last executing test programs: 21m58.626217327s ago: executing program 0 (id=8): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x202000) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) fcntl$getown(r1, 0x9) file_setattr(r0, 0x0, &(0x7f0000000000)={0x2000, 0xfffffffc, 0xed, 0x0, 0x400}, 0x18, 0x1000) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x2800491, 0x0, 0x4, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r5, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x29a, 0x0, 0x7fffffffffffffff}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0xe2f5b6da09b13d83, 0x4) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x234, r9, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x20c, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x164, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x7, @private0, 0x157}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "105850071e2ab631bd00cf795354cb2c626d8b5be606d39cd0bd2ce6ebd06eb3"}, @WGPEER_A_ALLOWEDIPS={0xf8, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3b}}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x28}}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24}]}, {0x7c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d454d5dd835fff58334762251fb458c0abd16089d30d58ca66a1769b8a83772c"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x9, @mcast2, 0x5d}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}]}, 0x234}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) syz_emit_ethernet(0x76, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fa0a6b", 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, [@fragment={0x2c}, @srh]}}}}}}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 21m57.504188513s ago: executing program 4 (id=5): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000e40)={{0x14, 0x10, 0x1, 0x0, 0x1000000}, [@NFT_MSG_DELRULE={0x38, 0x6, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x80}, 0x1, 0x0, 0x0, 0x20040804}, 0x800) 21m56.781324567s ago: executing program 4 (id=11): socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) accept4$alg(r6, 0x0, 0x0, 0x80000) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) bind$alg(r3, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'fpu(pcbc(aes-aesni))\x00'}, 0x58) syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) socket$nl_route(0x10, 0x3, 0x0) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r8, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x800, 0xbbba, 0x0, 0x18, 0x0, {}, {0x0, 0xfffffffd, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x100}) 21m55.949074708s ago: executing program 0 (id=12): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x30, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x400) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) r4 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) listen(r4, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000200)=@req={0x10, 0x80, 0x4, 0x8001}, 0x10) accept4$inet6(r4, 0x0, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0) ioctl$CEC_TRANSMIT(r3, 0xc0386105, &(0x7f0000000140)={0xa51, 0x2, 0xd, 0x6, 0x7fff, 0x8, "43b737248525b09bc6455302a474c172", 0x82, 0x2a, 0x5, 0x6b, 0x1, 0x3, 0x44}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="6000000010000104000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a2c001280110001006272696467655f736c617665000000001400058005002b000000000005000a0000000000140003006272696467655f736c6176655f30"], 0x60}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getpgid(0x0) write$dsp(0xffffffffffffffff, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f3", 0xf) 21m54.27932526s ago: executing program 0 (id=14): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x80085610, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x6, 0x1fc}}) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000000)={0x7, 0x5, 0x4, 0x20, 0x80, 0x6, 0xd, 0x7, 0x2, 0x31, 0xa2, 0xb, 0x81, 0x84}, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r4, 0x20) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='bic', 0x3) shutdown(r4, 0x0) r5 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r5, 0x40085112, &(0x7f0000000000)=@t={0x4, 0x8, 0x1, 0x2}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x5}, {0xa, 0x0, 0x0, @loopback}}}, 0x48) pread64(0xffffffffffffffff, &(0x7f0000000100)=""/50, 0x32, 0x20000000000040) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r6, r6, 0x0, 0x200000) 21m53.100817064s ago: executing program 4 (id=17): ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f00000002c0)) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000000)={0x7, 0x5, 0x4, 0x20, 0x80, 0x6, 0xd, 0x7, 0x2, 0x31, 0xa2, 0xb, 0x81, 0x84}, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r5, 0x20) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000000)='bic', 0x3) shutdown(r5, 0x0) r6 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r6, 0x40085112, &(0x7f0000000000)=@t={0x4, 0x8, 0x1, 0x2}) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0xffffffffffffff5a) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x5}, {0xa, 0x0, 0x0, @loopback}}}, 0x48) pread64(0xffffffffffffffff, &(0x7f0000000100)=""/50, 0x32, 0x20000000000040) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r7, r7, 0x0, 0x200000) sendto$inet6(r1, &(0x7f0000000500)="a4", 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x400, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffffff}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000040)={{{@in=@dev, @in=@loopback}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, &(0x7f0000000180)=0xe4) close(r1) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) readv(0xffffffffffffffff, &(0x7f0000001540), 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$CEC_G_MODE(r4, 0x80046108, &(0x7f0000000340)) 21m52.579498944s ago: executing program 4 (id=19): r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x400000000e) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000001440)=[{{&(0x7f0000000280)=@un=@abs, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)=""/1}, {&(0x7f0000000300)=""/102}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/111}]}}], 0x700, 0x40002002, 0x0) write$binfmt_misc(r3, &(0x7f0000000040), 0xffc1) setsockopt$sock_int(r4, 0x1, 0x10, &(0x7f0000000180)=0x55b7, 0x4) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a8004000f8ff96d453d1f9aa6d74dc5f070006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196fdf66112c88ac417898516277ce06bbace80177c08000000e5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd", 0xd8}], 0x1}, 0x44000) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100003f3fdc20221802324a130102030109021b0001000010000904"], 0x0) 21m52.448530635s ago: executing program 0 (id=20): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000000140)={0xc, &(0x7f0000000040)={0x40, 0x6, 0x99, {0x99, 0x10, "e00bb3e309afebd107d84530b0810946efa678fb0fb0479c8ff19684743937ab1899b565d6d8ef9569f4bef62c0eca4be534fdbbdcdd9f4d334ccdc85d7e14a15481063250c2662914fe66de35a03200553658ab457478e08385ff282abd36fb23413f0ee133a3fe66923e4fc239c545b9a57b04d9a6dcf39d2b3512c9618a17c61d7e3eab2a8be8f3b60b62ce1eae28b6699260889ecb"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44d}}}, &(0x7f0000000480)={0x1c, &(0x7f0000000180)={0x0, 0xa, 0xb0, "550a5912c706b726de078ae545ccac9ea125393ad8de8013f6386e10c98a9fd419ba71ab29db144624731cc2afbff6cbe1854e27f2f5df65fc8bc83460c3f30bc3ea76dadacebe81c9954564b141c176b82d21016874e90bbd49dccaeb9cc46c90543d9d62d045e13142fd51a0565ce4cebed6f857b0ba961d2e7d64fbf380ac0f6189ffcebb4ec4df77198241bf3dd894db9d4e49853a184c729a05b56af4c8027211ff73f1c23226c86f2bf79df5a4"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000380)={0xc0, 0xa1, 0x4, 0x4a}, &(0x7f00000003c0)={0x40, 0xa0, 0x4, 0xb}, &(0x7f0000000400)={0xc0, 0xa2, 0x2f, "e84f40c827b6e1288879bbaaff502d60c05ae560a8534ecd2b069c4f44a500d782920c2f36ee4bb1f88fcb181c9aa4"}}) syz_usb_control_io(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0\x00') syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f00000004c0)=ANY=[@ANYBLOB="177e01000000560a080a9ca53918cb86977839bb2416bf02f24b0a5b24ec08777124e4c62257d1edd1b4c5b2d87cea3ff8151053673972db119ac7befc9655a0cacae73b81df0c44531ac5eb84d88ee4d86206a7e4a21cc35d0fcd419ab64913d8a59259f6260fd76647bc77881884637d5c9f717e6f9ce15c213e067b7e3a8995cdd0b525330e27c12755cb9d1c566805c48e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000780)={0x18, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000140)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) futex(&(0x7f0000004000), 0x7, 0x0, 0x0, 0x0, 0xa5023fff) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000002c0)={0x18, &(0x7f0000000680)={0x20, 0x3e, 0xb5, "3f304ee85da30fa1e2ed0d875ff9000c942544bc64eace4ee9a3ebdfb09b9a4098b5799fb249ffaf64c56bcd39d3d9912488f513cfee8d6dfe92801e3c337750e09a66362960268e84175f14a94a0fd8ea505d5490a1a36ccb14033a70c082cc654b6e28a99bb4e27efa07445e3c191200c51b3b649263a883e82af9dd3e612491cd75e539c0a32a97abaa26b626cd2d8b192481bda3075dc355fd33416a7f74fd8dc64112633e2f06eb815b89cff103ab96a20500"}, 0x0, 0x0, 0x0, 0x0}) ioctl$KDSETLED(r2, 0x4b32, 0x10a) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x24, &(0x7f0000000240)={0x0, 0x14, 0x4, "92e980ce"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21m51.936574096s ago: executing program 32 (id=19): r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x400000000e) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000001440)=[{{&(0x7f0000000280)=@un=@abs, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)=""/1}, {&(0x7f0000000300)=""/102}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/111}]}}], 0x700, 0x40002002, 0x0) write$binfmt_misc(r3, &(0x7f0000000040), 0xffc1) setsockopt$sock_int(r4, 0x1, 0x10, &(0x7f0000000180)=0x55b7, 0x4) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a8004000f8ff96d453d1f9aa6d74dc5f070006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196fdf66112c88ac417898516277ce06bbace80177c08000000e5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd", 0xd8}], 0x1}, 0x44000) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100003f3fdc20221802324a130102030109021b0001000010000904"], 0x0) 21m49.802903651s ago: executing program 0 (id=30): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') r1 = syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/cgroup\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='uid_map\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000040000701feffffff00000000047c0000040042801400018006000600800a000008001c00", @ANYBLOB="04"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/softnet_stat\x00') fchdir(r3) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000000)='./file0\x00', 0x4000080a) ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f00000002c0)=0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000e00)={{r7}, r8, 0x2, @inherit={0x60, &(0x7f0000000300)={0x0, 0x3, 0x1, 0x7485, {0x20, 0x0, 0x9, 0x1, 0xddbc}, [0x7, 0x8c76, 0xb]}}, @devid}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, &(0x7f00000006c0)={{r5}, r8, 0x8, @unused=[0x0, 0x8, 0x0, 0x49c], @name="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"}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000480)={{r1}, r8, 0x10, @unused=[0xffffffff, 0x101, 0x0, 0x1], @subvolid=0x4}) write$6lowpan_enable(r0, &(0x7f0000000040)='0', 0x1) 21m48.795719284s ago: executing program 0 (id=32): socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) socket(0x1, 0x803, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f00000000c0)=0x8b, 0x3) fcntl$notify(r2, 0x402, 0x8000003d) mkdir(&(0x7f00000000c0)='./file0\x00', 0x16) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x414801, 0x488) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r5, &(0x7f0000000a00)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0xc52, @local, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000000)="001036ffbd0a077c617f9c475f9526f9f1", 0x11}], 0x1}}], 0x1, 0x4000841) openat(0xffffffffffffff9c, 0x0, 0x0, 0x20) 21m47.996652754s ago: executing program 33 (id=32): socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) socket(0x1, 0x803, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f00000000c0)=0x8b, 0x3) fcntl$notify(r2, 0x402, 0x8000003d) mkdir(&(0x7f00000000c0)='./file0\x00', 0x16) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x414801, 0x488) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r5, &(0x7f0000000a00)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0xc52, @local, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000000)="001036ffbd0a077c617f9c475f9526f9f1", 0x11}], 0x1}}], 0x1, 0x4000841) openat(0xffffffffffffff9c, 0x0, 0x0, 0x20) 8m31.795494469s ago: executing program 6 (id=3764): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',gr', @ANYRESDEC=0x0]) mount$fuse(0x0, 0x0, 0x0, 0x100000, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x80, 0x0) unshare(0x26020480) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) r1 = open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x89100) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x1a2c42) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001ac0)={r2, 0x2000, {0x0, 0x0, 0x0, 0x0, 0x14a1ff, 0x0, 0x0, 0x1a, 0x1c, "3384020bbe82b398000000000000000000001d0ec0c1b4e9b1c4369d03740100ceaac594b3d6d741dd17c1c50d38ef2a565ef1e80000000058966500", "a9103939c787a16c1ca4f837026d1a8554feac911e1cd130e04d528539f3d3289737f0374c72a964a02447a75df8a6ca7f040000000000000072fd29f35239d2", "24431a1e77a68e174f00", [0x9, 0x400]}}) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) open_tree(r1, &(0x7f0000000040)='./file0\x00', 0x80001) umount2(0x0, 0x3) socket$inet6_udp(0xa, 0x2, 0x0) openat$dir(0xffffff9c, &(0x7f00000000c0)='./file0\x00', 0x37be00, 0x50) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$vsock_stream(0x28, 0x1, 0x0) socket(0xa, 0x5, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) 8m30.871355561s ago: executing program 6 (id=3772): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8810) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bind$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) connect$tipc(r0, &(0x7f0000000040)=@id, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r1, 0x2) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8a) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8) flock(r2, 0x1) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) 8m29.295721448s ago: executing program 6 (id=3781): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000140)=0x2000) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x2000) 8m29.040424455s ago: executing program 6 (id=3784): r0 = syz_open_dev$media(&(0x7f0000000040), 0xcfa, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0287c02, &(0x7f0000000080)={{}, {}, 0x4, [0x5, 0x200000]}) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000002c0)='syzkaller0\x00', 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000040)={r5}, &(0x7f00000000c0)=0x8) move_mount(r2, &(0x7f0000000140)='.\x00', r1, 0x0, 0x41) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r2, &(0x7f0000000100)='./file0\x00', 0x220) r6 = openat$tcp_mem(0xffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fcntl$notify(r6, 0x402, 0x8000000a) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000040)='test_dummy_encryption', 0x0, 0xffffffffffffff9c) r7 = fsopen(&(0x7f0000000240)='ext2\x00', 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fsconfig$FSCONFIG_SET_FLAG(r7, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) r8 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$VHOST_SET_FEATURES(r9, 0x4008af00, &(0x7f0000000200)=0x8000000) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r9, 0x84, 0x79, &(0x7f0000000180)={r10, 0xd, 0x3}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="0008000016000104feffffff00000000fc0000fdff0000000000000000000000ac14141a0000000000000000000000000004000000000000000000100000ffff", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414390000000000000000000000002000000033000000ac1414bb000000000000000000000000030000000000000000000000000000000500000000000000c50f000000000000020000000000000000000000000000000000000000000000fdffffffffffffff0000000000000000000000000000000000000000000000007f00000000000000000000000000000003000000feffffff0000000000000000d000000008000000ffffffff04001b0008000b00ff7f0000"], 0x100}}, 0x20004808) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$XFS_IOC_START_COMMIT(r6, 0x80585882, &(0x7f00000000c0)) 8m28.874770214s ago: executing program 6 (id=3785): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020}, 0x2020) write$FUSE_INIT(r0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea2105600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x81, {0x0, 0x1f1a3f098af6e4a0}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) close_range(r0, 0xffffffffffffffff, 0x0) 8m28.181011309s ago: executing program 6 (id=3792): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000140)=[{0x7, 0x5, 0xf, 0x5}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0x2, 0x9, 0xfffffffffffffffb, 0x2, 0x40000000002, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0x81000000, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x80000000be, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0xe4ff) 8m27.5687156s ago: executing program 34 (id=3792): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000140)=[{0x7, 0x5, 0xf, 0x5}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0x2, 0x9, 0xfffffffffffffffb, 0x2, 0x40000000002, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0x81000000, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x80000000be, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0xe4ff) 15.199830358s ago: executing program 5 (id=5931): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x38011, r0, 0x0) syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') (fail_nth: 12) 15.065586954s ago: executing program 5 (id=5932): r0 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400010000000009040000010300000009210000200122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000100000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r2 = openat$vsock(0xffffff9c, &(0x7f0000000340), 0x2001, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x22) ioctl$FS_IOC_SETFLAGS(r2, 0x40046602, &(0x7f0000004240)=0x400000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x17, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000000)=0xf22) ioctl$TCSETAW(r4, 0x5407, &(0x7f0000000040)={0x3, 0x2, 0x9, 0x6978, 0xe, "0acf6b85b038537e"}) syz_usb_control_io$hid(r0, &(0x7f0000000b80)={0x14, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002205018000008d3dc6b5"], 0x0}, 0x0) 14.370791955s ago: executing program 5 (id=5934): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$unix(r0, 0x0, 0x0) 14.227035006s ago: executing program 5 (id=5935): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, 0x0, 0x0) (async) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f00000003c0)) (async) r1 = io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x21, 0xab}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000780)={0x29e9c934, 0x3, 0x7f, 0x404}, 0x10) (async) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYRES16=r1], 0x14}, 0x1, 0x0, 0x0, 0x2010}, 0x24004884) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200), &(0x7f00000002c0)=0xc) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0xffffffff, 0x180, 0x2, 0x14, 0xf1, 0x100000, 0x7fffffffffffe, 0x5, 0x4005, 0x8, 0x0, 0x45, 0x4, 0x5], 0xdddd0000, 0x1c4213}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x80b42, 0x0) (async, rerun: 32) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000340)={0x81, 0x0, 0x1}) (rerun: 32) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async, rerun: 64) socket$key(0xf, 0x3, 0x2) (rerun: 64) 12.763942508s ago: executing program 5 (id=5938): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x44, 0x26, 0xdf, 0x8, 0x1604, 0x8005, 0x1388, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x8, "", [{{0x9, 0x4, 0x47, 0x6, 0x0, 0x33, 0x43, 0xc, 0x7}}]}}]}}, 0x0) syz_open_dev$sg(0x0, 0x0, 0x8401) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x2, 0xffffffff}, 0x0) socket(0x10, 0x803, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x709f, 0x6361, 0x8, 0xc, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x40804) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b826, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x6, 0x6691}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x2880) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@getqdisc={0x24, 0x26, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xfff1, 0xffe0}, {0x1, 0xd}, {0xffe0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a300000000054000380080002400017ca9edc00014000000000400003801400010076657468315f742f5f62726964676500140001007767320000000000000000000000000014000100766574683069746f5f7465616d000000140000001100"], 0xa8}, 0x1, 0x0, 0x0, 0x4040895}, 0x24008881) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), 0xffffffffffffffff) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x2, 0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000f3c7c820da059a009562010203010902340001000000000904"], 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x6, &(0x7f00001f3000/0x2000)=nil) request_key(&(0x7f00000011c0)='big_key\x00', &(0x7f0000001200)={'syz', 0x1}, &(0x7f0000001240)='\x00', 0x0) add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000980)="475a251bdb1e4c", 0x7, 0xfffffffffffffffb) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) 10.791983946s ago: executing program 3 (id=5949): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x1000006, 0x4}, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000180)) io_uring_enter(0xffffffffffffffff, 0x47f9, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r4 = syz_usb_connect$cdc_ecm(0x4, 0x156, &(0x7f0000000580)=ANY=[@ANYBLOB="12011003020000ff2505831e4e7103d05d91ef19a1a4604408fea17531d32ef9da01010167f009090400000002060000002406254e7086b404c5886d08860000002400000000240f015386d42bfa4ff072a111dff4ff2d0025ae94591dc5087b0d3906aee5c55224b21c6de78dcd27e8e53a46fba81f64a841a1204266f5a45c82481189f2cd9db37497267430b82cf934e3d3"], &(0x7f00000004c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x0, 0xd0, 0x5, 0x8, 0x5}, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x421}}]}) syz_usb_ep_write(r4, 0x5, 0x41, &(0x7f0000000500)="8e8ecb86e1686a692ca25e347583fdfc30f27773109e13988de3ddac8aae64793bab124db2a51a3f7905ff8af0b9818f6d59613d778b08c17f90fcc1c9f4e90be9") r5 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r5, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r5, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) sendto(r5, 0x0, 0x0, 0xbf30ccbe67c3e0fd, &(0x7f00000000c0)=@in6={0xa, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffb}, 0x80) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xfff3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xffffffffffffff39, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0xffffffff}]}}]}, 