540)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e21, 0x3, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2000000029ad1b5508e4072db2dd42ba850000003700000700"/40], 0x20}}], 0x2, 0x4000001) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="20000000040900020073795a3200000000"], 0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) 6.825864767s ago: executing program 5 (id=5212): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="0aac0f00"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1, 0x70c}, {r2, 0x2}, {r3, 0x4}], 0x3, &(0x7f00000001c0)={r4, r5+60000000}, &(0x7f0000000380)={[0xa66e, 0xfffffffc]}, 0x8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x49, 0x0, 0x0) ioctl$KVM_SET_CLOCK(r7, 0x4030ae7b, &(0x7f0000000040)={0x4, 0x0, 0x6, 0x7, 0x2}) setsockopt$inet_int(r3, 0x0, 0x12, &(0x7f0000000300)=0x1, 0x4) sendto$inet(r3, &(0x7f0000000000)="f461c5bbd75c3583", 0x8, 0x20040000, &(0x7f0000000100)={0x2, 0x4e22, @empty}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000100001002dbd7000fedbdf251f9ee44a2f11d4e50254d25a30362b94b5bfacdff8b1460471fe7e3c361179ff8b56f6088297fdb6ba5ab5c8fa70b68475561997d1beca4b879b3750b582a36708da4a82f2a47ebc4c70676ba46c147f69c42f741412e68e2b1405904484d793de221dad7ca3e3c75b240d3fd7b5ff9585ac0803", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800800010073697400140002800800030064010100080014002f000000"], 0x40}}, 0x0) recvmmsg(r3, &(0x7f000000e280), 0x58a, 0x42, 0x0) 5.41911536s ago: executing program 4 (id=5218): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000140)=0x7fc, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0xf, @empty, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x2, @empty, 0x6}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x241}}], 0x1, 0x20080058) 5.353357039s ago: executing program 3 (id=5220): capset(&(0x7f0000000000)={0x20080522}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x8b7}) r0 = socket(0xa, 0x5, 0x0) listen(r0, 0x267) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000080), 0x0) 5.196459429s ago: executing program 4 (id=5224): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x458, 0x5013, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x4, 0x8, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x0, 0x9}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000080)={0x40, 0x27, 0x41, {0x41, 0xa, "e0ec1956d9bd32f899be496fe7f927ed79c3d5f2dd4aa127b02382b9be4585a713456257b264ec5ab641b323c05cd8383b929241cb88e3cacd779b4ec04db2"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @string={0x4, 0x3, "6be0"}}, &(0x7f0000000140)={0x0, 0x22, 0x12, {[@global=@item_012={0x1, 0x1, 0x9, "16"}, @local=@item_4={0x3, 0x2, 0x9, "721ddf32"}, @main=@item_012={0x1, 0x0, 0x9, 'J'}, @global=@item_012={0x2, 0x1, 0x0, "d298"}, @global=@item_4={0x3, 0x1, 0x4, "0c1c684b"}, @main=@item_012={0x0, 0x0, 0x8}]}}, &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0xd, 0x1, {0x22, 0xd49}}}}, &(0x7f0000000500)={0x18, &(0x7f00000002c0)={0x0, 0x1f, 0xef, "1b52ac5c4491984c7ac947bca48f372b1ef551c4fc2f419ae642b1706bb7255edebfcdb3aa44591809fe5bbed702c1bad77ad2ca32f4a30af1dd04fb23d8eca3b5eea2a7ea530d88e3e3cd16726db1c122495fc585989ff5fa9f3c172379573048c9df00877fdb84d565f59e1942149b3d4fd5284a35bdb3b9e1d3676b0dc001f101b1d740855b9c7e4a5d7f9b0441119582d7681753064d540dd483b7bc838c825eac9d7f5f1c64954ccad152e0294d211873e0e52f434430187428be67347c5c9105aacc367d850b83d7c82875f8224debce778699bd3b407465a49378673973f1e014333ec9e73ae9ce4a842c45"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x33}, &(0x7f0000000240)={0x0, 0x8, 0x1}, &(0x7f00000003c0)={0x20, 0x1, 0xc8, "c91468dfd3479595575ddcc7da1036f68fe2ba392ba58d1687f4b0afe99709ca8fea9b10fc3362e948b9c23a509f4c9012f69ebcb01e124bceaddbeb2e9aa80ec90809d48e102abc2f48bafb5025df2b91c6b855b598edb5a9a980b652c49c65850118c804378b595376ba81ec76ea58d1632ca947573abc3d2a148b0577947bcfc732175278d232ea253fa6ae6882999e5bc1a568923d38012445fd15aee122fdafd8b1254a4ca00b9e7cbc7cdfa9fd50575089e82086cd8818058817d7883d9383702645d189f9"}, &(0x7f00000004c0)={0x20, 0x3, 0x1, 0x6}}) r1 = getpgrp(0x0) r2 = gettid() rt_tgsigqueueinfo(r1, r2, 0xb, &(0x7f0000000300)={0x2a, 0x1, 0x13}) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x14, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1e, {[@local=@item_4={0x3, 0x2, 0x1, "9263cba6"}, @local=@item_012={0x2, 0x2, 0x7, "df33"}, @global=@item_012={0x2, 0x1, 0x2, "f1b5"}, @local=@item_012={0x1, 0x2, 0x5, "8e"}, @global=@item_012={0x1, 0x1, 0x5, 'U'}, @local=@item_4={0x3, 0x2, 0x4, "99a721c6"}, @local=@item_012={0x2, 0x2, 0x8, 'i>'}, @main=@item_012={0x1, 0x0, 0x9, 'p'}, @main=@item_4={0x3, 0x0, 0xb, "b855ae96"}]}}, 0x0}, 0x0) 5.123245825s ago: executing program 3 (id=5226): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket(0xf, 0x803, 0x9) r4 = syz_clone(0x60218000, 0x0, 0x0, &(0x7f0000001440), &(0x7f0000001480), &(0x7f00000014c0)) sched_setattr(r4, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x10008001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x3}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) setsockopt$inet_tcp_int(r3, 0x6, 0x8, &(0x7f0000000040)=0xf, 0x4) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) ioctl$SNDCTL_TMR_START(r5, 0x5402) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000240), 0x2) r7 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2) ftruncate(r7, 0x10000) fcntl$addseals(r7, 0x409, 0x7) r8 = ioctl$UDMABUF_CREATE(r6, 0x40187542, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r8, 0x40086200, &(0x7f0000000440)=0x2) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) r9 = add_key$fscrypt_v1(0x0, &(0x7f0000000240)={'fscrypt:', @auto=[0x33, 0x62, 0x32, 0x35, 0x33, 0x36, 0x62, 0x0, 0x62, 0x61, 0x36, 0x65, 0x64, 0x38, 0x65, 0x64]}, &(0x7f0000000340)={0x0, "ccb9490a299cd16d4bb6b1878b185d761fe6ef51f2fd0b4230da9e08134e22912f729cdb1b6f015a62c8ed3d596854d654201d7909d8f3933c1e69c07d17b758", 0x1a}, 0x48, 0xfffffffffffffffa) keyctl$instantiate(0xc, r9, &(0x7f0000000140)=ANY=[@ANYBLOB="6c6f61642064656661756c7420747275737465643a2f6465762f73657175656e636572320020303030303030303030303030303030302a303036203365370e386600"], 0x42, r9) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0xc3, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000380)={0x12, 0x1, 0x1, "33c500100000130040fcd828a45b729f09085780ee0f00", 0x32525942}) syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793f10d10501200002000000010902120001000000000904"], 0x0) 4.871274442s ago: executing program 0 (id=5228): r0 = syz_open_dev$dri(&(0x7f0000001640), 0x58a2, 0x40000) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000001780)={0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r1, 0x8b27, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) bind$netlink(r6, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000010000104000000020000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10], 0x44}}, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') r12 = socket$kcm(0x29, 0x2, 0x0) setsockopt$inet_mreq(r11, 0x0, 0x21, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r12, 0x8982, 0x0) ioctl$FS_IOC_GETFLAGS(r12, 0x80046601, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x13, &(0x7f0000000140), 0x4) 4.546085656s ago: executing program 0 (id=5229): r0 = io_uring_setup(0x5043, &(0x7f0000000180)={0x0, 0x3f1f, 0x100, 0x0, 0xb3}) r1 = socket(0x2b, 0x1, 0x1) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @local, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x4e21, 0x6, @mcast2, 0x4000}}, 0x0, 0x0, 0x49, 0x0, "c8fdcf50c3970b890fa9c23037c3fdee3371f88af324041769ed35bd362939b03fa2e11e2ae82ad08e083d5bcede13537d2e5ac5576c74e9d85ed29c617f95377200"}, 0xd8) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) r4 = syz_open_procfs(0x0, 0x0) preadv(r4, 0x0, 0x0, 0x7, 0x0) r5 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2c, &(0x7f0000000380)={0x2501, {{0xa, 0x4e24, 0x80000002, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x101}}, {{0xa, 0x4e08, 0x4a1, @dev={0xfe, 0x80, '\x00', 0x2c}, 0xa}}}, 0x104) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) pselect6(0x40, &(0x7f0000000300)={0x6, 0x9, 0x98, 0x8, 0x7, 0x6, 0xc1, 0x3}, 0xfffffffffffffffe, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x4885, 0x8, 0x4, 0xfb}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r8, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x6, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x12321, 0x1, {0x1}}) recvmsg(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000000700)=""/35, 0x23}, {&(0x7f0000000740)=""/4096, 0x1000}], 0x2}, 0x40002122) bind$inet(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_io_uring_setup(0x116, 0x0, 0x0, 0x0) 4.240126977s ago: executing program 0 (id=5230): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c0}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @private=0xa010102}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x4000004}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/cgroup', 0x0, 0x80) openat$nullb(0xffffff9c, &(0x7f0000000080), 0x38300, 0x0) r2 = socket(0x1e, 0x4, 0x0) bind$inet6(r2, &(0x7f0000000040)={0x1e, 0x4e27, 0x0, @mcast1, 0x2}, 0x43) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r1) sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r3, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x18, 0x13, @l2={'eth', 0x3a, 'team_slave_1\x00'}}}, ["", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x24000850}, 0x4004001) getdents(r1, &(0x7f0000000000)=""/23, 0x17) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000540)={{r0}, r4, 0x0, @unused=[0xb, 0xfa, 0x6, 0x800], @subvolid=0x7}) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c0}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @private=0xa010102}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x4000004}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/cgroup', 0x0, 0x80) (async) openat$nullb(0xffffff9c, &(0x7f0000000080), 0x38300, 0x0) (async) socket(0x1e, 0x4, 0x0) (async) bind$inet6(r2, &(0x7f0000000040)={0x1e, 0x4e27, 0x0, @mcast1, 0x2}, 0x43) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r1) (async) sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r3, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x18, 0x13, @l2={'eth', 0x3a, 'team_slave_1\x00'}}}, ["", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x24000850}, 0x4004001) (async) getdents(r1, &(0x7f0000000000)=""/23, 0x17) (async) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000)) (async) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000540)={{r0}, r4, 0x0, @unused=[0xb, 0xfa, 0x6, 0x800], @subvolid=0x7}) (async) 3.83591584s ago: executing program 0 (id=5232): r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, &(0x7f0000000b00)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0xfffffffd, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x590}}], 0x1, 0x8008800) sendto$inet6(r1, 0x0, 0x0, 0x80fe, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x7, 0x0, 0x2, 0x0, 0x1, 0x900, 0x0, 0xffffff80}}) 3.752131898s ago: executing program 0 (id=5234): syz_emit_ethernet(0x122, &(0x7f00000017c0)={@multicast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0xec, 0x3c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], {{0xfff5, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0xffff}, {"facc9697fdc16eb3507e0a3df3af15466311d5a2cdb01a33e011b5361eb47303605fba81f39840125eb605d2bbdac605c6eda0893e6bb20dd6014dd28a1cf24defc44e65a428a7f5ea84decbed7e22b93543f187170d85333f555015858eea5f520afdf8f98617df0e0902a07a3ce32c60b7df837380c8aad91f26a4e6683e81ba4bac318669332f97df41ed6a8b404277882df3c78b0cbd63be2768496bbb8a5c378d03aa89f8df82c55efe8311f006f443e717f199c2c822c9fac91b41ff48a6ae7d2072daef9b3c953fac1e384a31e3ca17245cc8683c"}}}}}}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc4d4}, 0x8) syz_open_dev$hiddev(&(0x7f0000000240), 0x4, 0x40000) sendto$inet6(r0, &(0x7f0000001240)="b6", 0x1, 0x24004000, &(0x7f0000000280)={0xa, 0x0, 0x6, @private1, 0x85}, 0x1c) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000012c0)={0x0, 0x9}, &(0x7f0000001300)=0x8) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000200), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r1, 0x80045700, &(0x7f0000000280)) r2 = syz_usb_connect(0x0, 0x2f, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0xe0, 0x1, 0x1, 0x20, 0xf593, 0x61c3, 0xc3e8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1d, 0x1, 0x0, 0x0, 0xf0, 0x0, [{{0x9, 0x4, 0xf9, 0x1, 0x0, 0xf2, 0x48, 0x21, 0x10, [@uac_as={[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x4, 0x4, 0x5, "a4d4"}]}]}}]}}]}}, 0x0) sendmsg(r1, &(0x7f0000000480)={&(0x7f0000000080)=@in={0x2, 0x4e24, @loopback}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000100)="9e68a87ca95dcddc2ea1127246d6472b70e53ad96e25043e39a6923113f16b03d6e5a4696570657dbd599f9dd8008939708b579a19e83c4770c505755db5d0174c7b1d43392db17256ff22f11180b04d2157cbd20d51ff9c145c78ad0fa3e38e98becd8df89b50ef5ac800dc4b01c5e03c4d0e9764e82e9444cdb46e4795446bc39982155b74db41bb7063f4c38498fa6ddd41b9de0922c9ce84a9f6a1be03411ab9ce56315d87cf716e9587911a595d469d1d9b87d3b966bf7d84091571e68f002b7e29121c53f3a24f570d1f6f6254e23f4d227ca3a98ec8442e8ef8", 0xdd}, {&(0x7f0000000000)="2f2539eb040f187c95904ec196a8cb0b136df5", 0x13}, {&(0x7f00000002c0)="2f48b76541d9baba01f88161f7872e1463a1ec0d0d60bb3c579e2ce384813b6c6cc69eeacc63be4f24b80f543dd571ba99be37b1718255dacd0d5335857ad263ef161c4e75aaf40a2f49c25710b4f5f47a6d2534d22f77188ceb3dbd84882da759214e3dfca7714199e29f91b3ca1584d29287bdd7865c3ceef34602ed8ed6402a5e3f8a3b668176c9637a1c8322f1e88a13e43793169ae406c97c37a4dcf445462882", 0xa3}, {&(0x7f0000000380)="c2e51f58aa1fc006838e0d9fce0ee7bbe161e31e428a03029089660d8cb00f1424e95e7fd329e376d41edd56e2479ad67568b16bc37b77b4b93b9ba0c1f5d6e7151f8479b3842aafc8c57f9262a5f9cfe6a86ec19de40baec633160f7754d9e6162e590763573b1cc06a940be0bc57255b65222dafa50462f21002478f15b538f69d196c124e76cd9fe4af109a90b26026b09745b1f8", 0x96}, {&(0x7f0000000240)}], 0x5, &(0x7f0000000580)=[{0x100, 0x113, 0x1, "087de94643e3c778cb4448ac5c9d6c333a7f715a407f618256cab46cf52a53e6392ee6fb8487c361b0427eb96c0ac7da6b21ef1ac30b3919efea78c740c4d9eb6b53ff3bbde7b7de2814670baf39efd2b79c0a2e2ffbd9e9acf1cc6bfc52449a7bde0aa5b79c27a5671c17723241af75f2cd58832a22fc46bbf75ec4f07cdd1017fc9de078c1d58c8d5a16e9c99acde1c0485e02b3212496b6e16cbad375054590d228957c561025e99a6cad1af157f53d08b8ea8f4e160c9c9a8deae9887a6b3a3d0c4e03887d0cdc6a01708b9fa580f2c3ef79d1548965c66d9641f522582ecf167e4503a496e622d4a758f1fcac6070f2"}, {0x100c, 0x29, 0x4, "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"}, {0x84, 0x29, 0x400, "1e5ced95f61b36e4f9283e50ece266c9962b643178834742a828ad99dadeae73342852243f5a6018c500aa4c84783a9fa42512d5a05e500bbb99ea535acffa0aa8454eab5fe633c096f8e1671df059ce7a65b2d7effc649443af4c58ec5af31a8b7f8f7b7303c404c03266e2d16eb148be3291e23f"}, {0x7c, 0xff, 0x8, "077654c195549caecc5dc3c1d729205e06d91bc1c863619bcce146bbe1596c121420ff771d0124307cb2d1f472e4c35d9c073662cb410b31a0d0496f914756c8abef2e968b3d3e1c92afdc98562add3fff1e41e20092bca593fa4c2fddcba1a1584427f6b92a294f9f519574aeeda7"}], 0x120c}, 0x1) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) syz_usb_control_io$hid(r2, 0x0, 0x0) 3.655771404s ago: executing program 1 (id=5236): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r0, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfe}, 0xc) sendmsg$NFT_MSG_GETGEN(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x28000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x14, 0x10, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0xc0) 3.591660365s ago: executing program 5 (id=5237): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') (async) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x500) (async) lsm_set_self_attr(0x68, 0x0, 0x20, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) close(0x3) (async) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x7}, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x101301) openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r6) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="a18300000000000000000500000008000300", @ANYRES32=0x0, @ANYBLOB="d5c5a99846d7af029755b7cd82180274ab9cc0725c3f7e9056acf48b171bf425b7363e8934b428d2c74b75054b1c9881ec346be3e4da8550b86e67dc9d329d9239c968e76315581e1e7c45274911d8a1be472f516565384cc6087798c4cab0ec59a54407eb68ef7c1e3ce8a7b2a98218c60bfe9eaccf2a3de1e6f6067fa2ac9840fc8966eaff598b8dc56548d87052d3ab3d6b"], 0x20}, 0x1, 0x0, 0x0, 0x4800}, 0x4048000) (async) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r5, 0xc10c5541, &(0x7f0000000280)={0x0, 0x804}) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) (async) readv(r4, &(0x7f00000001c0)=[{0x0}], 0x1) (async) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) (async) r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) 3.552475531s ago: executing program 1 (id=5238): move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r0 = socket$kcm(0x2, 0x3, 0x106) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="fbd2b9ed29d8974a6ce75f08916ac3b4da11bc1a", 0xffeb}], 0x1, 0x0, 0x1400}, 0x0) 3.444047418s ago: executing program 1 (id=5239): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)=0x84000000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000003c0)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$nullb(0xffffff9c, &(0x7f0000000100), 0x420000, 0x0) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)=0x6100204) r2 = syz_io_uring_setup(0x1e1e, 0x0, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r2, 0x48e9, 0x0, 0x2, 0x0, 0x0) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)='\x00!', 0x2}], 0x1, 0x73a, 0x20000001) r5 = socket$kcm(0x29, 0x5, 0x0) r6 = syz_io_uring_setup(0x90c, &(0x7f0000000200)={0x0, 0x5885, 0x0, 0x0, 0xfd}, &(0x7f0000000740)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) r11 = dup3(r9, r10, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000380)=@setlink={0x40, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x649}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x4}]}}}]}, 0x40}}, 0x0) sendmsg$AUDIT_DEL_RULE(r11, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000040)={&(0x7f0000000300)={0x424, 0x3f4, 0x200, 0x70bd2d, 0x25dfdbfe, {0x5, 0x1, 0x2, [0x68f9, 0x89e0, 0x8001, 0x0, 0x0, 0x10, 0x2, 0x7, 0x54572b32, 0x7fff, 0x7, 0x2, 0x4, 0x8, 0x0, 0xb6c, 0x6bf, 0x1, 0xffff2037, 0x4, 0x77, 0xe0000, 0x9, 0x5db0, 0x6, 0x5, 0x9, 0x1, 0x5, 0x2, 0xb, 0x9, 0xfff, 0x7, 0xffff8001, 0x3ff, 0x100, 0xc, 0x8, 0xffffff7d, 0x1, 0x7f, 0x5, 0x100, 0xfffffff8, 0xe, 0x1, 0x8, 0x7, 0x10001, 0x10001, 0x6, 0x8, 0x50c7fb86, 0xac1, 0x9, 0x3, 0x9917, 0xa5a, 0x8, 0x8, 0x57, 0x29c, 0x8000], [0x43, 0x8, 0x100, 0x2, 0x1, 0x2, 0x181, 0x2, 0x3, 0x3, 0x9, 0x4, 0x6, 0x5, 0x7238, 0x2, 0x7, 0x6, 0x1, 0x9, 0x6, 0x7, 0x30, 0xfffffff9, 0xa, 0x1, 0x7, 0x1ac9, 0x0, 0x4, 0x5, 0x6f9b, 0x1, 0x8, 0x5, 0xef, 0x9, 0x4, 0x3ff, 0x3, 0x8000, 0xfffffffb, 0x1ff, 0x9ca, 0xff, 0x3, 0xaba4, 0x10001, 0x4, 0xc5, 0x6, 0x40000000, 0x961, 0x4, 0x0, 0x200, 0xfe09, 0x1000, 0x10001, 0x6, 0x8001, 0xf4, 0x9, 0xf], [0x4055a342, 0x7, 0x4, 0x5, 0x97, 0x1, 0x6, 0xfffffffc, 0x1, 0xfffffeff, 0x5, 0x554, 0x8, 0xfffffff7, 0x8, 0x89, 0xff, 0x1ff, 0xfff, 0x3, 0x7, 0x7, 0x1, 0xffffffff, 0x5, 0x0, 0x6, 