last executing test programs: 9m15.726998653s ago: executing program 32 (id=290): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$cont(0xffffffffffffffff, r0, 0x6, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r2, &(0x7f0000000100), 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000380)={'wlan1\x00', 0x8000}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r4, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r10 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r10, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e) sendmmsg(r10, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@ipv4_deladdr={0x50, 0x15, 0x20, 0x70bd27, 0x25dfdbff, {0x2, 0x0, 0xb0, 0xff, r11}, [@IFA_CACHEINFO={0x14, 0x6, {0x80000001, 0x5220, 0x3ff, 0x5}}, @IFA_LOCAL={0x8, 0x2, @empty}, @IFA_LOCAL={0x8, 0x2, @local}, @IFA_LABEL={0x14, 0x3, 'batadv_slave_0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x1000a040) 8m49.309918019s ago: executing program 2 (id=389): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = fspick(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x1) r4 = fsmount(r3, 0x0, 0x9) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r5 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) io_submit(0x0, 0x1, &(0x7f0000000140)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x8000, r4, &(0x7f0000000180)="b96d73baeb98aa2d1a0ed1061490853e90c143053f769647a9faa00892e4463b99b3883833cb1a37ee5dece96d871231129eae302543ac434efc6eb5d42691ca249320688f82f22841a68fb4abeb42b3067a0e47f722072152b8369d7c0bbe17e8a9459bb8ec297df0e7bac1", 0x6c, 0x8a5, 0x0, 0x3}]) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x21, 0x0) write(r5, &(0x7f0000000240)="7818840e72127022", 0x8) sendfile(r5, r5, &(0x7f0000001000), 0xffff) openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000df000000bfa300000000000007030000f0ffffff720af0fff8ffffff71a4f0ff000000005d040200000000001d400500000000004704000001ed0000620300ff000000003f440000000000007a0a00fe00ffffffc30300ff50000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a1074649c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c0dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6acdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fed000000007baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca485683252b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a0032f37ff559be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee07751532d5e7d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e2fa3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef907000000f01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e015cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb581012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a0000000000000000"], &(0x7f00000001c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) write$UHID_CREATE(r4, &(0x7f0000000c40)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000bc0)=""/98, 0x62, 0xfff7, 0x6, 0x0, 0xf, 0x61b2}}, 0x120) chroot(&(0x7f0000000040)='./cgroup/../file0/file0\x00') r6 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r7 = openat$binfmt(0xffffffffffffff9c, r6, 0x42, 0x1ff) close(r7) execveat$binfmt(0xffffffffffffff9c, r6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) 8m46.421134678s ago: executing program 0 (id=398): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='coredump_filter\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x8f51ce1b497e41fe) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x76, &(0x7f0000000800)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x40, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[@hopopts={0x2c}, @dstopts={0x67, 0x5, '\x00', [@calipso={0x7, 0x28, {0x3, 0x8, 0x6, 0x9, [0x3, 0x3, 0x5, 0x6d]}}]}]}}}}}, 0x0) sendmsg(r1, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 8m46.187743224s ago: executing program 0 (id=400): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000380)=[@in={0x2, 0x4e24, @private=0xa010102}, @in6={0xa, 0x4e22, 0xee4c, @empty, 0x7}, @in6={0xa, 0x4e23, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}], 0x48) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000480)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r2, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) mkdir(&(0x7f0000000440)='./file0\x00', 0x124) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r5, 0x2, 0x0) getdents64(r5, 0x0, 0x22) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000300)={0x4, 0x3}, 0x4) bind$tipc(r7, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r7, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r6, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r4, &(0x7f0000000340)=@id={0x1e, 0x3, 0x2, {0x4e24}}, 0x10) bind$tipc(r6, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x1, 0x4001}]}, 0x10) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x141301) ioctl$USBDEVFS_CLEAR_HALT(r8, 0x80045515, 0x0) ioctl$VHOST_VDPA_GET_CONFIG_SIZE(r5, 0x8004af79, &(0x7f00000002c0)) splice(r2, 0x0, r0, 0x0, 0x20000000000002, 0x2) 8m46.186329758s ago: executing program 3 (id=401): socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000a80)={{0x5, 0x6, 0x401, 0x7, 'syz1\x00', 0x81}, 0x1, [0x6, 0xfffffffffffffffa, 0x95, 0x907a, 0xffffffff, 0x60, 0x1, 0xf, 0x1, 0x4, 0xfffffffffffffffd, 0x63, 0xfff, 0x100000001, 0xfffffffffffffffa, 0xc8, 0x51, 0xa5, 0x0, 0xb6, 0x8000000000000000, 0x8, 0x7, 0x4, 0x6, 0xff, 0x1, 0x4f51, 0x0, 0x37c7, 0xc, 0xbb33, 0x0, 0x63, 0x4, 0x4, 0x8, 0xffffffffffff7fff, 0x6, 0x8, 0x5, 0x0, 0x8, 0x401, 0x3, 0xc1bd, 0xffffffff, 0x8000000000000001, 0x3, 0x0, 0x7, 0x72, 0x9, 0x2, 0x6a44d0ea, 0xffffffffffffffff, 0x9, 0x5f0, 0xfffffffffffff2e2, 0x7, 0x6, 0xfffffffffffffffd, 0x7, 0xf0, 0x26e69303, 0x5, 0x2, 0x5, 0x2, 0x1, 0x9, 0x7, 0xe0000000000000, 0xd, 0x81, 0x80000001, 0x7fff, 0x6, 0x6, 0x3ff, 0xffffffffffffcc1c, 0x10000, 0xfffffffffffffffb, 0x6, 0x100000001, 0x1, 0xf, 0x7dd, 0xfffffffffffff000, 0x8d6, 0x0, 0x5, 0x4, 0xafae, 0x1, 0x8, 0x1, 0xb, 0x1, 0xffff, 0x1, 0x10000, 0x1ff, 0xc, 0x0, 0x7, 0x5, 0x0, 0x3, 0x7, 0xaad, 0x7, 0x1, 0x8, 0xe2, 0x6, 0x6, 0xf, 0x7, 0x0, 0x9, 0x5, 0x40, 0x52a7, 0x83d0, 0xf0, 0x100000000, 0x140000000]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010025bd7000fadbdf2500000000", @ANYRES32=r4, @ANYBLOB="138000002b9201002400128009000100626f6e64000000001400028008001f0007000000080007"], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x4000) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="08002abd7000fddbdf2502000000050037000100000008000300", @ANYRES32=0x0, @ANYBLOB="05002500f700000008000600", @ANYRES32=r4, @ANYBLOB="050033000100000005002f0001000000050033000100000008000b000400000008000600", @ANYRES32=0x0, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xffffffff, 0xbde, 0xb, 0x10000}}) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="50010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x20000000}, 0x4084) recvmmsg(r5, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/254, 0xfe}, {&(0x7f00000000c0)=""/50, 0x32}], 0x2}, 0x3f}], 0x1, 0x60, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffff0180c20000606ed6c400442ffffc020000000000000000000000000000ff020000000000000000000000ef0001242088a80000fffc00000800000086dd88a888be08000000100800fe0100000000800001080022eb000000042000c0000200000000000000000000000800655800000000"], 0x0) 8m46.040856197s ago: executing program 4 (id=402): io_uring_setup(0x1b24, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x123481, 0x127) write$binfmt_script(r0, &(0x7f00000006c0)={'#! ', './file0'}, 0xb) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000180)) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000014800)={0x0, 0x0, &(0x7f00000147c0)={&(0x7f0000000940)=@allocspi={0x104, 0x16, 0x1, 0x70bd25, 0x25dfdbff, {{{@in6=@dev={0xfe, 0x80, '\x00', 0x14}, @in=@broadcast, 0x4e23, 0x0, 0x4e22, 0x3, 0x2, 0x20, 0x110, 0x3a}, {@in=@loopback, 0x4d2, 0x33}, @in=@local, {0x1, 0x10, 0x4, 0x8001, 0x8, 0x5, 0xaaf0, 0x1}, {0x500002, 0x4, 0x4, 0x2}, {0x6, 0x2127268a, 0x8}, 0x703d2b, 0x350a, 0xa, 0x0, 0x0, 0x10}, 0x0, 0x80000002}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x1, 0x4}}]}, 0x104}, 0x1, 0x0, 0x0, 0x63a0f7cf031481fc}, 0x48080) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r3, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) sendfile(r3, r4, 0x0, 0xffffffff004) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x4}]}) syz_clone(0x23802400, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 8m46.036976772s ago: executing program 5 (id=403): r0 = socket$inet(0x2, 0x1, 0x100) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000002100010000000000000000000a0000010000000000000000080006000000000014000300697036746e6c3000440000000000000043dd9036ae3ac800d827be45904774dd900ec3"], 0x38}}, 0x0) (async) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) (async) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) getsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000300)=""/4096, &(0x7f0000000240)=0x1000) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) (async) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) (async) sendmsg$can_bcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0500000040000000000000c000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000830c0200000000000000000200003fd31340e92c4bb8"], 0x38}, 0x300}, 0x8040) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_opts(r4, 0x29, 0x3b, &(0x7f00000000c0)=ANY=[], 0x8) (async) getsockopt$inet6_opts(r4, 0x29, 0x3b, &(0x7f00000015c0)=""/4096, &(0x7f0000000040)=0x1000) (async) setsockopt$inet_mreqn(r0, 0x0, 0x25, &(0x7f0000000080)={@multicast1, @local}, 0xc) 8m45.968691163s ago: executing program 2 (id=404): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x463f, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x4b0, 