0x38}}, 0x4048000) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f0000000280)={0x48, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0xa3}) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x42241, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r6, 0x800c5012, &(0x7f0000000040)) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) preadv(r7, &(0x7f0000000080), 0x0, 0x8, 0x5) 9.473996089s ago: executing program 7 (id=5953): r0 = syz_io_uring_setup(0x7672, &(0x7f0000000080)={0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) setxattr$incfs_id(0x0, &(0x7f00000001c0), 0x0, 0x0, 0x58451762054a5973) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) socket$unix(0x1, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) pipe(&(0x7f00000001c0)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0xf0e0fc9000f8e609}) io_uring_enter(r0, 0x3, 0x6a4c, 0x67, 0x0, 0x0) 9.463357767s ago: executing program 5 (id=5954): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={0x0}}, 0x0) 8.977806893s ago: executing program 7 (id=5959): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x180) fcntl$getownex(r2, 0x10, &(0x7f0000000040)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0x42, 0x4, 0x2c4, 0xffffffff, 0x1b8, 0x0, 0x1b8, 0xffffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xc8, 0xec, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x2c}, {0x0, 0x0, 0x3, 0x0, 0xf}}, @common=@unspec=@connmark={{0x2c}, {0x5}}]}, @REJECT={0x24}}, {{@uncond, 0x0, 0x70, 0x94}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x320) mknod$loop(0x0, 0xfff, 0x0) execve(&(0x7f0000019100)='./file0\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc0280200003001e030500e1000c040007031a00", 0x22) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') r6 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000540)={r6, r5, 0x9, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x1, 0x0, &(0x7f00000004c0)=[0x7e], 0xffffffffffffffff}}, 0x30) getpid() ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x6, 0x0, 0x10000, "5debca561a5fbf61048955f6f876b2ff", 0x0, 0x0, 0xfd}) r7 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r7, r7, r7}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r8, &(0x7f0000000300)={&(0x7f00000001c0)=@ieee802154={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0102}}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000140)="27031c002d0f1400020000000000000002ee1680ca82973d2bd4b80ac1f0536b0cd7f802c9b46a3938941004f6c4b17715883cc2b0b474f28247f067a20fa88f1952693d", 0x44}, {&(0x7f0000001a80)="7cdb015fbb1990080000006a2615837b6487d32d2fb46cbd152314980741e032cef721aadbc1994f1d49784b25a274803a7caf917f73a677974c21ab81963cf096b03d0369ef39458a06a2bccd5f12f4584d19a07664fe933703f7f6030000003abfd437d1e03de09e6074561fe9216c8b8ba00820c3de3c53bdba305901d7103513c9c2b71ea428a38f832416f3cafeccc552044f00ff3570a9ab9cf26b9af6af17547bf7f4e1762be569a68d54e854db809b155cc566b08f25c90861e29ab717f760ad57bbfd48e867a91d63c1ac78aafe22fc56f053ed1cc6", 0xda}, {&(0x7f0000000800)="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", 0xe23}, {&(0x7f0000000080)="98bdabadd78fb21ede", 0x9}], 0x4}, 0x24000008) r9 = socket$inet(0x2, 0xa, 0x0) setsockopt$sock_int(r9, 0x1, 0x2c, &(0x7f0000000040)=0x3, 0x4) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x2c, &(0x7f0000000140)={0x0, 0x0}, 0x10) 8.078973287s ago: executing program 1 (id=5970): ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000000)={0x5, 0x3, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x1, 0x9}) timer_create(0x4, &(0x7f0000000040)={0x0, 0x2f, 0x4, @tid=r0}, &(0x7f0000000080)=0x0) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, &(0x7f00000000c0)=0x3, 0x4, 0x3) (async, rerun: 64) timer_delete(r1) (rerun: 64) r2 = syz_open_dev$swradio(&(0x7f0000000100), 0x1, 0x2) ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, &(0x7f0000000140)={0xb, 0x0, 0x1, {0x4, 0x6e, 0x14c, 0x9}}) (async) ioctl$VIDIOC_DBG_G_CHIP_INFO(r2, 0xc0c85666, &(0x7f0000000180)={{0x1, @addr=0x100}, "3e8a81880750d5ed7470da0df73634093811f777783616cf97a370f9f45fe40b"}) ioctl$VIDIOC_G_FREQUENCY(r2, 0xc02c5638, &(0x7f0000000280)={0xffffffff, 0x5, 0x4}) (async) execveat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)={[&(0x7f0000000300)='\'\\[](,\x00']}, &(0x7f0000000440)={[&(0x7f0000000380)='\x00', &(0x7f00000003c0)=']+\x00', &(0x7f0000000400)='/dev/swradio#\x00']}, 0x1000) (async, rerun: 64) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) (async, rerun: 64) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r2, 0xc040583f, &(0x7f0000000500)={{@align=0x8000, {0xf42b, 0xf64e, 0x6, 0x4}}, {{[0x7, 0x5, 0x4, 0x8]}, 0x0, 0x1, 0x8, 0x0, &(0x7f0000000480)=[{{@_ha_fsid={[0x1, 0x3]}, {0x2, 0x8, 0xff, 0x100000001}}, 0x5, 0x0, ')^\x00'}, {{@_ha_fsid={[0x3, 0x6]}, {0x0, 0x7, 0x2, 0x3}}, 0x6e, 0x0, '/dev/swradio#\x00'}, {{@align, {0x4, 0x1, 0x1, 0x3}}, 0x1000, 0x0, '\'\\[](,\x00'}]}}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x2, 0x11, 0x80, 0x3, 0xc, 0x0, 0x70bd25, 0x25dfdbfd, [@sadb_spirange={0x2, 0x10, 0x4d5, 0x4d5}, @sadb_sa={0x2, 0x1, 0x4d6, 0x0, 0x6, 0x38, 0x0, 0xe0000001}, @sadb_sa={0x2, 0x1, 0x4d6, 0xc, 0x2, 0x81, 0x1, 0x80000001}, @sadb_lifetime={0x4, 0x4, 0xb, 0xf2, 0x9e22, 0xa4c0}]}, 0x60}}, 0x4000000) (async, rerun: 64) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000640)={0x0, 0x80000, 0xffffffffffffffff}) (rerun: 64) ioctl$DRM_IOCTL_AGP_INFO(r3, 0x80206433, &(0x7f0000000680)=""/78) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000700)={{{@in6=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@initdev}}, &(0x7f0000000800)=0xe4) quotactl_fd$Q_GETFMT(r3, 0xffffffff80000400, r4, &(0x7f0000000840)) (async) timer_getoverrun(r1) (async) r5 = openat$cuse(0xffffff9c, &(0x7f0000000900), 0x2, 0x0) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000940)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async, rerun: 32) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0186405, &(0x7f0000002980)={0xffffffff, 0x5, {r0}, {r4}, 0x1, 0x54f}) (rerun: 32) r8 = syz_mount_image$fuse(&(0x7f0000000880), &(0x7f00000008c0)='./file0\x00', 0x800000, &(0x7f00000029c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1e00}}, {@default_permissions}, {@blksize}, {@default_permissions}, {@default_permissions}, {@allow_other}], [{@euid_gt={'euid>', r7}}, {@dont_hash}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@subj_type={'subj_type', 0x3d, ')^\x00'}}, {@fsname={'fsname', 0x3d, ')^\x00'}}, {@uid_lt={'uid<', r4}}]}}, 0x0, 0x0, &(0x7f0000002b40)="9338d5e12384b8d988cf1866737c079ae049631218e140942b014abfac5f8bbdb741bd1028c4b1479885a6f9785183d10253ae64bd1e23c75efa637700e38b5aad79ba392fe61d2ffb01b8108dd85fa879f9659b4af22d1e3c59193aa192a6ac4da3f91cfe816b02c925cb68b9ba54f95044ee6611a77feaf246246d24") (async) r9 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000002bc0)="3628e4bb76493cc5a7c62424d33a5e3bb9404bfeb02dfe630e8fa8f52b96207e5b795deed257e80b8ccd80f90e4a747b398b754b3db180b41f8544d04e17c1b997e3b118f557de9a5fb2e3840a3fa1e879891af4ce84c4c8b46dbf157a85b3fdf23e3237d12acd9654a1f901cb6cafc9bbe243add56b2001319f4fd7f031fcbe15f7e4ead2feb58f17ae0469e0e97f4e50e55055a8d9dff3f780c8b3187d081fb39e9687d524645c4899505c3fb257eed9909a9b83695e3e3b6e6c2867183fd33b0222d2fac3c168dc19b76c", 0xcc) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r8, 0xc400941d, &(0x7f0000002cc0)={0x0, 0x0, 0xd}) ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, &(0x7f00000030c0)={r10, "5a175210d946bb7b8691fa3cec40093c"}) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000004100)={'vxcan0\x00', 0x0}) (rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000041c0)={&(0x7f00000040c0)={0x10, 0x0, 0x0, 0x202000}, 0xc, &(0x7f0000004180)={&(0x7f0000004140)=@can_delroute={0x1c, 0x19, 0x8, 0x70bd2c, 0x25dfdbff, {0x1d, 0x1, 0x1}, [@CGW_SRC_IF={0x8, 0x9, r11}]}, 0x1c}}, 0x200040c0) (async) ioctl$VIDIOC_G_FREQUENCY(r2, 0xc02c5638, &(0x7f0000004200)={0xc, 0x3, 0xa}) (async) close(r8) (async) ioctl$BLKFINISHZONE(0xffffffffffffffff, 0x40101288, &(0x7f0000004280)={0x5, 0x9}) 7.857362593s ago: executing program 1 (id=5962): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x1000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @last={{0x9}, @void}}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xdc}}, 0x0) 7.421279335s ago: executing program 3 (id=5963): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x23, 0x4008000) timer_create(0x6, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) unshare(0x40600) socket(0x25, 0x2, 0x8) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x2, 0x8000, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[], 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000040)='.\x00', 0x10000000) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ppoll(&(0x7f0000000200)=[{r2}, {r2, 0x5020}], 0x2, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="5766b1020affff20c311df259149e300", 0x10) listen(r2, 0x0) shutdown(r2, 0x0) read(r1, &(0x7f0000002040)=""/76, 0x4c) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) 6.832135679s ago: executing program 1 (id=5964): socket$l2tp6(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x4, &(0x7f0000000140)={[{}]}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000b00)=""/152, 0x98}], 0x1, 0x300100, 0x2000000) socket$can_j1939(0x1d, 0x2, 0x7) syz_usb_connect$uac1(0x0, 0xac, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, 0x0, 0x0) r5 = syz_io_uring_setup(0x78a9, &(0x7f0000000200)={0x0, 0x0, 0x40, 0x0, 0x3}, &(0x7f0000002480), &(0x7f00000024c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS2(r5, 0xf, &(0x7f0000002380)={0x1, 0x0, 0x0, &(0x7f00000022c0)=[{0x0}], 0x0}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, r2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x10}]}, @NFT_MSG_NEWSETELEM={0x30, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0xb4}}, 0x20000080) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001000000000904"], 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f00000001c0)) socket$netlink(0x10, 0x3, 0x8000000004) 6.303771536s ago: executing program 7 (id=5965): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78", 0x63}], 0x1}, 0x80) r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002880)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="02017d29012918000e3580009f0001140000002f0600ac141414e0000001808a8972bd0b72e41082b1a3d206"], 0xdd12}, {&(0x7f00000001c0)={0x18, 0x2b, 0x20, 0x70bd27, 0x25dfdbfd, "", [@nested={0x8, 0x121, 0x0, 0x1, [@nested={0x4, 0x140}]}]}, 0x18}, {0x0}], 0x3}, 0x0) 6.051042874s ago: executing program 2 (id=5967): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)={0x14, r1, 0x1, 0x0, 0x25dfdbfd, {0x3}}, 0x14}}, 0x0) 6.012176558s ago: executing program 7 (id=5968): r0 = syz_io_uring_setup(0x7672, &(0x7f0000000080)={0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) setxattr$incfs_id(0x0, &(0x7f00000001c0), 0x0, 0x0, 0x58451762054a5973) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) socket$unix(0x1, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) pipe(&(0x7f00000001c0)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0xf0e0fc9000f8e609}) io_uring_enter(r0, 0x3, 0x6a4c, 0x67, 0x0, 0x0) 5.489775434s ago: executing program 7 (id=5969): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x1000006, 0x4}, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000180)) io_uring_enter(0xffffffffffffffff, 0x47f9, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r4 = syz_usb_connect$cdc_ecm(0x4, 0x156, &(0x7f0000000580)=ANY=[@ANYBLOB="12011003020000ff2505831e4e7103d05d91ef19a1a4604408fea17531d32ef9da01010167f009090400000002060000002406254e7086b404c5886d08860000002400000000240f015386d42bfa4ff072a111dff4ff2d0025ae94591dc5087b0d3906aee5c55224b21c6de78dcd27e8e53a46fba81f64a841a1204266f5a45c82481189f2cd9db37497267430b82cf934e3d3"], &(0x7f00000004c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x0, 0xd0, 0x5, 0x8, 0x5}, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x421}}]}) syz_usb_ep_write(r4, 0x5, 0x41, &(0x7f0000000500)="8e8ecb86e1686a692ca25e347583fdfc30f27773109e13988de3ddac8aae64793bab124db2a51a3f7905ff8af0b9818f6d59613d778b08c17f90fcc1c9f4e90be9") r5 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r5, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r5, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) sendto(r5, 0x0, 0x0, 0xbf30ccbe67c3e0fd, &(0x7f00000000c0)=@in6={0xa, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffb}, 0x80) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xfff3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xffffffffffffff39, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0xffffffff}]}}]}, 0x38}}, 0x4048000) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f0000000280)={0x48, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0xa3}) openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x42241, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x8, 0x5) 5.452543933s ago: executing program 2 (id=5971): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000002340)={0x6, 0x7, {0x0}, {0xee01}, 0x8, 0x7}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)=0x0) r4 = fcntl$getown(r1, 0x9) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f00000023c0)={0x0, 0x9, {0xffffffffffffffff}, {0xee00}, 0x1, 0x1}) fstat(r1, &(0x7f0000002400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000002480)) read$FUSE(0xffffffffffffffff, &(0x7f00000024c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) stat(&(0x7f0000000480)='./cgroup/../file0\x00', &(0x7f0000004540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r1, &(0x7f0000004f00)=[{{&(0x7f00000001c0)=@file={0x1, './cgroup/../file0\x00'}, 0x6e, &(0x7f0000002300)=[{&(0x7f00000002c0)="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", 0xfa}, {&(0x7f00000003c0)="bbbd7babd6f2344e411f12772a2679d59b1b32a278c4f2343ee5d9ce62c4aa7e0517ac6c65a28cf385440ba90c83c5bfaf658be9eacec1d421d4a5a7e91eb1d773fb6bf2c202b9ee36047e1820e9bba9fc44947744faeb59beb9a2f4bf0df4d1a220237075be10c5bc243fa4e49794d6c59b65a07c24e42c74ddbfaa55e395d51c6025d82039e2d557af47a236ec43c1", 0x90}, {&(0x7f0000001300)="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", 0x1000}], 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000100000002000000", @ANYRES32=r2, @ANYRES32=r3, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=r4, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="180000000100000002000000", @ANYRES32=r9, @ANYRES32=r8, @ANYRES32=r10, @ANYBLOB="140000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYBLOB="aa085f3703865dea69808e9399701538784728492f5c331b0b1ccf580bc819c3e9c04e307e4cf0c1b55136d8aeda3f8b4a9f95638a91b5930cd211f972ec897809646b7d5af5ebc0367ca071e45e1770940a45f3ce8ad9f4820793217208b829ad78d055e23ee34332fd79a2e03a5248248062dbb15be100000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000100000001000000", @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r0], 0xe8, 0x4040040}}], 0x1, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x15, 0x5, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) timerfd_create(0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) chdir(&(0x7f0000000540)='./cgroup\x00') fchmodat(0xffffffffffffff9c, 0x0, 0xfffffed3) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4000) socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r13 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r13, 0x84, 0x2, &(0x7f00000000c0)={0xfdf9, 0x8, 0x20}, 0x8) sendto$inet6(r13, &(0x7f0000000580)="81", 0x1, 0xc001, &(0x7f0000000280)={0xa, 0x0, 0x92, @rand_addr=' \x01\x00', 0x511}, 0x1c) setsockopt$inet6_int(r13, 0x29, 0x1, 0x0, 0x0) 4.285093989s ago: executing program 3 (id=5972): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, 0x0, 0x93020007) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_procfs(0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000340), 0xffff, 0x20040) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x110}, 0x1, 0x0, 0x0, 0x4008000}, 0x4040) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000003c0)={{0x3, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40585414, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x4, 0xfffff034}, {0x20, 0xe, 0x0, 0x46}, {0x6}]}, 0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x39}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa8}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r7, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r6, 0x0}]) io_submit(r7, 0x0, &(0x7f0000000080)) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000280)=""/162, 0xa2}], 0x1, 0xfffff27e, 0x0) socket(0xa, 0x3, 0xff) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) 3.821323192s ago: executing program 2 (id=5973): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x1c, r4, 0xc01, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r5, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r7, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@mpls_getroute={0xa0, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x14}, [@RTA_NEWDST={0x84, 0x13, [{0x6, 0x0, 0x1}, {0x7ff, 0x0, 0x1}, {0xff}, {0x5}, {0xf, 0x0, 0x1}, {0xbac8, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x6, 0x0, 0x1}, {}, {0x1}, {0x9, 0x0, 0x1}, {0x52b97}, {0x2, 0x0, 0x1}, {0xfe}, {}, {0x8}, {0x81, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x4}, {0x6, 0x0, 0x1}, {0x404, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x1}, {0x0, 0x0, 0x1}, {0x7ff}, {0x2832, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0xa}]}]}, 0xa0}}, 0x0) 2.747962593s ago: executing program 2 (id=5974): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000000104010400000000398f0000000000000500010001"], 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x24, 0x1, 0x4, 0x201, 0x0, 0x0, {0xa}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x5}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x200c8016}, 0x94) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0xce21, @loopback}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, 0x0, 0x29) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) r3 = socket$key(0xf, 0x3, 0x2) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_UIE_ON(r4, 0x7003) close(0x3) sendmsg$key(r3, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="020a00e70201008b600000010000000000002883f82fa529765c4689a83a05e9067ac36a5539ffcb2ed7db5f5ccdc34b198155"], 0x10}}, 0x0) recvmmsg(r3, &(0x7f0000000500)=[{{&(0x7f0000000240)=@tipc, 0x80, &(0x7f00000002c0)=[{&(0x7f0000001740)=""/4081, 0xff1}, {&(0x7f0000000640)=""/247, 0xf7}, {&(0x7f0000000300)=""/52, 0x34}, {&(0x7f0000000180)=""/51, 0x33}, {&(0x7f0000000440)=""/129, 0x81}], 0x5}, 0x7ffffe00}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000340)=""/138, 0x8a}], 0x1}, 0xe3}], 0x2, 0x2, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000cc0), 0x8a140, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0x3d13, 0x0) readv(r3, &(0x7f00000007c0)=[{&(0x7f00000009c0)=""/76, 0x4c}], 0x1) ioctl$FIOCLEX(r3, 0x5451) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, &(0x7f00000001c0)) r6 = syz_open_dev$ttys(0xc, 0x2, 0x0) write$UHID_INPUT(r2, &(0x7f0000002740)={0x8, {"6ca3398f2ed7a91e2920e5cd4f81818d3b452aa32e7ddc70e1954d79adf4ebc5f439491e17d7b7284d29632d417d06e66c7156bfdc5ce47442d6832766a6d4cf1601659b8c92bf5acba4317064c829fbab922c5677f85f9e974a442fd9e107a99d82290a2be7d0ad57325c3b0f8d9a98e82fa042fec5044466220a497bcb736af015a99f0e07ba175eea70601d29c503bdf72f2f6af1835783764d200013e26c2390b52525dc950f2509799491f022e3471670634940bf5b937a76cd2504c8d0662483ab0248b26671b8c9afcc4d69d93a8dbd1d78e796eb02ba9aa3c3383aa004dff9235e75fa661787fa22c5351e2872bb9d8d16781b8d8c3effe5cf7cdacfd591daef9e7a351c453f1bbc8d173408c352df814a1872ad32dd70cac09fd08c0aafccfec3982542c413d5237c5b8ac0803469d7fd6207d2f1a2712e9b2e99e9fdfc7f16cc680757c66b205da94339988025dadabc3e299fb9db3028b53ecced6ae8104cb947e5599f818826038e674e3c7a6c411658395b575a40fbb91f14a64d32af8f53f481677a29587d5918432ad2ef73fd8ffeefc098134b0f09c94223bce39c2d866172ecf4dc0a4a48ee886041c163ee9c8f05dcf64cf4d6fdf0c45154e67b21faf5fe1c91499612f98d2a2304cdf1a32e816325c60b191ff5fdf1777a0975c025bbe032a4016ee5837c31424067d2a2386a681a1b859459989d9a381a834329ee31f714616b6300a49dc50352cec1801814d77ba5ed7a6ca59492f872198bdf4c78f04e0c8eab3315da2026f5a48b11be0882a037c41a53c0d54a4e0a254e40ad8759e3a1c88bbd88e3c2e46b8e92127270f15cdd59e35fb87824a53bbab508b2655c52bf9ea97fa936cc0732958c3eca96b7c7efedfb351bef545c8885988419cd818784ba888278bf068117a3f18ceb3768c43efe51bf242ee7592b378bff904e59ba64c983afd832c5edb6e83a1325e6ff0a37390ce42b509725e26bcc8ed66c3d5d0f528803649788ac80f52879e7fe3a643e9c9212dd6cf71a38ae6d00aae999c10f366b3648ba01ae6faa39dfb2a81264a8f1216ef965e854d3f68cf77ece7a8e23951a264abb80e14f8ae68d69ad8d8a8ed73988056c6e2b27d67ac3c9ca7b48336f9d46ba0f6dcc862f3703c6e263f209a7326f6c507b2505eec7ea87b96f992731e6e088dffdbc0aa8b264b9c815e622a1ad5a3a63b29876467d308ca78d369bf9167177ed81e8f71a3bff2125128f3030686a1f7ac3d7b7ff934fd6efd87bdac4117891a5afd490f15d95e620a07329f6e823b012a9037e96b9bef4f38e2f305e5bfa025dc6687f0612473db9ee129595f139eea41f2fd5c635f45b0a3f9f8cbf601073939ed4a04fade2e70fc895b84f4e4122793ed5de30847b6d6865b58d9719ec2a2196ca0aacacfcff99a931d55a4675008adebd920cd7c04125950741b33b6a5d81c62a1636e5298784ab70db186c17160f0cd5c8caace08267c91fd425e932152f8f73f91979a8452cf042544d8e9244ac87e8d5fbf05cbfa71407f3788cb6ec9d93bb8cd8900054efd38b1fbc8b7f7d221717404dd1a196b0dc775185a252f8ff67056638c79545642332241666bb0509e6f30183fa887711731f1ddc637e4440a0b87b4311515858900f3ff518d14ddbf4b9fadf320a1d4003413bb5b4710673f6159210a82c2fe54f6c8913be147327020123340ec5ad9a0cadb13f159b70bbac52c46204ff8a12d22f8c87f57bffc7ef265a38d3c6af69964c4f40d2c70128fa5579d0bc70b3d62ca3b3df563d1b127bc20296ab3c4b58540efb580a1ea8c67794a6cd20fca7402fcc404e9767baf5a7a895e2c5bb96c4e2bbc3631bd0af9fbb8dcbf04393dfbccc08bb6637c79f0d4ac82166192491deeeff78c083d74d455af6920fdba305d10cbdf915e6851bd4f267b219cf0fcece7ef72139e2d53afe0466a227da3a4e243b6b4e8b0ea7be672b8edbe0fc9060c1ad57a2c15d20cb72d56c223987c16adb047dc6504bd0cebf65a6a7432d980bc8f2b74126d5a0b04b98fe62ad44ebd3322626e3e90feed4b90b6d5c0f4035d3bc1bea659f843502f40ffa1c5e3430eac0293cde19a935153392645258b1dbef638eadf49dff8721ae9c8018b7cebae64fdcc043386382d9aa2c79ec338fb06342065d020fd9599be17bfac814dee9f6396beaa3ed91f8c3c7f54d5bdbc17b07e7e0bb8ca15e0afa59c947f843c4adcb5e599a0b11a53d4aed749abd506cb1fb44715aa0d45362e935d75574ce6219be3b0fc359bf3584612c02ed0369d01cc89ad94d70357f4407e1ff089d97425693793e590f8d50f8e447d4cc304e075da218430f9038bd23d74edb24a7558941bd500301a43154a1cd525aab68139646687fe2f8f55206376d627bf17e38438288de531173cda553c3c763d84c334edb9bafa978ab853b08ee3bbe72a523a4869af7ef4001cc5b893fe8e7117e16e6ac425edf47194198ee75b5ec0ea763aa0a347f73cea30c6e4c62156896604ac2ebfbea911875f7aa6af6d0c0be89955fbe95b2af8f70c1244d809de29e2fd7da8b8302e71c29b98801b4701abaaf5fda4c8dd9166c43811c5dd2ea7f2380cc0a741762aba9daddd8a7664443ee6b7ac0208828e82539f6126e7464f8daeb200aad7212490b1c63dddd4ad9c1a8ba2366775df8661a9b079c3