0x1, 0x4, 0x4, 0xfff, 0xe4, 0x4efd02d0, 0x5, 0xf, 0xfffffffb, 0x6, 0x2, 0x2, 0x0, 0x0, 0x0, 0x9, 0x5, 0x2, 0x7ff, 0x8, 0x0, 0x9, 0xb, 0x8, 0xf89, 0x0, 0x4, 0x1, 0x6, 0x2, 0x2, 0xfffffffb, 0xf, 0x40, 0x59, 0x80000001, 0x2], [0x2, 0x800, 0x1, 0x6, 0x6, 0x3622, 0x4, 0x8000, 0x7, 0xe351, 0x8e38, 0x28e4, 0x8, 0x8, 0x4, 0x2, 0x6e0, 0x7, 0x2, 0x81, 0xa7, 0x6, 0xf85f, 0x8, 0x7, 0x8, 0x3fb, 0x4, 0xd, 0x2, 0x10, 0x0, 0x0, 0xde, 0x8, 0x8, 0x5, 0x3, 0x800, 0x8, 0x0, 0x1, 0x6, 0x1, 0x2e3, 0x1, 0x0, 0x100, 0x5c, 0x1, 0xcc, 0x100, 0x1ff, 0x10001, 0x3, 0x73, 0xb7, 0x3, 0x4a8, 0x244d9423, 0x0, 0x3, 0x9, 0x40], 0x2, ['\x00', '\x00']}, ["", ""]}, 0x424}, 0x1, 0x0, 0x0, 0x20000040}, 0x2000c040) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x40, 0x0, r5, 0x0, 0x0, 0x0, 0x10, 0x1}) io_uring_enter(r6, 0x3516, 0xf2ff, 0x0, 0x0, 0x0) 2.83099221s ago: executing program 5 (id=5240): r0 = epoll_create(0xd273) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x0, 0x1, 0x4}) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) fsopen(&(0x7f0000000180)='devtmpfs\x00', 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000100)={0x2, 0x0, 0x0, 0x80c40, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000200)=0x6) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_SET_FEATURES(r4, 0x40309439, &(0x7f0000000240)={0x1, 0x0, 0xa}) sendto$inet6(r4, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f00000000c0)={0x3, 0x0, 0xbe, 0x6f, 0x0, 0x9, 0x5, 0x1, 0x3, 0x2, 0x0, 0x0, 0x0, 0x6}, 0xe) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000040)=0x10001, 0x4) shutdown(r4, 0x1) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0x7c8b) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r5 = syz_open_pts(0xffffffffffffffff, 0x900) r6 = dup3(r5, 0xffffffffffffffff, 0x80000) read(r6, &(0x7f00000000c0)=""/226, 0xe2) read$watch_queue(r6, &(0x7f0000002d40)=""/4104, 0x1008) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40}, [@ldst={0x0, 0x0, 0x0, 0xa, 0x0, 0x20, 0x8}]}, &(0x7f00000002c0)='syzkaller\x00', 0x9, 0x69, &(0x7f0000000300)=""/105, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r6, r7], 0x0, 0x10, 0x4}, 0x94) recvmmsg(r4, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) listen(0xffffffffffffffff, 0x5) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) pread64(r8, &(0x7f0000001800)=""/55, 0x37, 0x92c9) clock_getres(0x4, 0x0) bind$inet(r8, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) 2.60948025s ago: executing program 5 (id=5241): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x200000000000}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x6, 0x4, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x800}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000003c0)="5c00000015006b03000000d86e6c1d0002845da60600000000000000e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000040) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x34, 0x40, 0x1, 0xfffffffe, 0x25dfdbff, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x10, 0x4, 0x0, 0x1, [@nested={0x9, 0x17, 0x0, 0x1, [@typed={0x4, 0x130}, @generic="f7"]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0x800c000) syz_emit_ethernet(0x4a, &(0x7f0000004180)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x8000, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x100, 0x0, 0x1}}}}}}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001dc922d4060163209173201020301090800c08009f42f04ea00007796ea0000000000"], 0x0) 2.532084049s ago: executing program 1 (id=5242): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x200040, 0x0) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$usbmon(&(0x7f0000000d00), 0x2, 0xc80) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) r4 = syz_open_procfs(0x0, 0x0) preadv(r4, 0x0, 0x0, 0x7, 0x0) r5 = socket(0x27, 0x1, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2f, &(0x7f00000001c0)={0x2501, {{0xa, 0x4e24, 0x80000000, @empty, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a1, @local, 0x4f2}}}, 0x104) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x4886, 0x8, 0x4, 0xfb}, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r8, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x6, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r11, 0x0, 0x0, 0x0, 0x12321, 0x1, {0x1}}) io_uring_enter(r8, 0x3516, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000042003303"], 0x14}, 0x1, 0x0, 0x0, 0x4015}, 0x24040004) recvmsg(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000000700)=""/35, 0x23}, {&(0x7f0000000740)=""/4096, 0x1000}], 0x2}, 0x40002122) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@delneigh={0x28, 0x1a, 0x1, 0x70bd26, 0x0, {0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7}, [@NDA_DST_MAC={0xa, 0x1, @random="6777aefddcce"}]}, 0x28}}, 0x0) 2.058370128s ago: executing program 4 (id=5243): mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x81031, 0xffffffffffffffff, 0x10000000) r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x88800) read(r0, &(0x7f0000000180)=""/65, 0x41) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') socket(0x2, 0x3, 0x1) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c0400070080000900", 0x33a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x7}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) write$sequencer(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x34, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x10, 0x6071, 0x0, 0xeb, {[@generic={0x8, 0xa, "09df168a00000003"}]}}}}}}}, 0x0) 1.042192196s ago: executing program 4 (id=5244): syz_emit_ethernet(0x66, &(0x7f0000000880)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60b819230030000000000000000000008000000000000000fe8000000000000000000000000000aa29"], 0x0) (fail_nth: 4) 312.837732ms ago: executing program 1 (id=5245): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001b80)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x6, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40010) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r6, {0xc, 0xc}, {0x0, 0xfff1}, {0x11}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 239.585138ms ago: executing program 4 (id=5246): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'sit0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x20, 0x20, 0x4, 0x2, {{0x2b, 0x4, 0x0, 0x3b, 0xac, 0x68, 0x0, 0x10, 0x2f, 0x0, @private=0xa010100, @local, {[@timestamp_addr={0x44, 0x24, 0xde, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@multicast1, 0x7}, {@local, 0xb}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x6}]}, @timestamp_prespec={0x44, 0x14, 0xa2, 0x3, 0xe, [{@dev={0xac, 0x14, 0x14, 0x3c}, 0xd}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0x2}]}, @noop, @cipso={0x86, 0x3f, 0x3, [{0x2, 0xd, "32b95ae498821bdba8ccc2"}, {0x2, 0x10, "e40c048bcadf1bed4d1419c7437b"}, {0x7, 0x11, "9cc082adab420a38b71166bca437b8"}, {0x6, 0x4, "0eb4"}, {0x2, 0x7, "6df038e16a"}]}, @cipso={0x86, 0x1d, 0x3, [{0x6, 0x9, "0a0d321dad8d4a"}, {0x2, 0xa, "dbdc1e7299dd81cf"}, {0x2, 0x4, "7495"}]}]}}}}}) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09103328", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 153.069001ms ago: executing program 4 (id=5247): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="0aac0f00"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1, 0x70c}, {r2, 0x2}, {r3, 0x4}], 0x3, &(0x7f00000001c0)={r4, r5+60000000}, &(0x7f0000000380)={[0xa66e, 0xfffffffc]}, 0x8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x49, 0x0, 0x0) ioctl$KVM_SET_CLOCK(r7, 0x4030ae7b, &(0x7f0000000040)={0x4, 0x0, 0x6, 0x7, 0x2}) setsockopt$inet_int(r3, 0x0, 0x12, &(0x7f0000000300)=0x1, 0x4) sendto$inet(r3, &(0x7f0000000000)="f461c5bbd75c3583", 0x8, 0x20040000, &(0x7f0000000100)={0x2, 0x4e22, @empty}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000100001002dbd7000fedbdf251f9ee44a2f11d4e50254d25a30362b94b5bfacdff8b1460471fe7e3c361179ff8b56f6088297fdb6ba5ab5c8fa70b68475561997d1beca4b879b3750b582a36708da4a82f2a47ebc4c70676ba46c147f69c42f741412e68e2b1405904484d793de221dad7ca3e3c75b240d3fd7b5ff9585ac0803", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800800010073697400140002800800030064010100080014002f000000"], 0x40}}, 0x0) recvmmsg(r3, &(0x7f000000e280), 0x58a, 0x42, 0x0) 71.107441ms ago: executing program 0 (id=5248): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="44000000109709f600"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028008000300580200000800040003000000"], 0x44}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'macsec0\x00'}) r2 = socket$unix(0x1, 0x5, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x4c, &(0x7f0000000080)=0xcdb, 0x4) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000140), 0x10) socket$unix(0x1, 0x1, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="7efbaf1b54633be70b8ff0f487e7c7775c000000", @ANYRES16=0x0, @ANYBLOB="000429bd7000fedbdf25540000000c009900000200006a0000000a00060008021100000100000a00060008021100000100000a00060008021100000000000a00060008021100000100000a0006000802110000010000"], 0x5c}, 0x1, 0x0, 0x0, 0x4890}, 0x20040000) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="2eec59acbc0413a1f89bd85b48000000005eb3dec2b9c6140602000000000e0000020000000000000000000075c255c08d11b687a45f838d7f5db58c5b3dff4ae45b4ef7b80f2249f38c82189b7e8da1c8173e00000000000000000000deff000000f0955de24861ec00"/120, 0x78}], 0x1, 0x0, 0xfffffffffffffea1}, 0x40) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ac0)=@newtfilter={0x8b4, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r7, {}, {}, {0x8, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_CHAIN={0x8, 0xb, 0x6f}, @filter_kind_options=@f_basic={{0xa}, {0x864, 0x2, [@TCA_BASIC_POLICE={0x850, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0xfffffffc, 0x4, 0x8, 0x5, 0x0, 0x629, 0x4, 0x10, 0x8, 0x8, 0x9, 0x5, 0x4, 0x0, 0xae, 0x319, 0x0, 0x2, 0x9, 0x7, 0x6, 0x6, 0x6, 0x8001, 0xcb, 0x9, 0xffff, 0x1, 0x8, 0xb2, 0x10001, 0x9, 0x6, 0x0, 0xc6af, 0x0, 0x401, 0x5fe, 0x7, 0x4, 0x1, 0x7, 0x5, 0xc3d, 0x81, 0x2, 0x32, 0x6, 0x6, 0x200, 0x1000, 0xfffffb71, 0x7, 0x4, 0x0, 0x88d, 0x8001, 0x9, 0x6, 0x0, 0x0, 0xe, 0x80, 0x8000, 0x5c20d649, 0x6, 0x2, 0x3800, 0x43, 0xfffffff7, 0x7fffffff, 0x4, 0xab25, 0xffffff7f, 0x1000, 0x5, 0x5, 0x8, 0x8, 0x0, 0x2, 0x1, 0x11, 0x2, 0x0, 0x8, 0x8, 0xfffff713, 0x8, 0x4, 0x8000, 0x3ff, 0x34, 0x7, 0x9, 0xc4c1, 0x6, 0x9, 0x6, 0xed, 0x2, 0xfffffff9, 0x2c0, 0x222000, 0xffff, 0x7, 0x2, 0xa, 0x2, 0x1, 0xfffffff8, 0x7, 0x3, 0x9e, 0x12000000, 0x6, 0x4, 0x4000000, 0x7, 0x3ff, 0x1, 0x8001, 0xfffffffe, 0x7, 0xa774, 0xffffffff, 0x1ff, 0x49, 0x4, 0xf, 0x1, 0xa, 0x4, 0x1, 0x7, 0x1, 0x1da, 0x5, 0xc, 0xaf7, 0x91eb, 0x8, 0x0, 0x51, 0x186, 0x9, 0x4, 0x7, 0x8, 0x9, 0xc7d2, 0xffffffff, 0xd9, 0x3, 0x6, 0x4, 0xfffffffb, 0x4c74, 0x80000001, 0x3, 0x29, 0x8, 0x5, 0x81, 0x9, 0xc, 0x7, 0x101, 0x81, 0x7, 0x3, 0x6, 0x200, 0x0, 0x80000001, 0x1, 0xf, 0x0, 0x4, 0x6e2b, 0x8, 0xffffffff, 0x4, 0xf, 0x101, 0xfff, 0xb7, 0x3ff, 0xff4, 0x0, 0xd, 0x6, 0x5, 0x10000, 0xffff, 0x5, 0x6, 0x5, 0x89, 0x5ebb5170, 0x2, 0x11b4, 0x1, 0x5, 0xffffffc0, 0x1e6b, 0x19, 0x4, 0x7, 0xb8ff, 0x7, 0xfffffffe, 0x7, 0x8, 0x5, 0x9, 0x3, 0x1, 0x7, 0x101, 0x6, 0x2, 0xdd8, 0x6, 0x1c, 0x0, 0xdb, 0xda, 0x2, 0x4, 0xff, 0x6, 0x0, 0x401, 0x1, 0x10000, 0x3, 0x79, 0x0, 0x9, 0x4, 0xffffffff, 0x4, 0x2, 0x5, 0x0, 0x68000000, 0x4, 0xc, 0x7, 0x80000001, 0x1c94, 0x5, 0x6, 0x9]}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x9, 0x1, 0x7fff, 0x1, 0x8, 0x7f, 0x5, 0x8c, 0x5, 0x7, 0x10000, 0x4, 0x1, 0xc, 0xbb1a, 0x40, 0xc, 0xa, 0x5, 0x4, 0x2c5, 0x4, 0x742, 0xffffffff, 0x200, 0x1, 0xffffffff, 0x7, 0x8, 0x1, 0x5, 0x2, 0xfffff200, 0x101, 0x7, 0x5, 0x10001, 0x2, 0xa, 0x1f, 0x3, 0x5a8b, 0x3, 0x6, 0x80, 0xac06, 0x6, 0xfff, 0xf, 0x1, 0xfffffffb, 0xfff, 0x9, 0x2, 0xeb, 0x2, 0xf166, 0x1000, 0xcb, 0x4, 0xffffffff, 0x0, 0x23, 0x5, 0x0, 0xe, 0x8, 0x81, 0xfffffe00, 0x1, 0x4a, 0x3, 0x316, 0x8, 0x6, 0x4, 0x85c, 0xeab, 0x200, 0x8, 0x10000, 0x2, 0x992, 0xfffffff9, 0x7, 0x8, 0x3, 0x4, 0x80000001, 0x7, 0x1, 0x8, 0x9b, 0x4, 0x6, 0x1, 0x4, 0x3, 0x3, 0x9, 0x3, 0xfffffff7, 0x2, 0x4, 0x0, 0x9, 0x7, 0x8001, 0x100, 0x4, 0x80000000, 0x101, 0x2, 0x8, 0x2, 0x800, 0x800, 0x7fffffff, 0x4, 0x2, 0xc519, 0x2, 0x0, 0x101, 0x3, 0xfffffff9, 0x3, 0xe, 0x6, 0x180000, 0x2, 0xee, 0x3, 0x9, 0x1, 0x7441, 0x3, 0xd, 0x9, 0x7, 0x81, 0x3, 0x40, 0x4, 0x800, 0x5, 0x6, 0xffffffff, 0x8, 0x80000000, 0x3, 0x2, 0x8000, 0x2, 0x9edfca2, 0x8, 0x8684, 0x5, 0x10001, 0xffffffff, 0x1, 0x80000001, 0x5, 0x6, 0x6, 0x0, 0x6, 0xfffffff7, 0x5, 0x1ff, 0x80000000, 0x6, 0x5, 0x10001, 0x401, 0xfffffffe, 0x8, 0xa, 0x0, 0x4, 0x5, 0x7, 0x9, 0x8, 0x40000000, 0x55aa, 0x0, 0x5, 0x10, 0x3, 0x413, 0x6, 0x9, 0x6, 0x0, 0x60, 0x6, 0x9, 0x5, 0x2, 0x400, 0x0, 0x1ff, 0xac, 0x5, 0xf, 0x1, 0x1000, 0x57, 0x2, 0x2, 0xfffffffb, 0x6, 0x7ff, 0xfffff801, 0x9, 0x6ba, 0xffffffff, 0xffffffff, 0x5, 0x6, 0x7ff, 0x7, 0xd, 0x625, 0x1, 0x6, 0xfffffff8, 0x1f8e, 0x5, 0x9, 0x4, 0x0, 0x5, 0xb, 0x7, 0xffffffff, 0x7, 0x3, 0x6, 0x5, 0x2, 0xffffffff, 0x5, 0xfff, 0x5, 0x401, 0x44, 0x4, 0x100, 0x0, 0xef, 0xb, 0x5, 0x6]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0x10, 0x1, 0x3, 0x856, 0x2, {0x2, 0x1, 0x9, 0x7, 0xffcb, 0x9}, {0x9, 0x2, 0xbc, 0x3, 0x5737, 0x7}, 0x6, 0x31d, 0x6}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x9, 0x8}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x6, 0xd}}]}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x8b4}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) symlinkat(&(0x7f0000003200)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00') syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0xfffffffe, 0x0, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x81}) bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) fcntl$dupfd(r9, 0x406, r9) sendto$inet(r9, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) fchmod(r5, 0x2) socket$inet6(0xa, 0x1, 0x0) 0s ago: executing program 1 (id=5249): socket$nl_generic(0x10, 0x3, 0x10) socket(0x2000000000000021, 0x2, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20902, 0x0) write$sequencer(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="810100200000000081", @ANYRES16=r0], 0x10) kernel console output (not intermixed with test programs): ave macvlan4): Enslaving as a backup interface with a down link [ 1209.692265][ T30] audit: type=1326 audit(1765581856.480:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23494 comm="syz.5.4836" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x0 [ 1209.848484][T23500] FAULT_INJECTION: forcing a failure. [ 1209.848484][T23500] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1209.911302][T23500] CPU: 0 UID: 0 PID: 23500 Comm: syz.1.4839 Tainted: G L syzkaller #0 PREEMPT(full) [ 1209.911332][T23500] Tainted: [L]=SOFTLOCKUP [ 1209.911340][T23500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1209.911352][T23500] Call Trace: [ 1209.911361][T23500] [ 1209.911369][T23500] dump_stack_lvl+0x189/0x250 [ 1209.911396][T23500] ? __pfx____ratelimit+0x10/0x10 [ 1209.911422][T23500] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1209.911443][T23500] ? __pfx__printk+0x10/0x10 [ 1209.911470][T23500] ? __might_fault+0xb0/0x130 [ 1209.911502][T23500] should_fail_ex+0x414/0x560 [ 1209.911530][T23500] _copy_from_user+0x2d/0xb0 [ 1209.911551][T23500] move_addr_to_kernel+0x7e/0x160 [ 1209.911575][T23500] get_compat_msghdr+0x3bd/0x4a0 [ 1209.911602][T23500] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1209.911624][T23500] ? kstrtouint+0x6e/0xe0 [ 1209.911653][T23500] ___sys_sendmsg+0x193/0x2a0 [ 1209.911676][T23500] ? __pfx____sys_sendmsg+0x10/0x10 [ 1209.911702][T23500] ? rcu_read_lock_any_held+0xb3/0x120 [ 1209.911751][T23500] ? __fget_files+0x2a/0x420 [ 1209.911772][T23500] ? __fget_files+0x3a0/0x420 [ 1209.911803][T23500] __sys_sendmsg+0x164/0x220 [ 1209.911825][T23500] ? __pfx___sys_sendmsg+0x10/0x10 [ 1209.911853][T23500] ? __pfx_ksys_write+0x10/0x10 [ 1209.911876][T23500] ? __do_fast_syscall_32+0xbe/0x570 [ 1209.911898][T23500] __do_fast_syscall_32+0x1f7/0x570 [ 1209.911916][T23500] ? rcu_is_watching+0x15/0xb0 [ 1209.911936][T23500] ? do_fast_syscall_32+0x34/0x80 [ 1209.911967][T23500] do_fast_syscall_32+0x34/0x80 [ 1209.911984][T23500] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1209.912006][T23500] RIP: 0023:0xf7f46539 [ 1209.912023][T23500] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1209.912039][T23500] RSP: 002b:00000000f543655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1209.912059][T23500] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000240 [ 1209.912072][T23500] RDX: 00000000000000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1209.912084][T23500] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1209.912095][T23500] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1209.912107][T23500] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1209.912136][T23500] [ 1210.721065][ T6352] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0053/input/input62 [ 1210.863326][ T6352] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0053/input/input63 [ 1210.973465][ T6352] uclogic 0003:256C:006D.0053: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.4-1/input0 [ 1211.099338][T17331] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1211.109834][T17331] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1211.119872][T17331] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1211.127806][T17331] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1211.135475][T17331] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1211.934464][ T107] usb 5-1: reset high-speed USB device number 106 using dummy_hcd [ 1212.416878][T23514] chnl_net:caif_netlink_parms(): no params data found [ 1212.923362][T17085] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1212.993148][ T6352] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1213.018173][T23514] bridge0: port 1(bridge_slave_0) entered blocking state [ 1213.036916][T23514] bridge0: port 1(bridge_slave_0) entered disabled state [ 1213.064859][T23514] bridge_slave_0: entered allmulticast mode [ 1213.083480][T23514] bridge_slave_0: entered promiscuous mode [ 1213.133571][T17085] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1213.153367][T17085] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1213.165906][ T6352] usb 4-1: Using ep0 maxpacket: 8 [ 1213.178447][T23514] bridge0: port 2(bridge_slave_1) entered blocking state [ 1213.179001][T17085] usb 1-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 1213.199903][T23514] bridge0: port 2(bridge_slave_1) entered disabled state [ 1213.207150][ T6352] usb 4-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e [ 1213.219660][ T6352] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1213.227797][T17331] Bluetooth: hci1: command tx timeout [ 1213.241907][T23514] bridge_slave_1: entered allmulticast mode [ 1213.249502][T17085] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1213.260050][T23514] bridge_slave_1: entered promiscuous mode [ 1213.275581][T17085] usb 1-1: config 0 descriptor?? [ 1213.299644][ T6352] usb 4-1: config 0 descriptor?? [ 1213.395551][T23546] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4852'. [ 1213.422509][T23514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1213.453934][T23514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1213.607100][T23514] team0: Port device team_slave_0 added [ 1213.681787][T23537] dummy0: entered promiscuous mode [ 1213.711085][T23537] macsec3: entered allmulticast mode [ 1213.728253][T23537] dummy0: entered allmulticast mode [ 1213.748003][T23537] dummy0: left allmulticast mode [ 1213.754814][T23537] dummy0: left promiscuous mode [ 1213.803222][ T107] usb 5-1: device descriptor read/64, error -71 [ 1213.812756][T23514] team0: Port device team_slave_1 added [ 1213.850612][ T5874] usb 4-1: USB disconnect, device number 79 [ 1213.995983][T23514] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1214.019007][T23514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1214.033178][ T6352] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1214.063163][ T107] usb 5-1: reset high-speed USB device number 106 using dummy_hcd [ 1214.093261][ T107] usb 5-1: device reset changed ep0 maxpacket size! [ 1214.115393][ T5829] usb 5-1: USB disconnect, device number 106 [ 1214.131435][T23514] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1214.179212][T23514] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1214.207352][T23514] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1214.278010][ T6352] usb 6-1: config 0 has no interfaces? [ 1214.294219][T23514] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1214.298652][ T6352] usb 6-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1214.361624][ T6352] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1214.385312][ T6352] usb 6-1: Product: syz [ 1214.408953][ T6352] usb 6-1: Manufacturer: syz [ 1214.422763][ T5960] bridge_slave_1: left allmulticast mode [ 1214.434968][ T6352] usb 6-1: SerialNumber: syz [ 1214.451698][ T5960] bridge_slave_1: left promiscuous mode [ 1214.457699][ T5829] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 1214.487224][ T5960] bridge0: port 2(bridge_slave_1) entered disabled state [ 1214.511080][ T6352] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1214.538834][ T6352] r8152-cfgselector 6-1: config 0 descriptor?? [ 1214.590168][ T5960] batman_adv: batadv0: Interface deactivated: gretap1 [ 1214.663066][ T5829] usb 5-1: Using ep0 maxpacket: 16 [ 1214.685744][ T5829] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 1214.733300][ T5829] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1214.769838][ T5829] usb 5-1: config 0 descriptor?? [ 1214.804293][ T5829] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 1215.313160][T17331] Bluetooth: hci1: command tx timeout [ 1215.438570][ T5960] batman_adv: batadv0: Removing interface: gretap1 [ 1216.082840][ T5960] bond2 (unregistering): (slave macvlan4): Releasing backup interface [ 1216.100030][ T5960] bond0 (unregistering): Released all slaves [ 1216.117916][ T5960] bond1 (unregistering): Released all slaves [ 1216.248822][ T5960] bond2 (unregistering): Released all slaves [ 1216.278088][T23550] tipc: Enabling of bearer rejected, failed to enable media [ 1216.375454][ T107] r8152-cfgselector 6-1: USB disconnect, device number 30 [ 1216.389492][T23514] hsr_slave_0: entered promiscuous mode [ 1216.404326][T23514] hsr_slave_1: entered promiscuous mode [ 1216.413418][ T5960] tipc: Disabling bearer [ 1216.422876][ T5960] tipc: Left network mode [ 1216.494593][ T5874] usb 1-1: USB disconnect, device number 61 [ 1217.025647][ T5829] usb 5-1: Detected FT232A [ 1217.043462][ T5829] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1217.104817][ T5829] usb 5-1: USB disconnect, device number 107 [ 1217.147565][ T5829] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1217.202241][ T5829] ftdi_sio 5-1:0.0: device disconnected [ 1217.389504][T17331] Bluetooth: hci1: command tx timeout [ 1217.868222][T23612] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4860'. [ 1218.033402][T17085] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 1218.235960][T17085] usb 5-1: config 0 has an invalid descriptor of length 173, skipping remainder of the config [ 1218.305818][T17085] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1218.332035][T17085] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1218.371090][T17085] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1218.426218][T17085] usb 5-1: config 0 descriptor?? [ 1218.650907][T23514] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1218.694703][T23514] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1218.775108][T23514] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1218.849858][T23514] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1219.389417][T23514] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1219.463435][T17331] Bluetooth: hci1: command tx timeout [ 1219.483371][ T5874] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1219.544769][T23514] 8021q: adding VLAN 0 to HW filter on device team0 [ 1219.588825][ T5978] bridge0: port 1(bridge_slave_0) entered blocking state [ 1219.588935][ T5978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1219.669884][ T5874] usb 1-1: Using ep0 maxpacket: 8 [ 1219.706617][ T5978] bridge0: port 2(bridge_slave_1) entered blocking state [ 1219.706733][ T5978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1219.829487][ T5874] usb 1-1: config 6 has an invalid interface number: 2 but max is 0 [ 1219.850340][ T5874] usb 1-1: config 6 has no interface number 0 [ 1219.864276][ T5874] usb 1-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1219.910262][ T5874] usb 1-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1219.944373][ T5874] usb 1-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1219.971749][ T5874] usb 1-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1220.103357][T23514] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1220.272062][ T5874] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 1220.300933][T23514] veth0_vlan: entered promiscuous mode [ 1220.311614][ T5874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1220.331615][T23514] veth1_vlan: entered promiscuous mode [ 1220.338271][ T5874] usb 1-1: Product: syz [ 1220.345785][ T5874] usb 1-1: Manufacturer: syz [ 1220.368715][ T5874] usb 1-1: SerialNumber: syz [ 1220.441322][ T5960] hsr_slave_0: left promiscuous mode [ 1220.464165][ T5960] hsr_slave_1: left promiscuous mode [ 1220.470129][ T5960] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1220.526680][ T5960] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1220.533399][ T5874] hso 1-1:6.2: Failed to find BULK IN ep [ 1220.871918][ T5874] usb 5-1: USB disconnect, device number 108 [ 1221.709059][ T5960] team0 (unregistering): Port device team_slave_1 removed [ 1221.826693][ T5960] team0 (unregistering): Port device team_slave_0 removed [ 1221.833142][ T5874] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1222.043110][ T5874] usb 6-1: Using ep0 maxpacket: 8 [ 1222.057732][ T5874] usb 6-1: New USB device found, idVendor=0bc3, idProduct=0001, bcdDevice=11.85 [ 1222.088903][T23688] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4870'. [ 1222.100837][ T5874] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1222.112206][ T5874] usb 6-1: Product: syz [ 1222.116680][ T5874] usb 6-1: Manufacturer: syz [ 1222.121365][ T5874] usb 6-1: SerialNumber: syz [ 1222.145881][ T5874] usb 6-1: config 0 descriptor?? [ 1222.163719][ T5874] ipw 6-1:0.0: IPWireless converter converter detected [ 1222.311888][ T5874] usb 1-1: USB disconnect, device number 62 [ 1222.488495][ T107] usb 6-1: USB disconnect, device number 31 [ 1222.510538][ T107] ipw 6-1:0.0: device disconnected [ 1222.831145][T23514] veth0_macvtap: entered promiscuous mode [ 1222.858084][T23514] veth1_macvtap: entered promiscuous mode [ 1222.944140][T23514] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1222.995074][T23514] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1223.045737][ T5962] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1223.080464][ T5962] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1223.247139][ T5962] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1223.261718][ T5962] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1223.276808][T23705] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4874'. [ 1223.303391][T23708] input: syz0 as /devices/virtual/input/input64 [ 1223.796038][ T5978] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1223.840337][ T5978] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1223.884000][ T5829] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1224.007470][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1224.007491][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1224.067277][ T5829] usb 6-1: Using ep0 maxpacket: 8 [ 1224.082104][ T5829] usb 6-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e [ 1224.082134][ T5829] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1224.096951][ T5829] usb 6-1: config 0 descriptor?? [ 1224.364049][T23714] macsec2: entered allmulticast mode [ 1224.375284][T23730] FAULT_INJECTION: forcing a failure. [ 1224.375284][T23730] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1224.383159][T23714] dummy0: entered allmulticast mode [ 1224.409333][T23730] CPU: 0 UID: 0 PID: 23730 Comm: syz.4.4885 Tainted: G L syzkaller #0 PREEMPT(full) [ 1224.409351][T23730] Tainted: [L]=SOFTLOCKUP [ 1224.409355][T23730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1224.409362][T23730] Call Trace: [ 1224.409367][T23730] [ 1224.409372][T23730] dump_stack_lvl+0x189/0x250 [ 1224.409391][T23730] ? __pfx____ratelimit+0x10/0x10 [ 1224.409406][T23730] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1224.409417][T23730] ? __pfx__printk+0x10/0x10 [ 1224.409437][T23730] ? __might_fault+0xb0/0x130 [ 1224.409458][T23730] should_fail_ex+0x414/0x560 [ 1224.409474][T23730] _copy_from_user+0x2d/0xb0 [ 1224.409486][T23730] io_msg_copy_hdr+0x331/0x870 [ 1224.409503][T23730] ? rcu_is_watching+0x15/0xb0 [ 1224.409515][T23730] ? __pfx_io_msg_copy_hdr+0x10/0x10 [ 1224.409528][T23730] ? trace_kmalloc+0x1f/0xb0 [ 1224.409536][T23730] ? __kmalloc_noprof+0x43e/0x800 [ 1224.409548][T23730] ? __asan_memset+0x22/0x50 [ 1224.409558][T23730] ? io_cache_alloc_new+0x90/0x100 [ 1224.409576][T23730] io_recvmsg_prep+0x93a/0x10a0 [ 1224.409597][T23730] ? __pfx_io_recvmsg_prep+0x10/0x10 [ 1224.409610][T23730] ? __pfx___io_alloc_req_refill+0x10/0x10 [ 1224.409628][T23730] ? io_task_refs_refill+0xbb/0x180 [ 1224.409644][T23730] io_submit_sqes+0xad3/0x2140 [ 1224.409670][T23730] __se_sys_io_uring_enter+0x2e0/0x2b60 [ 1224.409683][T23730] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 1224.409699][T23730] ? vfs_write+0x956/0xb30 [ 1224.409715][T23730] ? ksys_write+0x1cb/0x250 [ 1224.409726][T23730] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 1224.409736][T23730] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 1224.409745][T23730] ? __pfx_vfs_write+0x10/0x10 [ 1224.409757][T23730] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1224.409768][T23730] ? __fget_files+0x3a0/0x420 [ 1224.409784][T23730] ? fput+0xa0/0xd0 [ 1224.409797][T23730] ? ksys_write+0x22a/0x250 [ 1224.409808][T23730] ? __pfx_ksys_write+0x10/0x10 [ 1224.409820][T23730] ? __ia32_sys_io_uring_enter+0x21/0xf0 [ 1224.409832][T23730] __do_fast_syscall_32+0x1f7/0x570 [ 1224.409842][T23730] ? trace_page_fault_user+0x84/0x1c0 [ 1224.409852][T23730] ? do_fast_syscall_32+0x34/0x80 [ 1224.409864][T23730] do_fast_syscall_32+0x34/0x80 [ 1224.409874][T23730] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1224.409886][T23730] RIP: 0023:0xf70fd539 [ 1224.409896][T23730] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1224.409904][T23730] RSP: 002b:00000000f54ed55c EFLAGS: 00000206 ORIG_RAX: 00000000000001aa [ 1224.409916][T23730] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000154e [ 1224.409923][T23730] RDX: 00000000ffffffff RSI: 0000000000000001 RDI: 0000000000000000 [ 1224.409929][T23730] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1224.409935][T23730] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1224.409941][T23730] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1224.409957][T23730] [ 1224.412374][T23714] dummy0: left allmulticast mode [ 1224.843473][T17085] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1224.951612][ T39] usb 6-1: USB disconnect, device number 32 [ 1224.997063][T17085] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1225.029232][T17085] usb 1-1: config 13 has an invalid interface number: 2 but max is 0 [ 1225.045756][T17085] usb 1-1: config 13 has no interface number 0 [ 1225.052222][T17085] usb 1-1: config 13 interface 2 altsetting 5 endpoint 0x2 has invalid maxpacket 17704, setting to 1024 [ 1225.063741][T17085] usb 1-1: config 13 interface 2 altsetting 5 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 1225.083322][T17085] usb 1-1: config 13 interface 2 altsetting 5 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1225.093773][T17085] usb 1-1: config 13 interface 2 has no altsetting 0 [ 1225.102618][T17085] usb 1-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice=57.1b [ 1225.112591][T17085] usb 1-1: New USB device strings: Mfr=1, Product=245, SerialNumber=2 [ 1225.121234][T17085] usb 1-1: Product: syz [ 1225.125923][T17085] usb 1-1: Manufacturer: syz [ 1225.130532][T17085] usb 1-1: SerialNumber: syz [ 1225.139602][T23728] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1225.379809][T23728] batadv_slave_0: entered promiscuous mode [ 1225.815651][T23727] batadv_slave_0: left promiscuous mode [ 1226.082256][T17085] appletouch 1-1:13.2: Could not find int-in endpoint [ 1226.129685][T17085] appletouch 1-1:13.2: probe with driver appletouch failed with error -5 [ 1226.153637][T17085] usbhid 1-1:13.2: couldn't find an input interrupt endpoint [ 1226.184055][T23769] FAULT_INJECTION: forcing a failure. [ 1226.184055][T23769] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1226.205516][T17085] usb 1-1: USB disconnect, device number 63 [ 1226.242420][T23769] CPU: 1 UID: 0 PID: 23769 Comm: syz.3.4899 Tainted: G L syzkaller #0 PREEMPT(full) [ 1226.242448][T23769] Tainted: [L]=SOFTLOCKUP [ 1226.242454][T23769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1226.242464][T23769] Call Trace: [ 1226.242472][T23769] [ 1226.242480][T23769] dump_stack_lvl+0x189/0x250 [ 1226.242512][T23769] ? __pfx____ratelimit+0x10/0x10 [ 1226.242536][T23769] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1226.242556][T23769] ? __pfx__printk+0x10/0x10 [ 1226.242578][T23769] ? __might_fault+0xb0/0x130 [ 1226.242611][T23769] should_fail_ex+0x414/0x560 [ 1226.242636][T23769] _copy_from_iter+0x1cd/0x1630 [ 1226.242664][T23769] ? __build_skb_around+0x22d/0x3c0 [ 1226.242693][T23769] ? __pfx__copy_from_iter+0x10/0x10 [ 1226.242714][T23769] ? __alloc_skb+0x2f1/0x430 [ 1226.242738][T23769] ? __pfx___alloc_skb+0x10/0x10 [ 1226.242765][T23769] ? netlink_sendmsg+0x642/0xb30 [ 1226.242782][T23769] ? skb_put+0x11b/0x210 [ 1226.242801][T23769] netlink_sendmsg+0x6b2/0xb30 [ 1226.242827][T23769] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1226.242846][T23769] ? __import_iovec+0x5d4/0x7f0 [ 1226.242858][T23769] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1226.242877][T23769] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1226.242891][T23769] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1226.242910][T23769] __sock_sendmsg+0x21c/0x270 [ 1226.242934][T23769] ____sys_sendmsg+0x505/0x820 [ 1226.242954][T23769] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1226.242974][T23769] ? kstrtouint+0x6e/0xe0 [ 1226.243000][T23769] ___sys_sendmsg+0x21f/0x2a0 [ 1226.243022][T23769] ? __pfx____sys_sendmsg+0x10/0x10 [ 1226.243045][T23769] ? rcu_read_lock_any_held+0xb3/0x120 [ 1226.243087][T23769] ? __fget_files+0x2a/0x420 [ 1226.243107][T23769] ? __fget_files+0x3a0/0x420 [ 1226.243138][T23769] __sys_sendmsg+0x164/0x220 [ 1226.243156][T23769] ? __pfx___sys_sendmsg+0x10/0x10 [ 1226.243181][T23769] ? __pfx_ksys_write+0x10/0x10 [ 1226.243202][T23769] ? __do_fast_syscall_32+0xbe/0x570 [ 1226.243222][T23769] __do_fast_syscall_32+0x1f7/0x570 [ 1226.243238][T23769] ? rcu_is_watching+0x15/0xb0 [ 1226.243256][T23769] ? do_fast_syscall_32+0x34/0x80 [ 1226.243276][T23769] do_fast_syscall_32+0x34/0x80 [ 1226.243291][T23769] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1226.243312][T23769] RIP: 0023:0xf708d539 [ 1226.243328][T23769] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1226.243343][T23769] RSP: 002b:00000000f547d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1226.243362][T23769] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800002c0 [ 1226.243374][T23769] RDX: 0000000024008818 RSI: 0000000000000000 RDI: 0000000000000000 [ 1226.243385][T23769] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1226.243394][T23769] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1226.243405][T23769] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1226.243430][T23769] [ 1226.826013][ T5829] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1226.993131][T17085] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 1227.043135][ T5829] usb 2-1: Using ep0 maxpacket: 8 [ 1227.052412][ T5829] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1227.072131][ T5829] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1227.104473][ T5829] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1227.163072][ T5829] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1227.217214][T17085] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1227.227059][ T5829] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1227.245666][T17085] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1227.262935][ T5829] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1227.293141][T17085] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1227.302217][T17085] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1227.317466][ T5829] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1227.568513][T17085] usb 6-1: usb_control_msg returned -32 [ 1227.609406][T17085] usbtmc 6-1:16.0: can't read capabilities [ 1227.632654][ T5829] usb 2-1: GET_CAPABILITIES returned 0 [ 1227.654497][ T5829] usbtmc 2-1:16.0: can't read capabilities [ 1227.861866][T23773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1227.862259][T23773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1227.868497][T23773] usbtmc 6-1:16.0: INITIATE_CLEAR returned 0 [ 1227.869333][T17085] usb 2-1: USB disconnect, device number 75 [ 1228.320276][T17085] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1228.453124][T17085] usb 2-1: device descriptor read/64, error -71 [ 1228.696346][T17085] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1228.803311][ T5829] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 1228.843365][T17085] usb 2-1: device descriptor read/64, error -71 [ 1228.953600][T17085] usb usb2-port1: attempt power cycle [ 1229.023281][ T5829] usb 5-1: Using ep0 maxpacket: 8 [ 1229.030202][ T5829] usb 5-1: config index 0 descriptor too short (expected 30482, got 18) [ 1229.039183][ T5829] usb 5-1: config 0 has too many interfaces: 101, using maximum allowed: 32 [ 1229.055273][ T5829] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 101 [ 1229.076903][ T5829] usb 5-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 