0xbbba, 0x9, 0x0, 0x0, {}, {0x2, 0x2}, {0x0, 0x5, 0x20}, {0x1, 0x8, 0x4}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, 0xb}) 8m45.750654514s ago: executing program 5 (id=405): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ptrace(0x10, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000040)={0x14, 0x2, 0x0, "11010000001400000100b64c0000005c4b7c1500", 0x30314442}) socket(0x1d, 0x2, 0x6) r4 = syz_open_dev$sndctrl(&(0x7f0000000140), 0x115, 0x3c1400) socket(0x25, 0x80000, 0x3) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r5, &(0x7f00000007c0)={0x2020}, 0x2020) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_group_source_req(r6, 0x0, 0x2e, &(0x7f0000000580)={0x23, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x13}}}}, 0x108) setsockopt$inet_mreqn(r6, 0x0, 0x23, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 8m45.179434266s ago: executing program 2 (id=406): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x58}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 8m44.989811003s ago: executing program 0 (id=407): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b2, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000000)='./file1\x00', 0x44000732) write$binfmt_elf64(r0, &(0x7f0000001700)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x4, 0x0, 0x0, 0x87fff, 0x3, 0x3e, 0xffffffec, 0x398, 0x40, 0x56, 0x0, 0x0, 0x38, 0x1, 0xfffe, 0x2}, [{0x3, 0x5, 0x4, 0x40000000200d, 0x1c8, 0x7f, 0x8, 0x2}]}, 0x78) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(r2, r2, 0x2) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x28040041, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r7, 0x5452, &(0x7f0000000280)=0x3a0af83a) listen(r7, 0x20) shutdown(r7, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@getchain={0x34, 0x66, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x6, 0xfff2}, {0x4, 0x2}, {0xffef, 0x5}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x1}]}, 0x34}}, 0x40080) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80080) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r9, 0x84, 0x6e, &(0x7f00000002c0)=[@in6={0xa, 0x4e23, 0x9, @loopback, 0x6}, @in={0x2, 0x4e22, @private=0xa010102}], 0x2c) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)='1', 0x1}], 0x1}, 0x48484) splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0) 8m44.788859961s ago: executing program 2 (id=408): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmsg$key(0xffffffffffffffff, 0x0, 0x40010) r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80082, 0x0) write$vga_arbiter(r2, &(0x7f00000001c0)=ANY=[], 0xa) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/binder1\x00', 0x1802, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, 0x0, 0x0) listen(r3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820f", 0x6) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 8m44.669055164s ago: executing program 4 (id=409): r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[@ANYRESDEC=r2, @ANYRESDEC=r2, @ANYRESDEC=r0], 0x20) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x1, 0x40001019, r1, 0x0) splice(r0, &(0x7f0000000040), r2, 0x0, 0x807, 0x0) 8m44.331266977s ago: executing program 3 (id=410): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00010000000000fbdbdf2581000000000000000000040014000200"], 0x30}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)='2', 0xffffffffffffffb1, 0x8000c61) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$SG_GET_ACCESS_COUNT(r3, 0x2289, &(0x7f0000000200)) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r5, 0x0) migrate_pages(0x0, 0x3, &(0x7f0000000300)=0x3, &(0x7f0000000340)=0x13e) ioctl$KDGKBSENT(r4, 0x4b48, &(0x7f0000000040)={0x7, "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"}) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x4}]}], {0x14}}, 0x7c}}, 0x40) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f0000000040)=0x9, 0x4) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@private=0xa010102, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e23, 0x202, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in=@multicast1, {0x0, 0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {}, 0x70bd28, 0x3500, 0x2, 0x4}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "217d66d38547aa140db8a200000000c538c7cb7a"}}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x24}}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) syz_emit_ethernet(0xffc, &(0x7f00000021c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0xfee, 0x266, 0x0, 0x0, 0x84, 0x0, @empty, @multicast2, {[@end]}}, "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"}}}}, 0x0) 8m43.761189794s ago: executing program 4 (id=411): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89a2, &(0x7f0000000040)={'bridge0\x00', @random="1c0000000300"}) 8m43.426351987s ago: executing program 3 (id=412): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xc, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33429301560b7865, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000280), 0x84, r0}, 0x38) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x100, 0x1, 0x40024e}, &(0x7f0000000340), &(0x7f0000000040)=0x0) userfaultfd(0x80800) syz_io_uring_setup(0x10d, &(0x7f0000000680)={0x0, 0x80334c, 0x40, 0x3, 0x3d2}, &(0x7f0000000200)=0x0, &(0x7f0000000300)=0x0) r4 = io_uring_setup(0x220f, &(0x7f0000000280)={0x0, 0x6ba, 0x20, 0x2, 0xea}) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r4, 0x10000000) syz_io_uring_submit(r2, r1, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100, 0x23456}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRESDEC=r1, @ANYRES8=0x0, @ANYRESOCT, @ANYRES32=r0, @ANYRES64=r1, @ANYRES16=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$BLKTRACESTART(r6, 0x2272, 0x1000000000000) syz_emit_ethernet(0x6e, &(0x7f00000004c0)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x60, 0x0, 0x0, 0x40, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x22eb, 0x2, 0x0, [0x0], "7f1a"}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x0]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "ffa9"}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x2, {0x0, 0x4}}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r5}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)={0x2c, r9, 0x1, 0xffffff80, 0x0, {}, [@WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) setsockopt$netlink_NETLINK_NO_ENOBUFS(r7, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010700000000fcdbdf256700000008000300", @ANYRES32=r13, @ANYBLOB="0800c300741300000800c4"], 0x2c}}, 0x40) sendmsg$NL80211_CMD_JOIN_OCB(r8, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, r10, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9a9b}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2ab}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x157c}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15e0}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffca3}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$netlink(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)={0x18, 0x5a, 0x30d, 0x0, 0x0, "", [@nested={0x4}, @nested={0x4, 0x3}]}, 0x18}], 0x1}, 0x0) 8m43.136977547s ago: executing program 3 (id=413): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a9c000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002e2e00b9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 8m42.953062993s ago: executing program 0 (id=414): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x23, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x26}}}}, 0x104) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000006000/0x2000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x1, 0x20002f5}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@deltfilter={0xe, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x3}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x0) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0xc, &(0x7f0000000100)=[{0x1, 0x36, 0x5, 0x537}, {0x27, 0x8, 0x9}, {0xe49, 0x2, 0xfa, 0x4}, {0x5b6, 0x8, 0x1, 0x2}, {0x2, 0xe, 0x80, 0x1000003}, {0x1ff, 0x5, 0x10, 0xf}, {0x2, 0x0, 0x1, 0x9}]}) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x4010) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 8m42.91671273s ago: executing program 4 (id=415): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0xffff, r1, 0x4}, 0x38) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd28, 0xfffffffd, {0x2, 0x18, 0x50, 0x0, r2}, [@IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_BROADCAST={0x8, 0x4, @loopback}, @IFA_BROADCAST={0x8, 0x4, @broadcast}, @IFA_TARGET_NETNSID={0x8}, @IFA_LOCAL={0x8, 0x2, @broadcast}]}, 0x48}, 0x1, 0x0, 0x0, 0x871ac4b30833d133}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$sock(r3, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000240)="5179eea77efebf4765319408189c82498540838953547bfbc4fb16f2bcd3bf6e26cd92ccdee6ccd363dad635b17f651ede70bf9746948b2df599a713ef4386dc7ee7141b221f94c7d51fb3e8d61be744edbb849d3d53d6234a6bc87a5317d4e1059c5bb0efdf069b5b800bd3abe144983a4b1d7da96a8f4bccb86b6cca82d814c36d8891b31d8ae4a37ad23bc71ab7eb7f970f31a8346a5dd6c2229985c5621fd955fbf2e241d8eec733cf9f5710c4fdd7fefc6982355027230f7884b3dd2ed0622d3a19ff5d649eabe6ab20131b116007ff3c6d8775c970c1455bd0834dec30a753966864b992b07bbdbba067a93a7e3b51c2c009890f", 0xf7}, {&(0x7f0000000180)="b02655f7631f98c39bc55a5eb4b00d77b3b683ba2ff389efe317af521dc21cdaca4673edbb20265ded601efce5a096bb6e27ea70ef8cb46802546af68d5d97f3cbe3d2c78134c78b51b102e38fbd15c7b1", 0x51}, {&(0x7f0000000340)="c16ea69491984ea9685c0660fd2eeac5c782a409c671cf27f855ac489c9b22ef584ffc6a4ac77e7e26df25bc56d245c1df1af7141110e9d26f9726b7724ded4b9a300f34c47ec73215c47c14a4e37ad02b155e3e31495fbc1e4dc4a9c5b5d0e03926433e315dbe0b7c7088b0a3da9513e0204a0f906cff6e5b467ea1873bebf0b03f7de29942d87cf99d9425d8b0d6a3b625cfca3da246", 