a39ae8a95ea6353d81b753401bd2a5e0097a0d4a0bd74e1e7196e20fe76c8005c312217fd8ac1791b1fab507cc22808a2e62749edba43b69b18753cdc0ddcd8220c5fc92d0a4e48125006d5754b56a2e052c82e05ff266d9cffd61bf803b92df97019ca9a53a1b30547474e91015eec27fc14540a4a05d8518746dba597641267aeda5c9451d5fbb5d22636b4f478ad1e98fb14ca44a436951e2110750185e67e24023d1ccecacb337bb19d152ff5f726418f98fffc6408c44bac3fc536d3ee9d3546d46c12613bcaaf1c870a0942083e0c6f6a98db4e87f0c4f422efe23e5fb25193bd2f21fb2a24628e85eb35124fad4fef5fc1efc90900e6ddfcedf8ae5ca1a540271c847c9e6d5e3db3f2bbfa11979303f683d8af111e37750f3f136368a8ed0c3b92f02a26dd2c8bc8c1d3c92ae99209778ccbedda37562f6eaa3bf8ac6acee9144c578b607f36f2c3ad118d20df040c6866c54da4db8c8f60e4029b4e872727945f54078410b542e6ac31c1dd04484b3e72efdce270564b49f3c256ffb97a57c0bc1ee14c41d16a3fd0f89e9c7fc929ccdacd955784932637aa829acc71e6fbd460fe927fd145c79abcfa3c8dd4bae274e23f7350652a6af29ee18b7f360f29a01716e3104b222bf35807cfc1635322557cd0bd6b6f4922ea2a17788f6b547506cae39e3982db560c97e78ca85582115247c580b9c0d6111ef6ac595fcf4b328d8f98c9558c03cefa25a681b01011c0fad67c5fc82c4774aaf674d858e48113277650e2242880e31fea1dec0acfed30faa70db04aaf0615b101b7e6389f4e8be362acd69b4c4aa03a8b0e19d5f6449092cf6fbd02bd779d0c5eb4aec75a8e8fa153ca1826c051c1911e0f619be628fcc752d435ef9e7ed6415c74321e0f266048c93468f7021ca6c70b1bcbf8e6e1c3447b00d47d65b60e464dacd1c0a9df9257d72915a7a88b689b8300257a1f391501d3876c2f7ea860c09e762836feee857dc884f37898ad79fcf3fcceb27b4b6433eb1dee349891fdd08bbd19366f3eb0b7a752cc723e9580d7dea3c497276668404a6f193457a4eccb0e1ccd0bcc57bf2e201190b3347274264deba480a15fe4328af4a18da039429331f9951ee657e62c0d38b7297748ce7fb4397c176453ecab02c4d7d3e81ca2d201287c9e5c62ab601ca238d4ac3d8b00e6140794888fae4cd22cb6d6822a468d32396abb7b376bac164b0e2a60fb2b8fc859c6465a5d84127a03db365d366101a481770989f3638eb77cfa131b2a479714259f1cb0189eec13b60fa04e318b510303c835c7cff6109b066053b35779bb58daccb0c4b548f91c24cdf13338eb4d9e1f4faca147cd7455db0b7ce4c18e0df15f542c7f492cf76ca56663cfe3f66dbf4afb882cd30b2052cc692f0602d1cec9295998ff990b8b843caa500565cd2a597970357e233ac93edceeeb791f3ea9c54aaaa2c6afcca16d9462f6de9f641207d96ada8fcafffb486d04ecb0cb2d9a9a00baf97208ad63fdcaa326729932f8962cc8e86cda59b78ea1fe59af3e293ab98ed0d2206eb5f2259c5bf8abbd5c81ad4074d6e0bb1c3de59b8143da50256c34b3e97bcd3c32422876133a72d5a52204a0b1aac86d85fa635d2703b741554b1e908c46f7b9ee0a9b68c6a91930db494efa5e3e6a3cfc0098e9525ceaee6b165f1dd9bf795862c58059081ecb5063d86f07a2273e53579bc4344a8e43f4c90a5dffba36d59d0e1f488bcaa9fbba02eb81247d6353df91f52cd59d688076ab02898a43e169ef1887212649cfe514491e7a9ae9037892f0e2b49ae452db6e00502b7ef38f6f93240e50aa0b6d94dae0dc1fed81a8914b2c9525600cfaa3589c580fd58be626f3feea1936a29d7eae9cb857b3372a3722bf54b5c93de2bcf270119b5bc4f04fd51aa327a8d556fe9b0a375787999d2adf9cd604b550906b20e4aa6d52c01536c4eda7318629217c1ce45665c9d2cfd3b3693f7ae09f8a824054595b80b816feb51988bf3a3110205a1356739a2ee8a9a2190aadd43d72e7a531c25d568fe6cd1888ce2c4ec0d486307b9e4fcad855f6e50479108e836919f6e02b31364efd85c366d29e9f6ba8c4a4f56d8cd4094429382cc69c439ee6d34352161021402e7cf1cba5ac3b75eb990bc7ae0551c00bb15f00b38d817afd265fd0a2f8474baeb9c08c0d06828b178ac7bc9e6f7b2b95d63c077aea5b27f02e22e7d13c741a00f2be43993a8cc4dcde9ac55ba30a5db7b9321450b78266a99f4f7c66e1b14c37c343ae449060194247891dca8a0c914213899e598015934f753c45cf82012a5f4cf781096a66ac2e30d032eb83d72d4fe035c035153672daeda9b67e5720c245d88017660a1e061124b539eb85246924f0586ca729be94e04f4994cde5446d4f565f953fa608cde9304326df02d22d6fa1ea566d6aad929a25ab9daf523945a59128272def23c8f53ebe18e4cce2e1166a0abdc92fc6a322e91af013fe181b01fe1743c82f62ecb816af8ca0116f5faa6a78f2648fff975fda052127cbdf113a631425800c96a0454e8a3740aa9b6e8a01115c50425110cf0c54d1199e2ab10033e55c5005b50522ab310d69f6bad86ee084b36f6ed7f54452899c4ee6e6ecc7a7d1b9357701514cbee96df701cab4c5c9b42562de74b2f4b148da49487e9b00d53898ee048c832729551965bd03aabcab798ca76a77615087cc2942c10ebd5343de20da6cb7d3f0888a610e328e4afa6898d4cd2f4700c20494c6d5474a14b8f90bfc9350fe14927c5980eb557ee1972ff33599f5f799380914ed9431c2e763348f9288f394cf0eb70902037925091858fa68a10d8ead4b369318736584f8dfcb84927d0460d6c37cfc7163ae2d01c5a31721f09c6cd4d45d4871eaf6a0552dc3f3461fb34fd31e9055a371f1a434071f688d350e9000b93b2eb66876f898f34d68e3fbf0adf9d57302c15deea86fda395facf893a49bd865fd481e8a36e85460ab2960abe3c38f4f1a38a2a0a7f29e27a88547b7f2fe78ab8e8b663e4d796e8556c22ce46a8c3dbb6de74ac47313723dddb2824a", 0x1000}}, 0x1006) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0xd) ioctl$FIONREAD(r6, 0x541b, &(0x7f00000000c0)) ioctl$PPPIOCSCOMPRESS(r2, 0x400c744d) fcntl$setstatus(r2, 0x4, 0x42000) read$FUSE(r2, &(0x7f00000040c0)={0x2020}, 0x2020) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r7, &(0x7f0000000000)=[{0x0}], 0x1) 2.624440491s ago: executing program 1 (id=5975): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r0, &(0x7f0000005680)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)='=', 0xffa6}], 0x20}}], 0x1, 0x404c044) 2.356033145s ago: executing program 1 (id=5976): r0 = syz_io_uring_setup(0x7672, &(0x7f0000000080)={0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) setxattr$incfs_id(0x0, &(0x7f00000001c0), 0x0, 0x0, 0x58451762054a5973) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x20000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) socket$unix(0x1, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) pipe(&(0x7f00000001c0)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0xf0e0fc9000f8e609}) io_uring_enter(r0, 0x3, 0x6a4c, 0x67, 0x0, 0x0) 2.351928286s ago: executing program 7 (id=5977): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40000) close(0xffffffffffffffff) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1e1802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8005, 0x0, 0xe1, 0x1, 0xfffffe0000000001, 0x4, 0xffffffff}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x0, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88a8}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}]}, 0x34}}, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x40001, 0x0) recvmmsg(r1, 0x0, 0x0, 0x80, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$kcm(0x29, 0x5, 0x0) accept4(r6, 0x0, 0x0, 0x80000) syz_usb_connect(0x1, 0x24, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000040)) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) 2.300934119s ago: executing program 3 (id=5978): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000005540)=ANY=[@ANYBLOB="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"], 0x202c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) 2.104947452s ago: executing program 3 (id=5979): r0 = openat$tun(0xffffff9c, &(0x7f0000000000), 0x200, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000a0000004200000040"], 0x50) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x8, 0x8010, 0xffffffffffffffff, 0x0) r1 = socket(0x2c, 0x3, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000001c0)=0x0) sched_setattr(r4, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) mknodat(0xffffffffffffffff, &(0x7f00000002c0)='./file2\x00', 0x10, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) syz_io_uring_setup(0x6a5f, &(0x7f0000000440)={0x0, 0x94bc, 0x20, 0x3, 0x284}, &(0x7f0000000200), 0x0, &(0x7f0000000000)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='cgroup\x00') ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'gretap0\x00', &(0x7f0000000100)=@ethtool_ts_info}) pread64(r5, &(0x7f0000001240)=""/102400, 0xffffff8c, 0x200000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a312000000038000000030a01040000000000000000010000010900010073797a30000000000c000240000000000000000109000300030000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10e) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000240)=0xd) writev(r7, &(0x7f0000000080)=[{&(0x7f0000000280)='*', 0x1}], 0x1) 1.55624321s ago: executing program 2 (id=5980): r0 = syz_io_uring_setup(0x7672, &(0x7f0000000080)={0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) setxattr$incfs_id(0x0, &(0x7f00000001c0), 0x0, 0x0, 0x58451762054a5973) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$unix(0x1, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) pipe(&(0x7f00000001c0)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0xf0e0fc9000f8e609}) io_uring_enter(r0, 0x3, 0x6a4c, 0x67, 0x0, 0x0) 1.226932092s ago: executing program 1 (id=5981): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x1000006, 0x4}, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000180)) io_uring_enter(0xffffffffffffffff, 0x47f9, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r4 = syz_usb_connect$cdc_ecm(0x4, 0x156, &(0x7f0000000580)=ANY=[@ANYBLOB="12011003020000ff2505831e4e7103d05d91ef19a1a4604408fea17531d32ef9da01010167f009090400000002060000002406254e7086b404c5886d08860000002400000000240f015386d42bfa4ff072a111dff4ff2d0025ae94591dc5087b0d3906aee5c55224b21c6de78dcd27e8e53a46fba81f64a841a1204266f5a45c82481189f2cd9db37497267430b82cf934e3d3"], &(0x7f00000004c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x0, 0xd0, 0x5, 0x8, 0x5}, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="0500000000145a5a6832f001a008ef5b89e1d27e0b44859f2e6a4eef6993990fa12d33c798feaa2d3a361f94ae218ae3d17fe1e5bb1fbe6b52f3057c3c39befa7212b6817060f2c8d07496eff4dad85f81f1a45cda4e8bef439d900d39cefd449d79e38884977a8d7a8a0038588dbec55a249bef47efb5e9c622fea20c32b3cb5aa456bd3fd6312ed5f0316d4bdc3e14aa5840587523b86c0400314849398394c94d6e0a424ae16fb0a83c2b42f5ebdabceaa7732edd462d1201fc797f73b63b73387c5c6b1d2115e129f2d2a7a98896a1dec361aca5179eb266df113e277b7b8fb25464af81186bcff37b00d78f2ff27e6d73b96636543c5b471d9cd313214ddc134854fb8bfe8817859905a2ea6e60fb71f40a5dea27594985e5d5e103a8df1e6e73136ae75ed1102d14abbf16c5c39350952b98e8a1c5dea67d4461c6595605e37cc8d5410531f7ce9052824701a2b40a8f1c94fc4433dc0c3db40000000000000000"], 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x421}}]}) syz_usb_ep_write(r4, 0x5, 0x41, &(0x7f0000000500)="8e8ecb86e1686a692ca25e347583fdfc30f27773109e13988de3ddac8aae64793bab124db2a51a3f7905ff8af0b9818f6d59613d778b08c17f90fcc1c9f4e90be9") r5 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r5, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r5, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) sendto(r5, 0x0, 0x0, 0xbf30ccbe67c3e0fd, &(0x7f00000000c0)=@in6={0xa, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffb}, 0x80) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xfff3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xffffffffffffff39, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0xffffffff}]}}]}, 0x38}}, 0x4048000) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f0000000280)={0x48, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0xa3}) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x42241, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r6, 0x800c5012, &(0x7f0000000040)) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) preadv(r7, &(0x7f0000000080), 0x0, 0x8, 0x5) 1.140002109s ago: executing program 2 (id=5982): openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, 0x0, 0x93020007) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_procfs(0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000340), 0xffff, 0x20040) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x110}, 0x1, 0x0, 0x0, 0x4008000}, 0x4040) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000003c0)={{0x3, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40585414, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x4, 0xfffff034}, {0x20, 0xe, 0x0, 0x46}, {0x6}]}, 0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x39}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa8}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r6, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r5, 0x0}]) io_submit(r6, 0x0, &(0x7f0000000080)) socket(0xa, 0x3, 0xff) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) 0s ago: executing program 3 (id=5983): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x2}, 0x10) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000), &(0x7f0000000040)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffd}]}) r1 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket$inet6(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000000)=@ethtool_wolinfo={0x12, 0x80000001, 0x2}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r8, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000000440)=""/128, 0x80}], 0x2, &(0x7f00000004c0)=""/193, 0xc1}, 0x7f}, {{&(0x7f00000005c0)=@in, 0x80, &(0x7f0000000700)=[{&(0x7f0000000640)=""/35, 0x23}, {0x0}], 0x2, &(0x7f0000000740)=""/23, 0x17}, 0x3}], 0x2, 0x40012100, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r7}, 0x8) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, r7, 0x0, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$inet6(r3, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee", 0x87, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) kernel console output (not intermixed with test programs): ][T24184] __do_fast_syscall_32+0x20d/0x640 [ 1252.811516][T24184] ? do_fast_syscall_32+0x33/0x70 [ 1252.811531][T24184] ? asm_int80_emulation+0x1a/0x20 [ 1252.811542][T24184] ? do_int80_emulation+0x274/0x4d0 [ 1252.811557][T24184] ? trace_irq_disable+0x3b/0x150 [ 1252.811570][T24184] do_fast_syscall_32+0x33/0x70 [ 1252.811586][T24184] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1252.811600][T24184] RIP: 0023:0xf7fb3f6c [ 1252.811612][T24184] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1252.811623][T24184] RSP: 002b:00000000f547650c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 1252.811636][T24184] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080001480 [ 1252.811645][T24184] RDX: 0000000000000026 RSI: 0000000000010022 RDI: 0000000000000000 [ 1252.811652][T24184] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1252.811659][T24184] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1252.811665][T24184] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1252.811682][T24184] [ 1253.774005][ T5945] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1253.923186][ T5945] usb 2-1: device descriptor read/64, error -71 [ 1254.110397][ T29] audit: type=1326 audit(1775340878.760:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24202 comm="syz.5.5327" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 1254.139534][ T29] audit: type=1326 audit(1775340878.790:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24202 comm="syz.5.5327" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 1254.164505][ T5945] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1254.192616][ T29] audit: type=1326 audit(1775340878.790:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24202 comm="syz.5.5327" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 1254.223161][ T29] audit: type=1326 audit(1775340878.790:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24202 comm="syz.5.5327" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 1254.223168][ T47] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1254.223218][ T29] audit: type=1326 audit(1775340878.790:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24202 comm="syz.5.5327" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 1254.309587][ T5945] usb 2-1: device descriptor read/64, error -71 [ 1254.363124][ T29] audit: type=1326 audit(1775340878.790:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24202 comm="syz.5.5327" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 1254.409798][ T29] audit: type=1326 audit(1775340878.790:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24202 comm="syz.5.5327" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 1254.436235][ T5945] usb usb2-port1: attempt power cycle [ 1254.473115][ T47] usb 4-1: Using ep0 maxpacket: 8 [ 1254.476031][ T29] audit: type=1326 audit(1775340878.790:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24202 comm="syz.5.5327" exe="/root/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 1254.483037][ T47] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1254.523544][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1254.548312][T24206] netlink: 72 bytes leftover after parsing attributes in process `syz.5.5327'. [ 1254.558589][ T47] usb 4-1: Product: syz [ 1254.562837][ T47] usb 4-1: Manufacturer: syz [ 1254.567768][ T47] usb 4-1: SerialNumber: syz [ 1254.577204][ T47] usb 4-1: config 0 descriptor?? [ 1254.587239][ T29] audit: type=1326 audit(1775340878.790:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24202 comm="syz.5.5327" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 1254.643482][ T29] audit: type=1326 audit(1775340878.830:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24202 comm="syz.5.5327" exe="/root/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf706ef6c code=0x7ffc0000 [ 1254.787205][ T47] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1254.795824][ T5945] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1254.804161][T24198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1254.815863][T24198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1254.850222][ T5945] usb 2-1: device descriptor read/8, error -71 [ 1254.898345][ T47] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1254.927976][ T47] usb 4-1: USB disconnect, device number 89 [ 1255.103333][ T5945] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1255.135249][ T5945] usb 2-1: device descriptor read/8, error -71 [ 1255.239297][T24213] netlink: 'syz.5.5329': attribute type 13 has an invalid length. [ 1255.247872][ T5945] usb usb2-port1: unable to enumerate USB device [ 1255.874281][T24221] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1255.993154][ T5945] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1256.284494][ T5945] usb 4-1: config index 0 descriptor too short (expected 125, got 72) [ 1256.319642][ T5945] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1256.331675][ T5945] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1256.349348][ T5945] usb 4-1: Product: syz [ 1256.359460][ T5945] usb 4-1: Manufacturer: syz [ 1256.369567][ T5945] usb 4-1: SerialNumber: syz [ 1256.394950][ T5945] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1256.534742][ T47] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1256.980278][T24218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1257.013218][T24218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1257.053840][ T5900] usb 4-1: USB disconnect, device number 90 [ 1257.100750][T24226] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1257.135807][T24228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1257.164183][T24228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1257.234691][ T5945] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1257.405963][ T5945] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1257.423066][ T5945] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1257.453350][ T5945] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 1257.471527][ T5945] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1257.512112][ T5945] usb 2-1: config 0 descriptor?? [ 1257.632496][T24243] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 1257.639521][T24243] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1257.648129][T24243] vhci_hcd vhci_hcd.0: Device attached [ 1257.662860][ T47] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1257.670873][ T47] ath9k_htc: Failed to initialize the device [ 1257.680365][ T5900] usb 4-1: ath9k_htc: USB layer deinitialized [ 1257.812917][T24246] vhci_hcd: connection closed [ 1257.813469][T17229] vhci_hcd vhci_hcd.2: stop threads [ 1257.831320][T17229] vhci_hcd vhci_hcd.2: release socket [ 1257.844649][T17229] vhci_hcd vhci_hcd.2: disconnect device [ 1257.851092][T24254] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5332'. [ 1258.043090][ T5900] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1258.183450][ T5900] usb 4-1: device descriptor read/64, error -71 [ 1258.503129][ T5900] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1258.643112][ T5900] usb 4-1: device descriptor read/64, error -71 [ 1258.773787][ T5900] usb usb4-port1: attempt power cycle [ 1258.873798][T24264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1258.898313][T24264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1259.770178][ T5942] usb 2-1: USB disconnect, device number 40 [ 1259.823307][ T5900] usb 4-1: new full-speed USB device number 93 using dummy_hcd [ 1259.832281][T24278] FAULT_INJECTION: forcing a failure. [ 1259.832281][T24278] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1259.848832][T24278] CPU: 0 UID: 0 PID: 24278 Comm: syz.1.5349 Tainted: G L syzkaller #0 PREEMPT(full) [ 1259.848864][T24278] Tainted: [L]=SOFTLOCKUP [ 1259.848872][T24278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1259.848883][T24278] Call Trace: [ 1259.848892][T24278] [ 1259.848900][T24278] dump_stack_lvl+0xe8/0x150 [ 1259.848934][T24278] should_fail_ex+0x412/0x560 [ 1259.848970][T24278] _copy_from_user+0x2d/0xb0 [ 1259.848995][T24278] do_tcp_setsockopt+0x4f3/0x2060 [ 1259.849019][T24278] ? aa_sk_perm+0x6d5/0x900 [ 1259.849047][T24278] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 1259.849072][T24278] ? __pfx_aa_sk_perm+0x10/0x10 [ 1259.849102][T24278] ? aa_sock_opt_perm+0xff/0x1a0 [ 1259.849123][T24278] ? sock_common_setsockopt+0x36/0xc0 [ 1259.849141][T24278] ? tcp_setsockopt+0x3d/0xe0 [ 1259.849159][T24278] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1259.849180][T24278] do_sock_setsockopt+0x17c/0x1b0 [ 1259.849209][T24278] __ia32_sys_setsockopt+0x13d/0x1b0 [ 1259.849239][T24278] __do_fast_syscall_32+0x20d/0x640 [ 1259.849268][T24278] ? do_fast_syscall_32+0x33/0x70 [ 1259.849292][T24278] ? asm_int80_emulation+0x1a/0x20 [ 1259.849310][T24278] ? do_int80_emulation+0x274/0x4d0 [ 1259.849335][T24278] ? trace_irq_disable+0x3b/0x150 [ 1259.849356][T24278] do_fast_syscall_32+0x33/0x70 [ 1259.849384][T24278] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1259.849407][T24278] RIP: 0023:0xf7fb3f6c [ 1259.849433][T24278] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1259.849449][T24278] RSP: 002b:00000000f547650c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 1259.849471][T24278] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000006 [ 1259.849484][T24278] RDX: 0000000000000016 RSI: 0000000080000340 RDI: 0000000000000008 [ 1259.849497][T24278] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1259.849507][T24278] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1259.849517][T24278] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1259.849544][T24278] [ 1260.185062][ T5900] usb 4-1: config 1 has an invalid descriptor of length 249, skipping remainder of the config [ 1260.195633][ T5900] usb 4-1: too many endpoints for config 1 interface 1 altsetting 0: 237, using maximum allowed: 30 [ 1260.208641][ T5900] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 237 [ 1260.224561][ T5900] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 1260.235962][ T5900] usb 