5.00 [ 1229.093074][ T5829] usb 5-1: New USB device strings: Mfr=253, Product=255, SerialNumber=0 [ 1229.111952][ T5829] usb 5-1: Product: syz [ 1229.122072][ T5829] usb 5-1: Manufacturer: syz [ 1229.134917][ T5829] usb 5-1: config 0 descriptor?? [ 1229.167874][ T5829] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 1229.175558][T23804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1229.194128][ T5829] usb 5-1: Detected FT2232C/D [ 1229.199862][T23804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1229.303166][T17085] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1229.338610][T17085] usb 2-1: device descriptor read/8, error -71 [ 1229.347694][ T5829] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1229.361349][ T5829] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1229.578441][ T6352] usb 5-1: USB disconnect, device number 109 [ 1229.585808][T17085] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1229.596980][ T6352] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1229.608712][ T6352] ftdi_sio 5-1:0.0: device disconnected [ 1229.615018][ T39] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1229.786693][ T39] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1229.800445][ T39] usb 4-1: config 13 has an invalid interface number: 2 but max is 0 [ 1229.809000][ T39] usb 4-1: config 13 has no interface number 0 [ 1229.815295][ T39] usb 4-1: config 13 interface 2 altsetting 5 endpoint 0x2 has invalid maxpacket 17704, setting to 1024 [ 1229.827240][ T39] usb 4-1: config 13 interface 2 altsetting 5 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 1229.849478][ T39] usb 4-1: config 13 interface 2 altsetting 5 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1229.862961][ T39] usb 4-1: config 13 interface 2 has no altsetting 0 [ 1229.877315][ T39] usb 4-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice=57.1b [ 1229.886811][ T39] usb 4-1: New USB device strings: Mfr=1, Product=245, SerialNumber=2 [ 1229.897928][ T39] usb 4-1: Product: syz [ 1229.902490][ T39] usb 4-1: Manufacturer: syz [ 1229.907416][ T39] usb 4-1: SerialNumber: syz [ 1229.918050][T23818] raw-gadget.5 gadget.3: fail, usb_ep_enable returned -22 [ 1230.048675][T23823] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4917'. [ 1230.060339][T23823] program syz.0.4917 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1230.215323][ T39] appletouch 4-1:13.2: Could not find int-in endpoint [ 1230.222172][ T39] appletouch 4-1:13.2: probe with driver appletouch failed with error -5 [ 1230.265607][ T39] usbhid 4-1:13.2: couldn't find an input interrupt endpoint [ 1230.297679][ T39] usb 4-1: USB disconnect, device number 80 [ 1230.433997][T23834] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4921'. [ 1230.565662][ T6352] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 1230.693155][ T39] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1230.725305][ T6352] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1230.744138][ T6352] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1230.760574][ T6352] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1230.781870][ T6352] usb 5-1: config 0 descriptor?? [ 1230.805203][ T6352] pwc: Askey VC010 type 2 USB webcam detected. [ 1230.853256][ T39] usb 1-1: Using ep0 maxpacket: 16 [ 1230.863916][ T39] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 1230.875321][ T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1230.892260][ T39] usb 1-1: config 0 descriptor?? [ 1230.911643][ T39] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 1231.205573][ T6352] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1231.215006][ T6352] pwc: recv_control_msg error -32 req 02 val 2700 [ 1231.223356][ T6352] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1231.230867][ T6352] pwc: recv_control_msg error -32 req 04 val 1000 [ 1231.240910][ T6352] pwc: recv_control_msg error -32 req 04 val 1300 [ 1231.252420][ T6352] pwc: recv_control_msg error -32 req 04 val 1400 [ 1231.261078][ T6352] pwc: recv_control_msg error -32 req 02 val 2000 [ 1231.269820][ T6352] pwc: recv_control_msg error -32 req 02 val 2100 [ 1231.277483][ T6352] pwc: recv_control_msg error -32 req 04 val 1500 [ 1231.284995][ T6352] pwc: recv_control_msg error -32 req 02 val 2500 [ 1231.292412][ T6352] pwc: recv_control_msg error -32 req 02 val 2400 [ 1231.299802][ T6352] pwc: recv_control_msg error -32 req 02 val 2600 [ 1231.515979][ T6352] pwc: recv_control_msg error -71 req 02 val 2800 [ 1231.524453][ T6352] pwc: recv_control_msg error -71 req 04 val 1100 [ 1231.533856][ T6352] pwc: recv_control_msg error -71 req 04 val 1200 [ 1231.542238][ T6352] pwc: Registered as video103. [ 1231.552074][ T6352] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input65 [ 1231.605940][ T6352] usb 5-1: USB disconnect, device number 110 [ 1232.314664][T23852] input: syz0 as /devices/virtual/input/input66 [ 1232.451350][T23856] netlink: 'syz.4.4928': attribute type 5 has an invalid length. [ 1232.543106][ T107] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1232.693113][ T107] usb 4-1: Using ep0 maxpacket: 8 [ 1232.701910][ T107] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1232.711788][ T107] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1232.721585][ T107] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1232.731686][ T107] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1232.744868][ T107] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1232.754807][ T107] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1232.972040][ T107] usb 4-1: GET_CAPABILITIES returned 0 [ 1232.977784][ T107] usbtmc 4-1:16.0: can't read capabilities [ 1233.239635][T23857] netlink: 'syz.3.4937': attribute type 10 has an invalid length. [ 1233.247699][T23857] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4937'. [ 1233.257655][T23857] team0: entered promiscuous mode [ 1233.262790][T23857] team_slave_0: entered promiscuous mode [ 1233.268664][T23857] team_slave_1: entered promiscuous mode [ 1233.274552][T23857] team0: entered allmulticast mode [ 1233.279714][T23857] team_slave_0: entered allmulticast mode [ 1233.285490][T23857] team_slave_1: entered allmulticast mode [ 1233.292506][T23857] bridge0: port 3(team0) entered blocking state [ 1233.313727][T23857] bridge0: port 3(team0) entered disabled state [ 1233.333519][T23857] bridge0: port 3(team0) entered blocking state [ 1233.340013][T23857] bridge0: port 3(team0) entered forwarding state [ 1233.353925][ T39] usb 1-1: Detected FT232A [ 1233.375088][ T39] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1233.413900][T23857] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4937'. [ 1233.420972][ T39] usb 1-1: USB disconnect, device number 64 [ 1233.422881][T23857] netlink: zone id is out of range [ 1233.454339][T23857] netlink: zone id is out of range [ 1233.460844][ T39] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1233.477722][T23857] netlink: zone id is out of range [ 1233.482859][T23857] netlink: zone id is out of range [ 1233.492052][T23857] netlink: zone id is out of range [ 1233.496705][ T39] ftdi_sio 1-1:0.0: device disconnected [ 1233.497304][T23857] netlink: zone id is out of range [ 1233.530231][T23857] netlink: zone id is out of range [ 1233.545764][T23857] netlink: zone id is out of range [ 1233.749004][T23867] netlink: 4456 bytes leftover after parsing attributes in process `syz.0.4932'. [ 1233.843141][ T39] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 1233.956606][T23871] netlink: 200 bytes leftover after parsing attributes in process `syz.0.4935'. [ 1233.995152][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1234.006187][ T39] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1234.015379][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1234.027268][ T39] usb 5-1: config 0 descriptor?? [ 1234.114514][T23774] usbtmc 6-1:16.0: usbtmc_ioctl_request failed -110 [ 1234.122436][T17085] usb 2-1: device descriptor read/8, error -71 [ 1234.151624][ T6352] usb 4-1: USB disconnect, device number 81 [ 1234.256534][T17085] usb usb2-port1: unable to enumerate USB device [ 1234.269103][ T39] usbhid 5-1:0.0: can't add hid device: -71 [ 1234.288724][ T39] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1234.315797][ T39] usb 5-1: USB disconnect, device number 111 [ 1234.645835][T23885] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1234.663306][T23885] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1234.763127][ T39] usb 5-1: new full-speed USB device number 112 using dummy_hcd [ 1234.765432][ T5829] usb 6-1: USB disconnect, device number 33 [ 1234.889716][T23887] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4939'. [ 1234.971666][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1235.003425][ T39] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1235.023394][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1235.066342][ T39] usb 5-1: config 0 descriptor?? [ 1235.091160][ T39] hub 5-1:0.0: USB hub found [ 1235.288007][ T39] hub 5-1:0.0: 1 port detected [ 1235.663320][ T5829] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1235.835318][ T5829] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 1235.874703][ T5829] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1235.914326][ T5829] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1235.946360][ T5829] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1236.005693][ T5829] usb 6-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1236.019395][ T5829] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1236.079037][ T5829] usb 6-1: Product: syz [ 1236.089302][ T5829] usb 6-1: Manufacturer: syz [ 1236.113986][ T5829] usb 6-1: SerialNumber: syz [ 1236.148406][ T5829] usb 6-1: config 0 descriptor?? [ 1236.174429][ T5829] iguanair 6-1:0.0: probe with driver iguanair failed with error -12 [ 1236.185333][T23865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1236.235111][T23865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1236.425164][T23903] kAFS: unable to lookup cell '(,' [ 1236.444460][ T6352] usb 6-1: USB disconnect, device number 34 [ 1236.674691][ T39] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 1236.674927][ T5829] usb 5-1: USB disconnect, device number 112 [ 1236.688771][ T39] hub 5-1:0.0: get_hub_status failed [ 1237.673154][ T5829] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 1237.870606][ T5829] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1237.891394][ T5887] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1237.898679][ T5829] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1237.939786][ T5829] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1237.966121][ T5829] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1237.997360][ T5829] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1238.029497][ T5829] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1238.057212][ T5829] usb 5-1: config 0 descriptor?? [ 1238.105899][ T5887] usb 1-1: config 0 has an invalid interface number: 185 but max is 0 [ 1238.111679][T23964] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4962'. [ 1238.243938][ T5887] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1238.327956][ T5887] usb 1-1: config 0 has no interface number 0 [ 1238.419762][ T5887] usb 1-1: config 0 interface 185 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 16 [ 1238.498595][ T5887] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=d2.82 [ 1238.549912][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1238.572220][ T5829] plantronics 0003:047F:FFFF.0054: ignoring exceeding usage max [ 1238.598009][ T5887] usb 1-1: Product: syz [ 1238.640050][ T5887] usb 1-1: Manufacturer: syz [ 1238.654016][ T5887] usb 1-1: SerialNumber: syz [ 1238.687768][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.697254][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.711231][ T5887] usb 1-1: config 0 descriptor?? [ 1238.786947][ T5829] plantronics 0003:047F:FFFF.0054: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1238.788038][ T5887] usb 1-1: bad CDC descriptors [ 1238.889350][ T5887] usb 1-1: unsupported MDLM descriptors [ 1239.736776][T23975] netlink: 'syz.5.4965': attribute type 12 has an invalid length. [ 1239.766344][T23975] netlink: 'syz.5.4965': attribute type 29 has an invalid length. [ 1239.790069][T23975] netlink: 148 bytes leftover after parsing attributes in process `syz.5.4965'. [ 1239.821106][T23975] netlink: 'syz.5.4965': attribute type 2 has an invalid length. [ 1239.838616][T23975] netlink: 'syz.5.4965': attribute type 3 has an invalid length. [ 1239.876848][T23975] netlink: 15 bytes leftover after parsing attributes in process `syz.5.4965'. [ 1240.321649][T23987] FAULT_INJECTION: forcing a failure. [ 1240.321649][T23987] name failslab, interval 1, probability 0, space 0, times 0 [ 1240.335332][T23987] CPU: 0 UID: 0 PID: 23987 Comm: syz.5.4969 Tainted: G L syzkaller #0 PREEMPT(full) [ 1240.335361][T23987] Tainted: [L]=SOFTLOCKUP [ 1240.335368][T23987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1240.335379][T23987] Call Trace: [ 1240.335388][T23987] [ 1240.335396][T23987] dump_stack_lvl+0x189/0x250 [ 1240.335422][T23987] ? __pfx____ratelimit+0x10/0x10 [ 1240.335447][T23987] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1240.335467][T23987] ? __pfx__printk+0x10/0x10 [ 1240.335498][T23987] ? __pfx___might_resched+0x10/0x10 [ 1240.335515][T23987] ? fs_reclaim_acquire+0x7d/0x100 [ 1240.335540][T23987] should_fail_ex+0x414/0x560 [ 1240.335569][T23987] should_failslab+0xa8/0x100 [ 1240.335591][T23987] kmem_cache_alloc_noprof+0x88/0x710 [ 1240.335614][T23987] ? set_page_refcounted+0xa0/0x1e0 [ 1240.335634][T23987] ? __pmd_alloc+0xc2/0x5d0 [ 1240.335661][T23987] __pmd_alloc+0xc2/0x5d0 [ 1240.335690][T23987] handle_mm_fault+0xe51/0x32b0 [ 1240.335726][T23987] ? handle_mm_fault+0xdb/0x32b0 [ 1240.335758][T23987] ? __pfx_handle_mm_fault+0x10/0x10 [ 1240.335808][T23987] ? lock_mm_and_find_vma+0x9c/0x300 [ 1240.335828][T23987] do_user_addr_fault+0x764/0x1380 [ 1240.335862][T23987] exc_page_fault+0x82/0x100 [ 1240.335889][T23987] asm_exc_page_fault+0x26/0x30 [ 1240.335906][T23987] RIP: 0010:__put_user_4+0xd/0x20 [ 1240.335929][T23987] Code: 66 89 01 31 c9 0f 01 ca e9 10 76 03 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 1240.335945][T23987] RSP: 0018:ffffc9000d43fcd8 EFLAGS: 00050206 [ 1240.335962][T23987] RAX: 000000000000041f RBX: 0000000000000000 RCX: 00000000800009c0 [ 1240.335975][T23987] RDX: 0000000000000000 RSI: ffffffff8d976eb6 RDI: ffffffff8bc07b60 [ 1240.335988][T23987] RBP: 0000000080045432 R08: ffffffff820f6720 R09: ffff88807d8c4cc0 [ 1240.336001][T23987] R10: 0000000080045440 R11: 0000000000000000 R12: ffff8880797fe004 [ 1240.336014][T23987] R13: dffffc0000000000 R14: 00000000800009c0 R15: ffff88801fadbd30 [ 1240.336033][T23987] ? __might_fault+0xb0/0x130 [ 1240.336064][T23987] tty_ioctl+0x567/0xde0 [ 1240.336091][T23987] __ia32_compat_sys_ioctl+0x543/0x840 [ 1240.336113][T23987] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1240.336132][T23987] ? __fget_files+0x3a0/0x420 [ 1240.336160][T23987] ? fput+0xa0/0xd0 [ 1240.336183][T23987] ? ksys_write+0x22a/0x250 [ 1240.336203][T23987] ? __pfx_ksys_write+0x10/0x10 [ 1240.336226][T23987] ? __do_fast_syscall_32+0xbe/0x570 [ 1240.336248][T23987] __do_fast_syscall_32+0x1f7/0x570 [ 1240.336267][T23987] ? rcu_is_watching+0x15/0xb0 [ 1240.336286][T23987] ? do_fast_syscall_32+0x34/0x80 [ 1240.336309][T23987] do_fast_syscall_32+0x34/0x80 [ 1240.336326][T23987] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1240.336346][T23987] RIP: 0023:0xf709d539 [ 1240.336360][T23987] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1240.336375][T23987] RSP: 002b:00000000f548d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1240.336391][T23987] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080045432 [ 1240.336403][T23987] RDX: 00000000800009c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1240.336414][T23987] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1240.336425][T23987] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1240.336436][T23987] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1240.336465][T23987] [ 1240.654034][ T39] usb 5-1: USB disconnect, device number 113 [ 1241.052439][T24000] netlink: 'syz.5.4972': attribute type 3 has an invalid length. [ 1241.061498][T23995] could not allocate digest TFM handle sha512-ssse3 [ 1241.171584][T24002] net_ratelimit: 1 callbacks suppressed [ 1241.171595][T24002] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1241.185336][T24002] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1241.740224][T24004] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4974'. [ 1241.961809][T24008] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4977'. [ 1241.977296][ T5829] usb 1-1: USB disconnect, device number 65 [ 1242.163140][ T107] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1242.249655][T24021] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4979'. [ 1242.363128][ T107] usb 2-1: Using ep0 maxpacket: 8 [ 1242.381171][ T107] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1242.406416][ T107] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1242.438711][ T107] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1242.453147][T17085] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 1242.463055][ T107] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1242.490938][ T107] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1242.520716][ T107] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1242.663558][T17085] usb 5-1: Using ep0 maxpacket: 16 [ 1242.681402][T17085] usb 5-1: config 1 has an invalid interface number: 209 but max is 0 [ 1242.693372][T17085] usb 5-1: config 1 has no interface number 0 [ 1242.731243][T17085] usb 5-1: config 1 interface 209 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1242.742169][T17085] usb 5-1: config 1 interface 209 altsetting 2 bulk endpoint 0x81 has invalid maxpacket 64 [ 1242.752895][T24027] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4984'. [ 1242.773194][T17085] usb 5-1: config 1 interface 209 has no altsetting 0 [ 1242.790795][ T107] usb 2-1: GET_CAPABILITIES returned 0 [ 1242.806677][ T107] usbtmc 2-1:16.0: can't read capabilities [ 1242.813861][T17085] usb 5-1: New USB device found, idVendor=8086, idProduct=07d3, bcdDevice=7e.e9 [ 1242.838957][T17085] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1242.849685][T17085] usb 5-1: Product: syz [ 1242.857018][T17085] usb 5-1: Manufacturer: syz [ 1242.862096][T17085] usb 5-1: SerialNumber: syz [ 1242.924302][T24020] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1242.948764][T24020] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1243.054725][T24006] netlink: 'syz.1.4975': attribute type 10 has an invalid length. [ 1243.085102][T24006] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4975'. [ 1243.134978][T24006] team0: entered promiscuous mode [ 1243.149763][T24006] team_slave_0: entered promiscuous mode [ 1243.173839][T24006] team_slave_1: entered promiscuous mode [ 1243.195476][T24020] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1243.202719][T24020] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1243.211558][T24006] team0: entered allmulticast mode [ 1243.222652][T24037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4975'. [ 1243.236660][T24006] team_slave_0: entered allmulticast mode [ 1243.237801][T24037] netlink: zone id is out of range [ 1243.242395][T24006] team_slave_1: entered allmulticast mode [ 1243.254022][T24037] netlink: zone id is out of range [ 1243.259161][T24037] netlink: zone id is out of range [ 1243.274847][T24006] bridge0: port 3(team0) entered blocking state [ 1243.279568][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1243.281269][T24006] bridge0: port 3(team0) entered disabled state [ 1243.290218][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1243.305617][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1243.326028][T24037] netlink: zone id is out of range [ 1243.333386][T24037] netlink: zone id is out of range [ 1243.347067][T24037] netlink: zone id is out of range [ 1243.354774][T24037] netlink: zone id is out of range [ 1243.375080][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1243.377313][T24006] bridge0: port 3(team0) entered blocking state [ 1243.384167][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1243.390480][T24006] bridge0: port 3(team0) entered forwarding state [ 1243.399670][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1243.415119][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1243.434021][T24037] netlink: zone id is out of range [ 1243.458245][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1243.467335][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1243.476416][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1243.485489][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1243.498345][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1243.507430][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1243.516504][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1243.525585][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1243.552179][T24020] netlink: 'syz.4.4981': attribute type 10 has an invalid length. [ 1243.604369][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 1243.615538][T17085] cdc_subset 5-1:1.209 usb0: register 'cdc_subset' at usb-dummy_hcd.4-1, Boot Loader OBject, 06:c6:fd:85:7b:51 [ 1243.716786][T17085] usb 2-1: USB disconnect, device number 80 [ 1243.738620][T24051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1243.764389][T24051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1243.885339][ T107] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1244.082368][ T107] usb 4-1: too many endpoints for config 0 interface 0 altsetting 144: 127, using maximum allowed: 30 [ 1244.097168][ T107] usb 4-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1244.124765][ T107] usb 4-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1244.146254][ T107] usb 4-1: config 0 interface 0 altsetting 144 has 1 endpoint descriptor, different from the interface descriptor's value: 127 [ 1244.196987][ T107] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1244.225011][ T107] usb 4-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 1244.251349][ T107] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1244.278305][ T107] usb 4-1: config 0 descriptor?? [ 1245.004860][ T107] usbhid 4-1:0.0: can't add hid device: -71 [ 1245.010895][ T107] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1245.052509][ T107] usb 4-1: USB disconnect, device number 82 [ 1245.144915][T24083] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4996'. [ 1245.174023][T24083] bridge0: port 3(team0) entered disabled state [ 1245.180596][T24083] bridge0: port 2(bridge_slave_1) entered disabled state [ 1245.188327][T24083] bridge0: port 1(bridge_slave_0) entered disabled state [ 1245.257561][ T9929] usb 5-1: USB disconnect, device number 114 [ 1245.265658][ T9929] cdc_subset 5-1:1.209 usb0: unregister 'cdc_subset' usb-dummy_hcd.4-1, Boot Loader OBject [ 1245.273954][T24088] SET target dimension over the limit! [ 1245.463978][T24103] input: syz0 as /devices/virtual/input/input68 [ 1245.680965][T24114] netlink: 'syz.3.5004': attribute type 10 has an invalid length. [ 1245.729224][T24104] syz_tun: entered allmulticast mode [ 1245.766969][T24112] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1245.780912][T24097] syz_tun: left allmulticast mode [ 1247.284568][T24130] netlink: 'syz.4.5007': attribute type 10 has an invalid length. [ 1247.365491][T24129] delete_channel: no stack [ 1247.696056][ T5829] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1247.796939][T23526] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1247.915858][ T5829] usb 1-1: Using ep0 maxpacket: 32 [ 1247.934535][ T5829] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1247.960248][ T5829] usb 1-1: config 0 has no interfaces? [ 1247.972262][ T5829] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1247.996718][T23526] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1248.010461][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880587e7400: rx timeout, send abort [ 1248.018794][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880587e7800: rx timeout, send abort [ 1248.027205][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880587e7400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1248.041516][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880587e7800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1248.060533][ T5829] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1248.070731][ T5829] usb 1-1: config 0 descriptor?? [ 1248.086405][T23526] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1248.113935][T23526] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1248.130406][T23526] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1248.149607][T24129] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1248.174741][T23526] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1248.387522][T23526] usb 1-1: USB disconnect, device number 66 [ 1248.706875][T24059] syz.5.4992 (24059): drop_caches: 2 [ 1249.123315][ T10] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1249.246797][T24165] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5012'. [ 1249.275702][T24165] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5012'. [ 1249.320329][ T10] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 1249.338642][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1249.371629][ T10] usb 2-1: config 0 descriptor?? [ 1249.416612][ T10] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1249.613633][ T10] gp8psk: usb in 128 operation failed. [ 1249.664486][ T10] gp8psk: usb in 137 operation failed. [ 1249.673798][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1249.688518][ T10] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 1249.705572][ T10] usb 2-1: media controller created [ 1249.726859][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1249.753806][ T10] gp8psk_fe: Frontend attached [ 1249.759236][ T10] usb 2-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 1249.774729][ T10] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 1249.898965][ T10] gp8psk: usb in 138 operation failed. [ 1249.913073][ T10] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 1249.926691][ T10] gp8psk: found Genpix USB device pID = 203 (hex) [ 1249.936754][ T10] usb 2-1: USB disconnect, device number 81 [ 1250.197891][ T10] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 1250.453308][T24194] could not allocate digest TFM handle sha512-ssse3 [ 1250.463244][ T5829] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 1250.625069][ T9929] usb 4-1: USB disconnect, device number 83 [ 1250.704255][ T5829] usb 5-1: Using ep0 maxpacket: 32 [ 1250.721618][ T5829] usb 5-1: config 211 has an invalid interface number: 27 but max is 0 [ 1250.747033][ T5829] usb 5-1: config 211 has no interface number 0 [ 1250.780416][ T5829] usb 5-1: config 211 interface 27 altsetting 1 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 1250.806524][ T5829] usb 5-1: config 211 interface 27 has no altsetting 0 [ 1250.839893][ T5829] usb 5-1: New USB device found, idVendor=12d1, idProduct=59d1, bcdDevice=cd.3f [ 1250.860196][ T5829] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1250.871618][ T5829] usb 5-1: Product: syz [ 1250.884861][ T5829] usb 5-1: Manufacturer: syz [ 1250.889431][ T5829] usb 5-1: SerialNumber: syz [ 1250.933193][ T10] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1250.973854][T24212] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5020'. [ 1251.144185][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 1251.201618][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1251.243093][ T10] usb 6-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 1251.257319][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1251.269378][ T10] usb 6-1: Product: syz [ 1251.269396][ T10] usb 6-1: Manufacturer: syz [ 1251.269411][ T10] usb 6-1: SerialNumber: syz [ 1251.314998][T23526] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1251.344102][ T10] usb 6-1: config 0 descriptor?? [ 1251.404905][ T10] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -90 [ 1251.535445][T23526] usb 2-1: Using ep0 maxpacket: 16 [ 1251.555449][T23526] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 1251.577519][T23526] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1251.586271][ T10] usb 6-1: USB disconnect, device number 35 [ 1251.675147][T23526] usb 2-1: config 0 descriptor?? [ 1251.688436][T23526] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 1252.220098][ T5829] option 5-1:211.27: GSM modem (1-port) converter detected [ 1252.355056][ T5829] usb 5-1: USB disconnect, device number 115 [ 1252.434835][ T5829] option 5-1:211.27: device disconnected [ 1252.576595][T24226] loop5: detected capacity change from 0 to 7 [ 1252.654856][T19458] Dev loop5: unable to read RDB block 7 [ 1252.679111][T19458] loop5: unable to read partition table [ 1252.695450][T19458] loop5: partition table beyond EOD, truncated [ 1252.815757][T24226] Dev loop5: unable to read RDB block 7 [ 1252.862485][T24226] loop5: unable to read partition table [ 1252.876525][T24226] loop5: partition table beyond EOD, truncated [ 1252.882096][T24234] FAULT_INJECTION: forcing a failure. [ 1252.882096][T24234] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1252.906760][T24234] CPU: 1 UID: 0 PID: 24234 Comm: syz.3.5029 Tainted: G L syzkaller #0 PREEMPT(full) [ 1252.906790][T24234] Tainted: [L]=SOFTLOCKUP [ 1252.906797][T24234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1252.906809][T24234] Call Trace: [ 1252.906817][T24234] [ 1252.906825][T24234] dump_stack_lvl+0x189/0x250 [ 1252.906852][T24234] ? __pfx____ratelimit+0x10/0x10 [ 1252.906876][T24234] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1252.906897][T24234] ? __pfx__printk+0x10/0x10 [ 1252.906920][T24234] ? __might_fault+0xb0/0x130 [ 1252.906955][T24234] should_fail_ex+0x414/0x560 [ 1252.906983][T24234] _copy_from_user+0x2d/0xb0 [ 1252.907004][T24234] get_compat_msghdr+0xad/0x4a0 [ 1252.907030][T24234] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1252.907053][T24234] ? kstrtouint+0x6e/0xe0 [ 1252.907082][T24234] ___sys_sendmsg+0x193/0x2a0 [ 1252.907099][T24234] ? __pfx____sys_sendmsg+0x10/0x10 [ 1252.907113][T24234] ? rcu_read_lock_any_held+0xb3/0x120 [ 1252.907140][T24234] ? __fget_files+0x2a/0x420 [ 1252.907152][T24234] ? __fget_files+0x3a0/0x420 [ 1252.907168][T24234] __sys_sendmsg+0x164/0x220 [ 1252.907180][T24234] ? __pfx___sys_sendmsg+0x10/0x10 [ 1252.907194][T24234] ? __pfx_ksys_write+0x10/0x10 [ 1252.907207][T24234] ? __do_fast_syscall_32+0xbe/0x570 [ 1252.907218][T24234] __do_fast_syscall_32+0x1f7/0x570 [ 1252.907228][T24234] ? rcu_is_watching+0x15/0xb0 [ 1252.907239][T24234] ? do_fast_syscall_32+0x34/0x80 [ 1252.907251][T24234] do_fast_syscall_32+0x34/0x80 [ 1252.907261][T24234] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1252.907273][T24234] RIP: 0023:0xf708d539 [ 1252.907283][T24234] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1252.907292][T24234] RSP: 002b:00000000f547d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1252.907304][T24234] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000440 [ 1252.907311][T24234] RDX: 00000000040408c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1252.907318][T24234] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1252.907323][T24234] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1252.907329][T24234] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1252.907344][T24234] [ 1252.907693][T24226] loop_reread_partitions: partition scan of loop5 (úù) failed (rc=-5) [ 1253.083136][T17085] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 1253.503964][T17085] usb 5-1: device descriptor read/64, error -71 [ 1253.753145][T17085] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 1253.865685][T24212] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1253.881193][T24212] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1253.892491][T24212] bond0 (unregistering): Released all slaves [ 1253.899832][T17085] usb 5-1: device descriptor read/64, error -71 [ 1253.983392][ T5829] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1254.000546][T24254] delete_channel: no stack [ 1254.013464][T17085] usb usb5-port1: attempt power cycle [ 1254.165111][ T5829] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1254.178251][ T5829] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1254.188574][ T5829] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1254.204868][ T5829] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1254.219072][ T5829] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1254.228626][ T5829] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1254.265437][ T5829] usb 4-1: config 0 descriptor?? [ 1254.353186][T17085] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 1254.363107][ T9929] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1254.404536][T17085] usb 5-1: device descriptor read/8, error -71 [ 1254.551936][ T9929] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1254.577993][ T9929] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1254.589126][ T9929] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1254.593757][ T5829] hdpvr 4-1:0.0: firmware version 0x0 dated êÐœ~¯ÏLµj¶"(U$«[-Må¿/h&ÉçûXgÁÞ†<|’ [ 1254.629391][ T5829] hdpvr 4-1:0.0: untested firmware, the driver might not work. [ 1254.642799][T24259] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5038'. [ 1254.667480][ T9929] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1254.693147][T17085] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 1254.702858][T24255] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1254.728749][ T9929] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1254.741822][T17085] usb 5-1: device descriptor read/8, error -71 [ 1254.866591][T17085] usb usb5-port1: unable to enumerate USB device [ 1254.921374][T24262] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5039'. [ 1254.975440][T24248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1255.009747][T24248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1255.079532][T23526] usb 2-1: Detected FT232A [ 1255.119400][T23526] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1255.150850][T23526] usb 2-1: USB disconnect, device number 82 [ 1255.235503][T23526] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1255.260859][T23526] ftdi_sio 2-1:0.0: device disconnected [ 1255.482733][T24267] FAULT_INJECTION: forcing a failure. [ 1255.482733][T24267] name failslab, interval 1, probability 0, space 0, times 0 [ 1255.515648][T24267] CPU: 0 UID: 0 PID: 24267 Comm: syz.0.5041 Tainted: G L syzkaller #0 PREEMPT(full) [ 1255.515679][T24267] Tainted: [L]=SOFTLOCKUP [ 1255.515686][T24267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1255.515697][T24267] Call Trace: [ 1255.515705][T24267] [ 1255.515713][T24267] dump_stack_lvl+0x189/0x250 [ 1255.515739][T24267] ? __pfx____ratelimit+0x10/0x10 [ 1255.515762][T24267] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1255.515781][T24267] ? __pfx__printk+0x10/0x10 [ 1255.515811][T24267] ? __pfx___might_resched+0x10/0x10 [ 1255.515829][T24267] ? fs_reclaim_acquire+0x7d/0x100 [ 1255.515853][T24267] should_fail_ex+0x414/0x560 [ 1255.515882][T24267] should_failslab+0xa8/0x100 [ 1255.515905][T24267] __kmalloc_noprof+0xdf/0x800 [ 1255.515923][T24267] ? iovec_from_user+0x87/0x250 [ 1255.515947][T24267] iovec_from_user+0x87/0x250 [ 1255.515969][T24267] __import_iovec+0x163/0x7f0 [ 1255.515998][T24267] import_iovec+0x74/0xa0 [ 1255.516019][T24267] vfs_writev+0x1a3/0x960 [ 1255.516039][T24267] ? vfs_write+0x956/0xb30 [ 1255.516060][T24267] ? __pfx_vfs_writev+0x10/0x10 [ 1255.516092][T24267] ? __fget_files+0x2a/0x420 [ 1255.516116][T24267] ? __fget_files+0x3a0/0x420 [ 1255.516134][T24267] ? __fget_files+0x2a/0x420 [ 1255.516163][T24267] do_writev+0x14d/0x2d0 [ 1255.516187][T24267] ? __pfx_do_writev+0x10/0x10 [ 1255.516220][T24267] ? __do_fast_syscall_32+0xbe/0x570 [ 1255.516243][T24267] __do_fast_syscall_32+0x1f7/0x570 [ 1255.516262][T24267] ? rcu_is_watching+0x15/0xb0 [ 1255.516282][T24267] ? do_fast_syscall_32+0x34/0x80 [ 1255.516305][T24267] do_fast_syscall_32+0x34/0x80 [ 1255.516323][T24267] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1255.516344][T24267] RIP: 0023:0xf7f61539 [ 1255.516359][T24267] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1255.516376][T24267] RSP: 002b:00000000f545655c EFLAGS: 00000206 ORIG_RAX: 0000000000000092 [ 1255.516395][T24267] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000280 [ 1255.516409][T24267] RDX: 000000000000003f RSI: 0000000000000000 RDI: 0000000000000000 [ 1255.516420][T24267] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1255.516430][T24267] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1255.516441][T24267] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1255.516468][T24267] [ 1255.839324][ T5829] hdpvr 4-1:0.0: Could not setup controls [ 1255.849447][ T5829] hdpvr 4-1:0.0: registering videodev failed [ 1255.860819][ T5829] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -71 [ 1255.872963][ T5829] usb 4-1: USB disconnect, device number 84 [ 1256.135327][T24282] FAULT_INJECTION: forcing a failure. [ 1256.135327][T24282] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1256.149800][T24282] CPU: 1 UID: 0 PID: 24282 Comm: syz.1.5045 Tainted: G L syzkaller #0 PREEMPT(full) [ 1256.149827][T24282] Tainted: [L]=SOFTLOCKUP [ 1256.149834][T24282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1256.149845][T24282] Call Trace: [ 1256.149852][T24282] [ 1256.149861][T24282] dump_stack_lvl+0x189/0x250 [ 1256.149885][T24282] ? __pfx____ratelimit+0x10/0x10 [ 1256.149908][T24282] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1256.149928][T24282] ? __pfx__printk+0x10/0x10 [ 1256.149951][T24282] ? __might_fault+0xb0/0x130 [ 1256.149985][T24282] should_fail_ex+0x414/0x560 [ 1256.150011][T24282] _copy_from_user+0x2d/0xb0 [ 1256.150029][T24282] do_ebt_set_ctl+0x322/0xb90 [ 1256.150053][T24282] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1256.150073][T24282] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1256.150091][T24282] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 