0x97}, {&(0x7f0000000100)="57ea8bcae8e80c483584ff265adc4a00dd803a602bcf5ecb2036f86fbeefe32f7150dd359b", 0x25}], 0x4}}, {{&(0x7f0000000480)=@nfc={0x27, 0x0, 0x0, 0x6}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000500)="ac9e1d032a527fce802ba396cc8ff50625149c376b9e6eb1c6a7136254282531d75a40777092df1c56c88a2c8e076202bd5e8bc662e0dfe4bbec58a3e3290e8530595a76f6972ecccfeeb74416732bf1db0ab21b1ea96b5510da9c", 0x5b}, {&(0x7f0000000580)="169b9b289895f0c3b6c6c8b7ce6c1677ac00a3d3a7aeecc97629828493a51b91259bbebf5c6e0d63ceb2e2805a6597c34ce08539d68ef6d038e93d32d2cc6a5f32c5a31caac1793928f7efd716007bb183a5b07c8b50172fae170a7d631f1dff23bc86ffd52851dcdc79a6586941623bc2087a5db16682dea31545640388cabf34dab2bcad711f75255a3e397a29308f1f3ac93994e80ac3fc1b120c7ae29f8c8cc185fa40f6f742bd4e438a0686", 0xae}, {&(0x7f0000000640)="6c0b1e51910bd531a8ce3e82576f4413ce64c2cfe9433a9b4105ba4b58f7d37a439c5aad434bb5b66af1c56fcdf0d990010e284b92cf3d2f63bbe891e0c047f147dff6fabdfb07de972aa058f67da61d6635076f0a7dd55adc2bf6537a5e3122d329013153632fbc2b6d07312ebb4ff49353122e860a1c9f444dd069ac08f93a9180adde77e7d59961e54855122c422be73f47dd0474c0b6cbf756e6e44451b672adebef40368dc6b21a62bc8d4adbb42f9a64c8d19eb31957a71c34d43bfb3d5a942ec9d5660f5589580f169f2d6541", 0xd0}, {&(0x7f0000000740)="9b5f31b4b3425a0a2b5161623bd896dc33027a7f0c54b8a3a8003063fa11678703f12671770d417a36b829b7b99bcf84737a6bc86455740410f54c8f323d082f05cbb307854c736e61da50b39574a467d6b51544e5636e5223e16fe42c442827cbc435995e1892084bdccb1169b04831c893e235aad224f87fcf7192a39ee6fdf924107bd65ec2ce37258672ad427bd13fdba9ec8620833f59a7a38362fa2d6979a1e6424c12f4f834c0351e52b1f1dfd99066ea015b30a6734dd5177e6bebda24d40e15a1694f9c8c6b85573306f1", 0xcf}, {&(0x7f0000000840)="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", 0xfc}], 0x5, &(0x7f00000009c0)=[@mark={{0x14, 0x1, 0x24, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x7ff}}, @mark={{0x14, 0x1, 0x24, 0x1}}], 0x48}}, {{&(0x7f0000000a40)=@can, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000ac0)="2f1653cb99e40fbf18c0969c178b23f88a2f6931c71dd139582a6d46e7ca48a0f316a9f86783acd296a7805fc5a1f08e61840ecdccd152e63595475b111ce76706d5cae380d43a0156915fe85ceeff65e3a30f56c476cd3b2d309ebf78d64ff5a7086d647a13d4acd19a1ac37d73d772c5887c3719c73d5d9877d5dcc8598ed55d242465535374378f57c844e9acb76b9f867e81af3648ff3ff5eb5bc614a221f2a3731e0392883bf4f8f26d21cb9b918008dec303", 0xb5}, {&(0x7f0000000b80)="8e9713ff20765afe0fe578db00d0c7faa79cdefeb10635a862ef2721a0e15eb6b540452340903602766891a2d053de786872b4c292f8c73865445b5b0aa99cb24b6f9941cd197cbfe53a3a4d3ca5cc58293f8016a1b11718af5d7fcc6d80275cd20db9cb5c4ca975aa7b0f42c22e07d29489d0e194bde1c70cdef1cecd7698", 0x7f}, {&(0x7f0000000c00)="430dcb4bf92395537771ca7ab068addc287ce0a478d4b9a11b4bc484c18e90c07a2fbc60e5dcbce6e4220a5f8aaad70a6c5f0fde37e5f1c1f90a3cb24996e5db4d8f71e0ec1d39b54fdac94930db4e0ea3ad7279edb6b45265c2128ff7eb34bb266c689a60c0162d7a569cd10cd082ca9a86af7d6117618d4820e35ad9ca45a2d637e052d9333e1cc2734bad98284a3f0e0a2bbafce846403651d12b0b661f448559512295559fe1ac37f729131227da4d300ea9e70af121f1b962a7f36166c69e33cdf03bc6e8237ceb6004eac057e8b4bfe837b4bcd1eb85f6d051e9fae4040e18671dcfde", 0xe6}, {&(0x7f0000000d00)="2c90c41dd599aa717ef0f613c9d684b880eb90c4558fd74b571529843f256ec48aefa963451a458ed617ddeeb88ca3b474529c836caa6bd536", 0x39}, {&(0x7f0000000d40)="a7ea0c6cb530d344da4f275c91badf596f0c2617ac40db98e3d44550532a587e2bfc9bba618de884df3d663a1331616f4ea248821bab1b2f6671956ab4c959e1f48c7e35e6974d914d7c93a4825b68ff446326833ecd6a0c3901", 0x5a}], 0x5}}], 0x3, 0x8010) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) (async) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x20008084) 8m42.737353583s ago: executing program 3 (id=416): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendfile(r1, r1, 0x0, 0x9) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0xe632e000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) openat$cgroup_ro(r0, &(0x7f00000004c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000440)=[{{&(0x7f0000000180)=@ax25={{0x3, @default}, [@rose, @remote, @null, @rose, @netrom, @default, @rose, @null]}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000200)=""/221, 0xdd}], 0x1, &(0x7f0000000340)=""/224, 0xe0}, 0xfffff052}], 0x1, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x3, 0x0, 0x28001, 0x0, 0x6, 0x7, 0x9, 0x1, 0xffffffff}, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019100)='net/udp6\x00') lseek(r6, 0x6, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000000040)={0x50, 0xfffffffffffffff5, r8, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r7, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8m42.628997991s ago: executing program 4 (id=417): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000380)=[@in={0x2, 0x4e24, @private=0xa010102}, @in6={0xa, 0x4e22, 0xee4c, @empty, 0x7}, @in6={0xa, 0x4e23, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}], 0x48) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000480)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r2, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) mkdir(&(0x7f0000000440)='./file0\x00', 0x124) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r5, 0x2, 0x0) getdents64(r5, 0x0, 0x22) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000300)={0x4, 0x3}, 0x4) bind$tipc(r7, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r6, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r4, &(0x7f0000000340)=@id={0x1e, 0x3, 0x2, {0x4e24}}, 0x10) bind$tipc(r6, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x1, 0x4001}]}, 0x10) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x141301) ioctl$USBDEVFS_CLEAR_HALT(r8, 0x80045515, 0x0) ioctl$VHOST_VDPA_GET_CONFIG_SIZE(r5, 0x8004af79, &(0x7f00000002c0)) splice(r2, 0x0, r0, 0x0, 0x20000000000002, 0x2) 8m42.577408099s ago: executing program 2 (id=418): r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) close(r0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000100)=0x3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x40000) fsetxattr(r2, &(0x7f0000000000)=@known='user.incfs.id\x00', 0x0, 0x0, 0x2) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @loopback, 0xd2e}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0xfffffffc, @remote, 0x1}, 0x1c) shutdown(r1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f00000000c0)={{}, {}, [{}], {0x4, 0x1}, [], {0x10, 0x6}}, 0x2c, 0x0) getxattr(&(0x7f0000000140)='./bus\x00', &(0x7f00000001c0)=@known='system.posix_acl_access\x00', &(0x7f0000000400)=""/254, 0x145) sendmmsg$inet6(r1, &(0x7f00000003c0)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x5, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}], 0x1, 0x20008044) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000200)) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000c1400012bbd70000900000008003d000200000008000100020087bc803ef25acff8000009dbd0d26b04000001000200000008040100010000000800"], 0x40}}, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x6a, &(0x7f0000000180)=ANY=[@ANYBLOB="12010003020000082505a1a44000010203010902580001fd02a005090400390202060002052406000005240004000da40f010300000030000900041524120000a317a88b045e4f01a607c0ffcb7e392a082413"], &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0}) 8m42.415657999s ago: executing program 5 (id=419): symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') r0 = inotify_init1(0x80800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000300)={'veth0_virt_wifi\x00', &(0x7f0000000200)=@ethtool_sset_info={0x37, 0x5, 0x6}}) inotify_add_watch(r0, &(0x7f00000000c0)='./file1\x00', 0x6000081) inotify_add_watch(r0, &(0x7f0000000180)='./file0\x00', 0x10000000) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') read$FUSE(r2, &(0x7f00000040c0)={0x2020}, 0x2020) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={0x34, 0x3e, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0xc, 0xfc, 0x0, 0x1, [@typed={0x8, 0x5, 0x0, 0x0, @ipv4=@empty=0x5000000}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="7235ab62"]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r4) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000940)=ANY=[@ANYBLOB="34010100", @ANYRES16=r5, @ANYBLOB="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"], 0x134}, 0x1, 0x0, 0x0, 0x84000}, 0x4040044) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r3) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000340)={'vxcan0\x00'}) r6 = socket(0x400000000010, 0x3, 0x0) getdents64(r2, &(0x7f0000000840)=""/243, 0xf3) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000380)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_fuse_handle_req(r7, &(0x7f0000009b40)="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", 0x2000, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0x0, 0x1ff, {0x7, 0x29, 0x1, 0x24ff871999e0dde7, 0xdcf, 0x4005, 0xb, 0x800, 0x0, 0x0, 0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r7, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0x1, {0x8, 0x0, 0x0, {0x5, 0x0, 0x5, 0x80000001, 0x0, 0x1, 0x9e9, 0x0, 0xb877, 0x8000, 0x7893b06e, 0xffffffffffffffff, 0xee01, 0x3d, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000080)='./file0\x00', 0x0) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x3, 0x300) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffffc, 0x80000000, 0x0, 0x6, 0x3}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}}, 0x4000000) socket(0x2a, 0x2, 0x0) 8m42.098900571s ago: executing program 0 (id=420): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x4000000) r1 