4-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 1260.247542][ T5900] usb 4-1: New USB device found, idVendor=2b73, idProduct=0034, bcdDevice= 0.40 [ 1260.257140][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1260.265318][ T5900] usb 4-1: Product: syz [ 1260.269526][ T5900] usb 4-1: Manufacturer: syz [ 1260.274209][ T5900] usb 4-1: SerialNumber: syz [ 1260.384698][T24284] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1260.433153][ T5942] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1260.583049][ T5942] usb 2-1: Using ep0 maxpacket: 32 [ 1260.590791][ T5942] usb 2-1: config index 0 descriptor too short (expected 59940, got 36) [ 1260.831593][ T5942] usb 2-1: config 182 has too many interfaces: 111, using maximum allowed: 32 [ 1260.876513][ T5942] usb 2-1: config 182 has 0 interfaces, different from the descriptor's value: 111 [ 1260.907276][ T5942] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1260.938637][ T5942] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1260.975510][ T5942] usb 2-1: Product: syz [ 1261.000881][ T5942] usb 2-1: Manufacturer: syz [ 1261.023070][ T5942] usb 2-1: SerialNumber: syz [ 1261.269984][T24274] netlink: 'syz.3.5347': attribute type 5 has an invalid length. [ 1261.314522][T24274] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5347'. [ 1261.546813][ T5900] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1261.637269][ T5900] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1261.651111][T24303] Cannot find del_set index 65533 as target [ 1261.658194][ T5900] usb 4-1: USB disconnect, device number 93 [ 1261.697522][T21680] udevd[21680]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1261.885462][T24307] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5358'. [ 1261.901654][T24307] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5358'. [ 1262.895022][T24331] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5364'. [ 1263.149184][T16557] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1263.323040][T16557] usb 4-1: Using ep0 maxpacket: 32 [ 1263.330672][T16557] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 1263.339771][T16557] usb 4-1: config 0 has no interface number 0 [ 1263.346805][T16557] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1263.362496][T16557] usb 4-1: config 0 interface 85 has no altsetting 0 [ 1263.372275][T17229] batadv1: left promiscuous mode [ 1263.410937][T16557] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1263.420168][T16557] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1263.429026][T16557] usb 4-1: Product: syz [ 1263.433410][T16557] usb 4-1: Manufacturer: syz [ 1263.439018][T16557] usb 4-1: SerialNumber: syz [ 1263.451867][T16557] usb 4-1: config 0 descriptor?? [ 1264.070375][T16557] appletouch 4-1:0.85: Geyser mode initialized. [ 1264.078244][T16557] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input56 [ 1264.138850][T24342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1264.171288][T24342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1264.206031][T24342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1264.217132][T24342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1264.278881][T16557] usb 4-1: USB disconnect, device number 94 [ 1264.302679][T16557] appletouch 4-1:0.85: input: appletouch disconnected [ 1264.572839][ T5900] usb 2-1: USB disconnect, device number 41 [ 1264.943151][ T5900] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1265.115129][ T5900] usb 2-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1265.151339][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1265.172811][ T5900] usb 2-1: Product: syz [ 1265.181749][ T5900] usb 2-1: Manufacturer: syz [ 1265.190092][ T5900] usb 2-1: SerialNumber: syz [ 1265.208298][ T5900] usb 2-1: config 0 descriptor?? [ 1265.235559][T24362] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1265.319347][T24367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1265.329521][T24367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1265.425794][ T5900] usb 2-1: f81604_read: reg: 105 failed: -EREMOTEIO [ 1265.432857][ T5900] f81604 2-1:0.0: Setting termination of CH#0 failed: -EREMOTEIO [ 1265.440918][ T5900] f81604 2-1:0.0: probe with driver f81604 failed with error -121 [ 1265.890714][T24370] mac80211_hwsim hwsim44 syzkaller0: Caught tx_queue_len zero misconfig [ 1266.169132][T24380] FAULT_INJECTION: forcing a failure. [ 1266.169132][T24380] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1266.189528][T24380] CPU: 0 UID: 0 PID: 24380 Comm: syz.3.5381 Tainted: G L syzkaller #0 PREEMPT(full) [ 1266.189563][T24380] Tainted: [L]=SOFTLOCKUP [ 1266.189572][T24380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1266.189583][T24380] Call Trace: [ 1266.189591][T24380] [ 1266.189600][T24380] dump_stack_lvl+0xe8/0x150 [ 1266.189635][T24380] should_fail_ex+0x412/0x560 [ 1266.189671][T24380] _copy_from_iter+0x1d3/0x1670 [ 1266.189705][T24380] ? __pfx__copy_from_iter+0x10/0x10 [ 1266.189724][T24380] ? kasan_quarantine_put+0xbb/0x1f0 [ 1266.189745][T24380] ? lockdep_hardirqs_on+0x7a/0x110 [ 1266.189776][T24380] ? file_tty_write+0x328/0xa20 [ 1266.189800][T24380] file_tty_write+0x4c1/0xa20 [ 1266.189830][T24380] vfs_write+0x61d/0xb90 [ 1266.189864][T24380] ? __pfx_vfs_write+0x10/0x10 [ 1266.189898][T24380] ? __fget_files+0x2a/0x420 [ 1266.189927][T24380] ksys_write+0x150/0x270 [ 1266.189952][T24380] ? __pfx_ksys_write+0x10/0x10 [ 1266.189985][T24380] __do_fast_syscall_32+0x20d/0x640 [ 1266.190014][T24380] ? do_fast_syscall_32+0x33/0x70 [ 1266.190039][T24380] ? asm_int80_emulation+0x1a/0x20 [ 1266.190058][T24380] ? do_int80_emulation+0x274/0x4d0 [ 1266.190082][T24380] ? trace_irq_disable+0x3b/0x150 [ 1266.190105][T24380] do_fast_syscall_32+0x33/0x70 [ 1266.190131][T24380] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1266.190154][T24380] RIP: 0023:0xf7f87f6c [ 1266.190172][T24380] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1266.190189][T24380] RSP: 002b:00000000f544650c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 1266.190210][T24380] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080002080 [ 1266.190222][T24380] RDX: 0000000000001006 RSI: 0000000000000000 RDI: 0000000000000000 [ 1266.190232][T24380] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1266.190243][T24380] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1266.190254][T24380] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1266.190284][T24380] [ 1266.552714][T24385] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5383'. [ 1266.588762][T24385] fuse: Unknown parameter 'euid<00000000000000000000' [ 1266.965054][T24392] tipc: Started in network mode [ 1266.970010][T24392] tipc: Node identity 4a26ef49150a, cluster identity 4711 [ 1266.977693][T24392] tipc: Enabled bearer , priority 0 [ 1266.987255][T24392] syzkaller0: entered promiscuous mode [ 1266.992831][T24392] syzkaller0: entered allmulticast mode [ 1267.132395][T24394] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5385'. [ 1267.219940][T24396] tipc: Resetting bearer [ 1267.683800][ T5893] usb 2-1: USB disconnect, device number 42 [ 1268.294577][T16557] tipc: Node number set to 1596780361 [ 1268.312383][T24389] tipc: Resetting bearer [ 1268.368480][T24389] tipc: Disabling bearer [ 1269.773598][T24418] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5393'. [ 1269.845469][T24421] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5393'. [ 1270.228073][T24431] netlink: 'syz.1.5397': attribute type 1 has an invalid length. [ 1270.322594][T24434] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5398'. [ 1270.399713][T24443] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5397'. [ 1270.441171][T24448] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1270.448781][T24448] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1270.497534][T24448] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 1270.506808][T24448] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 1270.533711][T24431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5397'. [ 1271.119172][T24454] netlink: 'syz.1.5399': attribute type 1 has an invalid length. [ 1271.327872][T24460] bond1: (slave bridge2): making interface the new active one [ 1271.406129][T24460] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 1272.006899][T24484] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5409'. [ 1272.049487][T24482] C: renamed from team_slave_0 (while UP) [ 1272.089046][T24482] netlink: 'syz.2.5408': attribute type 2 has an invalid length. [ 1272.151952][T24482] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5408'. [ 1272.183763][T24482] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1272.203694][T24489] netlink: 'syz.3.5410': attribute type 1 has an invalid length. [ 1272.270851][T24490] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5410'. [ 1272.300092][T24490] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5410'. [ 1273.063108][ T5900] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1273.223085][ T5900] usb 2-1: Using ep0 maxpacket: 8 [ 1273.239085][ T5900] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1273.314299][ T5900] usb 2-1: config 0 has an invalid interface number: 88 but max is 0 [ 1273.343620][ T5900] usb 2-1: config 0 has no interface number 0 [ 1273.365818][ T5900] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1273.458769][ T5900] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1273.479721][ T5900] usb 2-1: config 0 interface 88 has no altsetting 0 [ 1273.533216][ T5900] usb 2-1: language id specifier not provided by device, defaulting to English [ 1273.823160][ T5900] usb 2-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 1273.841683][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 1273.841707][ T29] audit: type=1326 audit(1775340898.460:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24510 comm="syz.3.5418" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f87f6c code=0x0 [ 1273.908040][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 1273.919377][ T5900] usb 2-1: Product: syz [ 1273.923903][ T5900] usb 2-1: SerialNumber: syz [ 1273.942345][ T5900] usb 2-1: config 0 descriptor?? [ 1274.092358][T24519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1274.107434][T24519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1274.271563][ T29] audit: type=1326 audit(1775340898.900:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24515 comm="syz.7.5419" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 1274.360657][T24519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1274.370278][T24519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1274.434909][T24519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1274.447492][ T29] audit: type=1326 audit(1775340898.900:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24515 comm="syz.7.5419" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 1274.472053][T24519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1274.533558][ T29] audit: type=1326 audit(1775340898.900:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24515 comm="syz.7.5419" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 1274.567298][ T29] audit: type=1326 audit(1775340898.900:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24515 comm="syz.7.5419" exe="/root/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 1274.786158][ T29] audit: type=1326 audit(1775340898.900:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24515 comm="syz.7.5419" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 1274.820882][ T29] audit: type=1326 audit(1775340898.900:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24515 comm="syz.7.5419" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 1274.844847][ T29] audit: type=1326 audit(1775340898.900:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24515 comm="syz.7.5419" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 1274.938665][ T29] audit: type=1326 audit(1775340898.900:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24515 comm="syz.7.5419" exe="/root/syz-executor" sig=0 arch=40000003 syscall=270 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 1274.962543][ T29] audit: type=1326 audit(1775340898.900:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24515 comm="syz.7.5419" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x7ffc0000 [ 1275.087356][T24530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1275.102326][T24530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1275.113082][ T5942] usb 4-1: new full-speed USB device number 95 using dummy_hcd [ 1275.206283][T24530] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5422'. [ 1275.245496][T24530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1275.268427][ T5942] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1275.293792][T24530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1275.304862][ T5942] usb 4-1: not running at top speed; connect to a high speed hub [ 1275.323660][ T5942] usb 4-1: config 1 has an invalid interface number: 93 but max is 0 [ 1275.339184][ T5942] usb 4-1: config 1 has no interface number 0 [ 1275.346392][ T5942] usb 4-1: config 1 interface 93 has no altsetting 0 [ 1275.376258][ T5942] usb 4-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice= e.3d [ 1275.395701][ T5942] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1275.405719][ T5942] usb 4-1: Product: syz [ 1275.410026][ T5942] usb 4-1: Manufacturer: syz [ 1275.422134][ T5942] usb 4-1: SerialNumber: syz [ 1275.658057][T24529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1275.667752][T24529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1275.699351][ T5942] peak_usb 4-1:1.93 can0: sending cmd f=0x6 n=0x1 failure: -22 [ 1275.707775][ T5942] peak_usb 4-1:1.93: unable to read PCAN-USB serial number (err -22) [ 1275.764617][ T5942] peak_usb 4-1:1.93: probe with driver peak_usb failed with error -22 [ 1275.779928][ T5942] usb 4-1: USB disconnect, device number 95 [ 1275.881554][ T5900] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.88/input/input57 [ 1275.935917][ T5900] usb 2-1: USB disconnect, device number 43 [ 1276.003636][T21693] udevd[21693]: Error opening device "/dev/input/event4": No such file or directory [ 1276.018342][T21693] udevd[21693]: Unable to EVIOCGABS device "/dev/input/event4" [ 1276.026977][T21693] udevd[21693]: Unable to EVIOCGABS device "/dev/input/event4" [ 1276.225649][T24549] binder: 24543:24549 ioctl 4018620d 0 returned -22 [ 1276.346588][T24549] binder: 24543:24549 ioctl c0306201 80000080 returned -14 [ 1276.414010][T24557] program syz.5.5430 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1277.265702][T24566] binder: 24543:24566 ioctl d000941e 0 returned -22 [ 1277.505592][T24568] netlink: 'syz.2.5434': attribute type 153 has an invalid length. [ 1277.995493][T24583] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1278.003640][T24583] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1278.073939][T24585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1278.093805][T24585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1278.181690][T24583] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 1278.189477][T24583] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 1279.056834][T24594] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5442'. [ 1279.377626][T24607] FAULT_INJECTION: forcing a failure. [ 1279.377626][T24607] name failslab, interval 1, probability 0, space 0, times 0 [ 1279.411173][T24607] CPU: 1 UID: 0 PID: 24607 Comm: syz.5.5446 Tainted: G L syzkaller #0 PREEMPT(full) [ 1279.411208][T24607] Tainted: [L]=SOFTLOCKUP [ 1279.411216][T24607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1279.411228][T24607] Call Trace: [ 1279.411237][T24607] [ 1279.411245][T24607] dump_stack_lvl+0xe8/0x150 [ 1279.411280][T24607] should_fail_ex+0x412/0x560 [ 1279.411325][T24607] should_failslab+0xa8/0x100 [ 1279.411350][T24607] ? skb_clone+0x212/0x3a0 [ 1279.411377][T24607] kmem_cache_alloc_noprof+0x87/0x650 [ 1279.411412][T24607] skb_clone+0x212/0x3a0 [ 1279.411442][T24607] __netlink_deliver_tap+0x404/0x850 [ 1279.411477][T24607] ? netlink_deliver_tap+0x2e/0x1b0 [ 1279.411499][T24607] netlink_deliver_tap+0x19c/0x1b0 [ 1279.411519][T24607] netlink_sendskb+0x68/0x140 [ 1279.411549][T24607] netlink_unicast+0x3a3/0x9b0 [ 1279.411587][T24607] ? __pfx_netlink_unicast+0x10/0x10 [ 1279.411626][T24607] netlink_rcv_skb+0x2b6/0x4b0 [ 1279.411648][T24607] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1279.411672][T24607] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1279.411705][T24607] ? netlink_deliver_tap+0x2e/0x1b0 [ 1279.411734][T24607] netlink_unicast+0x80f/0x9b0 [ 1279.411772][T24607] ? __pfx_netlink_unicast+0x10/0x10 [ 1279.411803][T24607] ? netlink_sendmsg+0x650/0xb40 [ 1279.411822][T24607] ? skb_put+0x11b/0x210 [ 1279.411848][T24607] netlink_sendmsg+0x813/0xb40 [ 1279.411878][T24607] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1279.411902][T24607] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1279.411934][T24607] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1279.411960][T24607] ____sys_sendmsg+0x972/0x9f0 [ 1279.411995][T24607] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1279.412025][T24607] ? kstrtoull+0x12f/0x1d0 [ 1279.412063][T24607] ___sys_sendmsg+0x2a5/0x360 [ 1279.412093][T24607] ? __pfx____sys_sendmsg+0x10/0x10 [ 1279.412118][T24607] ? get_pid_task+0x20/0x1f0 [ 1279.412136][T24607] ? get_pid_task+0x20/0x1f0 [ 1279.412151][T24607] ? get_pid_task+0x20/0x1f0 [ 1279.412194][T24607] ? __fget_files+0x2a/0x420 [ 1279.412211][T24607] ? __fget_files+0x3a0/0x420 [ 1279.412237][T24607] __sys_sendmsg+0x183/0x260 [ 1279.412264][T24607] ? __pfx___sys_sendmsg+0x10/0x10 [ 1279.412318][T24607] __do_fast_syscall_32+0x20d/0x640 [ 1279.412348][T24607] ? do_fast_syscall_32+0x33/0x70 [ 1279.412370][T24607] ? asm_int80_emulation+0x1a/0x20 [ 1279.412389][T24607] ? do_int80_emulation+0x274/0x4d0 [ 1279.412414][T24607] ? trace_irq_disable+0x3b/0x150 [ 1279.412436][T24607] do_fast_syscall_32+0x33/0x70 [ 1279.412462][T24607] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1279.412487][T24607] RIP: 0023:0xf706ef6c [ 1279.412506][T24607] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1279.412523][T24607] RSP: 002b:00000000f545d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1279.412544][T24607] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 1279.412558][T24607] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1279.412570][T24607] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1279.412581][T24607] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1279.412592][T24607] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1279.412620][T24607] [ 1280.009850][T24610] futex_wake_op: syz.5.5447 tries to shift op by 36; fix this program [ 1280.072321][T24610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1280.123576][T24610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1280.148770][T24613] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1280.225858][T24610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1280.244044][T24610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1280.302480][T24620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1280.354412][T24620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1280.953740][T24623] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5451'. [ 1281.375189][T24635] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5452'. [ 1281.866753][T24645] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1281.924937][T24645] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1282.101254][T24643] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 1282.111493][T24643] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 1282.487887][ T5942] usb 2-1: new low-speed USB device number 44 using dummy_hcd [ 1282.821407][ T5942] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 1282.835635][ T5942] usb 2-1: config 0 has no interface number 0 [ 1282.851960][ T5942] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1282.872432][ T5942] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1282.905318][ T5942] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1282.917488][ T5942] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1282.969172][ T5942] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1282.996620][ T5942] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1283.010327][ T5942] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1283.118617][T24664] binder: 24659:24664 ioctl 4018620d 0 returned -22 [ 1283.161588][T24664] binder: 24659:24664 ioctl c0306201 80000080 returned -14 [ 1283.172292][ T5942] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1283.306431][T24672] binder: 24659:24672 ioctl d000941e 0 returned -22 [ 1283.333697][T24672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5463'. [ 1284.048126][ T5942] usb 2-1: config 0 descriptor?? [ 1284.054601][T24651] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 1284.062128][T24651] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 1284.072555][ T5942] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1284.420343][ T5942] usb 2-1: USB disconnect, device number 44 [ 1284.517050][ T5942] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 1285.516447][T24682] tipc: Started in network mode [ 1285.533182][T24682] tipc: Node identity ac14142f, cluster identity 4711 [ 1285.540181][T24682] tipc: New replicast peer: 0.0.0.0 [ 1285.566393][T24682] tipc: Enabled bearer , priority 10 [ 1285.860215][T24688] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5471'. [ 1286.389130][T24696] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5473'. [ 1286.586733][T24696] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1286.688218][ T5893] tipc: Node number set to 2886997039 [ 1286.773076][ T5900] usb 4-1: new full-speed USB device number 96 using dummy_hcd [ 1286.958302][ T5900] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1286.970506][ T5900] usb 4-1: not running at top speed; connect to a high speed hub [ 1286.991230][ T5900] usb 4-1: config 1 interface 0 altsetting 248 endpoint 0x81 has invalid maxpacket 6821, setting to 64 [ 1287.053219][ T5900] usb 4-1: config 1 interface 0 altsetting 248 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1287.083084][ T5900] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1287.172687][ T5900] usb 4-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40 [ 1287.182711][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1287.203625][ T5900] usb 4-1: Product: syz [ 1287.207969][ T5900] usb 4-1: Manufacturer: syz [ 1287.212609][ T5900] usb 4-1: SerialNumber: syz [ 1287.318130][T24698] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 1287.653867][ T5893] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1287.671427][T24696] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5473'. [ 1287.675722][ T5900] usbhid 4-1:1.0: can't add hid device: -71 [ 1287.701070][ T5900] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 