1256.150112][T24282] ? rcu_is_watching+0x15/0xb0 [ 1256.150133][T24282] ? trace_contention_end+0x39/0x100 [ 1256.150196][T24282] nf_setsockopt+0x26f/0x290 [ 1256.150220][T24282] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1256.150249][T24282] smc_setsockopt+0x232/0xab0 [ 1256.150276][T24282] ? __pfx_smc_setsockopt+0x10/0x10 [ 1256.150296][T24282] ? aa_sock_opt_perm+0xff/0x1a0 [ 1256.150319][T24282] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1256.150336][T24282] ? __pfx_smc_setsockopt+0x10/0x10 [ 1256.150357][T24282] do_sock_setsockopt+0x17c/0x1b0 [ 1256.150379][T24282] __ia32_sys_setsockopt+0x13f/0x1b0 [ 1256.150410][T24282] __do_fast_syscall_32+0x1f7/0x570 [ 1256.150429][T24282] ? rcu_is_watching+0x15/0xb0 [ 1256.150447][T24282] ? do_fast_syscall_32+0x34/0x80 [ 1256.150469][T24282] do_fast_syscall_32+0x34/0x80 [ 1256.150486][T24282] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1256.150505][T24282] RIP: 0023:0xf703d539 [ 1256.150520][T24282] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1256.150536][T24282] RSP: 002b:00000000f542d55c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 1256.150555][T24282] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 1256.150567][T24282] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 00000000000000e8 [ 1256.150579][T24282] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1256.150590][T24282] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1256.150601][T24282] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1256.150629][T24282] [ 1256.273429][ T5829] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 1256.751157][ T5829] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1256.778886][ T5829] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1256.802951][ T5829] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1256.837708][ T5829] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1256.847683][ T5829] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1256.941476][ T5829] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1256.962907][ T5829] usb 5-1: invalid MIDI out EP 0 [ 1256.971566][T24311] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5056'. [ 1257.113728][T19458] udevd[19458]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1257.160990][ T5829] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1257.810379][T24318] loop5: detected capacity change from 0 to 14 [ 1257.850173][T24318] Dev loop5: unable to read RDB block 14 [ 1257.892026][T24318] loop5: unable to read partition table [ 1257.911865][T24318] loop5: partition table beyond EOD, truncated [ 1257.930064][T24318] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1257.997630][T24321] netlink: 'syz.3.5059': attribute type 33 has an invalid length. [ 1258.060683][T24321] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5059'. [ 1258.101743][T24322] 8021q: VLANs not supported on vcan0 [ 1258.697932][T17331] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 1258.707939][T17331] CPU: 1 UID: 0 PID: 17331 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1258.707958][T17331] Tainted: [L]=SOFTLOCKUP [ 1258.707962][T17331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1258.707970][T17331] Workqueue: hci1 hci_rx_work [ 1258.707985][T17331] Call Trace: [ 1258.707990][T17331] [ 1258.707995][T17331] dump_stack_lvl+0x189/0x250 [ 1258.708012][T17331] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1258.708025][T17331] ? __pfx__printk+0x10/0x10 [ 1258.708045][T17331] ? kernfs_path_from_node+0x250/0x290 [ 1258.708057][T17331] ? kernfs_path_from_node+0x2f/0x290 [ 1258.708070][T17331] sysfs_create_dir_ns+0x259/0x280 [ 1258.708083][T17331] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1258.708101][T17331] ? do_raw_spin_unlock+0x122/0x240 [ 1258.708118][T17331] kobject_add_internal+0x6ab/0xcc0 [ 1258.708135][T17331] kobject_add+0x155/0x220 [ 1258.708148][T17331] ? __pfx_kobject_add+0x10/0x10 [ 1258.708159][T17331] ? _raw_spin_unlock+0x28/0x50 [ 1258.708175][T17331] ? get_device_parent+0x366/0x3a0 [ 1258.708191][T17331] device_add+0x408/0xb80 [ 1258.708208][T17331] hci_conn_add_sysfs+0xd5/0x210 [ 1258.708224][T17331] le_conn_complete_evt+0xf1d/0x1420 [ 1258.708242][T17331] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1258.708253][T17331] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 1258.708261][T17331] ? __asan_memcpy+0x40/0x70 [ 1258.708274][T17331] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1258.708282][T17331] ? skb_pull_data+0xfb/0x200 [ 1258.708297][T17331] hci_le_conn_complete_evt+0x187/0x480 [ 1258.708313][T17331] hci_event_packet+0x78f/0x1260 [ 1258.708331][T17331] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1258.708343][T17331] ? __pfx_hci_event_packet+0x10/0x10 [ 1258.708359][T17331] ? kcov_remote_start+0x4d3/0x7f0 [ 1258.708373][T17331] ? lockdep_hardirqs_on+0x98/0x140 [ 1258.708388][T17331] ? hci_send_to_monitor+0xe2/0x590 [ 1258.708402][T17331] hci_rx_work+0x3ee/0x1060 [ 1258.708416][T17331] ? process_scheduled_works+0x9ef/0x1770 [ 1258.708428][T17331] process_scheduled_works+0xad1/0x1770 [ 1258.708454][T17331] ? __pfx_process_scheduled_works+0x10/0x10 [ 1258.708473][T17331] worker_thread+0x8a0/0xda0 [ 1258.708491][T17331] ? __kthread_parkme+0x7b/0x200 [ 1258.708508][T17331] kthread+0x711/0x8a0 [ 1258.708522][T17331] ? __pfx_worker_thread+0x10/0x10 [ 1258.708532][T17331] ? __pfx_kthread+0x10/0x10 [ 1258.708545][T17331] ? _raw_spin_unlock_irq+0x23/0x50 [ 1258.708558][T17331] ? lockdep_hardirqs_on+0x98/0x140 [ 1258.708571][T17331] ? __pfx_kthread+0x10/0x10 [ 1258.708584][T17331] ret_from_fork+0x599/0xb30 [ 1258.708595][T17331] ? __pfx_ret_from_fork+0x10/0x10 [ 1258.708611][T17331] ? __switch_to_asm+0x39/0x70 [ 1258.708623][T17331] ? __switch_to_asm+0x33/0x70 [ 1258.708634][T17331] ? __pfx_kthread+0x10/0x10 [ 1258.708646][T17331] ret_from_fork_asm+0x1a/0x30 [ 1258.708668][T17331] [ 1258.708703][T17331] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1258.997692][T17331] Bluetooth: hci1: failed to register connection device [ 1259.387675][T24355] bridge_slave_0: left allmulticast mode [ 1259.400824][T24355] bridge_slave_0: left promiscuous mode [ 1259.415795][T24355] bridge0: port 1(bridge_slave_0) entered disabled state [ 1259.964084][ T10] usb 6-1: USB disconnect, device number 36 [ 1261.929520][T24399] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5083'. [ 1262.180355][T24408] netlink: 'syz.0.5086': attribute type 10 has an invalid length. [ 1262.405273][ T9929] usb 5-1: USB disconnect, device number 120 [ 1262.413125][T17085] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1262.585534][T17085] usb 4-1: Using ep0 maxpacket: 8 [ 1262.597495][T17085] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1262.625157][T17085] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1262.654466][T17085] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1262.696816][T17085] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1262.737513][T24425] syz.0.5089 (24425): drop_caches: 2 [ 1262.754256][T24431] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5090'. [ 1262.764893][T17085] usb 4-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 1262.803081][ T10] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1262.813063][T17085] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1262.879777][T24434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5092'. [ 1262.932948][T17085] usb 4-1: config 0 descriptor?? [ 1262.967741][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 1262.975210][ T10] usb 6-1: config 0 has an invalid interface number: 20 but max is 0 [ 1263.008866][ T10] usb 6-1: config 0 has no interface number 0 [ 1263.018133][ T10] usb 6-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1263.045054][ T10] usb 6-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1263.056399][ T5829] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 1263.091967][ T10] usb 6-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1263.132521][ T10] usb 6-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 1263.180950][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1263.198063][T24439] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5093'. [ 1263.221007][ T10] usb 6-1: Product: syz [ 1263.232325][T24439] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5093'. [ 1263.241300][ T5829] usb 5-1: Using ep0 maxpacket: 16 [ 1263.263059][ T10] usb 6-1: Manufacturer: syz [ 1263.269168][T24439] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5093'. [ 1263.291723][ T10] usb 6-1: SerialNumber: syz [ 1263.308425][ T5829] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 1263.327747][ T10] usb 6-1: config 0 descriptor?? [ 1263.335142][T24401] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1263.360338][ T5829] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1263.361792][T24411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1263.388583][ T10] ums-sddr09 6-1:0.20: USB Mass Storage device detected [ 1263.408775][T24411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1263.438180][ T5829] usb 5-1: config 0 descriptor?? [ 1263.485063][T17085] redragon 0003:0C45:760B.0055: unknown main item tag 0x6 [ 1263.496993][T17085] redragon 0003:0C45:760B.0055: item fetching failed at offset 7/133 [ 1263.499206][ T5829] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 1263.541303][ T10] ums-sddr09 6-1:0.20: probe with driver ums-sddr09 failed with error -22 [ 1263.560282][T17085] redragon 0003:0C45:760B.0055: probe with driver redragon failed with error -22 [ 1263.640537][ T10] usb 6-1: USB disconnect, device number 37 [ 1263.738528][T17085] usb 4-1: USB disconnect, device number 85 [ 1264.286878][T24445] FAULT_INJECTION: forcing a failure. [ 1264.286878][T24445] name failslab, interval 1, probability 0, space 0, times 0 [ 1264.300853][T24445] CPU: 0 UID: 0 PID: 24445 Comm: syz.0.5094 Tainted: G L syzkaller #0 PREEMPT(full) [ 1264.300881][T24445] Tainted: [L]=SOFTLOCKUP [ 1264.300888][T24445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1264.300899][T24445] Call Trace: [ 1264.300911][T24445] [ 1264.300919][T24445] dump_stack_lvl+0x189/0x250 [ 1264.300946][T24445] ? __pfx____ratelimit+0x10/0x10 [ 1264.300971][T24445] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1264.300992][T24445] ? __pfx__printk+0x10/0x10 [ 1264.301022][T24445] ? __pfx___might_resched+0x10/0x10 [ 1264.301041][T24445] ? fs_reclaim_acquire+0x7d/0x100 [ 1264.301066][T24445] should_fail_ex+0x414/0x560 [ 1264.301095][T24445] should_failslab+0xa8/0x100 [ 1264.301118][T24445] __kmalloc_noprof+0xdf/0x800 [ 1264.301136][T24445] ? tomoyo_encode+0x28b/0x550 [ 1264.301163][T24445] tomoyo_encode+0x28b/0x550 [ 1264.301189][T24445] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1264.301212][T24445] ? tomoyo_domain+0xd8/0x130 [ 1264.301239][T24445] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1264.301264][T24445] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1264.301293][T24445] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1264.301318][T24445] ? __lock_acquire+0x6b6/0x2cf0 [ 1264.301372][T24445] ? __fget_files+0x2a/0x420 [ 1264.301396][T24445] ? __fget_files+0x3a0/0x420 [ 1264.301416][T24445] ? __fget_files+0x2a/0x420 [ 1264.301442][T24445] security_file_ioctl_compat+0xcb/0x2d0 [ 1264.301470][T24445] __ia32_compat_sys_ioctl+0x128/0x840 [ 1264.301492][T24445] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1264.301518][T24445] ? __fget_files+0x3a0/0x420 [ 1264.301547][T24445] ? fput+0xa0/0xd0 [ 1264.301570][T24445] ? ksys_write+0x22a/0x250 [ 1264.301587][T24445] ? exc_page_fault+0x82/0x100 [ 1264.301612][T24445] ? __pfx_ksys_write+0x10/0x10 [ 1264.301628][T24445] ? arch_syscall_is_vdso_sigreturn+0x175/0x1a0 [ 1264.301656][T24445] ? syscall_user_dispatch+0x4f/0x90 [ 1264.301683][T24445] __do_fast_syscall_32+0x1f7/0x570 [ 1264.301702][T24445] ? rcu_is_watching+0x15/0xb0 [ 1264.301721][T24445] ? do_fast_syscall_32+0x34/0x80 [ 1264.301744][T24445] do_fast_syscall_32+0x34/0x80 [ 1264.301762][T24445] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1264.301784][T24445] RIP: 0023:0xf7f61539 [ 1264.301800][T24445] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1264.301816][T24445] RSP: 002b:00000000f545655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1264.301835][T24445] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 000000000000ae80 [ 1264.301847][T24445] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1264.301858][T24445] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1264.301868][T24445] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1264.301879][T24445] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1264.301909][T24445] [ 1264.302013][T24445] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1264.608212][T24445] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1265.128933][T24464] FAULT_INJECTION: forcing a failure. [ 1265.128933][T24464] name failslab, interval 1, probability 0, space 0, times 0 [ 1265.176005][T24464] CPU: 1 UID: 0 PID: 24464 Comm: syz.0.5102 Tainted: G L syzkaller #0 PREEMPT(full) [ 1265.176036][T24464] Tainted: [L]=SOFTLOCKUP [ 1265.176044][T24464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1265.176055][T24464] Call Trace: [ 1265.176062][T24464] [ 1265.176068][T24464] dump_stack_lvl+0x189/0x250 [ 1265.176085][T24464] ? __pfx____ratelimit+0x10/0x10 [ 1265.176099][T24464] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1265.176111][T24464] ? __pfx__printk+0x10/0x10 [ 1265.176136][T24464] ? __pfx___might_resched+0x10/0x10 [ 1265.176155][T24464] ? fs_reclaim_acquire+0x7d/0x100 [ 1265.176190][T24464] should_fail_ex+0x414/0x560 [ 1265.176215][T24464] should_failslab+0xa8/0x100 [ 1265.176229][T24464] __kmalloc_noprof+0xdf/0x800 [ 1265.176239][T24464] ? ip_options_get+0x51/0x4c0 [ 1265.176255][T24464] ip_options_get+0x51/0x4c0 [ 1265.176275][T24464] ip_cmsg_send+0x591/0xa70 [ 1265.176307][T24464] udp_sendmsg+0xbfb/0x2170 [ 1265.176334][T24464] ? __lock_acquire+0x6b6/0x2cf0 [ 1265.176356][T24464] ? __pfx_udplite_getfrag+0x10/0x10 [ 1265.176372][T24464] ? vsnprintf+0xe1a/0xee0 [ 1265.176392][T24464] ? __pfx_udp_sendmsg+0x10/0x10 [ 1265.176409][T24464] ? tomoyo_write_log2+0x250/0x910 [ 1265.176435][T24464] ? look_up_lock_class+0x74/0x150 [ 1265.176458][T24464] ? look_up_lock_class+0x74/0x150 [ 1265.176497][T24464] ? lockdep_hardirqs_on+0x98/0x140 [ 1265.176520][T24464] ? get_random_u32+0x155/0x930 [ 1265.176536][T24464] ? get_random_u32+0x4df/0x930 [ 1265.176559][T24464] ? __pfx_get_random_u32+0x10/0x10 [ 1265.176583][T24464] udpv6_sendmsg+0xc1c/0x2510 [ 1265.176619][T24464] ? udp_lib_get_port+0x164b/0x1b10 [ 1265.176637][T24464] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 1265.176665][T24464] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1265.176676][T24464] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1265.176690][T24464] ? inet_send_prepare+0x1b9/0x270 [ 1265.176703][T24464] ? inet_send_prepare+0x1b9/0x270 [ 1265.176725][T24464] ? inet6_sendmsg+0xe4/0x120 [ 1265.176750][T24464] __sock_sendmsg+0xe5/0x270 [ 1265.176776][T24464] ____sys_sendmsg+0x52d/0x820 [ 1265.176796][T24464] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1265.176816][T24464] ___sys_sendmsg+0x21f/0x2a0 [ 1265.176836][T24464] ? __pfx____sys_sendmsg+0x10/0x10 [ 1265.176855][T24464] ? kstrtoull+0x12f/0x1d0 [ 1265.176903][T24464] ? __fget_files+0x2a/0x420 [ 1265.176925][T24464] ? __fget_files+0x3a0/0x420 [ 1265.176956][T24464] __sys_sendmmsg+0x28e/0x430 [ 1265.176979][T24464] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1265.176999][T24464] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1265.177033][T24464] ? ksys_write+0x22a/0x250 [ 1265.177050][T24464] ? exc_page_fault+0x82/0x100 [ 1265.177073][T24464] ? __pfx_ksys_write+0x10/0x10 [ 1265.177090][T24464] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 1265.177104][T24464] __do_fast_syscall_32+0x1f7/0x570 [ 1265.177114][T24464] ? rcu_is_watching+0x15/0xb0 [ 1265.177125][T24464] ? do_fast_syscall_32+0x34/0x80 [ 1265.177137][T24464] do_fast_syscall_32+0x34/0x80 [ 1265.177151][T24464] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1265.177179][T24464] RIP: 0023:0xf7f61539 [ 1265.177196][T24464] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1265.177210][T24464] RSP: 002b:00000000f545655c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 1265.177229][T24464] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001100 [ 1265.177237][T24464] RDX: 0000000000000001 RSI: 0000000000040040 RDI: 0000000000000000 [ 1265.177243][T24464] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1265.177249][T24464] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1265.177255][T24464] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1265.177270][T24464] [ 1265.193130][ T10] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1265.666122][T24470] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5104'. [ 1265.677332][T24470] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5104'. [ 1265.774909][T24473] netlink: 'syz.3.5105': attribute type 10 has an invalid length. [ 1265.838777][ T5829] usb 5-1: Detected FT232A [ 1265.863815][ T5829] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1265.876626][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1265.893109][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1265.902851][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1265.916880][ T5829] usb 5-1: USB disconnect, device number 121 [ 1265.933810][ T5829] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1265.958826][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1265.974246][ T5829] ftdi_sio 5-1:0.0: device disconnected [ 1265.987405][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1265.997121][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1266.015430][ T10] usb 2-1: config 0 descriptor?? [ 1266.321637][T24461] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5101'. [ 1266.349449][T24461] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1266.520681][T24461] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1266.842815][T24503] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5114'. [ 1267.223108][ T9929] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1267.382663][T24522] netlink: 14 bytes leftover after parsing attributes in process `syz.5.5120'. [ 1267.393226][ T9929] usb 1-1: Using ep0 maxpacket: 32 [ 1267.468508][ T9929] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1267.482477][ T9929] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1267.549040][ T9929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1267.574266][ T9929] usb 1-1: Product: syz [ 1267.583796][ T9929] usb 1-1: Manufacturer: syz [ 1267.594164][ T9929] usb 1-1: SerialNumber: syz [ 1267.615747][ T9929] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 1267.632377][ T9929] imon 1-1:155.0: unable to initialize intf0, err -19 [ 1267.648364][ T9929] imon:imon_probe: failed to initialize context! [ 1267.664466][ T9929] imon 1-1:155.0: unable to register, err -19 [ 1267.713409][ T39] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1267.783660][ T10] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1267.863152][ T39] usb 6-1: Using ep0 maxpacket: 16 [ 1267.879645][ T39] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 1267.897393][ T39] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1267.909352][ T39] usb 6-1: config 0 descriptor?? [ 1267.923075][ T10] usb 4-1: device descriptor read/64, error -71 [ 1267.924773][ T39] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 1268.000133][ T5829] usb 2-1: USB disconnect, device number 83 [ 1268.107520][T24507] netlink: 'syz.0.5115': attribute type 27 has an invalid length. [ 1268.213324][ T10] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1268.353300][ T10] usb 4-1: device descriptor read/64, error -71 [ 1268.375110][ T9929] usb 1-1: USB disconnect, device number 67 [ 1268.474631][ T10] usb usb4-port1: attempt power cycle [ 1268.833111][ T10] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1268.900666][ T10] usb 4-1: device descriptor read/8, error -71 [ 1269.173176][ T10] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1269.261503][ T10] usb 4-1: device descriptor read/8, error -71 [ 1269.393465][ T10] usb usb4-port1: unable to enumerate USB device [ 1269.979660][T24545] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5126'. [ 1270.039062][T24545] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5126'. [ 1270.068595][T24545] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5126'. [ 1270.623142][ T10] usb 2-1: new low-speed USB device number 84 using dummy_hcd [ 1270.807952][ T10] usb 2-1: Invalid ep0 maxpacket: 16 [ 1270.932612][T24563] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5130'. [ 1270.953080][ T10] usb 2-1: new low-speed USB device number 85 using dummy_hcd [ 1271.123104][ T10] usb 2-1: Invalid ep0 maxpacket: 16 [ 1271.128850][ T10] usb usb2-port1: attempt power cycle [ 1271.238374][T24562] netlink: 'syz.0.5130': attribute type 2 has an invalid length. [ 1271.474777][ T10] usb 2-1: new low-speed USB device number 86 using dummy_hcd [ 1271.513819][ T10] usb 2-1: Invalid ep0 maxpacket: 16 [ 1271.647254][ T39] usb 6-1: Detected FT232A [ 1271.710119][ T10] usb 2-1: new low-speed USB device number 87 using dummy_hcd [ 1271.746154][ T10] usb 2-1: Invalid ep0 maxpacket: 16 [ 1271.758469][ T10] usb usb2-port1: unable to enumerate USB device [ 1271.802085][ T39] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1271.915414][ T39] usb 6-1: USB disconnect, device number 38 [ 1271.948452][ T39] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1271.996587][ T39] ftdi_sio 6-1:0.0: device disconnected [ 1272.044062][T24588] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(12) [ 1272.050702][T24588] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1272.093146][T24592] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(15) [ 1272.099785][T24592] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1272.108355][T24588] vhci_hcd vhci_hcd.0: Device attached [ 1272.141833][T24598] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(18) [ 1272.148471][T24598] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1272.156671][T24592] vhci_hcd vhci_hcd.0: Device attached [ 1272.171719][T24598] vhci_hcd vhci_hcd.0: Device attached [ 1272.190276][T24588] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(14) [ 1272.196916][T24588] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1272.243150][T24592] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(21) [ 1272.249792][T24592] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1272.257784][T24588] vhci_hcd vhci_hcd.0: Device attached [ 1272.296886][T24592] vhci_hcd vhci_hcd.0: Device attached [ 1272.309206][T24588] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(20) [ 1272.315825][T24588] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1272.350470][T24592] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1272.359297][ T10] usb 43-1: new low-speed USB device number 3 using vhci_hcd [ 1272.372418][T24588] vhci_hcd vhci_hcd.0: Device attached [ 1272.389241][T24592] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1272.448956][T24588] vhci_hcd vhci_hcd.0: pdev(5) rhport(7) sockfd(25) [ 1272.455597][T24588] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1272.480578][ T5829] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 1272.492232][T24592] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1272.535242][T24588] vhci_hcd vhci_hcd.0: Device attached [ 1272.554749][T24588] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(34) [ 1272.561349][T24588] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1272.603991][T24588] vhci_hcd vhci_hcd.0: Device attached [ 1272.642937][T24608] vhci_hcd: connection closed [ 1272.650956][T24610] vhci_hcd: connection closed [ 1272.651649][ T50] vhci_hcd vhci_hcd.5: stop threads [ 1272.680300][T24605] vhci_hcd: connection closed [ 1272.681882][T24599] vhci_hcd: connection closed [ 1272.693111][T24601] vhci_hcd: connection closed [ 1272.693131][ T5829] usb 5-1: Using ep0 maxpacket: 16 [ 1272.708965][T24594] vhci_hcd: connection closed [ 1272.709287][T24589] vhci_hcd: connection reset by peer [ 1272.739151][ T50] vhci_hcd vhci_hcd.5: release socket [ 1272.756169][ T50] vhci_hcd vhci_hcd.5: disconnect device [ 1272.761992][ T5829] usb 5-1: config 0 has an invalid interface number: 87 but max is 0 [ 1272.783794][ T50] vhci_hcd vhci_hcd.5: stop threads [ 1272.789023][ T50] vhci_hcd vhci_hcd.5: release socket [ 1272.794465][ T5829] usb 5-1: config 0 has no interface number 0 [ 1272.802579][ T5829] usb 5-1: New USB device found, idVendor=0545, idProduct=8002, bcdDevice= 3.0a [ 1272.821635][ T50] vhci_hcd vhci_hcd.5: disconnect device [ 1272.827746][ T50] vhci_hcd vhci_hcd.5: stop threads [ 1272.843388][ T5829] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1272.851409][ T5829] usb 5-1: Product: syz [ 1272.859968][ T50] vhci_hcd vhci_hcd.5: release socket [ 1272.873499][ T50] vhci_hcd vhci_hcd.5: disconnect device [ 1272.879407][ T5829] usb 5-1: Manufacturer: syz [ 1272.893169][ T50] vhci_hcd vhci_hcd.5: stop threads [ 1272.898405][ T50] vhci_hcd vhci_hcd.5: release socket [ 1272.904103][ T5829] usb 5-1: SerialNumber: syz [ 1272.912148][ T5829] usb 5-1: config 0 descriptor?? [ 1272.933869][ T50] vhci_hcd vhci_hcd.5: disconnect device [ 1272.943570][ T50] vhci_hcd vhci_hcd.5: stop threads [ 1272.948796][ T50] vhci_hcd vhci_hcd.5: release socket [ 1272.983747][ T50] vhci_hcd vhci_hcd.5: disconnect device [ 1273.003070][ T50] vhci_hcd vhci_hcd.5: stop threads [ 1273.008318][ T50] vhci_hcd vhci_hcd.5: release socket [ 1273.021849][ T50] vhci_hcd vhci_hcd.5: disconnect device [ 1273.038028][ T50] vhci_hcd vhci_hcd.5: stop threads [ 1273.043752][ T50] vhci_hcd vhci_hcd.5: release socket [ 1273.049222][ T50] vhci_hcd vhci_hcd.5: disconnect device [ 1273.162470][ T5829] usb 5-1: USB disconnect, device number 122 [ 1273.261855][T24612] vhci_hcd: connection closed [ 1273.264645][ T3460] vhci_hcd vhci_hcd.5: stop threads [ 1273.310578][ T3460] vhci_hcd vhci_hcd.5: release socket [ 1273.316726][ T3460] vhci_hcd vhci_hcd.5: disconnect device [ 1273.373393][ T107] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1273.553122][ T107] usb 1-1: Using ep0 maxpacket: 16 [ 1273.588727][ T107] usb 1-1: config 0 has an invalid descriptor of length 208, skipping remainder of the config [ 1273.612961][ T107] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1273.657208][ T107] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice=4f.32 [ 1273.683999][ T107] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1273.722736][ T107] usb 1-1: Product: syz [ 1273.742431][ T107] usb 1-1: Manufacturer: syz [ 1273.769383][ T107] usb 1-1: SerialNumber: syz [ 1273.778059][ T30] audit: type=1326 audit(1765581920.570:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24635 comm="syz.1.5147" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 1273.826920][ T107] usb 1-1: config 0 descriptor?? [ 1273.874562][ T30] audit: type=1326 audit(1765581920.580:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24635 comm="syz.1.5147" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 1273.988341][ T30] audit: type=1326 audit(1765581920.610:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24635 comm="syz.1.5147" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 1274.062018][ T30] audit: type=1326 audit(1765581920.610:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24635 comm="syz.1.5147" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 1274.084575][ T107] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1274.110011][T24641] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5144'. [ 1274.120057][ T30] audit: type=1326 audit(1765581920.610:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24635 comm="syz.1.5147" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 1274.144202][ T30] audit: type=1326 audit(1765581920.610:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24635 comm="syz.1.5147" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 1274.197415][T24618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1274.214598][T24618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1274.245381][ T5829] usb 1-1: USB disconnect, device number 68 [ 1274.255677][ T107] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1274.300412][ T107] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1274.310446][ T30] audit: type=1326 audit(1765581920.610:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24635 comm="syz.1.5147" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 1274.337468][ T107] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1274.383548][ T107] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1274.398169][ T30] audit: type=1326 audit(1765581920.610:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24635 comm="syz.1.5147" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 1274.435458][ T39] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1274.448734][ T107] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1274.485510][ T107] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1274.497974][ T30] audit: type=1326 audit(1765581920.610:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24635 comm="syz.1.5147" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 1274.531354][ T30] audit: type=1326 audit(1765581920.610:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24635 comm="syz.1.5147" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 1274.554180][ T107] usb 2-1: config 0 descriptor?? [ 1274.623073][ T39] usb 4-1: Using ep0 maxpacket: 8 [ 1274.632671][ T39] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1274.642757][ T39] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1274.651028][ T39] usb 4-1: Product: syz [ 1274.655581][ T39] usb 4-1: Manufacturer: syz [ 1274.660227][ T39] usb 4-1: SerialNumber: syz [ 1274.679479][ T39] usb 4-1: config 0 descriptor?? [ 1274.687405][ T39] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1274.698148][ T39] usb 4-1: setting power ON [ 1274.702723][ T39] dvb-usb: bulk message failed: -22 (2/0) [ 1274.718692][ T39] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1274.732606][ T39] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1274.741561][ T39] usb 4-1: media controller created [ 1274.755961][ T39] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1274.796558][ T39] usb 4-1: selecting invalid altsetting 6 [ 1274.802795][ T39] usb 4-1: digital interface selection failed (-22) [ 1274.832514][ T39] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1274.876231][ T39] usb 4-1: setting power OFF [ 1274.893711][ T39] dvb-usb: bulk message failed: -22 (2/0) [ 1274.921189][T24634] dvb-usb: bulk message failed: -22 (3/0) [ 1274.927253][ T39] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1274.936781][T24634] cxusb: i2c rd: len=1792 is too big! [ 1274.936781][T24634] [ 1274.948723][ T39] (NULL device *): no alternate interface [ 1274.953082][T24651] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5147'. [ 1275.228631][T24654] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5150'. [ 1275.574405][T24660] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5151'. [ 1275.598352][ T107] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1275.784244][ T107] usb 1-1: Using ep0 maxpacket: 16 [ 1275.795676][ T107] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 1275.818998][ T107] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1275.841600][ T107] usb 1-1: config 0 descriptor?? [ 1275.852075][ T107] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 1275.962122][ T5829] usb 2-1: USB disconnect, device number 88 [ 1275.975989][T24662] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5152'. [ 1276.851230][ T39] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1276.936829][ T39] usb 4-1: USB disconnect, device number 90 [ 1277.463297][ T10] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 1278.116390][ T107] usb 1-1: Detected FT232A [ 1278.121925][ T107] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1278.212756][ T107] usb 1-1: USB disconnect, device number 69 [ 1278.254648][ T107] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1278.329141][ T107] ftdi_sio 1-1:0.0: device disconnected [ 1278.613748][T24692] mac80211_hwsim hwsim28 wlan1: entered promiscuous mode [ 1278.662238][T24692] macvtap1: entered promiscuous mode [ 1278.697209][T24692] macvtap1: entered allmulticast mode [ 1278.719059][T24692] mac80211_hwsim hwsim28 wlan1: entered allmulticast mode [ 1278.784342][T23526] usb usb44-port1: attempt power cycle [ 1278.999437][T24698] netlink: 'syz.0.5162': attribute type 10 has an invalid length. [ 1279.222564][T24703] netlink: 'syz.3.5164': attribute type 2 has an invalid length. [ 1279.249284][T24704] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:16x2160 (0x32314247, 8, 0, 0, 0) [ 1279.319194][T24703] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5164'. [ 1279.364201][T23526] usb usb44-port1: unable to enumerate USB device [ 1280.313784][ T9929] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1280.484896][T24729] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5169'. [ 1280.550509][T24720] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5167'. [ 1280.559766][ T9929] usb 6-1: Using ep0 maxpacket: 8 [ 1280.620956][ T9929] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1280.638691][T24737] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5172'. [ 1280.658003][T24737] bridge0: port 3(team0) entered disabled state [ 1280.664503][T24737] bridge0: port 1(bridge_slave_0) entered disabled state [ 1280.688196][ T9929] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1280.707738][ T9929] usb 6-1: Product: syz [ 1280.732222][ T9929] usb 6-1: Manufacturer: syz [ 1280.752702][ T9929] usb 6-1: SerialNumber: syz [ 1280.790661][ T9929] usb 6-1: config 0 descriptor?? [ 1280.829472][ T9929] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1280.864139][ T9929] usb 6-1: setting power ON [ 1280.882325][ T9929] dvb-usb: bulk message failed: -22 (2/0) [ 1280.937821][ T9929] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1280.975942][ T9929] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1281.014585][ T9929] usb 6-1: media controller created [ 1281.029743][T24712] dvb-usb: bulk message failed: -22 (3/0) [ 1281.050764][T24712] cxusb: i2c rd: len=1792 is too big! [ 1281.050764][T24712] [ 1281.066344][ T9929] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1281.143718][ T9929] usb 6-1: selecting invalid altsetting 6 [ 1281.160890][ T9929] usb 6-1: digital interface selection failed (-22) [ 1281.169940][ T9929] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1281.180550][ T9929] usb 6-1: setting power OFF [ 1281.186648][ T9929] dvb-usb: bulk message failed: -22 (2/0) [ 1281.192560][ T9929] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1281.205585][ T9929] (NULL device *): no alternate interface [ 1281.525698][ T39] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1281.594332][ T6352] usb 5-1: new full-speed USB device number 123 using dummy_hcd [ 1281.703175][ T39] usb 2-1: Using ep0 maxpacket: 8 [ 1281.709667][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1281.720789][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1281.730649][ T39] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1281.740830][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 1281.752227][ T39] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1281.763190][ T39] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1281.772390][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1281.781550][ T6352] usb 5-1: config 0 has an invalid interface number: 20 but max is 0 [ 1281.790438][ T6352] usb 5-1: config 0 has no interface number 0 [ 1281.797530][ T39] usb 2-1: config 0 descriptor?? [ 1281.802735][ T6352] usb 5-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1281.804943][T24743] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1281.816940][ T6352] usb 5-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 1281.848045][ T6352] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1281.856225][ T6352] usb 5-1: Product: syz [ 1281.860411][ T6352] usb 5-1: Manufacturer: syz [ 1281.865097][ T6352] usb 5-1: SerialNumber: syz [ 1281.872147][ T6352] usb 5-1: config 0 descriptor?? [ 1281.878184][T24744] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1281.886888][ T6352] usb-storage 5-1:0.20: USB Mass Storage device detected [ 1281.896168][ T6352] usb-storage 5-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 1282.043806][T24743] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1282.048397][ T39] usb 2-1: USB disconnect, device number 89 [ 1282.062579][T12559] Bluetooth: hci2: Opcode 0x0c03 failed: -71 [ 1282.116864][ T6352] scsi host1: usb-storage 5-1:0.20 [ 1282.131502][ T6352] usb 5-1: USB disconnect, device number 123 [ 1282.688608][T24760] netlink: 'syz.1.5179': attribute type 2 has an invalid length. [ 1282.726274][ T9929] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1282.746116][T24760] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5179'. [ 1282.767703][ T9929] usb 6-1: USB disconnect, device number 39 [ 1282.835739][T24768] netlink: 84 bytes leftover after parsing attributes in process `syz.0.5182'. [ 1282.907048][T24768] SET target dimension over the limit! [ 1283.149865][T24779] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5185'. [ 1283.322629][T24784] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5184'. [ 1283.609111][T24788] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5186'. [ 1285.143784][ T10] usb 4-1: new full-speed USB device number 91 using dummy_hcd [ 1285.151610][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 1285.294373][ T10] usb 4-1: device descriptor read/64, error -32 [ 1285.533137][ T10] usb 4-1: new full-speed USB device number 92 using dummy_hcd [ 1286.222549][ T10] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1286.232186][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1286.240501][ T10] usb 4-1: Product: syz [ 1286.246325][ T10] usb 4-1: Manufacturer: syz [ 1286.250909][ T10] usb 4-1: SerialNumber: syz [ 1286.258402][ T10] usb 4-1: config 0 descriptor?? [ 1286.299834][ T10] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1286.659844][T24828] netlink: 84 bytes leftover after parsing attributes in process `syz.1.5198'. [ 1286.682124][T24828] SET target dimension over the limit! [ 1286.753272][ T107] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1286.893172][ T107] usb 1-1: device descriptor read/64, error -71 [ 1286.953099][ T5829] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 1287.113093][ T5829] usb 5-1: Using ep0 maxpacket: 8 [ 1287.130602][ T5829] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1287.140575][ T5829] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1287.148758][ T107] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1287.156385][ T5829] usb 5-1: Product: syz [ 1287.161074][ T5829] usb 5-1: Manufacturer: syz [ 1287.168684][ T5829] usb 5-1: SerialNumber: syz [ 1287.182065][ T5829] usb 5-1: config 0 descriptor?? [ 1287.200696][ T5829] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1287.220203][ T5829] usb 5-1: setting power ON [ 1287.225465][ T5829] dvb-usb: bulk message failed: -22 (2/0) [ 1287.235676][ T5829] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1287.247518][ T5829] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1287.262846][ T5829] usb 5-1: media controller created [ 1287.296782][ T107] usb 1-1: device descriptor read/64, error -71 [ 1287.335921][ T5829] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1287.376236][ T5829] usb 5-1: selecting invalid altsetting 6 [ 1287.388104][ T5829] usb 5-1: digital interface selection failed (-22) [ 1287.411765][ T5829] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1287.424547][T24819] dvb-usb: bulk message failed: -22 (3/0) [ 1287.430297][T24819] cxusb: i2c rd: len=1792 is too big! [ 1287.430297][T24819] [ 1287.443527][ T107] usb usb1-port1: attempt power cycle [ 1287.451584][ T5829] usb 5-1: setting power OFF [ 1287.465276][ T5829] dvb-usb: bulk message failed: -22 (2/0) [ 1287.485320][ T5829] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1287.505353][ T5829] (NULL device *): no alternate interface [ 1287.679700][T24836] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5199'. [ 1287.793099][ T107] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1287.884336][ T107] usb 1-1: device descriptor read/8, error -71 [ 1288.133138][ T107] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1288.153734][ T107] usb 1-1: device descriptor read/8, error -71 [ 1288.274244][ T107] usb usb1-port1: unable to enumerate USB device [ 1288.688118][T24847] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5201'. [ 1289.541240][ T5829] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1289.637728][ T5829] usb 5-1: USB disconnect, device number 124 [ 1289.729229][ T30] kauditd_printk_skb: 72 callbacks suppressed [ 1289.729246][ T30] audit: type=1326 audit(1765581936.530:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24851 comm="syz.4.5203" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd539 code=0x7ffc0000 [ 1289.774922][ T30] audit: type=1326 audit(1765581936.530:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24851 comm="syz.4.5203" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd539 code=0x7ffc0000 [ 1289.818183][ T30] audit: type=1326 audit(1765581936.540:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24851 comm="syz.4.5203" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70fd539 code=0x7ffc0000 [ 1289.853786][ T10] gspca_stk1135: reg_w 0x353 err -71 [ 1289.860124][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 1289.900926][ T30] audit: type=1326 audit(1765581936.540:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24851 comm="syz.4.5203" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd539 code=0x7ffc0000 [ 1289.913440][ T10] gspca_stk1135: Sensor write failed [ 1289.926985][ T30] audit: type=1326 audit(1765581936.540:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24851 comm="syz.4.5203" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd539 code=0x7ffc0000 [ 1289.955295][ T30] audit: type=1326 audit(1765581936.570:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24851 comm="syz.4.5203" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70fd539 code=0x7ffc0000 [ 1289.979035][ T30] audit: type=1326 audit(1765581936.570:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24851 comm="syz.4.5203" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70fd539 code=0x7ffc0000 [ 1290.006256][ T30] audit: type=1326 audit(1765581936.570:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24851 comm="syz.4.5203" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70fd539 code=0x7ffc0000 [ 1290.033957][T24856] erspan0: entered promiscuous mode [ 1290.043297][ T30] audit: type=1326 audit(1765581936.590:1455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24851 comm="syz.4.5203" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70fd539 code=0x7ffc0000 [ 1290.053724][ T5829] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 1290.068001][ T30] audit: type=1326 audit(1765581936.590:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24851 comm="syz.4.5203" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70fd539 code=0x7ffc0000 [ 1290.103256][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 1290.109738][ T10] gspca_stk1135: Sensor write failed [ 1290.150475][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 1290.167597][ T10] gspca_stk1135: Sensor read failed [ 1290.172847][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 1290.208803][ T10] gspca_stk1135: Sensor read failed [ 1290.214172][ T10] gspca_stk1135: Detected sensor type unknown (0x0) [ 1290.220800][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 1290.261819][ T10] gspca_stk1135: Sensor read failed [ 1290.278231][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 1290.309904][ T10] gspca_stk1135: Sensor read failed [ 1290.330660][ T5829] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1290.354495][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 1290.361298][ T5829] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1290.375289][ T10] gspca_stk1135: Sensor write failed [ 1290.385430][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 1290.405696][ T5829] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1290.424300][ T10] gspca_stk1135: Sensor write failed [ 1290.438632][ T10] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 1290.448158][ T5829] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1290.471910][ T10] usb 4-1: USB disconnect, device number 92 [ 1290.480767][ T5829] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1290.542606][ T5829] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1290.616780][ T5829] usb 5-1: config 0 descriptor?? [ 1290.650031][T24872] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5207'. [ 1291.068084][T24874] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5203'. [ 1291.332589][T24874] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1291.572714][T24881] netlink: 84 bytes leftover after parsing attributes in process `syz.3.5211'. [ 1291.693638][T24881] SET target dimension over the limit! [ 1292.019453][T24889] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5212'. [ 1293.000106][ T10] usb 5-1: USB disconnect, device number 125 [ 1293.380654][T24918] input: syz1 as /devices/virtual/input/input69 [ 1293.530459][T24918] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5223'. [ 1293.583632][ T10] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 1293.609678][T24925] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5226'. [ 1293.631023][T24927] netlink: 'syz.0.5228': attribute type 10 has an invalid length. [ 1293.739050][T24927] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1293.744968][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 1293.772778][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1293.797687][T24929] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1293.817664][T24929] bond5: (slave macvlan2): Enslaving as a backup interface with a down link [ 1293.829617][ T10] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 1293.860287][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1293.868507][ T5829] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1293.919206][ T10] usb 5-1: config 0 descriptor?? [ 1294.043154][ T5829] usb 4-1: Using ep0 maxpacket: 16 [ 1294.055663][ T5829] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 1294.083118][ T5829] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1294.118926][ T5829] usb 4-1: config 0 descriptor?? [ 1294.153208][ T5829] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 1294.373410][ T10] kye 0003:0458:5013.0056: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 1294.393754][ T10] kye 0003:0458:5013.0056: item fetching failed at offset 2/5 [ 1294.413841][ T10] kye 0003:0458:5013.0056: parse failed [ 1294.429619][ T10] kye 0003:0458:5013.0056: probe with driver kye failed with error -22 [ 1295.123086][ T9929] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1295.293180][ T9929] usb 1-1: Using ep0 maxpacket: 32 [ 1295.899415][T24968] openvswitch: netlink: Flow actions attr not present in new flow. [ 1296.153185][ T5887] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1296.332926][T24974] netlink: 'syz.1.5242': attribute type 1 has an invalid length. [ 1296.348147][ T6352] usb 5-1: USB disconnect, device number 126 [ 1296.355486][ T5887] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1296.401404][ T5887] usb 6-1: can't read configurations, error -61 [ 1296.499333][T24976] netlink: 666 bytes leftover after parsing attributes in process `syz.4.5243'. [ 1296.573362][ T5887] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1296.760353][ T5887] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1296.779860][ T5887] usb 6-1: can't read configurations, error -61 [ 1296.800057][ T5887] usb usb6-port1: attempt power cycle [ 1297.155746][ T5887] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1297.197944][ T5887] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1297.214238][ T5887] usb 6-1: can't read configurations, error -61 [ 1297.391695][ T5887] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1297.449650][ T5887] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1297.463036][ T5887] usb 6-1: can't read configurations, error -61 [ 1297.478968][ T5887] usb usb6-port1: unable to enumerate USB device [ 1297.517237][T24979] FAULT_INJECTION: forcing a failure. [ 1297.517237][T24979] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1297.533257][T24979] CPU: 0 UID: 0 PID: 24979 Comm: syz.4.5244 Tainted: G L syzkaller #0 PREEMPT(full) [ 1297.533285][T24979] Tainted: [L]=SOFTLOCKUP [ 1297.533293][T24979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1297.533308][T24979] Call Trace: [ 1297.533316][T24979] [ 1297.533325][T24979] dump_stack_lvl+0x189/0x250 [ 1297.533351][T24979] ? __pfx____ratelimit+0x10/0x10 [ 1297.533375][T24979] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1297.533395][T24979] ? __pfx__printk+0x10/0x10 [ 1297.533432][T24979] should_fail_ex+0x414/0x560 [ 1297.533460][T24979] _copy_to_user+0x31/0xb0 [ 1297.533482][T24979] simple_read_from_buffer+0xe1/0x170 [ 1297.533508][T24979] proc_fail_nth_read+0x1b3/0x220 [ 1297.533531][T24979] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1297.533553][T24979] ? rw_verify_area+0x2a6/0x4d0 [ 1297.533569][T24979] ? tun_chr_write_iter+0x18a/0x200 [ 1297.533586][T24979] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1297.533607][T24979] vfs_read+0x200/0xa30 [ 1297.533624][T24979] ? fdget_pos+0x247/0x320 [ 1297.533649][T24979] ? __pfx___mutex_lock+0x10/0x10 [ 1297.533667][T24979] ? __pfx_vfs_read+0x10/0x10 [ 1297.533686][T24979] ? __fget_files+0x2a/0x420 [ 1297.533711][T24979] ? __fget_files+0x3a0/0x420 [ 1297.533732][T24979] ? __fget_files+0x2a/0x420 [ 1297.533761][T24979] ksys_read+0x145/0x250 [ 1297.533777][T24979] ? exc_page_fault+0x82/0x100 [ 1297.533802][T24979] ? __pfx_ksys_read+0x10/0x10 [ 1297.533823][T24979] ? __do_fast_syscall_32+0xbe/0x570 [ 1297.533845][T24979] __do_fast_syscall_32+0x1f7/0x570 [ 1297.533864][T24979] ? rcu_is_watching+0x15/0xb0 [ 1297.533892][T24979] ? do_fast_syscall_32+0x34/0x80 [ 1297.533914][T24979] do_fast_syscall_32+0x34/0x80 [ 1297.533932][T24979] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1297.533953][T24979] RIP: 0023:0xf70fd539 [ 1297.533970][T24979] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1297.533986][T24979] RSP: 002b:00000000f54ed590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 1297.534006][T24979] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f54ed620 [ 1297.534019][T24979] RDX: 000000000000000f RSI: 00000000f7496ff4 RDI: 0000000000000000 [ 1297.534030][T24979] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1297.534041][T24979] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1297.534052][T24979] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1297.534081][T24979] [ 1298.187404][ T9929] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1298.226462][ T9929] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1298.276346][ T9929] usb 1-1: can't read configurations, error -71 [ 1298.428288][ T5829] usb 4-1: Detected FT232A [ 1298.444552][ T5829] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1298.472117][ T5829] usb 4-1: USB disconnect, device number 93 [ 1298.478581][T24987] team0: Port device ip6gre0 removed [ 1298.494892][ T5829] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1298.515688][ T5829] ftdi_sio 4-1:0.0: device disconnected [ 1298.528265][ T39] skbuff: skb_under_panic: text:ffffffff8a2775a8 len:136 put:40 head:ffff888055e82000 data:ffff888055e81fe8 tail:0x70 end:0x6c0 dev:team0 [ 1298.549316][T24987] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1298.567894][T24992] netlink: 2188 bytes leftover after parsing attributes in process `syz.0.5248'. [ 1298.580456][ T39] ------------[ cut here ]------------ [ 1298.585971][ T39] kernel BUG at net/core/skbuff.c:213! [ 1298.592676][ T39] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 1298.598919][ T39] CPU: 1 UID: 0 PID: 39 Comm: kworker/1:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1298.609654][ T39] Tainted: [L]=SOFTLOCKUP [ 1298.613964][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1298.623996][ T39] Workqueue: mld mld_ifc_work [ 1298.628657][ T39] RIP: 0010:skb_panic+0x157/0x160 [ 1298.633670][ T39] Code: c7 20 90 6f 8c 48 8b 74 24 08 48 8b 54 24 10 8b 0c 24 44 8b 44 24 04 4d 89 e9 50 55 41 57 41 56 e8 6e 67 f5 ff 48 83 c4 20 90 <0f> 0b cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1298.653268][ T39] RSP: 0018:ffffc90000af72c0 EFLAGS: 00010286 [ 1298.659314][ T39] RAX: 0000000000000087 RBX: dffffc0000000000 RCX: 57c240c3a35bd900 [ 1298.667262][ T39] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 1298.675210][ T39] RBP: 00000000000006c0 R08: ffff8880b87247d3 R09: 1ffff110170e48fa [ 1298.683158][ T39] R10: dffffc0000000000 R11: ffffed10170e48fb R12: ffff88805a228650 [ 1298.691104][ T39] R13: ffff888055e82000 R14: ffff888055e81fe8 R15: 0000000000000070 [ 1298.699051][ T39] FS: 0000000000000000(0000) GS:ffff888125f3a000(0000) knlGS:0000000000000000 [ 1298.707956][ T39] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1298.714514][ T39] CR2: 0000000032420ff8 CR3: 000000005f9e8000 CR4: 00000000003526f0 [ 1298.722463][ T39] Call Trace: [ 1298.725722][ T39] [ 1298.728633][ T39] ? ip6gre_header+0xc8/0x790 [ 1298.733290][ T39] ? ip6gre_header+0xc8/0x790 [ 1298.737952][ T39] skb_push+0xc3/0xe0 [ 1298.741912][ T39] ip6gre_header+0xc8/0x790 [ 1298.746396][ T39] ? __pfx_ip6gre_header+0x10/0x10 [ 1298.751489][ T39] ? read_seqbegin+0x1ac/0x250 [ 1298.756232][ T39] ? __pfx_read_seqbegin+0x10/0x10 [ 1298.761324][ T39] ? ___neigh_create+0x1c5f/0x2230 [ 1298.766413][ T39] ? __pfx_ip6gre_header+0x10/0x10 [ 1298.771502][ T39] neigh_connected_output+0x286/0x460 [ 1298.776855][ T39] ip6_finish_output2+0xfb3/0x1480 [ 1298.781947][ T39] ? __pfx_ip6_finish_output2+0x10/0x10 [ 1298.787468][ T39] ? ip6_mtu+0x7d/0x490 [ 1298.791597][ T39] ? ip6_mtu+0x38c/0x490 [ 1298.795812][ T39] ? ip6_finish_output+0x2ef/0x4e0 [ 1298.800897][ T39] ? ip6_output+0x126/0x550 [ 1298.805374][ T39] ip6_output+0x340/0x550 [ 1298.809681][ T39] NF_HOOK+0x9e/0x380 [ 1298.813639][ T39] ? NF_HOOK+0x101/0x380 [ 1298.817855][ T39] ? __pfx_NF_HOOK+0x10/0x10 [ 1298.822418][ T39] ? __pfx_dst_output+0x10/0x10 [ 1298.827247][ T39] ? icmp6_dst_alloc+0x3a5/0x420 [ 1298.832167][ T39] ? icmp6_dst_alloc+0x3a5/0x420 [ 1298.837080][ T39] mld_sendpack+0x8d4/0xe60 [ 1298.841565][ T39] ? mld_sendpack+0x1e7/0xe60 [ 1298.846224][ T39] ? __pfx_mld_sendpack+0x10/0x10 [ 1298.851230][ T39] mld_ifc_work+0x83e/0xd60 [ 1298.855709][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 1298.860884][ T39] ? process_scheduled_works+0x9ef/0x1770 [ 1298.866580][ T39] process_scheduled_works+0xad1/0x1770 [ 1298.872107][ T39] ? __pfx_process_scheduled_works+0x10/0x10 [ 1298.878065][ T39] worker_thread+0x8a0/0xda0 [ 1298.882639][ T39] kthread+0x711/0x8a0 [ 1298.886685][ T39] ? __pfx_worker_thread+0x10/0x10 [ 1298.891772][ T39] ? __pfx_kthread+0x10/0x10 [ 1298.896343][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 1298.901539][ T39] ? lockdep_hardirqs_on+0x98/0x140 [ 1298.906715][ T39] ? __pfx_kthread+0x10/0x10 [ 1298.911286][ T39] ret_from_fork+0x599/0xb30 [ 1298.915855][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 1298.920941][ T39] ? __switch_to_asm+0x39/0x70 [ 1298.925686][ T39] ? __switch_to_asm+0x33/0x70 [ 1298.930428][ T39] ? __pfx_kthread+0x10/0x10 [ 1298.935001][ T39] ret_from_fork_asm+0x1a/0x30 [ 1298.939747][ T39] [ 1298.942754][ T39] Modules linked in: [ 1298.947085][ T39] ---[ end trace 0000000000000000 ]--- [ 1298.961051][T24991] ieee80211 phy154: Selected rate control algorithm 'minstrel_ht' [ 1299.019409][ T39] RIP: 0010:skb_panic+0x157/0x160 [ 1299.024648][ T39] Code: c7 20 90 6f 8c 48 8b 74 24 08 48 8b 54 24 10 8b 0c 24 44 8b 44 24 04 4d 89 e9 50 55 41 57 41 56 e8 6e 67 f5 ff 48 83 c4 20 90 <0f> 0b cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1299.062102][ T39] RSP: 0018:ffffc90000af72c0 EFLAGS: 00010286 [ 1299.075090][T24994] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5247'. [ 1299.084087][ T39] RAX: 0000000000000087 RBX: dffffc0000000000 RCX: 57c240c3a35bd900 [ 1299.112568][ T39] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 1299.125160][ T39] RBP: 00000000000006c0 R08: ffff8880b87247d3 R09: 1ffff110170e48fa [ 1299.135827][ T39] R10: dffffc0000000000 R11: ffffed10170e48fb R12: ffff88805a228650 [ 1299.162243][ T39] R13: ffff888055e82000 R14: ffff888055e81fe8 R15: 0000000000000070 [ 1299.179975][ T39] FS: 0000000000000000(0000) GS:ffff888125f3a000(0000) knlGS:0000000000000000 [ 1299.198303][ T39] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1299.213188][ T39] CR2: 0000000080111018 CR3: 0000000030cf4000 CR4: 00000000003526f0 [ 1299.229478][ T39] Kernel panic - not syncing: Fatal exception [ 1299.235896][ T39] Kernel Offset: disabled [ 1299.240200][ T39] Rebooting in 86400 seconds..