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) process_vm_writev(r1, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @remote}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, 0x1546, 0x800, 0x4, 0x500, 0x9, 0x80180}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e21, @multicast2}}}, &(0x7f0000000000)=0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000240)={r3, 0x7f}, &(0x7f0000000280)=0x8) syz_clone(0x10211, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d9, @local, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x0) 8m42.033054632s ago: executing program 5 (id=421): syz_open_dev$dri(&(0x7f0000000480), 0xf2ef, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000140)="37f15531e2175146930db46b439c4df34001725c5d203bb0348d063cc30ac019dba5f7409daa21dcc41bbdd30495b36c8ab002007a53e0cd811a56783dad452aab329dbab4f4425de91ccc992ec09c83b27df0", 0x53, 0x1, &(0x7f00000001c0)={0xa, 0x4e22, 0x7b28, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0, @in=@broadcast, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x40000000}, 0x4008000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) 8m41.841809912s ago: executing program 5 (id=422): syz_80211_inject_frame(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="80000000ffffffffffff080211000000080211"], 0x32) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x30, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) 8m41.608839258s ago: executing program 4 (id=423): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000780)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\nh<\x99\xaa\xe1\xf3\xb8Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev<\x97\x1a2_\x82\xfa\x15h$\x01\xdd\xe5\xceC\x19\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xb2\xf5\x1e5.\xc1\xa1\x05\x92\x82d\x0e\xf5PMjIt\xc5u~Tw\xbeNg\xb5\xeeP\x9c\xce\xfaS\xa7\xec0\xf4\xd2\xc2+@\x12=\xaa\b\xd2&\x19k6\xc7\xa6+\x04V\xc3\xe1\xd3\fZZ\x1cJo\xa5(& \r\xf1\xa4\xb8\xc23\x16\xc3\xaejA/', 0x0) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x40, 0x1000, 0x0, 0x20, 0x7ffffcff, {0x0, 0x9416}, {0x350, 0xffffff7d}, {0xf4ef}, {}, 0x1, 0x100, 0x0, 0xd614, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x4, 0x0, 0x8, 0x4, 0x0, 0xb}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) ptrace$ARCH_GET_GS(0x1e, 0x0, &(0x7f00000003c0), 0x1004) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFMTU(r7, 0x8923, &(0x7f0000000100)={'vlan0\x00', 0x40}) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r8, r8, 0x0, 0x200000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 8m40.84123473s ago: executing program 5 (id=424): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$setstatus(r0, 0x4, 0x46000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000280)={0x13, 0x1, 0x5}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x17b, 0x0, 0xffffffffffffffff}]}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10) write$cgroup_int(r4, &(0x7f0000000000)=0x2b00, 0x12) syz_usb_connect(0x5, 0x36, &(0x7f0000000f00)=ANY=[@ANYRES32=r0], 0x0) 8m40.840850405s ago: executing program 0 (id=425): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)={0x3c, r2, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "9ef4084451969daa53dfb975d58a09d0"}, @NL80211_ATTR_MAC={0xa}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc040}, 0xc840) (fail_nth: 6) 8m40.709146972s ago: executing program 3 (id=426): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x9, 0x8, 0x0, 0x100003}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_ringparam={0x10, 0x7f, 0x20000a2e, 0x0, 0xe, 0x3, 0x2000000, 0x0, 0x3000000}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000001700)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000016c0)={&(0x7f0000000000)={0x14, 0x2a, 0x19, 0x70bd25, 0x25dfdbff, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4c084) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) close(0xffffffffffffffff) mkdir(&(0x7f00000000c0)='./file0\x00', 0x143) renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000a40)='./file0\x00', 0x2) r7 = inotify_init() inotify_add_watch(r7, &(0x7f0000000080)='./file0\x00', 0x80000006) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'tunl0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x7800, 0x8, 0x3, 0x7, {{0x21, 0x4, 0x3, 0x3e, 0x84, 0x67, 0x0, 0x6, 0x4, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0xf3}, {[@cipso={0x86, 0x25, 0x3, [{0x1, 0x10, "2dda30a8b1e0cbf8701fe98f9b6e"}, {0x0, 0x5, "bf3f70"}, {0x0, 0xa, "6aa7dec1676ce6b7"}]}, @lsrr={0x83, 0xf, 0x49, [@empty, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x3c}]}, @noop, @timestamp_addr={0x44, 0x1c, 0x1f, 0x1, 0x9, [{@empty, 0x76}, {@multicast2, 0x9}, {@loopback, 0x13}]}, @rr={0x7, 0xf, 0xd5, [@broadcast, @multicast1, @loopback]}, @cipso={0x86, 0x9, 0x2, [{0x2, 0x3, "ca"}]}, @rr={0x7, 0x7, 0x1b, [@rand_addr=0x64010101]}]}}}}}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0500000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a3000000000140000001100010000000000000000000000000a"], 0x74}}, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 8m40.704425706s ago: executing program 2 (id=427): mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x0) syz_open_dev$usbfs(0x0, 0x77, 0x101301) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x1}, 0x18) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r4, 0x84, 0x16, 0x0, 0x20c2c23dcb08f25e) connect$unix(r2, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = syz_io_uring_setup(0x497, &(0x7f0000002c80)={0x0, 0xe3d3, 0x8, 0x800005, 0x1f0}, &(0x7f0000000440)=0x0, &(0x7f0000002d00)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002e40)="f8f5", 0x2}], 0x1}, 0x0, 0x24000890, 0x1}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="abffff5b3c89774fbbfb6ec15f98ff0101010800000000000000000a000002"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) io_uring_enter(r6, 0x3516, 0x0, 0x41, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000080)=0x1, 0x4) r9 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil) bind$can_j1939(r9, &(0x7f0000000340)={0x1d, r10, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r9, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405ecffffff00006110a400020000001f01000000dd00109500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 7m33.250187717s ago: executing program 33 (id=425): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)={0x3c, r2, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "9ef4084451969daa53dfb975d58a09d0"}, @NL80211_ATTR_MAC={0xa}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc040}, 0xc840) (fail_nth: 6) 7m16.321199574s ago: executing program 34 (id=424): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$setstatus(r0, 0x4, 0x46000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000280)={0x13, 0x1, 0x5}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x17b, 0x0, 0xffffffffffffffff}]}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10) write$cgroup_int(r4, &(0x7f0000000000)=0x2b00, 0x12) syz_usb_connect(0x5, 0x36, &(0x7f0000000f00)=ANY=[@ANYRES32=r0], 0x0) 7m16.058730752s ago: executing program 35 (id=427): mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x0) syz_open_dev$usbfs(0x0, 0x77, 0x101301) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x1}, 0x18) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0xa, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r4, 0x84, 0x16, 0x0, 0x20c2c23dcb08f25e) connect$unix(r2, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = syz_io_uring_setup(0x497, &(0x7f0000002c80)={0x0, 0xe3d3, 0x8, 0x800005, 0x1f0}, &(0x7f0000000440)=0x0, &(0x7f0000002d00)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002e40)="f8f5", 0x2}], 0x1}, 0x0, 0x24000890, 0x1}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="abffff5b3c89774fbbfb6ec15f98ff0101010800000000000000000a000002"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) io_uring_enter(r6, 0x3516, 0x0, 0x41, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000080)=0x1, 0x4) r9 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil) bind$can_j1939(r9, &(0x7f0000000340)={0x1d, r10, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r9, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405ecffffff00006110a400020000001f01000000dd00109500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 7m15.808901545s ago: executing program 36 (id=426): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x9, 0x8, 0x0, 0x100003}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_ringparam={0x10, 0x7f, 0x20000a2e, 0x0, 0xe, 0x3, 0x2000000, 0x0, 0x3000000}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000001700)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000016c0)={&(0x7f0000000000)={0x14, 0x2a, 0x19, 0x70bd25, 0x25dfdbff, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4c084) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) close(0xffffffffffffffff) mkdir(&(0x7f00000000c0)='./file0\x00', 0x143) renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000a40)='./file0\x00', 0x2) r7 = inotify_init() inotify_add_watch(r7, &(0x7f0000000080)='./file0\x00', 0x80000006) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'tunl0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x7800, 0x8, 0x3, 0x7, {{0x21, 0x4, 0x3, 0x3e, 0x84, 0x67, 0x0, 0x6, 0x4, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0xf3}, {[@cipso={0x86, 0x25, 0x3, [{0x1, 0x10, "2dda30a8b1e0cbf8701fe98f9b6e"}, {0x0, 0x5, "bf3f70"}, {0x0, 0xa, "6aa7dec1676ce6b7"}]}, @lsrr={0x83, 0xf, 0x49, [@empty, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x3c}]}, @noop, @timestamp_addr={0x44, 0x1c, 0x1f, 0x1, 0x9, [{@empty, 0x76}, {@multicast2, 0x9}, {@loopback, 0x13}]}, @rr={0x7, 0xf, 0xd5, [@broadcast, @multicast1, @loopback]}, @cipso={0x86, 0x9, 0x2, [{0x2, 0x3, "ca"}]}, @rr={0x7, 0x7, 0x1b, [@rand_addr=0x64010101]}]}}}}}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0500000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a3000000000140000001100010000000000000000000000000a"], 0x74}}, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 7m15.487561543s ago: executing program 37 (id=423): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000780)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\nh<\x99\xaa\xe1\xf3\xb8Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev<\x97\x1a2_\x82\xfa\x15h$\x01\xdd\xe5\xceC\x19\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xb2\xf5\x1e5.