1287.707897][T24714] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5478'. [ 1287.904503][ T5900] usb 4-1: USB disconnect, device number 96 [ 1287.968549][ T5893] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1287.990189][ T5893] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1288.035842][ T5893] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1288.081902][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1288.124204][T24709] raw-gadget.5 gadget.1: fail, usb_ep_enable returned -22 [ 1288.143823][ T5893] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1288.427172][T24724] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1288.763732][ T5893] usb 4-1: new full-speed USB device number 97 using dummy_hcd [ 1288.931408][ T5893] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1288.940152][ T5893] usb 4-1: not running at top speed; connect to a high speed hub [ 1288.953280][ T5893] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1288.966036][ T5893] usb 4-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 1289.008372][ T5893] usb 4-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice=4e.ad [ 1289.038760][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1289.061713][ T5893] usb 4-1: Product: syz [ 1289.081686][ T5893] usb 4-1: Manufacturer: syz [ 1289.086647][ T5893] usb 4-1: SerialNumber: syz [ 1289.321400][T24725] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1289.332046][T24729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1289.434135][T24729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1289.529412][ T5893] usb 4-1: USB disconnect, device number 97 [ 1290.438355][T23629] usb 2-1: USB disconnect, device number 45 [ 1290.616336][T24734] process '/newroot/473/file0' started with executable stack [ 1290.670609][T24742] bond_slave_0: entered promiscuous mode [ 1290.676610][T24742] bond_slave_1: entered promiscuous mode [ 1290.709357][T24742] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1290.731743][T24742] team0: Port device macvlan0 added [ 1291.081128][T24761] binder: 24750:24761 ioctl 4018620d 0 returned -22 [ 1291.094467][T24761] binder: 24750:24761 ioctl c0306201 80000080 returned -14 [ 1291.163759][T23629] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1291.454225][T24762] binder: 24750:24762 ioctl d000941e 0 returned -22 [ 1291.466259][T24762] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5491'. [ 1291.675168][T23629] usb 2-1: Using ep0 maxpacket: 16 [ 1291.676245][T24764] input: syz1 as /devices/virtual/input/input58 [ 1291.746265][T23629] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 26, changing to 8 [ 1291.797825][T23629] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 58949, setting to 1024 [ 1291.879679][T23629] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1291.912185][T23629] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1291.970103][T23629] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1292.041052][T23629] usb 2-1: config 0 descriptor?? [ 1292.071986][T24751] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 1292.778532][T23629] usbhid 2-1:0.0: can't add hid device: -71 [ 1292.788684][T23629] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1292.817294][T23629] usb 2-1: USB disconnect, device number 46 [ 1293.037827][T24778] can: request_module (can-proto-0) failed. [ 1293.093630][T24785] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5498'. [ 1293.788857][T24793] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5499'. [ 1294.534267][T24797] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5502'. [ 1294.813030][ T29] kauditd_printk_skb: 130 callbacks suppressed [ 1294.813051][ T29] audit: type=1800 audit(1775340919.460:1378): pid=24801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5503" name="file0" dev="tmpfs" ino=351 res=0 errno=0 [ 1294.866857][ T29] audit: type=1804 audit(1775340919.500:1379): pid=24801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.5503" name="/newroot/64/file0" dev="tmpfs" ino=351 res=1 errno=0 [ 1295.651487][T24813] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5506'. [ 1297.483064][T23629] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1297.633103][T23629] usb 2-1: Using ep0 maxpacket: 8 [ 1297.644098][T23629] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 1297.659349][T23629] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 1297.678199][T23629] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1297.696733][T23629] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 214, changing to 11 [ 1297.725026][T23629] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 49299, setting to 1024 [ 1297.749055][T23629] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 1297.758613][T23629] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1297.771925][T23629] usb 2-1: Product: syz [ 1297.780925][T23629] usb 2-1: Manufacturer: syz [ 1297.785864][T23629] usb 2-1: SerialNumber: syz [ 1297.805341][T23629] usb 2-1: config 0 descriptor?? [ 1297.823935][T23629] hub 2-1:0.0: bad descriptor, ignoring hub [ 1297.833804][T23629] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1297.861161][T23629] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input59 [ 1298.048675][ T47] usb 2-1: USB disconnect, device number 47 [ 1298.420588][T24831] input: syz1 as /devices/virtual/input/input60 [ 1298.828692][T24843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1298.868998][T24843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1299.094002][T23629] IPVS: starting estimator thread 0... [ 1299.117842][T24847] netlink: 4740 bytes leftover after parsing attributes in process `syz.1.5519'. [ 1299.134695][T24847] netlink: 192 bytes leftover after parsing attributes in process `syz.1.5519'. [ 1299.183112][T24850] IPVS: using max 30 ests per chain, 72000 per kthread [ 1299.613393][ T5942] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1299.715678][ T47] usb 2-1: new full-speed USB device number 48 using dummy_hcd [ 1299.773238][ T5942] usb 4-1: Using ep0 maxpacket: 32 [ 1299.783272][ T5942] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1299.792393][ T5942] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1299.824719][ T5942] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1299.846244][ T5942] usb 4-1: New USB device found, idVendor=1235, idProduct=8012, bcdDevice= 0.40 [ 1299.875221][ T5942] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1299.899915][ T5942] usb 4-1: Product: syz [ 1299.904460][ T5942] usb 4-1: Manufacturer: syz [ 1299.909406][ T5942] usb 4-1: SerialNumber: syz [ 1299.917780][ T47] usb 2-1: New USB device found, idVendor=0763, idProduct=0150, bcdDevice= 0.40 [ 1299.927421][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1299.940226][ T47] usb 2-1: Product: syz [ 1299.945766][ T47] usb 2-1: Manufacturer: syz [ 1299.950489][ T47] usb 2-1: SerialNumber: syz [ 1300.176181][T24866] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 1300.388381][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.394874][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.482731][T24873] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5528'. [ 1303.611138][T24917] syzkaller0: entered promiscuous mode [ 1303.628210][T24917] syzkaller0: entered allmulticast mode [ 1303.657280][ T5942] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1303.667083][ T47] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1303.677677][ T47] usb 2-1: MIDIStreaming interface descriptor not found [ 1303.720557][ T5942] usb 4-1: USB disconnect, device number 98 [ 1303.798992][T21680] udevd[21680]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1303.852706][ T47] usb 2-1: USB disconnect, device number 48 [ 1303.979817][T22004] udevd[22004]: setting owner of /dev/bus/usb/002/048 to uid=0, gid=0 failed: No such file or directory [ 1304.028569][T21902] udevd[21902]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1304.313109][ T47] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1304.410774][ T29] audit: type=1800 audit(1775340929.060:1380): pid=24936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.5552" name="bus" dev="tmpfs" ino=1675 res=0 errno=0 [ 1304.485692][ T47] usb 2-1: Using ep0 maxpacket: 32 [ 1304.497424][ T47] usb 2-1: config 0 has no interfaces? [ 1304.509512][ T47] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1304.525405][ T47] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1304.543509][ T47] usb 2-1: Product: syz [ 1304.553158][ T47] usb 2-1: Manufacturer: syz [ 1304.558345][ T47] usb 2-1: SerialNumber: syz [ 1304.573729][ T47] usb 2-1: config 0 descriptor?? [ 1304.798888][T24908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1304.810445][ T47] usb 2-1: USB disconnect, device number 49 [ 1304.816804][T24942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1304.827712][T24908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1304.837730][T24942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1305.122027][T24950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1305.138729][T24950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1305.186006][T24950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1305.198830][T24950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1305.517819][T24957] netlink: 'syz.3.5559': attribute type 10 has an invalid length. [ 1305.592792][T24959] FAULT_INJECTION: forcing a failure. [ 1305.592792][T24959] name failslab, interval 1, probability 0, space 0, times 0 [ 1305.636361][T24959] CPU: 1 UID: 0 PID: 24959 Comm: syz.7.5560 Tainted: G L syzkaller #0 PREEMPT(full) [ 1305.636394][T24959] Tainted: [L]=SOFTLOCKUP [ 1305.636402][T24959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1305.636414][T24959] Call Trace: [ 1305.636422][T24959] [ 1305.636431][T24959] dump_stack_lvl+0xe8/0x150 [ 1305.636465][T24959] should_fail_ex+0x412/0x560 [ 1305.636502][T24959] should_failslab+0xa8/0x100 [ 1305.636530][T24959] __kmalloc_noprof+0xe8/0x760 [ 1305.636553][T24959] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 1305.636588][T24959] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 1305.636622][T24959] genl_family_rcv_msg_doit+0xd9/0x330 [ 1305.636648][T24959] ? __asan_memcpy+0x40/0x70 [ 1305.636672][T24959] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1305.636701][T24959] ? __pfx_genl_get_cmd+0x10/0x10 [ 1305.636724][T24959] ? __pfx_ethnl_default_doit+0x10/0x10 [ 1305.636745][T24959] ? __pfx_ethnl_default_start+0x10/0x10 [ 1305.636765][T24959] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 1305.636787][T24959] ? __pfx_ethnl_default_done+0x10/0x10 [ 1305.636822][T24959] genl_rcv_msg+0x61c/0x7a0 [ 1305.636855][T24959] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1305.636880][T24959] ? __pfx_ethnl_default_doit+0x10/0x10 [ 1305.636903][T24959] ? __lock_acquire+0x6b5/0x2cf0 [ 1305.636941][T24959] netlink_rcv_skb+0x232/0x4b0 [ 1305.636964][T24959] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1305.636991][T24959] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1305.637030][T24959] ? down_read+0x272/0x2e0 [ 1305.637056][T24959] ? genl_rcv+0xd/0x40 [ 1305.637082][T24959] genl_rcv+0x28/0x40 [ 1305.637105][T24959] netlink_unicast+0x80f/0x9b0 [ 1305.637145][T24959] ? __pfx_netlink_unicast+0x10/0x10 [ 1305.637174][T24959] ? netlink_sendmsg+0x650/0xb40 [ 1305.637193][T24959] ? skb_put+0x11b/0x210 [ 1305.637231][T24959] netlink_sendmsg+0x813/0xb40 [ 1305.637262][T24959] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1305.637287][T24959] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1305.637319][T24959] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1305.637345][T24959] ____sys_sendmsg+0x972/0x9f0 [ 1305.637381][T24959] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1305.637411][T24959] ? kstrtoull+0x12f/0x1d0 [ 1305.637448][T24959] ___sys_sendmsg+0x2a5/0x360 [ 1305.637479][T24959] ? __pfx____sys_sendmsg+0x10/0x10 [ 1305.637508][T24959] ? get_pid_task+0x20/0x1f0 [ 1305.637527][T24959] ? get_pid_task+0x20/0x1f0 [ 1305.637543][T24959] ? get_pid_task+0x20/0x1f0 [ 1305.637590][T24959] ? __fget_files+0x2a/0x420 [ 1305.637608][T24959] ? __fget_files+0x3a0/0x420 [ 1305.637636][T24959] __sys_sendmsg+0x183/0x260 [ 1305.637663][T24959] ? __pfx___sys_sendmsg+0x10/0x10 [ 1305.637725][T24959] __do_fast_syscall_32+0x20d/0x640 [ 1305.637754][T24959] ? do_fast_syscall_32+0x33/0x70 [ 1305.637778][T24959] ? asm_int80_emulation+0x1a/0x20 [ 1305.637797][T24959] ? do_int80_emulation+0x274/0x4d0 [ 1305.637822][T24959] ? trace_irq_disable+0x3b/0x150 [ 1305.637845][T24959] do_fast_syscall_32+0x33/0x70 [ 1305.637871][T24959] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1305.637895][T24959] RIP: 0023:0xf703ef6c [ 1305.637915][T24959] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1305.637932][T24959] RSP: 002b:00000000f542d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1305.637959][T24959] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001200 [ 1305.637973][T24959] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 1305.637985][T24959] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1305.637997][T24959] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1305.638008][T24959] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1305.638039][T24959] [ 1306.669102][T24976] netlink: 4740 bytes leftover after parsing attributes in process `syz.7.5565'. [ 1306.694375][T24976] netlink: 192 bytes leftover after parsing attributes in process `syz.7.5565'. [ 1306.965900][T24978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1306.983714][T24978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1307.495567][ T47] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1307.657707][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1307.669592][ T47] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1307.690268][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1307.705989][ T47] usb 4-1: config 0 descriptor?? [ 1307.980823][ T47] usbhid 4-1:0.0: can't add hid device: -71 [ 1307.993537][ T47] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1308.012537][ T47] usb 4-1: USB disconnect, device number 99 [ 1308.657801][ T47] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 1308.845125][ T47] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 1308.846224][T25009] xt_l2tp: v2 sid > 0xffff: 603979776 [ 1308.854611][ T47] usb 2-1: config 0 has no interface number 0 [ 1308.881140][ T47] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1308.891205][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1308.902340][ T47] usb 2-1: Product: syz [ 1308.920007][ T47] usb 2-1: Manufacturer: syz [ 1308.925074][ T47] usb 2-1: SerialNumber: syz [ 1308.941035][ T47] usb 2-1: config 0 descriptor?? [ 1309.060019][T25016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1309.074604][T25016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1309.955481][T25025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1309.978499][T25025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1310.104636][T25025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1310.135798][T25025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1310.203441][T25025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1310.313181][T25025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1310.323938][T25025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1310.343898][T25025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1310.354814][T25025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1310.388033][T25025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1310.559195][T25034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1310.568261][T25034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1310.584629][T25034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1310.593642][T25034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1311.028453][T25037] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5586'. [ 1311.040031][T25037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1311.049711][T25037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1311.061735][T25037] i2c i2c-0: dtv_property_process_set: SET cmd 0x33bf89e5 undefined [ 1311.599273][ T5893] usb 2-1: USB disconnect, device number 50 [ 1312.573071][ T5893] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1312.733060][ T5893] usb 4-1: Using ep0 maxpacket: 32 [ 1312.749719][ T5893] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 1312.764699][ T5893] usb 4-1: config 0 has no interface number 0 [ 1312.777761][ T5893] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1312.802594][ T5893] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1312.816922][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1312.829232][ T5893] usb 4-1: Product: syz [ 1312.835689][ T5893] usb 4-1: Manufacturer: syz [ 1312.860189][ T5893] usb 4-1: SerialNumber: syz [ 1312.882723][ T5893] usb 4-1: config 0 descriptor?? [ 1312.890954][T25071] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 1313.107781][T25084] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5602'. [ 1313.123365][T25070] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 1313.358262][ T5893] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1313.385883][ T5893] asix 4-1:0.188: probe with driver asix failed with error -71 [ 1313.407088][ T5893] usb 4-1: USB disconnect, device number 100 [ 1313.616935][T23629] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1314.084272][T25115] sctp: [Deprecated]: syz.2.5612 (pid 25115) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1314.084272][T25115] Use struct sctp_sack_info instead [ 1314.112429][T25116] FAULT_INJECTION: forcing a failure. [ 1314.112429][T25116] name failslab, interval 1, probability 0, space 0, times 0 [ 1314.127557][T25116] CPU: 1 UID: 0 PID: 25116 Comm: syz.5.5613 Tainted: G L syzkaller #0 PREEMPT(full) [ 1314.127578][T25116] Tainted: [L]=SOFTLOCKUP [ 1314.127583][T25116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1314.127590][T25116] Call Trace: [ 1314.127595][T25116] [ 1314.127600][T25116] dump_stack_lvl+0xe8/0x150 [ 1314.127623][T25116] should_fail_ex+0x412/0x560 [ 1314.127644][T25116] should_failslab+0xa8/0x100 [ 1314.127661][T25116] __kmalloc_node_track_caller_noprof+0xeb/0x7b0 [ 1314.127676][T25116] ? scm_fp_dup+0x5e/0x3a0 [ 1314.127696][T25116] kmemdup_noprof+0x2b/0x70 [ 1314.127712][T25116] scm_fp_dup+0x5e/0x3a0 [ 1314.127735][T25116] ? unix_stream_read_actor+0x77/0xb0 [ 1314.127752][T25116] unix_stream_read_generic+0xae2/0x2390 [ 1314.127786][T25116] ? __pfx_unix_stream_read_generic+0x10/0x10 [ 1314.127802][T25116] ? tomoyo_check_open_permission+0x38e/0x470 [ 1314.127819][T25116] ? tomoyo_check_open_permission+0x1d3/0x470 [ 1314.127844][T25116] unix_stream_recvmsg+0x16e/0x1d0 [ 1314.127867][T25116] ? __pfx_unix_stream_recvmsg+0x10/0x10 [ 1314.127884][T25116] ? __pfx_unix_stream_read_actor+0x10/0x10 [ 1314.127905][T25116] ? __asan_memset+0x22/0x50 [ 1314.127917][T25116] ? __pfx_unix_stream_recvmsg+0x10/0x10 [ 1314.127934][T25116] sock_recvmsg_nosec+0x10c/0x140 [ 1314.127947][T25116] ____sys_recvmsg+0x3e3/0x4a0 [ 1314.127975][T25116] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1314.127988][T25116] ? get_compat_msghdr+0x34b/0x4c0 [ 1314.128010][T25116] ? kfree+0x4d/0x630 [ 1314.128025][T25116] ___sys_recvmsg+0x215/0x590 [ 1314.128041][T25116] ? __lock_acquire+0x6b5/0x2cf0 [ 1314.128058][T25116] ? __pfx____sys_recvmsg+0x10/0x10 [ 1314.128094][T25116] do_recvmmsg+0x3a5/0x800 [ 1314.128114][T25116] ? __pfx_do_recvmmsg+0x10/0x10 [ 1314.128137][T25116] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1314.128156][T25116] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1314.128176][T25116] __sys_recvmmsg+0x1a5/0x290 [ 1314.128192][T25116] ? __pfx___sys_recvmmsg+0x10/0x10 [ 1314.128215][T25116] ? ksys_write+0x242/0x270 [ 1314.128233][T25116] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 1314.128250][T25116] __do_fast_syscall_32+0x20d/0x640 [ 1314.128267][T25116] ? do_fast_syscall_32+0x33/0x70 [ 1314.128281][T25116] ? asm_int80_emulation+0x1a/0x20 [ 1314.128292][T25116] ? do_int80_emulation+0x274/0x4d0 [ 1314.128306][T25116] ? trace_irq_disable+0x3b/0x150 [ 1314.128320][T25116] do_fast_syscall_32+0x33/0x70 [ 1314.128335][T25116] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1314.128349][T25116] RIP: 0023:0xf706ef6c [ 1314.128362][T25116] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1314.128372][T25116] RSP: 002b:00000000f545d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 1314.128387][T25116] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080001140 [ 1314.128400][T25116] RDX: 0000000000000700 RSI: 0000000000000002 RDI: 0000000000000000 [ 1314.128411][T25116] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1314.128423][T25116] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1314.128435][T25116] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1314.128465][T25116] [ 1314.464483][T23629] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1314.827975][T25126] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1315.156858][T25133] sctp: [Deprecated]: syz.2.5618 (pid 25133) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1315.156858][T25133] Use struct sctp_sack_info instead [ 1315.585264][ T5900] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1315.749312][ T5900] usb 2-1: Using ep0 maxpacket: 8 [ 1315.763328][ T5900] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1315.785253][ T5900] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1315.815359][ T5900] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1315.843080][ T5900] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1315.868080][ T5900] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1315.890703][ T5900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1316.051244][ T5900] hub 2-1:1.0: bad descriptor, ignoring hub [ 1316.100678][ T5900] hub 2-1:1.0: probe with driver hub failed with error -5 [ 1316.180351][ T5900] cdc_wdm 2-1:1.0: skipping garbage [ 1316.221393][ T5900] cdc_wdm 2-1:1.0: skipping garbage [ 1316.261665][T25140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1316.273975][ T5900] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1316.283837][T25140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1316.309713][ T5900] cdc_wdm 2-1:1.0: Unknown control protocol [ 1316.364672][ T5900] usb 2-1: USB disconnect, device number 51 [ 1316.477038][T25148] ip6tnl1: entered promiscuous mode [ 1316.531544][T25148] ip6tnl1: entered allmulticast mode [ 1316.919213][T25153] netlink: 4740 bytes leftover after parsing attributes in process `syz.5.5626'. [ 1316.953091][ T5900] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1316.968512][T25153] netlink: 192 bytes leftover after parsing attributes in process `syz.5.5626'. [ 1317.139720][ T5900] usb 2-1: Using ep0 maxpacket: 16 [ 1317.153818][ T5900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 1317.165111][ T5900] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1317.176236][ T5900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 36816, setting to 1024 [ 1317.198868][ T5900] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 1317.213207][ T5900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12161, setting to 1024 [ 1317.243031][ T5900] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 1317.269857][ T5900] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 1317.280692][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1317.290267][ T5900] usb 2-1: Product: syz [ 1317.295294][ T5900] usb 2-1: Manufacturer: syz [ 1317.302250][ T5900] usb 2-1: SerialNumber: syz [ 1317.317556][ T5900] usb 2-1: config 0 descriptor?? [ 1317.360001][ T5900] mcba_usb 2-1:0.0: Microchip CAN BUS Analyzer connected [ 1317.360081][ C0] mcba_usb 2-1:0.0 can0: Tx URB aborted (-71) [ 1317.373603][ C0] mcba_usb 2-1:0.0 can0: Tx URB aborted (-71) [ 1317.750209][ T47] usb 2-1: USB disconnect, device number 52 [ 1317.765007][ T47] mcba_usb 2-1:0.0 can0: device disconnected [ 1318.072257][T25178] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5634'. [ 1318.310872][T25192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1318.337043][T25191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1318.365806][T25191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1318.367231][T25192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1318.963158][T23629] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1319.133046][T23629] usb 2-1: Using ep0 maxpacket: 8 [ 1319.146003][T23629] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1319.167751][T23629] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1319.175608][T25220] input: syz1 as /devices/virtual/input/input61 [ 1319.236970][T23629] usb 2-1: Product: syz [ 1319.248319][T23629] usb 2-1: Manufacturer: syz [ 1319.289507][ T47] IPVS: starting estimator thread 0... [ 1319.593675][T23629] usb 2-1: SerialNumber: syz [ 1319.610818][T23629] usb 2-1: config 0 descriptor?? [ 1319.663099][T25222] IPVS: using max 49 ests per chain, 117600 per kthread [ 1320.001268][T25199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1320.016083][T23629] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1320.026881][T25199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1320.328675][T23629] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1320.380522][T23629] usb 2-1: USB disconnect, device number 53 [ 1320.901695][T25248] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1321.012046][T25252] binder: 25247:25252 ioctl 227f 80000000 returned -22 [ 1321.113974][T25251] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 1321.122456][T25251] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1321.621156][T25260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1321.630955][T25260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1321.864481][T25264] ÿ: renamed from dummy0 (while UP) [ 1321.939083][T25266] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 1322.197662][T25277] fuse: Unknown parameter 'group_iD' [ 1322.419417][T25285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1322.431905][T25285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1322.492027][ T29] audit: type=1804 audit(1775340947.140:1381): pid=25292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.5661" name="file1" dev="ramfs" ino=157464 res=1 errno=0 [ 1322.532569][T25281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1322.542221][T25281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1322.552909][T25281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1322.562549][T25281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1322.948960][T25299] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5663'. [ 1323.689486][T25307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1323.785823][T25307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1323.837897][T25307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1323.851824][T25307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1323.871679][T25307] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 1323.903194][T23629] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1324.054860][T23629] usb 2-1: Using ep0 maxpacket: 8 [ 1324.062688][T23629] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1324.072866][T23629] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1324.089585][T23629] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1324.107801][T25312] binder: 25308:25312 ioctl c0306201 800003c0 returned -14 [ 1324.129262][T23629] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1324.143034][T23629] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1324.162274][T23629] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1324.172873][T23629] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1324.401433][T23629] usb 2-1: GET_CAPABILITIES returned 0 [ 1324.407328][T23629] usbtmc 2-1:16.0: can't read capabilities [ 1326.780756][T25336] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1327.168385][T25341] FAULT_INJECTION: forcing a failure. [ 1327.168385][T25341] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1327.197635][T25341] CPU: 0 UID: 0 PID: 25341 Comm: syz.2.5678 Tainted: G L syzkaller #0 PREEMPT(full) [ 1327.197662][T25341] Tainted: [L]=SOFTLOCKUP [ 1327.197669][T25341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1327.197682][T25341] Call Trace: [ 1327.197690][T25341] [ 1327.197700][T25341] dump_stack_lvl+0xe8/0x150 [ 1327.197731][T25341] should_fail_ex+0x412/0x560 [ 1327.197764][T25341] _copy_from_iter+0x1d3/0x1670 [ 1327.197783][T25341] ? __pfx__copy_from_iter+0x10/0x10 [ 1327.197794][T25341] ? sock_alloc_send_pskb+0x896/0x990 [ 1327.197814][T25341] ? __pfx__copy_from_iter+0x10/0x10 [ 1327.197835][T25341] ? page_copy_sane+0x16a/0x270 [ 1327.197857][T25341] copy_page_from_iter+0xdd/0x170 [ 1327.197888][T25341] skb_copy_datagram_from_iter+0x306/0x710 [ 1327.197922][T25341] tun_get_user+0xc38/0x3dd0 [ 1327.197943][T25341] ? aa_file_perm+0x192/0x15e0 [ 1327.197958][T25341] ? aa_file_perm+0x50e/0x15e0 [ 1327.197969][T25341] ? __pfx_tun_get_user+0x10/0x10 [ 1327.197986][T25341] ? aa_file_perm+0x192/0x15e0 [ 1327.198011][T25341] ? __lock_acquire+0x6b5/0x2cf0 [ 1327.198046][T25341] ? ref_tracker_alloc+0x35c/0x4c0 [ 1327.198070][T25341] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1327.198095][T25341] ? tun_get+0x1c/0x2f0 [ 1327.198120][T25341] ? tun_get+0x1c/0x2f0 [ 1327.198136][T25341] ? tun_get+0x1c/0x2f0 [ 1327.198158][T25341] tun_chr_write_iter+0x113/0x200 [ 1327.198183][T25341] vfs_write+0x61d/0xb90 [ 1327.198221][T25341] ? __pfx_vfs_write+0x10/0x10 [ 1327.198249][T25341] ? __fget_files+0x2a/0x420 [ 1327.198265][T25341] ksys_write+0x150/0x270 [ 1327.198279][T25341] ? __pfx_ksys_write+0x10/0x10 [ 1327.198298][T25341] __do_fast_syscall_32+0x20d/0x640 [ 1327.198323][T25341] ? do_fast_syscall_32+0x33/0x70 [ 1327.198347][T25341] ? asm_int80_emulation+0x1a/0x20 [ 1327.198363][T25341] ? do_int80_emulation+0x274/0x4d0 [ 1327.198386][T25341] ? trace_irq_disable+0x3b/0x150 [ 1327.198404][T25341] do_fast_syscall_32+0x33/0x70 [ 1327.198420][T25341] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1327.198434][T25341] RIP: 0023:0xf70aef6c [ 1327.198446][T25341] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1327.198456][T25341] RSP: 002b:00000000f549d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 1327.198478][T25341] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 1327.198492][T25341] RDX: 000000000000fd6c RSI: 0000000000000000 RDI: 0000000000000000 [ 1327.198503][T25341] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1327.198514][T25341] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1327.198524][T25341] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1327.198551][T25341] [ 1327.953990][T25346] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5679'. [ 1327.965332][T25345] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5679'. [ 1329.253809][T25370] kAFS: unable to lookup cell '' [ 1329.666020][T25305] usbtmc 2-1:16.0: usb_control_msg returned -110 [ 1329.730850][T23629] usb 2-1: USB disconnect, device number 54 [ 1330.422834][T25383] binder: 25372:25383 ioctl c0306201 800003c0 returned -14 [ 1330.513659][T25386] kAFS: unable to lookup cell '' [ 1331.158369][T25393] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5694'. [ 1331.428661][T25398] loop7: detected capacity change from 0 to 16384 [ 1331.503754][T25398] loop7: detected capacity change from 16384 to 16383 [ 1332.117864][T25410] bond0: option arp_interval: invalid value (18446744073709551614) [ 1332.126390][T25410] bond0: option arp_interval: allowed values 0 - 2147483647 [ 1333.178786][ T5834] Bluetooth: hci3: command 0x0406 tx timeout [ 1333.256281][T25425] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5704'. [ 1333.358442][T25427] input: syz1 as /devices/virtual/input/input62 [ 1333.616159][T25430] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5705'. [ 1334.417148][T25443] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5708'. [ 1334.520286][T25438] binder: 25432:25438 ioctl c0306201 800003c0 returned -14 [ 1334.551595][T25441] binder: 25431:25441 ioctl c0306201 800003c0 returned -14 [ 1335.403159][ T5900] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1335.583084][ T5900] usb 4-1: Using ep0 maxpacket: 8 [ 1335.631902][ T5900] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1335.642106][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1335.656916][ T5900] usb 4-1: Product: syz [ 1335.667128][ T5900] usb 4-1: Manufacturer: syz [ 1335.686945][ T5900] usb 4-1: SerialNumber: syz [ 1335.710562][ T5900] usb 4-1: config 0 descriptor?? [ 1335.875982][T25460] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5714'. [ 1335.924782][T25445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1335.934474][ T5900] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1335.953968][T25445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1336.090634][T25466] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1336.800773][ T5900] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1336.835694][ T5900] usb 4-1: USB disconnect, device number 101 [ 1337.114787][T25472] netlink: 44 bytes leftover after parsing attributes in process `syz.7.5713'. [ 1338.826479][T25498] batadv_slave_0: Caught tx_queue_len zero misconfig [ 1338.937497][T25495] binder: 25494:25495 ioctl c0306201 800001c0 returned -14 [ 1339.102184][T25495] binder: 25494:25495 ioctl c0485661 800002c0 returned -22 [ 1339.493594][T25500] FAULT_INJECTION: forcing a failure. [ 1339.493594][T25500] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1339.614279][T25500] CPU: 0 UID: 0 PID: 25500 Comm: syz.2.5721 Tainted: G L syzkaller #0 PREEMPT(full) [ 1339.614312][T25500] Tainted: [L]=SOFTLOCKUP [ 1339.614320][T25500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1339.614331][T25500] Call Trace: [ 1339.614339][T25500] [ 1339.614349][T25500] dump_stack_lvl+0xe8/0x150 [ 1339.614381][T25500] should_fail_ex+0x412/0x560 [ 1339.614414][T25500] _copy_to_user+0x31/0xb0 [ 1339.614439][T25500] simple_read_from_buffer+0xe1/0x170 [ 1339.614472][T25500] proc_fail_nth_read+0x1bb/0x230 [ 1339.614504][T25500] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1339.614535][T25500] ? rw_verify_area+0x2a6/0x4d0 [ 1339.614557][T25500] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1339.614588][T25500] vfs_read+0x20c/0xa70 [ 1339.614608][T25500] ? fdget_pos+0x246/0x320 [ 1339.614625][T25500] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1339.614654][T25500] ? __pfx___mutex_lock+0x10/0x10 [ 1339.614681][T25500] ? __pfx_vfs_read+0x10/0x10 [ 1339.614704][T25500] ? __fget_files+0x2a/0x420 [ 1339.614727][T25500] ? __fget_files+0x3a0/0x420 [ 1339.614743][T25500] ? __fget_files+0x2a/0x420 [ 1339.614769][T25500] ksys_read+0x150/0x270 [ 1339.614793][T25500] ? __pfx_ksys_read+0x10/0x10 [ 1339.614819][T25500] ? asm_int80_emulation+0x1a/0x20 [ 1339.614842][T25500] do_int80_emulation+0x173/0x4d0 [ 1339.614865][T25500] ? trace_irq_disable+0x3b/0x150 [ 1339.614881][T25500] ? asm_int80_emulation+0x1a/0x20 [ 1339.614897][T25500] ? clear_bhb_loop+0x40/0x90 [ 1339.614916][T25500] ? clear_bhb_loop+0x40/0x90 [ 1339.614939][T25500] asm_int80_emulation+0x1a/0x20 [ 1339.614958][T25500] RIP: 0023:0xf71e5cab [ 1339.614977][T25500] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1339.614993][T25500] RSP: 002b:00000000f549d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1339.615014][T25500] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f549d5d0 [ 1339.615028][T25500] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 1339.615038][T25500] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1339.615049][T25500] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1339.615061][T25500] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1339.615089][T25500] [ 1340.015592][T25505] input: syz1 as /devices/virtual/input/input63 [ 1340.125228][ T24] IPVS: starting estimator thread 0... [ 1340.213595][T25506] IPVS: using max 52 ests per chain, 124800 per kthread [ 1341.207505][T25525] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5726'. [ 1343.956793][T25557] FAULT_INJECTION: forcing a failure. [ 1343.956793][T25557] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1343.994177][T25557] CPU: 0 UID: 0 PID: 25557 Comm: syz.3.5735 Tainted: G L syzkaller #0 PREEMPT(full) [ 1343.994200][T25557] Tainted: [L]=SOFTLOCKUP [ 1343.994205][T25557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1343.994212][T25557] Call Trace: [ 1343.994218][T25557] [ 1343.994224][T25557] dump_stack_lvl+0xe8/0x150 [ 1343.994246][T25557] should_fail_ex+0x412/0x560 [ 1343.994272][T25557] _copy_from_user+0x2d/0xb0 [ 1343.994287][T25557] copy_uabi_to_xstate+0x4d3/0xa10 [ 1343.994311][T25557] ? __pfx_copy_uabi_to_xstate+0x10/0x10 [ 1343.994341][T25557] ? fpu__restore_sig+0xc1d/0x1250 [ 1343.994364][T25557] ? fpu__restore_sig+0xc1d/0x1250 [ 1343.994384][T25557] ? __local_bh_enable_ip+0xd0/0x130 [ 1343.994406][T25557] ? x86_task_fpu+0x4c/0x90 [ 1343.994427][T25557] fpu__restore_sig+0x10d0/0x1250 [ 1343.994454][T25557] ? fpu__restore_sig+0xc1d/0x1250 [ 1343.994480][T25557] ? __pfx___schedule+0x10/0x10 [ 1343.994503][T25557] ? __pfx_fpu__restore_sig+0x10/0x10 [ 1343.994554][T25557] ia32_restore_sigcontext+0x42b/0x580 [ 1343.994582][T25557] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1343.994603][T25557] ? __pfx_ia32_restore_sigcontext+0x10/0x10 [ 1343.994644][T25557] ? _raw_spin_unlock_irq+0x23/0x50 [ 1343.994670][T25557] __ia32_compat_sys_rt_sigreturn+0x1ad/0x270 [ 1343.994695][T25557] ? __task_pid_nr_ns+0x28/0x470 [ 1343.994714][T25557] ? __pfx___ia32_compat_sys_rt_sigreturn+0x10/0x10 [ 1343.994744][T25557] ? asm_int80_emulation+0x1a/0x20 [ 1343.994770][T25557] do_int80_emulation+0x173/0x4d0 [ 1343.994795][T25557] ? trace_irq_disable+0x3b/0x150 [ 1343.994812][T25557] ? asm_int80_emulation+0x1a/0x20 [ 1343.994830][T25557] ? clear_bhb_loop+0x40/0x90 [ 1343.994849][T25557] ? clear_bhb_loop+0x40/0x90 [ 1343.994872][T25557] asm_int80_emulation+0x1a/0x20 [ 1343.994891][T25557] RIP: 0023:0xf7f87f6a [ 1343.994909][T25557] Code: 03 c9 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 80 5d 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1343.994926][T25557] RSP: 002b:00000000f544650c EFLAGS: 00000206 [ 1343.994945][T25557] RAX: 000000000000017a RBX: 0000000000000003 RCX: 0000000080000000 [ 1343.994959][T25557] RDX: 0000000000000014 RSI: 0000000000000080 RDI: 0000000000008004 [ 1343.994971][T25557] RBP: 0000000000000011 R08: 0000000000000000 R09: 0000000000000000 [ 1343.994983][T25557] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1343.994995][T25557] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1343.995025][T25557] [ 1344.866114][T25578] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5742'. [ 1344.928575][T25579] bond0: option arp_interval: invalid value (18446744073709551614) [ 1344.936785][T25579] bond0: option arp_interval: allowed values 0 - 2147483647 [ 1345.346615][T25586] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1345.348711][T25586] netlink: 188 bytes leftover after parsing attributes in process `syz.2.5743'. [ 1345.713434][T25590] PF_CAN: dropped non conform CAN XL skbuff: dev type 768, len 40 [ 1345.816867][ T29] audit: type=1326 audit(1775340970.440:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25581 comm="syz.2.5743" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 1345.865129][ T29] audit: type=1326 audit(1775340970.440:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25581 comm="syz.2.5743" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 1345.980077][ T29] audit: type=1326 audit(1775340970.440:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25581 comm="syz.2.5743" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 1346.049185][ T29] audit: type=1326 audit(1775340970.440:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25581 comm="syz.2.5743" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 1346.101951][ T29] audit: type=1326 audit(1775340970.440:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25581 comm="syz.2.5743" exe="/root/syz-executor" sig=0 arch=40000003 syscall=39 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 1346.160014][T25595] tipc: Enabled bearer , priority 10 [ 1346.167515][ T29] audit: type=1326 audit(1775340970.440:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25581 comm="syz.2.5743" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 1346.344098][ T29] audit: type=1326 audit(1775340970.450:1388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25581 comm="syz.2.5743" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 1346.432899][ T29] audit: type=1326 audit(1775340970.450:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25581 comm="syz.2.5743" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 1346.465142][ T29] audit: type=1326 audit(1775340970.460:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25581 comm="syz.2.5743" exe="/root/syz-executor" sig=0 arch=40000003 syscall=341 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 1346.491137][ T29] audit: type=1326 audit(1775340970.460:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25581 comm="syz.2.5743" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 1346.539176][T25597] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5746'. [ 1346.554285][T25597] batadv0: entered promiscuous mode [ 1346.568494][T25597] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1346.754642][T25597] batadv0: left promiscuous mode [ 1347.631169][T23629] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 1347.642787][T23629] hid-generic 0000:0000:0000.0024: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1347.660998][T25611] hid-generic 0000:0000:0000.0024: pid 25611 passed too large report [ 1347.729790][T25615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1347.739411][T25615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1348.010777][T25614] fido_id[25614]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1348.473508][T25617] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5754'. [ 1348.529612][T25617] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5754'. [ 1348.855938][T25619] binder: 25618:25619 unknown command 0 [ 1348.870259][T25619] binder: 25618:25619 ioctl c0306201 80000080 returned -22 [ 1348.894923][T25619] netlink: 'syz.3.5756': attribute type 4 has an invalid length. [ 1348.919709][T25621] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5757'. [ 1349.159655][T25626] netlink: 4740 bytes leftover after parsing attributes in process `syz.1.5768'. [ 1349.170090][T25626] netlink: 192 bytes leftover after parsing attributes in process `syz.1.5768'. [ 1349.218200][T25630] tipc: Enabled bearer , priority 10 [ 1349.475720][T25637] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1349.619499][T25644] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5761'. [ 1349.792525][T25637] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5759'. [ 1349.914606][T25641] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5760'. [ 1350.333209][T14715] tipc: Node number set to 2130706433 [ 1351.090216][T25648] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5762'. [ 1352.915516][T25668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1352.935110][T25668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1353.274467][T25669] Invalid logical block size (61439) [ 1353.720846][T25687] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1353.783059][T14715] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1353.796049][T25689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1353.805114][T25689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1353.815139][T25690] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5773'. [ 1354.111276][T14715] usb 4-1: Using ep0 maxpacket: 32 [ 1354.120717][T14715] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 1354.129404][T14715] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1354.140268][T14715] usb 4-1: config 0 has no interface number 0 [ 1354.182368][T14715] usb 4-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 1354.202655][T14715] usb 4-1: config 0 interface 8 has no altsetting 0 [ 1354.218052][T14715] usb 4-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 1354.243759][T14715] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1354.258639][T14715] usb 4-1: Product: syz [ 1354.283405][T14715] usb 4-1: Manufacturer: syz [ 1354.290688][T14715] usb 4-1: SerialNumber: syz [ 1354.306500][T14715] usb 4-1: config 0 descriptor?? [ 1354.549628][T25682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1354.578504][T25682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1354.600953][T25692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1354.619953][T14715] ath6kl: Failed to submit usb control message: -71 [ 1354.626856][T14715] ath6kl: unable to send the bmi data to the device: -71 [ 1354.634941][T14715] ath6kl: Unable to send get target info: -71 [ 1354.644017][T14715] ath6kl: Failed to init ath6kl core: -71 [ 1354.666599][T14715] ath6kl_usb 4-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 1354.683941][T25692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1354.690937][T14715] usb 4-1: USB disconnect, device number 102 [ 1354.727658][T25692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1354.736943][T25692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1355.702259][T25700] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1355.735700][T18456] bond2: (slave dummy0): link status up again after 0 ms [ 1355.748882][T18456] bond2: (slave dummy0): failed to get link speed/duplex [ 1355.928611][T18456] bond2: (slave dummy0): failed to get link speed/duplex [ 1355.938745][T25703] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5779'. [ 1355.977145][T25701] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5777'. [ 1356.123072][ T1166] bond2: (slave