\xc1\xa1\x05\x92\x82d\x0e\xf5PMjIt\xc5u~Tw\xbeNg\xb5\xeeP\x9c\xce\xfaS\xa7\xec0\xf4\xd2\xc2+@\x12=\xaa\b\xd2&\x19k6\xc7\xa6+\x04V\xc3\xe1\xd3\fZZ\x1cJo\xa5(& \r\xf1\xa4\xb8\xc23\x16\xc3\xaejA/', 0x0) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x40, 0x1000, 0x0, 0x20, 0x7ffffcff, {0x0, 0x9416}, {0x350, 0xffffff7d}, {0xf4ef}, {}, 0x1, 0x100, 0x0, 0xd614, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x4, 0x0, 0x8, 0x4, 0x0, 0xb}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) ptrace$ARCH_GET_GS(0x1e, 0x0, &(0x7f00000003c0), 0x1004) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFMTU(r7, 0x8923, &(0x7f0000000100)={'vlan0\x00', 0x40}) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r8, r8, 0x0, 0x200000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 12.19123619s ago: executing program 1 (id=2013): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x4000, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setitimer(0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) 11.932058882s ago: executing program 1 (id=2017): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) munlockall() 11.293558792s ago: executing program 1 (id=2025): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xe0000000, 0x564b043a, 0x83, 0xffff, 0x5, 0x2, 0x0, 0x0, 0x80, 0x80000001}}, 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x83, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd, 0x3}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20000000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x34) syz_fuse_handle_req(r0, &(0x7f0000008340)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0xfffffffffffffffe, 0xa91e, {0x0, 0x18}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 11.003122226s ago: executing program 1 (id=2028): iopl(0x3) keyctl$reject(0x13, 0x0, 0xd, 0x0, 0x0) 10.905043613s ago: executing program 1 (id=2029): socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000a00)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @void, {@mpls_mc={0x8848, {[], @ipv6=@icmpv6={0x0, 0x6, "876121", 0x8, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0, {[], @mlv2_report={0x8f, 0x0, 0x0, 0x400}}}}}}}, 0x0) 10.726622067s ago: executing program 1 (id=2031): syz_emit_ethernet(0x0, 0x0, 0x0) move_pages(0x0, 0x20000000000000fe, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) set_mempolicy_home_node(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) 3.083430072s ago: executing program 7 (id=2110): r0 = socket$inet6(0x10, 0x2, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x6}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000002800)="25eed0aee8c79f49b53c108367401019c41e5636c729010716ddf42df6a5ca47adc0f14939ee362a401f6425b5933ed45ac2e408b833e87ea4fa53cb6f37fa25746f5878a3d525962f72cff39e3fd9074e3261c84fdfced1c00ba3c8cfcd6220a22b568b9ea6b40e66394ae3490b19d046c22e484b0aa11954836b45d4047ab5007b7b", 0xfffffffffffffeec, 0x48899, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 2.932533025s ago: executing program 7 (id=2112): writev(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x1612, &(0x7f0000000200)={0x0, 0x0, 0x800}) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0x6, 0x8, 0x8, 0x7}]}, 0x10) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @loopback, 0x23}, 0x1c) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0xe1}, 0x8) sendmsg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)="24f51c507f7b003add761394719e1b087cb129c27f58ac9833692636dd46e23690bbb0f2ba181e7e349bcdc8a322bff8ebdd7e2b9fe7e94fa06273cf506840ca53a8ecab45cf9033a4095b729cca0645f69eda5829fb7676c566df75d19bb5de18f3b86208a5fe456fa45127c3bde17ca86d9753ed785240fae50aeacf68f32b238e4826b08d71b90391bc70f406e7557a7e5ea0f93e957cb05b7c10e4d8df095fd0eea689f01ff25080197077ca87d578d5", 0xb2}, {0x0}], 0x2}, 0x4000811) close_range(r0, 0xffffffffffffffff, 0x0) 2.05646888s ago: executing program 9 (id=2123): socket$inet_sctp(0x2, 0x1, 0x84) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000300)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(0x0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x1, r0, 0x0}]) 1.902582186s ago: executing program 9 (id=2125): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x75}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x34}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.901291648s ago: executing program 7 (id=2126): r0 = userfaultfd(0x1) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r2 = dup(r1) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106, 0x8}}, 0x20) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000180)={0x4, 0xffffff95, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0xfd87) close_range(r0, 0xffffffffffffffff, 0x0) 1.78008152s ago: executing program 9 (id=2128): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000000) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10000) splice(r1, 0x0, r2, 0x0, 0x200006, 0x0) 1.399727696s ago: executing program 6 (id=2134): socket$inet(0x2, 0x2, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000), 0x4) sendto$inet6(r0, 0x0, 0x0, 0x4008044, &(0x7f0000000300)={0xa, 0x4e20, 0x4, @loopback, 0x401}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, 0x0, 0x0) 1.332211994s ago: executing program 8 (id=2135): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@bridge_newneigh={0x34, 0x1c, 0x401, 0x72bd28, 0x25dfdc00, {0x7, 0x0, 0x0, r1, 0x2, 0xe4, 0x9}, [@NDA_LLADDR={0xa, 0x2, @multicast}, @NDA_FDB_EXT_ATTRS={0xc, 0xe, 0x0, 0x1, [@NFEA_ACTIVITY_NOTIFY={0x5}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x24000040) 1.249121611s ago: executing program 6 (id=2136): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@datasec={0x1, 0x0, 0x0, 0xf, 0x3, [], "e4ff00"}, @datasec={0x10, 0x1, 0x0, 0xf, 0x1, [{0x3, 0xa463, 0x5}], "b5"}]}, {0x0, [0x5f]}}, 0x0, 0x43, 0x0, 0x1, 0x5}, 0x28) 1.230066868s ago: executing program 9 (id=2137): unshare(0x22020600) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x80) fcntl$setownex(r1, 0xf, 0x0) 1.215811178s ago: executing program 8 (id=2138): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001400)=ANY=[@ANYBLOB="14000000520001f6"], 0x14}, 0x1, 0x0, 0x0, 0x404c000}, 0x40) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) 1.178607694s ago: executing program 6 (id=2139): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) ppoll(&(0x7f0000000240)=[{r0, 0x6}], 0x1, &(0x7f00000003c0)={0x77359400}, 0x0, 0x0) 1.07686906s ago: executing program 8 (id=2140): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newtaction={0x68, 0x30, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x7fc0, 0x7, 0xa, 0x7}, 0x1, r2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 1.076665794s ago: executing program 9 (id=2141): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) 1.014702718s ago: executing program 8 (id=2142): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd, 0xd, 0x2, [@datasec={0x1, 0x0, 0x0, 0xf, 0x1, [], "e4"}]}}, 0x0, 0x2a, 0x0, 0x1, 0x5}, 0x28) 964.498767ms ago: executing program 8 (id=2143): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) listen(r2, 0x5) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) close_range(r2, 0xffffffffffffffff, 0x0) 917.302061ms ago: executing program 7 (id=2144): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001200970228bd7000000000000700", @ANYRES32=0x0, @ANYBLOB="000004"], 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 781.176036ms ago: executing program 7 (id=2145): unshare(0x22020600) r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x4) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000100)=r1, 0x4) 721.795144ms ago: executing program 7 (id=2146): bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000240), 0xa7c}, 0x38) r0 = socket(0x28, 0x3, 0xb0) connect$vsock_stream(r0, &(0x7f0000000000), 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a0000000212a277", 0x8) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000340)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa08004510f86fe6a36b79efba82d7c8e1f797052e003e00660000070290780a010102ac1414aa11ff907800000000"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00'}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000002c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x401, 0x0, 0x0, 0xd, 0x4, 0x5df6}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_io_uring_setup(0x4175, &(0x7f0000000180)={0x0, 0xbf51, 0x10000, 0x4002, 0x2031f}, &(0x7f00000000c0), 0x0) unshare(0x22020400) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2000c8c0) 277.589483ms ago: executing program 6 (id=2147): socket$packet(0x11, 0x2, 0x300) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000100)={0x1, 0x1, 0xb, 0xd, 0x59, 0x0}) 116.879139ms ago: executing program 9 (id=2148): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={0xffffffffffffffff, &(0x7f00000001c0), 0x0}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_uring_setup(0x7269, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, 0x0, 0x8000) syz_open_procfs(0xffffffffffffffff, 0x0) 116.656756ms ago: executing program 6 (id=2149): r0 = socket$inet_tcp(0x2, 0x1, 0x0) syncfs(r0) 40.539779ms ago: executing program 6 (id=2150): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8004) fcntl$setstatus(r1, 0x4, 0x42c00) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 0s ago: executing program 8 (id=2151): unshare(0x60400) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x181}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, 0x0) kernel console output (not intermixed with test programs): 5 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11764 comm="syz.7.