dummy0): failed to get link speed/duplex [ 1356.243696][ T154] bond2: (slave dummy0): failed to get link speed/duplex [ 1356.313947][ T24] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1356.353062][ T1166] bond2: (slave dummy0): failed to get link speed/duplex [ 1356.466937][ T7561] bond2: (slave dummy0): failed to get link speed/duplex [ 1356.583915][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 1356.591981][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1356.599834][T18456] bond2: (slave dummy0): failed to get link speed/duplex [ 1356.609308][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 1356.622113][ T24] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1356.635243][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 1356.648098][ T24] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 64 [ 1356.669498][ T24] usb 2-1: string descriptor 0 read error: -22 [ 1356.704221][ T35] bond2: (slave dummy0): failed to get link speed/duplex [ 1356.805550][ T24] usb 2-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice= 0.40 [ 1356.830797][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1356.863899][T25707] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 1356.898341][ T24] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1357.077413][ T24] usb 2-1: MIDIStreaming interface descriptor not found [ 1357.244236][ T24] usb 2-1: USB disconnect, device number 55 [ 1357.892716][T25730] binder: 25729:25730 unknown command 0 [ 1357.898915][T25730] binder: 25729:25730 ioctl c0306201 80000080 returned -22 [ 1357.911697][T25730] netlink: 'syz.5.5787': attribute type 4 has an invalid length. [ 1358.522424][T25744] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5790'. [ 1359.175012][T25752] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1360.221424][ T5942] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1360.413360][ T5942] usb 2-1: Using ep0 maxpacket: 8 [ 1360.421238][ T5942] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1360.441440][ T5942] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1360.454874][ T5942] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 46624, setting to 1024 [ 1360.467265][ T5942] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1360.477831][ T5942] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1360.647405][ T5942] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1360.658359][ T5942] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1360.717972][ T7561] net_ratelimit: 25 callbacks suppressed [ 1360.717997][ T7561] bond2: (slave dummy0): failed to get link speed/duplex [ 1360.725719][T25771] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5799'. [ 1360.855891][ T154] bond2: (slave dummy0): failed to get link speed/duplex [ 1360.925498][T25773] binder: 25772:25773 unknown command 0 [ 1360.931552][T25773] binder: 25772:25773 ioctl c0306201 80000080 returned -22 [ 1360.955721][T25773] netlink: 'syz.2.5801': attribute type 4 has an invalid length. [ 1360.973085][ T1154] bond2: (slave dummy0): failed to get link speed/duplex [ 1361.055921][T16557] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1361.083195][ T154] bond2: (slave dummy0): failed to get link speed/duplex [ 1361.203077][T18456] bond2: (slave dummy0): failed to get link speed/duplex [ 1361.373132][T16557] usb 4-1: Using ep0 maxpacket: 32 [ 1361.562464][T18456] bond2: (slave dummy0): failed to get link speed/duplex [ 1361.691277][T16557] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 1361.700245][T16557] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1361.841073][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.865213][ T1154] bond2: (slave dummy0): failed to get link speed/duplex [ 1361.865564][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.922644][T16557] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1361.943730][T16557] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1361.981184][T16557] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1362.006982][T16557] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1362.028946][T16557] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1362.046218][T18456] bond2: (slave dummy0): failed to get link speed/duplex [ 1362.058252][T16557] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1362.086973][T16557] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1362.103840][T16557] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1362.105795][T25785] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5803'. [ 1362.303142][ T7561] bond2: (slave dummy0): failed to get link speed/duplex [ 1362.313534][T16557] usb 4-1: config 0 descriptor?? [ 1362.414309][ T7561] bond2: (slave dummy0): failed to get link speed/duplex [ 1362.551947][T16557] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 103 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1362.580683][T16557] usb 4-1: USB disconnect, device number 103 [ 1362.616180][ T5942] usb 2-1: usb_control_msg returned -71 [ 1362.629126][T16557] usblp0: removed [ 1362.632888][ T5942] usbtmc 2-1:16.0: can't read capabilities [ 1362.698361][ T5942] usb 2-1: USB disconnect, device number 56 [ 1363.063349][T25792] netlink: 4740 bytes leftover after parsing attributes in process `syz.2.5806'. [ 1363.074925][T25792] netlink: 192 bytes leftover after parsing attributes in process `syz.2.5806'. [ 1363.223499][ T5942] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1363.377427][ T5942] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1363.414891][ T5942] usb 2-1: string descriptor 0 read error: -22 [ 1363.421398][ T5942] usb 2-1: New USB device found, idVendor=04f2, idProduct=1123, bcdDevice= 0.40 [ 1363.433014][ T5942] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1363.994866][ T5942] chicony 0003:04F2:1123.0025: unknown main item tag 0x0 [ 1364.005337][ T5942] chicony 0003:04F2:1123.0025: unknown main item tag 0x0 [ 1364.017134][ T5942] chicony 0003:04F2:1123.0025: unknown main item tag 0x0 [ 1364.024710][ T5942] chicony 0003:04F2:1123.0025: unknown main item tag 0x0 [ 1364.031919][ T5942] chicony 0003:04F2:1123.0025: unknown main item tag 0x0 [ 1364.043475][ T5942] chicony 0003:04F2:1123.0025: unknown main item tag 0x0 [ 1364.051050][ T5942] chicony 0003:04F2:1123.0025: unknown main item tag 0x0 [ 1364.235970][ T5942] chicony 0003:04F2:1123.0025: unknown main item tag 0x0 [ 1364.263297][ T5942] chicony 0003:04F2:1123.0025: unknown main item tag 0x0 [ 1364.280949][ T5942] chicony 0003:04F2:1123.0025: unknown main item tag 0x0 [ 1364.502835][ T5942] chicony 0003:04F2:1123.0025: hidraw0: USB HID vff.7f Device [HID 04f2:1123] on usb-dummy_hcd.1-1/input0 [ 1364.555102][ T5942] usb 2-1: USB disconnect, device number 57 [ 1364.670493][T25812] fido_id[25812]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1365.547918][T25827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1365.576970][T25827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1365.748219][T25833] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5818'. [ 1365.784310][ T7561] net_ratelimit: 26 callbacks suppressed [ 1365.784333][ T7561] bond2: (slave dummy0): failed to get link speed/duplex [ 1365.914774][ T154] bond2: (slave dummy0): failed to get link speed/duplex [ 1366.033082][ T154] bond2: (slave dummy0): failed to get link speed/duplex [ 1366.143113][ T154] bond2: (slave dummy0): failed to get link speed/duplex [ 1366.177333][ T29] kauditd_printk_skb: 784 callbacks suppressed [ 1366.177364][ T29] audit: type=1326 audit(1775340990.830:2176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25836 comm="syz.1.5820" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb3f6c code=0x0 [ 1366.253133][ T154] bond2: (slave dummy0): failed to get link speed/duplex [ 1366.363088][ T154] bond2: (slave dummy0): failed to get link speed/duplex [ 1366.483183][ T154] bond2: (slave dummy0): failed to get link speed/duplex [ 1366.603144][ T154] bond2: (slave dummy0): failed to get link speed/duplex [ 1366.713080][ T1154] bond2: (slave dummy0): failed to get link speed/duplex [ 1366.823196][ T154] bond2: (slave dummy0): failed to get link speed/duplex [ 1366.933834][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1367.251151][T25850] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5822'. [ 1367.309836][T25848] ip6t_srh: unknown srh match flags 448C [ 1369.194288][T25886] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5835'. [ 1369.648383][T25890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1369.661006][T25890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1369.681897][T25890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1369.716826][T25890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1370.040178][T25903] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5843'. [ 1370.236093][T25905] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20064 [ 1370.895074][T18456] net_ratelimit: 31 callbacks suppressed [ 1370.895092][T18456] bond2: (slave dummy0): failed to get link speed/duplex [ 1371.023938][ T7561] bond2: (slave dummy0): failed to get link speed/duplex [ 1371.133188][T18456] bond2: (slave dummy0): failed to get link speed/duplex [ 1371.254817][ T1154] bond2: (slave dummy0): failed to get link speed/duplex [ 1371.334071][T16557] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1371.373110][ T1154] bond2: (slave dummy0): failed to get link speed/duplex [ 1371.483373][ T7561] bond2: (slave dummy0): failed to get link speed/duplex [ 1371.493090][T16557] usb 2-1: Using ep0 maxpacket: 8 [ 1371.500448][T16557] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 1371.509048][T16557] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1371.519988][T16557] usb 2-1: config 0 has no interface number 0 [ 1371.526627][T16557] usb 2-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1371.549814][T16557] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8 [ 1371.574904][T16557] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 1371.593398][T18456] bond2: (slave dummy0): failed to get link speed/duplex [ 1371.602588][T16557] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 1371.621276][T16557] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1371.635734][T16557] usb 2-1: Product: syz [ 1371.643299][T16557] usb 2-1: Manufacturer: syz [ 1371.670703][T16557] usb 2-1: SerialNumber: syz [ 1371.701696][T16557] usb 2-1: config 0 descriptor?? [ 1371.730612][T16557] iowarrior 2-1:0.186: no interrupt-in endpoint found [ 1371.743682][T18456] bond2: (slave dummy0): failed to get link speed/duplex [ 1371.863583][T18456] bond2: (slave dummy0): failed to get link speed/duplex [ 1371.983339][ T7561] bond2: (slave dummy0): failed to get link speed/duplex [ 1372.109694][T25919] batman_adv: batadv0: Adding interface: gretap2 [ 1372.119729][T25919] batman_adv: batadv0: Interface activated: gretap2 [ 1372.465479][ T5893] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1372.643181][ T5893] usb 4-1: Using ep0 maxpacket: 16 [ 1372.651336][ T5893] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1372.662769][ T5893] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1372.673169][ T5893] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1372.692025][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1372.738699][ T5893] usb 4-1: config 0 descriptor?? [ 1373.183768][T25935] netlink: 4740 bytes leftover after parsing attributes in process `syz.7.5851'. [ 1373.237688][T25935] netlink: 192 bytes leftover after parsing attributes in process `syz.7.5851'. [ 1373.255783][ T5893] nzxt-smart2 0003:1E71:2009.0026: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 1373.279896][T14715] usb 2-1: USB disconnect, device number 58 [ 1373.339620][T25941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1373.348872][T25941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1373.568915][T25942] netlink: 168 bytes leftover after parsing attributes in process `syz.2.5855'. [ 1374.094254][T25950] netlink: 56 bytes leftover after parsing attributes in process `syz.7.5856'. [ 1374.256823][ T29] audit: type=1800 audit(1775340998.890:2177): pid=25944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5855" name="/" dev="fuse" ino=4 res=0 errno=0 [ 1374.644981][T25953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1374.684733][T25953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1374.729939][T25953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1374.834879][T25953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1375.112273][T25955] binder: 25954:25955 ioctl c0306201 800001c0 returned -14 [ 1375.933199][ T1166] net_ratelimit: 27 callbacks suppressed [ 1375.933224][ T1166] bond2: (slave dummy0): failed to get link speed/duplex [ 1375.988192][T25964] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1376.057829][ T1166] bond2: (slave dummy0): failed to get link speed/duplex [ 1376.404431][ T1166] bond2: (slave dummy0): failed to get link speed/duplex [ 1376.422243][ T5942] usb 4-1: USB disconnect, device number 104 [ 1376.605716][T18456] bond2: (slave dummy0): failed to get link speed/duplex [ 1376.713398][ T1154] bond2: (slave dummy0): failed to get link speed/duplex [ 1376.834940][ T1166] bond2: (slave dummy0): failed to get link speed/duplex [ 1376.943123][ T35] bond2: (slave dummy0): failed to get link speed/duplex [ 1377.028735][T25973] netlink: 'syz.1.5864': attribute type 1 has an invalid length. [ 1377.355472][T25982] netlink: 4740 bytes leftover after parsing attributes in process `syz.5.5866'. [ 1377.371795][T25982] netlink: 192 bytes leftover after parsing attributes in process `syz.5.5866'. [ 1377.430419][T25973] bond2: entered promiscuous mode [ 1377.473467][T25973] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1377.523333][T18456] bond2: (slave dummy0): failed to get link speed/duplex [ 1377.643507][ T1154] bond2: (slave dummy0): failed to get link speed/duplex [ 1379.573520][T25978] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 1379.588712][ T5834] Bluetooth: hci3: command 0x0406 tx timeout [ 1379.598060][T25978] Bluetooth: hci3: Opcode 0x0406 failed: -110 [ 1379.758638][T26001] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5865'. [ 1380.359826][T26006] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5872'. [ 1380.481208][T14715] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1380.714273][T14715] usb 4-1: Using ep0 maxpacket: 8 [ 1380.752040][T14715] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1380.768654][T14715] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1380.784671][T14715] usb 4-1: Product: syz [ 1380.793234][T14715] usb 4-1: Manufacturer: syz [ 1380.801209][T14715] usb 4-1: SerialNumber: syz [ 1380.833430][T14715] usb 4-1: config 0 descriptor?? [ 1380.970379][ T7561] net_ratelimit: 21 callbacks suppressed [ 1380.970403][ T7561] bond2: (slave dummy0): failed to get link speed/duplex [ 1381.051279][T14715] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1381.068242][T26000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1381.089914][T26000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1381.113044][ T1166] bond2: (slave dummy0): failed to get link speed/duplex [ 1381.223096][ T1166] bond2: (slave dummy0): failed to get link speed/duplex [ 1381.343067][ T1166] bond2: (slave dummy0): failed to get link speed/duplex [ 1381.507637][T14715] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1381.560030][T14715] usb 4-1: USB disconnect, device number 105 [ 1381.603294][ T7561] bond2: (slave dummy0): failed to get link speed/duplex [ 1381.656074][ T5834] Bluetooth: hci3: command 0x0406 tx timeout [ 1381.788724][ T1166] bond2: (slave dummy0): failed to get link speed/duplex [ 1381.799754][T26017] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 1381.962113][ T1166] bond2: (slave dummy0): failed to get link speed/duplex [ 1382.101958][ T7561] bond2: (slave dummy0): failed to get link speed/duplex [ 1382.243076][T17229] bond2: (slave dummy0): failed to get link speed/duplex [ 1382.486154][T26029] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5878'. [ 1383.046915][T26037] netlink: 44 bytes leftover after parsing attributes in process `syz.7.5879'. [ 1383.519698][T26043] bridge3: entered promiscuous mode [ 1384.436668][T26055] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5886'. [ 1384.615595][T26058] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5885'. [ 1386.046213][ T1166] net_ratelimit: 26 callbacks suppressed [ 1386.046238][ T1166] bond2: (slave dummy0): failed to get link speed/duplex [ 1386.293392][ T1166] bond2: (slave dummy0): failed to get link speed/duplex [ 1386.563242][ T1166] bond2: (slave dummy0): failed to get link speed/duplex [ 1386.680540][ T1166] bond2: (slave dummy0): failed to get link speed/duplex [ 1386.772090][T26078] program syz.5.5892 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1386.787349][T26078] fuse: Unknown parameter '' [ 1386.870471][T17229] bond2: (slave dummy0): failed to get link speed/duplex [ 1387.046430][ T29] audit: type=1326 audit(1775341011.700:2178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26080 comm="syz.3.5894" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f87f6c code=0x0 [ 1387.077966][T17229] bond2: (slave dummy0): failed to get link speed/duplex [ 1387.213469][T17229] bond2: (slave dummy0): failed to get link speed/duplex [ 1387.333636][T17229] bond2: (slave dummy0): failed to get link speed/duplex [ 1387.463099][T17229] bond2: (slave dummy0): failed to get link speed/duplex [ 1387.608442][ T1154] bond2: (slave dummy0): failed to get link speed/duplex [ 1388.665696][T26102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1388.674819][T26102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1391.078869][T17229] net_ratelimit: 23 callbacks suppressed [ 1391.078895][T17229] bond2: (slave dummy0): failed to get link speed/duplex [ 1391.243669][ T154] bond2: (slave dummy0): failed to get link speed/duplex [ 1391.358781][T17229] bond2: (slave dummy0): failed to get link speed/duplex [ 1391.483556][ T154] bond2: (slave dummy0): failed to get link speed/duplex [ 1391.644204][ T154] bond2: (slave dummy0): failed to get link speed/duplex [ 1391.754310][ T35] bond2: (slave dummy0): failed to get link speed/duplex [ 1391.863847][T17229] bond2: (slave dummy0): failed to get link speed/duplex [ 1391.985122][T26160] netlink: 'syz.2.5920': attribute type 1 has an invalid length. [ 1393.677232][T26160] bond5: entered promiscuous mode [ 1393.689361][T26160] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1393.763707][ T154] bond2: (slave dummy0): failed to get link speed/duplex [ 1393.823351][T26171] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1393.894755][ T154] bond2: (slave dummy0): failed to get link speed/duplex [ 1394.013092][T17229] bond2: (slave dummy0): failed to get link speed/duplex [ 1394.093837][T16557] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1394.148317][T26217] FAULT_INJECTION: forcing a failure. [ 1394.148317][T26217] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1394.187847][T26217] CPU: 0 UID: 0 PID: 26217 Comm: syz.2.5928 Tainted: G L syzkaller #0 PREEMPT(full) [ 1394.187881][T26217] Tainted: [L]=SOFTLOCKUP [ 1394.187886][T26217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1394.187893][T26217] Call Trace: [ 1394.187899][T26217] [ 1394.187905][T26217] dump_stack_lvl+0xe8/0x150 [ 1394.187934][T26217] should_fail_ex+0x412/0x560 [ 1394.187955][T26217] _copy_to_user+0x31/0xb0 [ 1394.187971][T26217] simple_read_from_buffer+0xe1/0x170 [ 1394.187991][T26217] proc_fail_nth_read+0x1bb/0x230 [ 1394.188011][T26217] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1394.188030][T26217] ? rw_verify_area+0x2a6/0x4d0 [ 1394.188044][T26217] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1394.188060][T26217] vfs_read+0x20c/0xa70 [ 1394.188076][T26217] ? __pfx_vfs_write+0x10/0x10 [ 1394.188089][T26217] ? __pfx_vfs_read+0x10/0x10 [ 1394.188112][T26217] ksys_read+0x150/0x270 [ 1394.188126][T26217] ? __pfx_ksys_read+0x10/0x10 [ 1394.188141][T26217] ? asm_int80_emulation+0x1a/0x20 [ 1394.188155][T26217] do_int80_emulation+0x173/0x4d0 [ 1394.188171][T26217] ? asm_int80_emulation+0x1a/0x20 [ 1394.188185][T26217] ? clear_bhb_loop+0x40/0x90 [ 1394.188196][T26217] ? clear_bhb_loop+0x40/0x90 [ 1394.188210][T26217] asm_int80_emulation+0x1a/0x20 [ 1394.188221][T26217] RIP: 0023:0xf71e5cab [ 1394.188233][T26217] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1394.188244][T26217] RSP: 002b:00000000f549d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1394.188258][T26217] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f549d5d0 [ 1394.188266][T26217] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 1394.188273][T26217] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1394.188280][T26217] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1394.188287][T26217] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1394.188303][T26217] [ 1394.442249][T16557] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1394.470527][T16557] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1394.497168][T16557] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1394.553046][T16557] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1394.579615][T16557] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1394.602182][T16557] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 1394.652875][T16557] usb 2-1: New USB device found, idVendor=05ac, idProduct=921c, bcdDevice=9d.fb [ 1394.690286][T16557] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1394.710806][T16557] usb 2-1: config 0 descriptor?? [ 1394.732040][T26228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1394.744767][T16557] appledisplay 2-1:0.0: Submitting URB failed [ 1394.756862][T16557] appledisplay 2-1:0.0: probe with driver appledisplay failed with error -5 [ 1394.767548][T26228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1394.793694][T26228] loop2: detected capacity change from 0 to 7 [ 1394.800932][T26228] loop2: [ 1394.804279][T26228] loop2: partition table partially beyond EOD, truncated [ 1394.959484][T16557] usb 2-1: USB disconnect, device number 59 [ 1395.079191][T26231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1395.100568][T26231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1395.473360][T23629] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 1395.663824][T23629] usb 4-1: Using ep0 maxpacket: 8 [ 1395.678534][T23629] usb 4-1: config 6 has an invalid interface number: 2 but max is 0 [ 1395.686825][T23629] usb 4-1: config 6 has no interface number 0 [ 1395.693202][T23629] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1395.703406][T23629] usb 4-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1395.739799][T23629] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1395.762171][T23629] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1395.924039][ T5834] Bluetooth: hci3: command 0x0406 tx timeout [ 1395.949551][T26249] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5936'. [ 1396.118910][T23629] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 1396.128130][ T1154] net_ratelimit: 15 callbacks suppressed [ 1396.128152][ T1154] bond2: (slave dummy0): failed to get link speed/duplex [ 1396.137494][T23629] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1396.248778][T23629] usb 4-1: Product: syz [ 1396.267423][T23629] usb 4-1: Manufacturer: syz [ 1396.294125][T23629] usb 4-1: SerialNumber: syz [ 1396.440927][ T35] bond2: (slave dummy0): failed to get link speed/duplex [ 1396.464852][T23629] hso 4-1:6.2: Failed to find BULK IN ep [ 1396.505492][T26251] syzkaller0: entered promiscuous mode [ 1396.511183][T26251] syzkaller0: entered allmulticast mode [ 1396.575214][T17229] bond2: (slave dummy0): failed to get link speed/duplex [ 1396.741162][T26253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1396.849722][T26253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1396.884403][ T7561] bond2: (slave dummy0): failed to get link speed/duplex [ 1397.025259][ T1154] bond2: (slave dummy0): failed to get link speed/duplex [ 1397.061928][T26255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1397.088146][T26255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1397.173764][ T7561] bond2: (slave dummy0): failed to get link speed/duplex [ 1397.314246][T26258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1397.323818][T26258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1397.343214][ T7561] bond2: (slave dummy0): failed to get link speed/duplex [ 1397.358855][T26260] netlink: 14 bytes leftover after parsing attributes in process `syz.7.5939'. [ 1397.397571][T26260] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1397.437199][T26262] openvswitch: netlink: Flow actions attr not present in new flow. [ 1397.448339][T26260] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1397.491704][T26260] bond0 (unregistering): Released all slaves [ 1397.568814][ T154] bond2: (slave dummy0): failed to get link speed/duplex [ 1397.677797][T26264] usb usb7: usbfs: process 26264 (syz.7.5941) did not claim interface 0 before use [ 1397.706838][ T7561] bond2: (slave dummy0): failed to get link speed/duplex [ 1398.704279][ T47] usb 4-1: USB disconnect, device number 106 [ 1399.443537][T26289] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5949'. [ 1400.202507][T26298] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5952'. [ 1400.265475][T26298] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5952'. [ 1401.226021][T17229] net_ratelimit: 23 callbacks suppressed [ 1401.226037][T17229] bond2: (slave dummy0): failed to get link speed/duplex [ 1401.305132][T20357] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1401.367094][ T35] bond2: (slave dummy0): failed to get link speed/duplex [ 1401.382337][T20357] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1401.414789][T20357] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1401.427502][T20357] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1401.439235][T20357] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1401.500597][ T35] bond2: (slave dummy0): failed to get link speed/duplex [ 1401.623967][ T1154] bond2: (slave dummy0): failed to get link speed/duplex [ 1402.113953][ T140] bond2: (slave dummy0): failed to get link speed/duplex [ 1402.578307][ T140] bond2: (slave dummy0): failed to get link speed/duplex [ 1402.800512][T26322] chnl_net:caif_netlink_parms(): no params data found [ 1402.892636][T16557] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 1403.063133][T16557] usb 4-1: device descriptor read/64, error -71 [ 1403.210927][T26322] bridge0: port 1(bridge_slave_0) entered blocking state [ 1403.248709][T26322] bridge0: port 1(bridge_slave_0) entered disabled state [ 1403.277607][T26322] bridge_slave_0: entered allmulticast mode [ 1403.294160][T17224] raw-gadget.1 gadget.5: failed to queue disconnect event [ 1403.309197][T26322] bridge_slave_0: entered promiscuous mode [ 1403.313024][T16557] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 1403.354713][T26322] bridge0: port 2(bridge_slave_1) entered blocking state [ 1403.361950][T26322] bridge0: port 2(bridge_slave_1) entered disabled state [ 1403.391580][T26322] bridge_slave_1: entered allmulticast mode [ 1403.430072][T26322] bridge_slave_1: entered promiscuous mode [ 1403.464128][T16557] usb 4-1: device descriptor read/64, error -71 [ 1403.583048][T20357] Bluetooth: hci5: command tx timeout [ 1403.592420][T16557] usb usb4-port1: attempt power cycle [ 1403.621489][T26322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1403.675434][T26322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1403.837339][ T47] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1403.848913][T26322] team0: Port device team_slave_0 added [ 1403.862095][T26322] team0: Port device team_slave_1 added [ 1403.904408][T26322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1403.911860][T26322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1403.943726][T16557] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1403.966622][T26322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1403.966659][T16557] usb 4-1: device descriptor read/8, error -71 [ 1403.982716][T26322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1403.994327][T26322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1404.021179][T26322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1404.113263][ T140] bond2: (slave dummy0): failed to get link speed/duplex [ 1404.233196][T16557] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 1404.241675][ T47] usb 2-1: Using ep0 maxpacket: 32 [ 1404.258445][T26322] hsr_slave_0: entered promiscuous mode [ 1404.281922][T16557] usb 4-1: device descriptor read/8, error -71 [ 1404.314692][T26322] hsr_slave_1: entered promiscuous mode [ 1404.325197][T26322] debugfs: 'hsr0' already exists in 'hsr' [ 1404.333595][T26322] Cannot create hsr debugfs directory [ 1404.403782][T16557] usb usb4-port1: unable to enumerate USB device [ 1404.871217][T26368] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5969'. [ 1404.998380][ T47] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1405.009984][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1405.033565][ T47] usb 2-1: Product: syz [ 1405.048578][ T47] usb 2-1: Manufacturer: syz [ 1405.066179][ T47] usb 2-1: SerialNumber: syz [ 1405.140925][ T47] usb 2-1: config 0 descriptor?? [ 1405.471144][T26322] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1405.679140][T20357] Bluetooth: hci5: command tx timeout [ 1405.725194][ T1166] bond2: (slave dummy0): failed to get link speed/duplex [ 1405.858020][T26322] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1406.174396][ T35] bond2: (slave dummy0): failed to get link speed/duplex [ 1406.295705][T26322] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1406.513423][ T140] bond2: (slave dummy0): failed to get link speed/duplex [ 1406.644756][ T35] bond2: (slave dummy0): failed to get link speed/duplex [ 1407.029864][ T47] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: failure sending bit rate [ 1407.056141][ T47] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: probe with driver RobotFuzz Open Source InterFace, OSIF failed with error -71 [ 1407.095220][ T1166] bond2: (slave dummy0): failed to get link speed/duplex [ 1407.135909][ T47] usb 2-1: USB disconnect, device number 60 [ 1407.215256][ T1166] bond2: (slave dummy0): failed to get link speed/duplex [ 1407.236037][T26322] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1407.266621][T26322] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1407.290875][T26322] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1407.347825][T26322] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1407.522297][T26397] netlink: 4740 bytes leftover after parsing attributes in process `syz.3.5978'. [ 1407.553189][T26397] netlink: 192 bytes leftover after parsing attributes in process `syz.3.5978'. [ 1407.573756][ T35] bond2: (slave dummy0): failed to get link speed/duplex [ 1407.733449][T20357] Bluetooth: hci5: command tx timeout [ 1407.763383][ T154] bond2: (slave dummy0): failed to get link speed/duplex [ 1407.810115][T26322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1407.883235][ T1166] bond2: (slave dummy0): failed to get link speed/duplex [ 1407.979634][ T29] audit: type=1326 audit(1775341032.590:2179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26401 comm="syz.3.5979" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87f6c code=0x7ffc0000 [ 1407.992106][T26322] 8021q: adding VLAN 0 to HW filter on device team0 [ 1408.023544][ T29] audit: type=1326 audit(1775341032.590:2180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26401 comm="syz.3.5979" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87f6c code=0x7ffc0000 [ 1408.238954][ T140] bond2: (slave dummy0): failed to get link speed/duplex [ 1408.264235][ T29] audit: type=1326 audit(1775341032.590:2181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26401 comm="syz.3.5979" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f87f6c code=0x7ffc0000 [ 1408.290929][ T29] audit: type=1326 audit(1775341032.590:2182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26401 comm="syz.3.5979" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87f6c code=0x7ffc0000 [ 1408.331588][ T29] audit: type=1326 audit(1775341032.590:2183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26401 comm="syz.3.5979" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87f6c code=0x7ffc0000 [ 1408.363202][ T154] bond2: (slave dummy0): failed to get link speed/duplex [ 1408.382188][ T29] audit: type=1326 audit(1775341032.590:2184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26401 comm="syz.3.5979" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f87f6c code=0x7ffc0000 [ 1408.421365][ T29] audit: type=1326 audit(1775341032.590:2185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26401 comm="syz.3.5979" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87f6c code=0x7ffc0000 [ 1408.620430][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 1408.627612][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1408.708519][ T29] audit: type=1326 audit(1775341032.590:2186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26401 comm="syz.3.5979" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87f6c code=0x7ffc0000 [ 1408.731337][ T29] audit: type=1326 audit(1775341032.590:2187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26401 comm="syz.3.5979" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7f87f6c code=0x7ffc0000 [ 1408.755594][ T29] audit: type=1326 audit(1775341032.590:2188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26401 comm="syz.3.5979" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87f6c code=0x7ffc0000 [ 1408.813448][ T1166] bond2: (slave dummy0): failed to get link speed/duplex [ 1408.889497][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 1408.896840][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1409.146987][T26416] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5981'. [ 1409.274693][T26322] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1409.303093][T26322] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1409.819237][T26322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1409.827057][T20357] Bluetooth: hci5: command tx timeout [ 1410.415629][T26322] veth0_vlan: entered promiscuous mode [ 1410.485154][T26322] veth1_vlan: entered promiscuous mode [ 1410.532282][ T30] INFO: task kworker/1:7:5945 blocked for more than 143 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1410.642696][ T30] Tainted: G L syzkaller #0 [ 1410.665346][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1410.715212][ T30] task:kworker/1:7 state:D stack:21696 pid:5945 tgid:5945 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1410.783456][ T30] Workqueue: usb_hub_wq hub_event [ 1410.788627][ T30] Call Trace: [ 1410.791944][ T30] [ 1410.873122][ T30] __schedule+0x15dd/0x52d0 [ 1410.877752][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 1410.882821][ T30] ? __pfx___schedule+0x10/0x10 [ 1410.918054][T16557] usb 3-1: USB disconnect, device number 45 [ 1410.961728][T20786] vhci_hcd: connection reset by peer [ 1410.988521][ T140] vhci_hcd vhci_hcd.2: stop threads [ 1410.993972][ T140] vhci_hcd vhci_hcd.2: release socket [ 1410.995362][ T30] ? schedule+0x90/0x360 [ 1411.003027][ T140] vhci_hcd vhci_hcd.2: disconnect device [ 1411.023026][ T30] schedule+0x164/0x360 [ 1411.027260][ T30] schedule_preempt_disabled+0x13/0x30 [ 1411.032753][ T30] __mutex_lock+0x7fe/0x1300 [ 1411.053507][ T30] ? __mutex_lock+0x5ac/0x1300 [ 1411.058348][ T30] ? hub_event+0x21a2/0x4f30 [ 1411.073173][ T10] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 1411.080472][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1411.085763][ T30] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1411.091767][ T30] hub_event+0x21a2/0x4f30 [ 1411.113015][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1411.118033][ T30] ? __pfx_hub_event+0x10/0x10 [ 1411.122811][ T30] ? process_scheduled_works+0xa8d/0x18c0 [ 1411.143207][ T30] ? process_scheduled_works+0xa8d/0x18c0 [ 1411.149017][ T30] process_scheduled_works+0xb6e/0x18c0 [ 1411.183136][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 1411.189290][ T30] ? assign_work+0x3d5/0x5e0 [ 1411.211029][ T30] worker_thread+0xa53/0xfc0 [ 1411.216030][ T30] kthread+0x388/0x470 [ 1411.220131][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1411.226231][ T30] ? __pfx_kthread+0x10/0x10 [ 1411.230855][ T30] ret_from_fork+0x51e/0xb90 [ 1411.243120][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1411.248492][ T30] ? __switch_to+0xc7d/0x1450 [ 1411.253779][ T30] ? __pfx_kthread+0x10/0x10 [ 1411.258498][ T30] ret_from_fork_asm+0x1a/0x30 [ 1411.263920][ T30] [ 1411.267146][ T30] [ 1411.267146][ T30] Showing all locks held in the system: [ 1411.275723][ T30] 6 locks held by kworker/0:1/10: [ 1411.281029][ T30] #0: ffff888021eae948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 1411.293219][ T30] #1: ffffc900000f7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 1411.322991][ T30] #2: ffff88802ba261e0 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 1411.332072][ T30] #3: ffff88802ba83560 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x217a/0x4f30 [ 1411.363018][ T30] #4: ffff88802a14a368 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21a2/0x4f30 [ 1411.372758][ T30] #5: ffffffff8f476e70 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x14e/0x1840 [ 1411.420752][ T30] 1 lock held by khungtaskd/30: [ 1411.434116][ T30] #0: ffffffff8e75e5e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1411.463637][ T30] 3 locks held by kworker/u8:9/1166: [ 1411.469002][ T30] #0: ffff888032508948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 1411.503711][ T30] #1: ffffc900059efc40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 1411.539632][ T30] #2: ffffffff8fbd0548 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x11e/0x14c0 [ 1411.564739][ T30] 2 locks held by getty/5584: [ 1411.569479][ T30] #0: ffff8880335d00a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1411.593107][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 1411.613065][ T30] 5 locks held by kworker/1:7/5945: [ 1411.618339][ T30] #0: ffff888021eae948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 1411.654093][ T30] #1: ffffc9000518fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 1411.683013][ T30] #2: ffff88802ba3a1e0 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 1411.692052][ T30] #3: ffff88802ba3f560 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x217a/0x4f30 [ 1411.722745][ T30] #4: ffff88802a14a368 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21a2/0x4f30 [ 1411.732898][ T30] 3 locks held by kworker/1:2/16557: [ 1411.767675][ T30] #0: ffff88813fe0f148 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 1411.784700][ T30] #1: ffffc90003d37c40 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 1411.795211][ T30] #2: ffffffff8e7648f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 1411.806359][ T30] 3 locks held by kworker/u8:3/17229: [ 1411.811741][ T30] #0: ffff88813fe54148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 1411.824654][ T30] #1: ffffc90004c4fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 1411.835767][ T30] #2: ffffffff8fbd0548 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1411.845021][ T30] 1 lock held by syz.7.4731/22102: [ 1411.850151][ T30] #0: ffffffff8fbd0548 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1411.861228][ T30] 1 lock held by syz-executor/26322: [ 1411.866726][ T30] #0: ffffffff8fbd0548 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 1411.876902][ T30] 2 locks held by syz.7.5977/26399: [ 1411.882226][ T30] #0: ffffffff8fbd0548 (rtnl_mutex){+.+.}-{4:4}, at: ppp_release+0x87/0x1f0 [ 1411.891532][ T30] #1: ffffffff8e7648f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 1411.902722][ T30] 1 lock held by syz.1.5981/26417: [ 1411.908292][ T30] #0: ffffffff8fbd0548 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1411.917421][ T30] [ 1411.919829][ T30] ============================================= [ 1411.919829][ T30] [ 1412.043508][ T30] NMI backtrace for cpu 0 [ 1412.043537][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1412.043561][ T30] Tainted: [L]=SOFTLOCKUP [ 1412.043568][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1412.043579][ T30] Call Trace: [ 1412.043587][ T30] [ 1412.043596][ T30] dump_stack_lvl+0xe8/0x150 [ 1412.043630][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 1412.043652][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1412.043679][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1412.043703][ T30] sys_info+0x135/0x170 [ 1412.043730][ T30] watchdog+0xfd9/0x1030 [ 1412.043755][ T30] ? watchdog+0x21a/0x1030 [ 1412.043781][ T30] kthread+0x388/0x470 [ 1412.043801][ T30] ? __pfx_watchdog+0x10/0x10 [ 1412.043817][ T30] ? __pfx_kthread+0x10/0x10 [ 1412.043838][ T30] ret_from_fork+0x51e/0xb90 [ 1412.043878][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1412.043902][ T30] ? __switch_to+0xc7d/0x1450 [ 1412.043929][ T30] ? __pfx_kthread+0x10/0x10 [ 1412.043948][ T30] ret_from_fork_asm+0x1a/0x30 [ 1412.043992][ T30] [ 1412.044002][ T30] Sending NMI from CPU 0 to CPUs 1: [ 1412.162093][ C1] NMI backtrace for cpu 1 [ 1412.162114][ C1] CPU: 1 UID: 0 PID: 35 Comm: kworker/u8:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 1412.162143][ C1] Tainted: [L]=SOFTLOCKUP [ 1412.162149][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1412.162159][ C1] Workqueue: events_unbound toggle_allocation_gate [ 1412.162185][ C1] RIP: 0010:rcu_is_watching+0x44/0xb0 [ 1412.162209][ C1] Code: 73 65 49 bf 00 00 00 00 00 fc ff df 4c 8d 34 dd 90 37 1b 8e 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 3c 41 85 00 <48> c7 c3 98 f9 1d 93 49 03 1e 48 89 d8 48 c1 e8 03 42 0f b6 04 38 [ 1412.162221][ C1] RSP: 0018:ffffc90000ab7610 EFLAGS: 00000246 [ 1412.162235][ C1] RAX: 1ffffffff1c366f3 RBX: 0000000000000001 RCX: 0000000080000001 [ 1412.162246][ C1] RDX: 0000000000000000 RSI: ffffffff8c27d4e0 RDI: ffffffff8c27d4a0 [ 1412.162258][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1412.162267][ C1] R10: dffffc0000000000 R11: fffff94000011209 R12: 0000000000000002 [ 1412.162278][ C1] R13: ffffffff8e75e5e0 R14: ffffffff8e1b3798 R15: dffffc0000000000 [ 1412.162289][ C1] FS: 0000000000000000(0000) GS:ffff888125554000(0000) knlGS:0000000000000000 [ 1412.162302][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1412.162313][ C1] CR2: 0000000080202018 CR3: 000000000e54c000 CR4: 00000000003526f0 [ 1412.162330][ C1] Call Trace: [ 1412.162337][ C1] [ 1412.162345][ C1] lock_acquire+0x57/0x2e0 [ 1412.162367][ C1] ? kmem_cache_alloc_from_sheaf_noprof+0x3b/0x180 [ 1412.162385][ C1] __pte_offset_map+0x45/0x240 [ 1412.162400][ C1] ? __pte_offset_map+0x29/0x240 [ 1412.162413][ C1] ? pte_offset_map_lock+0x2d/0x210 [ 1412.162427][ C1] ? kmem_cache_alloc_from_sheaf_noprof+0x3b/0x180 [ 1412.162445][ C1] pte_offset_map_lock+0x46/0x210 [ 1412.162460][ C1] ? kmem_cache_alloc_from_sheaf_noprof+0x3b/0x180 [ 1412.162478][ C1] ? kmem_cache_alloc_from_sheaf_noprof+0x3b/0x180 [ 1412.162495][ C1] __text_poke+0x2d3/0x9a0 [ 1412.162514][ C1] ? __pfx_text_poke_memcpy+0x10/0x10 [ 1412.162528][ C1] ? __pfx_perf_event_text_poke+0x10/0x10 [ 1412.162545][ C1] ? kmem_cache_alloc_from_sheaf_noprof+0x3b/0x180 [ 1412.162562][ C1] ? __pfx___text_poke+0x10/0x10 [ 1412.162581][ C1] smp_text_poke_batch_finish+0x923/0x1160 [ 1412.162602][ C1] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 1412.162620][ C1] ? arch_jump_label_transform_queue+0x97/0x110 [ 1412.162643][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 1412.162661][ C1] static_key_disable_cpuslocked+0xc5/0x1a0 [ 1412.162685][ C1] static_key_disable+0x1a/0x20 [ 1412.162706][ C1] toggle_allocation_gate+0x1fe/0x290 [ 1412.162724][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 1412.162747][ C1] ? process_scheduled_works+0xa8d/0x18c0 [ 1412.162766][ C1] ? process_scheduled_works+0xa8d/0x18c0 [ 1412.162785][ C1] process_scheduled_works+0xb6e/0x18c0 [ 1412.162816][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1412.162838][ C1] ? assign_work+0x3d5/0x5e0 [ 1412.162857][ C1] worker_thread+0xa53/0xfc0 [ 1412.162888][ C1] kthread+0x388/0x470 [ 1412.162909][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1412.162927][ C1] ? __pfx_kthread+0x10/0x10 [ 1412.162944][ C1] ret_from_fork+0x51e/0xb90 [ 1412.162966][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1412.162985][ C1] ? __switch_to+0xc7d/0x1450 [ 1412.163004][ C1] ? __pfx_kthread+0x10/0x10 [ 1412.163019][ C1] ret_from_fork_asm+0x1a/0x30 [ 1412.163048][ C1] [ 1412.501713][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1412.508716][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1412.519433][ T30] Tainted: [L]=SOFTLOCKUP [ 1412.523788][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1412.534571][ T30] Call Trace: [ 1412.537884][ T30] [ 1412.540856][ T30] vpanic+0x56c/0xa60 [ 1412.544882][ T30] ? __pfx___schedule+0x10/0x10 [ 1412.549771][ T30] ? __pfx_vpanic+0x10/0x10 [ 1412.554333][ T30] panic+0xc5/0xd0 [ 1412.558091][ T30] ? __pfx_panic+0x10/0x10 [ 1412.562536][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 1412.567950][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1412.574142][ T30] watchdog+0x1023/0x1030 [ 1412.578619][ T30] ? watchdog+0x21a/0x1030 [ 1412.583076][ T30] kthread+0x388/0x470 [ 1412.587174][ T30] ? __pfx_watchdog+0x10/0x10 [ 1412.591882][ T30] ? __pfx_kthread+0x10/0x10 [ 1412.596504][ T30] ret_from_fork+0x51e/0xb90 [ 1412.601136][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1412.606384][ T30] ? __switch_to+0xc7d/0x1450 [ 1412.611200][ T30] ? __pfx_kthread+0x10/0x10 [ 1412.616007][ T30] ret_from_fork_asm+0x1a/0x30 [ 1412.620857][ T30] [ 1412.624526][ T30] Kernel Offset: disabled [ 1412.628863][ T30] Rebooting in 86400 seconds..