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb5b1b8f749 code=0x7ffc0000 [ 572.920551][T11800] loop4: detected capacity change from 0 to 2560 [ 572.960334][T10679] buffer_io_error: 312 callbacks suppressed [ 572.960348][T10679] Buffer I/O error on dev loop4, logical block 0, async page read [ 572.977534][T10679] Buffer I/O error on dev loop4, logical block 0, async page read [ 572.986824][T10679] Buffer I/O error on dev loop4, logical block 0, async page read [ 573.007524][T10679] Buffer I/O error on dev loop4, logical block 0, async page read [ 573.078390][T10679] Buffer I/O error on dev loop4, logical block 0, async page read [ 573.903313][T11817] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1331'. [ 574.780711][T11824] FAULT_INJECTION: forcing a failure. [ 574.780711][T11824] name failslab, interval 1, probability 0, space 0, times 0 [ 574.809551][T11824] CPU: 0 UID: 0 PID: 11824 Comm: syz.1.1334 Not tainted syzkaller #0 PREEMPT(full) [ 574.809568][T11824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 574.809575][T11824] Call Trace: [ 574.809580][T11824] [ 574.809586][T11824] dump_stack_lvl+0x189/0x250 [ 574.809605][T11824] ? __pfx____ratelimit+0x10/0x10 [ 574.809617][T11824] ? __pfx_dump_stack_lvl+0x10/0x10 [ 574.809630][T11824] ? __pfx__printk+0x10/0x10 [ 574.809649][T11824] ? __pfx___might_resched+0x10/0x10 [ 574.809660][T11824] ? fs_reclaim_acquire+0x7d/0x100 [ 574.809674][T11824] should_fail_ex+0x414/0x560 [ 574.809690][T11824] should_failslab+0xa8/0x100 [ 574.809703][T11824] __kmalloc_noprof+0xcb/0x7f0 [ 574.809712][T11824] ? cfg80211_connect+0x105c/0x21a0 [ 574.809725][T11824] ? cfg80211_connect+0xd43/0x21a0 [ 574.809739][T11824] cfg80211_connect+0x105c/0x21a0 [ 574.809765][T11824] nl80211_connect+0x17bc/0x1cd0 [ 574.809781][T11824] ? rcu_is_watching+0x15/0xb0 [ 574.809795][T11824] ? __pfx_nl80211_connect+0x10/0x10 [ 574.809805][T11824] ? __mutex_lock+0x335/0x1350 [ 574.809840][T11824] ? nl80211_pre_doit+0x4f1/0x930 [ 574.809853][T11824] genl_family_rcv_msg_doit+0x215/0x300 [ 574.809869][T11824] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 574.809886][T11824] ? bpf_lsm_capable+0x9/0x20 [ 574.809899][T11824] ? security_capable+0x7e/0x2e0 [ 574.809914][T11824] genl_rcv_msg+0x60e/0x790 [ 574.809928][T11824] ? __pfx_genl_rcv_msg+0x10/0x10 [ 574.809937][T11824] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 574.809945][T11824] ? __pfx_nl80211_connect+0x10/0x10 [ 574.809955][T11824] ? __pfx_nl80211_post_doit+0x10/0x10 [ 574.809965][T11824] ? __asan_memcpy+0x40/0x70 [ 574.809978][T11824] ? __pfx_ref_tracker_free+0x10/0x10 [ 574.809994][T11824] netlink_rcv_skb+0x208/0x470 [ 574.810006][T11824] ? __lock_acquire+0xab9/0xd20 [ 574.810018][T11824] ? __pfx_genl_rcv_msg+0x10/0x10 [ 574.810028][T11824] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 574.810051][T11824] ? down_read+0x1ad/0x2e0 [ 574.810065][T11824] genl_rcv+0x28/0x40 [ 574.810074][T11824] netlink_unicast+0x82f/0x9e0 [ 574.810090][T11824] ? __pfx_netlink_unicast+0x10/0x10 [ 574.810102][T11824] ? netlink_sendmsg+0x642/0xb30 [ 574.810114][T11824] ? skb_put+0x11b/0x210 [ 574.810128][T11824] netlink_sendmsg+0x805/0xb30 [ 574.810146][T11824] ? __pfx_netlink_sendmsg+0x10/0x10 [ 574.810160][T11824] ? aa_sock_msg_perm+0xf1/0x1d0 [ 574.810172][T11824] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 574.810183][T11824] ? __pfx_netlink_sendmsg+0x10/0x10 [ 574.810195][T11824] __sock_sendmsg+0x21c/0x270 [ 574.810208][T11824] ____sys_sendmsg+0x505/0x830 [ 574.810224][T11824] ? __pfx_____sys_sendmsg+0x10/0x10 [ 574.810242][T11824] ? import_iovec+0x74/0xa0 [ 574.810254][T11824] ___sys_sendmsg+0x21f/0x2a0 [ 574.810268][T11824] ? __pfx____sys_sendmsg+0x10/0x10 [ 574.810300][T11824] ? __fget_files+0x2a/0x420 [ 574.810310][T11824] ? __fget_files+0x3a0/0x420 [ 574.810326][T11824] __x64_sys_sendmsg+0x19b/0x260 [ 574.810340][T11824] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 574.810358][T11824] ? __pfx_ksys_write+0x10/0x10 [ 574.810370][T11824] ? do_syscall_64+0xbe/0xfa0 [ 574.810384][T11824] do_syscall_64+0xfa/0xfa0 [ 574.810394][T11824] ? lockdep_hardirqs_on+0x9c/0x150 [ 574.810406][T11824] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.810415][T11824] ? clear_bhb_loop+0x60/0xb0 [ 574.810428][T11824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.810437][T11824] RIP: 0033:0x7f9c0418f749 [ 574.810447][T11824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 574.810456][T11824] RSP: 002b:00007f9c04fff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 574.810468][T11824] RAX: ffffffffffffffda RBX: 00007f9c043e5fa0 RCX: 00007f9c0418f749 [ 574.810475][T11824] RDX: 0000000004004050 RSI: 00002000000001c0 RDI: 0000000000000003 [ 574.810482][T11824] RBP: 00007f9c04fff090 R08: 0000000000000000 R09: 0000000000000000 [ 574.810488][T11824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 574.810494][T11824] R13: 00007f9c043e6038 R14: 00007f9c043e5fa0 R15: 00007f9c0450fa28 [ 574.810510][T11824] [ 576.367635][T11847] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1341'. [ 577.676979][T11864] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1345'. [ 577.936946][T11871] vim2m vim2m.0: vidioc_s_fmt queue busy [ 578.268447][T11864] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 578.665426][ T5903] usb 9-1: new full-speed USB device number 39 using dummy_hcd [ 579.169667][ T5903] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 579.196227][ T5903] usb 9-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 579.205697][ T5903] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.229310][ T5903] usb 9-1: Product: syz [ 579.238744][ T5903] usb 9-1: Manufacturer: syz [ 579.476721][ T5903] usb 9-1: SerialNumber: syz [ 579.510252][ T5903] usb 9-1: config 0 descriptor?? [ 579.582594][ T5903] usb 9-1: ucan: probing device on interface #0 [ 579.830444][ T5903] usb 9-1: ucan: invalid EP count (0) [ 579.885450][ T5158] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 579.968461][T11870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 579.985876][ T5903] usb 9-1: ucan: probe failed; try to update the device firmware [ 580.013511][T11870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 580.033874][T11885] netlink: 179596 bytes leftover after parsing attributes in process `syz.1.1350'. [ 580.217841][T11615] usb 9-1: USB disconnect, device number 39 [ 580.270180][ T5158] usb 10-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 580.284181][ T5158] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 580.311124][ T5158] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 580.368228][ T5158] usb 10-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 580.470324][ T5158] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 580.531480][ T5158] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.593601][ T5158] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 580.743086][ T5158] usb 10-1: invalid MIDI out EP 0 [ 581.021386][ T5158] snd-usb-audio 10-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 581.411012][T11902] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1356'. [ 581.586529][T11615] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 581.838842][T11615] usb 7-1: Using ep0 maxpacket: 8 [ 581.848294][T11615] usb 7-1: unable to get BOS descriptor or descriptor too short [ 581.858320][T11615] usb 7-1: config 8 interface 0 altsetting 7 endpoint 0x83 has invalid maxpacket 2560, setting to 1024 [ 581.873691][T11615] usb 7-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 1024 [ 581.892349][T11615] usb 7-1: config 8 interface 0 has no altsetting 0 [ 581.928606][T11615] usb 7-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 581.940305][T11615] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.961754][T11615] usb 7-1: Product: syz [ 581.974860][T11615] usb 7-1: Manufacturer: syz [ 581.984423][T11615] usb 7-1: SerialNumber: syz [ 582.257759][T11615] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 582.298062][T11615] usb 7-1: selecting invalid altsetting 0 [ 582.505890][T11615] usb 7-1: USB disconnect, device number 37 [ 582.512590][T11914] pim6reg1: entered promiscuous mode [ 582.549989][T11914] pim6reg1: entered allmulticast mode [ 583.589545][ T5903] usb 10-1: USB disconnect, device number 36 [ 583.630498][T11934] FAULT_INJECTION: forcing a failure. [ 583.630498][T11934] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 583.675533][T11934] CPU: 0 UID: 0 PID: 11934 Comm: syz.9.1366 Not tainted syzkaller #0 PREEMPT(full) [ 583.675560][T11934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 583.675571][T11934] Call Trace: [ 583.675579][T11934] [ 583.675587][T11934] dump_stack_lvl+0x189/0x250 [ 583.675614][T11934] ? __pfx____ratelimit+0x10/0x10 [ 583.675632][T11934] ? __pfx_dump_stack_lvl+0x10/0x10 [ 583.675654][T11934] ? __pfx__printk+0x10/0x10 [ 583.675673][T11934] ? __might_fault+0xb0/0x130 [ 583.675700][T11934] should_fail_ex+0x414/0x560 [ 583.675725][T11934] _copy_from_user+0x2d/0xb0 [ 583.675742][T11934] kstrtouint_from_user+0xc4/0x170 [ 583.675766][T11934] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 583.675801][T11934] proc_fail_nth_write+0x88/0x200 [ 583.675825][T11934] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 583.675854][T11934] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 583.675880][T11934] vfs_write+0x27e/0xb30 [ 583.675905][T11934] ? __pfx_vfs_write+0x10/0x10 [ 583.675924][T11934] ? __fget_files+0x2a/0x420 [ 583.675947][T11934] ? __fget_files+0x3a0/0x420 [ 583.675976][T11934] ? __fget_files+0x2a/0x420 [ 583.676003][T11934] ksys_write+0x145/0x250 [ 583.676023][T11934] ? __pfx_ksys_write+0x10/0x10 [ 583.676044][T11934] ? do_syscall_64+0xbe/0xfa0 [ 583.676068][T11934] do_syscall_64+0xfa/0xfa0 [ 583.676088][T11934] ? lockdep_hardirqs_on+0x9c/0x150 [ 583.676108][T11934] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.676125][T11934] ? clear_bhb_loop+0x60/0xb0 [ 583.676151][T11934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.676168][T11934] RIP: 0033:0x7f64ae58e1ff [ 583.676184][T11934] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 583.676197][T11934] RSP: 002b:00007f64af345030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 583.676215][T11934] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f64ae58e1ff [ 583.676228][T11934] RDX: 0000000000000001 RSI: 00007f64af3450a0 RDI: 0000000000000005 [ 583.676240][T11934] RBP: 00007f64af345090 R08: 0000000000000000 R09: 0000000000000000 [ 583.676251][T11934] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 583.676262][T11934] R13: 00007f64ae7e6038 R14: 00007f64ae7e5fa0 R15: 00007f64ae90fa28 [ 583.676292][T11934] [ 583.909813][ C0] vkms_vblank_simulate: vblank timer overrun [ 584.128072][T11943] netlink: 179596 bytes leftover after parsing attributes in process `syz.1.1367'. [ 584.880372][ T5158] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 585.165407][ T5158] usb 10-1: Using ep0 maxpacket: 8 [ 585.177738][ T5158] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 585.227872][ T5158] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 585.259306][ T5158] usb 10-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00 [ 585.290971][ T5158] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.315031][T11947] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1371'. [ 585.326431][ T5158] usb 10-1: config 0 descriptor?? [ 585.655816][T11615] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 585.801110][ T5158] elecom 0003:056E:00FB.000A: unknown main item tag 0x0 [ 585.820134][T11615] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 585.831697][T11615] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 585.857371][T11615] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 585.885516][ T5158] elecom 0003:056E:00FB.000A: unknown main item tag 0x0 [ 585.895896][ T5158] elecom 0003:056E:00FB.000A: unknown main item tag 0x0 [ 585.902946][T11615] usb 7-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 585.928349][T11615] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 585.942562][T11615] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.943270][ T5158] elecom 0003:056E:00FB.000A: unknown main item tag 0x0 [ 586.024304][ T5158] elecom 0003:056E:00FB.000A: unknown main item tag 0x0 [ 586.125254][T11615] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 586.137695][T11615] usb 7-1: invalid MIDI out EP 0 [ 586.174847][ T5158] elecom 0003:056E:00FB.000A: hidraw0: USB HID v38.04 Device [HID 056e:00fb] on usb-dummy_hcd.9-1/input0 [ 586.330020][ T5158] usb 10-1: USB disconnect, device number 37 [ 586.342674][T11615] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 586.493404][T10679] udevd[10679]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 586.775693][T11615] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 586.990926][T11615] usb 2-1: not running at top speed; connect to a high speed hub [ 587.027719][T11615] usb 2-1: config 1 interface 0 has no altsetting 0 [ 587.069176][T12000] netlink: 179596 bytes leftover after parsing attributes in process `syz.8.1385'. [ 587.243437][T11615] usb 2-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 587.258833][T11615] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.268912][T11615] usb 2-1: Product: syz [ 587.328762][T11615] usb 2-1: Manufacturer: syz [ 587.334882][T11615] usb 2-1: SerialNumber: syz [ 587.808268][T11987] netlink: 612 bytes leftover after parsing attributes in process `syz.1.1383'. [ 587.910500][T12008] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1383'. [ 588.066544][T11615] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input59 [ 588.082640][ T5182] bcm5974 2-1:1.0: could not read from device [ 588.095240][ T5182] bcm5974 2-1:1.0: could not read from device [ 588.114189][T11615] usb 2-1: USB disconnect, device number 51 [ 588.186763][ T5182] bcm5974 2-1:1.0: could not read from device [ 588.265019][ T7899] udevd[7899]: setting mode of /dev/input/event4 to 020660 failed: No such file or directory [ 588.301898][ T7899] udevd[7899]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 588.522025][T12010] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1389'. [ 588.826042][T11615] usb 7-1: USB disconnect, device number 38 [ 589.116883][T12028] loop4: detected capacity change from 0 to 2560 [ 589.179228][T10679] Buffer I/O error on dev loop4, logical block 0, async page read [ 589.235767][T11615] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 589.307964][T12028] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 589.330838][T12028] Buffer I/O error on dev loop4, logical block 1, lost async page write [ 589.347412][T12028] Buffer I/O error on dev loop4, logical block 2, lost async page write [ 589.364451][T12028] Buffer I/O error on dev loop4, logical block 3, lost async page write [ 589.408926][T12028] Buffer I/O error on dev loop4, logical block 4, lost async page write [ 589.419867][T11615] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 589.435791][T12028] Buffer I/O error on dev loop4, logical block 5, lost async page write [ 589.454256][T11615] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 589.463504][T11615] usb 7-1: config 1 has no interface number 0 [ 589.472400][T11615] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 589.484086][T11615] usb 7-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 589.500999][T11615] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 589.512822][T11615] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.527311][T12035] tipc: Started in network mode [ 589.535872][T11615] usb 7-1: Product: syz [ 589.540102][T12035] tipc: Node identity 4, cluster identity 4711 [ 589.547419][T12028] Buffer I/O error on dev loop4, logical block 6, lost async page write [ 589.547519][T11615] usb 7-1: Manufacturer: syz [ 589.563650][T12035] tipc: Node number set to 4 [ 589.571762][T12028] Buffer I/O error on dev loop4, logical block 7, lost async page write [ 589.582843][T12028] Buffer I/O error on dev loop4, logical block 8, lost async page write [ 589.592435][T11615] usb 7-1: SerialNumber: syz [ 589.633541][T11615] usb 7-1: selecting invalid altsetting 1 [ 589.842893][T11615] cdc_ncm 7-1:1.1: bind() failure [ 589.865954][T11615] usb 7-1: USB disconnect, device number 39 [ 590.243866][T12046] tipc: Enabled bearer , priority 0 [ 590.419793][T12044] tipc: Disabling bearer [ 590.715842][ T5903] usb 9-1: new full-speed USB device number 40 using dummy_hcd [ 590.851836][T12058] ipt_ECN: cannot use operation on non-tcp rule [ 590.957278][ T5903] usb 9-1: not running at top speed; connect to a high speed hub [ 591.021089][ T5903] usb 9-1: config 1 interface 0 has no altsetting 0 [ 591.051593][ T5903] usb 9-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 591.108457][ T5903] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.121618][ T5903] usb 9-1: Product: syz [ 591.126155][ T5903] usb 9-1: Manufacturer: syz [ 591.132662][ T5903] usb 9-1: SerialNumber: syz [ 591.346632][T12048] netlink: 612 bytes leftover after parsing attributes in process `syz.8.1401'. [ 591.373491][T12048] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1401'. [ 591.443935][ T5903] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/input/input61 [ 591.494959][ T5182] bcm5974 9-1:1.0: could not read from device [ 591.600873][ T5158] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 591.691170][ T5903] usb 9-1: USB disconnect, device number 40 [ 591.782701][ T5158] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 591.811788][ T5158] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 591.843495][ T5158] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 591.875764][ T5158] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 591.905462][ T5158] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 591.925487][ T5158] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.951032][ T5158] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 591.977497][ T5158] usb 2-1: invalid MIDI out EP 0 [ 592.245280][ T5158] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 592.478388][T12077] ip6gretap0: entered promiscuous mode [ 592.499702][T12077] macsec1: entered promiscuous mode [ 592.557104][T12077] ip6gretap0: left promiscuous mode [ 592.574945][T12079] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1409'. [ 592.615570][T12079] netlink: 'syz.7.1409': attribute type 18 has an invalid length. [ 592.732606][T12079] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1409'. [ 592.896653][T12087] loop4: detected capacity change from 0 to 2560 [ 593.256383][T12096] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1413'. [ 593.442825][T12102] netlink: 'syz.6.1417': attribute type 4 has an invalid length. [ 593.451802][T12102] FAULT_INJECTION: forcing a failure. [ 593.451802][T12102] name failslab, interval 1, probability 0, space 0, times 0 [ 593.474243][ T5158] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 593.489932][T12102] CPU: 0 UID: 0 PID: 12102 Comm: syz.6.1417 Not tainted syzkaller #0 PREEMPT(full) [ 593.489957][T12102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 593.489968][T12102] Call Trace: [ 593.489975][T12102] [ 593.489983][T12102] dump_stack_lvl+0x189/0x250 [ 593.490010][T12102] ? __pfx____ratelimit+0x10/0x10 [ 593.490031][T12102] ? __pfx_dump_stack_lvl+0x10/0x10 [ 593.490052][T12102] ? __pfx__printk+0x10/0x10 [ 593.490067][T12102] ? __lock_acquire+0xab9/0xd20 [ 593.490100][T12102] should_fail_ex+0x414/0x560 [ 593.490123][T12102] should_failslab+0xa8/0x100 [ 593.490144][T12102] __kmalloc_cache_noprof+0x6f/0x6f0 [ 593.490161][T12102] ? nsim_fib_event_nb+0x187/0x1080 [ 593.490179][T12102] ? __lock_acquire+0xab9/0xd20 [ 593.490200][T12102] nsim_fib_event_nb+0x187/0x1080 [ 593.490229][T12102] notifier_call_chain+0x1b6/0x3e0 [ 593.490260][T12102] ? atomic_notifier_call_chain+0x26/0x180 [ 593.490284][T12102] atomic_notifier_call_chain+0xda/0x180 [ 593.490307][T12102] call_fib_notifiers+0x31/0x60 [ 593.490332][T12102] fib_table_delete+0xc65/0xf80 [ 593.490376][T12102] ? __pfx_fib_table_delete+0x10/0x10 [ 593.490402][T12102] ? l3mdev_fib_table+0x18/0x160 [ 593.490424][T12102] ? fib_new_table+0x10a/0x2d0 [ 593.490446][T12102] fib_magic+0x2e4/0x390 [ 593.490466][T12102] ? lockdep_hardirqs_on+0x9c/0x150 [ 593.490490][T12102] ? __pfx_fib_magic+0x10/0x10 [ 593.490536][T12102] fib_del_ifaddr+0x28b/0x1480 [ 593.490556][T12102] ? addr_event+0x83/0x470 [ 593.490579][T12102] ? inetaddr_event+0xe3/0x140 [ 593.490600][T12102] ? blocking_notifier_call_chain+0x54/0x90 [ 593.490626][T12102] fib_inetaddr_event+0xbb/0x190 [ 593.490651][T12102] notifier_call_chain+0x1b6/0x3e0 [ 593.490684][T12102] blocking_notifier_call_chain+0x6a/0x90 [ 593.490710][T12102] __inet_del_ifa+0x87d/0x1040 [ 593.490746][T12102] inetdev_event+0x632/0x15b0 [ 593.490772][T12102] ? __pfx_inetdev_event+0x10/0x10 [ 593.490803][T12102] notifier_call_chain+0x1b6/0x3e0 [ 593.490832][T12102] netif_set_mtu_ext+0x594/0x7d0 [ 593.490862][T12102] ? __pfx_netif_set_mtu_ext+0x10/0x10 [ 593.490884][T12102] ? irqentry_exit+0x74/0x90 [ 593.490904][T12102] ? lockdep_hardirqs_on+0x9c/0x150 [ 593.490943][T12102] do_setlink+0x91a/0x41c0 [ 593.491001][T12102] ? __pfx_do_setlink+0x10/0x10 [ 593.491023][T12102] ? _printk+0xcf/0x120 [ 593.491039][T12102] ? __pfx____ratelimit+0x10/0x10 [ 593.491068][T12102] ? __lock_acquire+0xab9/0xd20 [ 593.491095][T12102] ? __mutex_trylock_common+0x153/0x260 [ 593.491120][T12102] ? __pfx___mutex_trylock_common+0x10/0x10 [ 593.491146][T12102] ? rcu_is_watching+0x15/0xb0 [ 593.491168][T12102] ? trace_contention_end+0x39/0x120 [ 593.491190][T12102] ? __mutex_lock+0x335/0x1350 [ 593.491216][T12102] ? __lock_acquire+0xab9/0xd20 [ 593.491239][T12102] ? rtnl_setlink+0x499/0x890 [ 593.491269][T12102] ? __pfx___mutex_lock+0x10/0x10 [ 593.491306][T12102] ? get_net+0x13d/0x1f0 [ 593.491326][T12102] rtnl_setlink+0x5b2/0x890 [ 593.491353][T12102] ? __pfx_rtnl_setlink+0x10/0x10 [ 593.491380][T12102] ? is_bpf_text_address+0x26/0x2b0 [ 593.491405][T12102] ? __lock_acquire+0xab9/0xd20 [ 593.491507][T12102] ? __pfx_rtnl_setlink+0x10/0x10 [ 593.491528][T12102] rtnetlink_rcv_msg+0x7cf/0xb70 [ 593.491549][T12102] ? __lock_acquire+0xab9/0xd20 [ 593.491569][T12102] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 593.491589][T12102] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 593.491629][T12102] netlink_rcv_skb+0x208/0x470 [ 593.491649][T12102] ? __lock_acquire+0xab9/0xd20 [ 593.491667][T12102] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 593.491691][T12102] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 593.491725][T12102] ? netlink_deliver_tap+0x2e/0x1b0 [ 593.491756][T12102] netlink_unicast+0x82f/0x9e0 [ 593.491786][T12102] ? __pfx_netlink_unicast+0x10/0x10 [ 593.491808][T12102] ? netlink_sendmsg+0x642/0xb30 [ 593.491828][T12102] ? skb_put+0x11b/0x210 [ 593.491853][T12102] netlink_sendmsg+0x805/0xb30 [ 593.491885][T12102] ? __pfx_netlink_sendmsg+0x10/0x10 [ 593.491912][T12102] ? aa_sock_msg_perm+0xf1/0x1d0 [ 593.491933][T12102] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 593.491952][T12102] ? __pfx_netlink_sendmsg+0x10/0x10 [ 593.491974][T12102] __sock_sendmsg+0x21c/0x270 [ 593.491995][T12102] sock_write_iter+0x279/0x360 [ 593.492014][T12102] ? __pfx_sock_write_iter+0x10/0x10 [ 593.492053][T12102] do_iter_readv_writev+0x623/0x8c0 [ 593.492077][T12102] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 593.492093][T12102] ? common_file_perm+0x1b5/0x230 [ 593.492116][T12102] ? bpf_lsm_file_permission+0x9/0x20 [ 593.492137][T12102] ? security_file_permission+0x75/0x290 [ 593.492163][T12102] ? rw_verify_area+0x255/0x4d0 [ 593.492192][T12102] vfs_writev+0x31a/0x960 [ 593.492218][T12102] ? __lock_acquire+0xab9/0xd20 [ 593.492238][T12102] ? __pfx_vfs_writev+0x10/0x10 [ 593.492280][T12102] ? __fget_files+0x2a/0x420 [ 593.492304][T12102] ? __fget_files+0x3a0/0x420 [ 593.492322][T12102] ? __fget_files+0x2a/0x420 [ 593.492350][T12102] do_writev+0x14d/0x2d0 [ 593.492374][T12102] ? __pfx_do_writev+0x10/0x10 [ 593.492399][T12102] ? do_syscall_64+0xbe/0xfa0 [ 593.492424][T12102] do_syscall_64+0xfa/0xfa0 [ 593.492442][T12102] ? lockdep_hardirqs_on+0x9c/0x150 [ 593.492463][T12102] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.492481][T12102] ? clear_bhb_loop+0x60/0xb0 [ 593.492504][T12102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.492521][T12102] RIP: 0033:0x7f312b58f749 [ 593.492537][T12102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 593.492553][T12102] RSP: 002b:00007f312c449038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 593.492573][T12102] RAX: ffffffffffffffda RBX: 00007f312b7e5fa0 RCX: 00007f312b58f749 [ 593.492586][T12102] RDX: 0000000000000001 RSI: 00002000000003c0 RDI: 0000000000000003 [ 593.492598][T12102] RBP: 00007f312c449090 R08: 0000000000000000 R09: 0000000000000000 [ 593.492609][T12102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 593.492620][T12102] R13: 00007f312b7e6038 R14: 00007f312b7e5fa0 R15: 00007f312b90fa28 [ 593.492652][T12102] [ 594.256991][ T5158] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 594.314984][T11617] usb 2-1: USB disconnect, device number 52 [ 594.341493][T12105] netlink: 'syz.7.1418': attribute type 1 has an invalid length. [ 594.431197][ T5158] usb 10-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 594.522555][ T5158] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 594.573023][T12109] FAULT_INJECTION: forcing a failure. [ 594.573023][T12109] name failslab, interval 1, probability 0, space 0, times 0 [ 594.586828][T11613] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 594.603003][T12105] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1418'. [ 594.612503][ T5158] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.638942][T12109] CPU: 1 UID: 0 PID: 12109 Comm: syz.1.1420 Not tainted syzkaller #0 PREEMPT(full) [ 594.638966][T12109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 594.638978][T12109] Call Trace: [ 594.638985][T12109] [ 594.638994][T12109] dump_stack_lvl+0x189/0x250 [ 594.639022][T12109] ? __pfx____ratelimit+0x10/0x10 [ 594.639043][T12109] ? __pfx_dump_stack_lvl+0x10/0x10 [ 594.639066][T12109] ? __pfx__printk+0x10/0x10 [ 594.639082][T12109] ? netlink_sendmsg+0x805/0xb30 [ 594.639105][T12109] ? __x64_sys_sendmsg+0x19b/0x260 [ 594.639127][T12109] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.639154][T12109] should_fail_ex+0x414/0x560 [ 594.639181][T12109] should_failslab+0xa8/0x100 [ 594.639203][T12109] kmem_cache_alloc_noprof+0x74/0x6e0 [ 594.639235][T12109] ? skb_clone+0x212/0x3a0 [ 594.639264][T12109] skb_clone+0x212/0x3a0 [ 594.639291][T12109] __netlink_deliver_tap+0x404/0x850 [ 594.639327][T12109] ? netlink_deliver_tap+0x2e/0x1b0 [ 594.639351][T12109] netlink_deliver_tap+0x19c/0x1b0 [ 594.639375][T12109] netlink_sendskb+0x68/0x140 [ 594.639399][T12109] netlink_unicast+0x397/0x9e0 [ 594.639417][T12109] ? __asan_memcpy+0x40/0x70 [ 594.639449][T12109] ? __pfx_netlink_unicast+0x10/0x10 [ 594.639480][T12109] netlink_rcv_skb+0x28c/0x470 [ 594.639501][T12109] ? __lock_acquire+0xab9/0xd20 [ 594.639521][T12109] ? __pfx_genl_rcv_msg+0x10/0x10 [ 594.639541][T12109] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 594.639583][T12109] ? down_read+0x1ad/0x2e0 [ 594.639608][T12109] genl_rcv+0x28/0x40 [ 594.639623][T12109] netlink_unicast+0x82f/0x9e0 [ 594.639653][T12109] ? __pfx_netlink_unicast+0x10/0x10 [ 594.639676][T12109] ? netlink_sendmsg+0x642/0xb30 [ 594.639696][T12109] ? skb_put+0x11b/0x210 [ 594.639722][T12109] netlink_sendmsg+0x805/0xb30 [ 594.639755][T12109] ? __pfx_netlink_sendmsg+0x10/0x10 [ 594.639782][T12109] ? aa_sock_msg_perm+0xf1/0x1d0 [ 594.639805][T12109] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 594.639824][T12109] ? __pfx_netlink_sendmsg+0x10/0x10 [ 594.639847][T12109] __sock_sendmsg+0x21c/0x270 [ 594.639869][T12109] ____sys_sendmsg+0x505/0x830 [ 594.639896][T12109] ? __pfx_____sys_sendmsg+0x10/0x10 [ 594.639930][T12109] ? import_iovec+0x74/0xa0 [ 594.639951][T12109] ___sys_sendmsg+0x21f/0x2a0 [ 594.639979][T12109] ? __pfx____sys_sendmsg+0x10/0x10 [ 594.640037][T12109] ? __fget_files+0x2a/0x420 [ 594.640055][T12109] ? __fget_files+0x3a0/0x420 [ 594.640085][T12109] __x64_sys_sendmsg+0x19b/0x260 [ 594.640111][T12109] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 594.640145][T12109] ? __pfx_ksys_write+0x10/0x10 [ 594.640166][T12109] ? do_syscall_64+0xbe/0xfa0 [ 594.640191][T12109] do_syscall_64+0xfa/0xfa0 [ 594.640210][T12109] ? lockdep_hardirqs_on+0x9c/0x150 [ 594.640241][T12109] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.640259][T12109] ? clear_bhb_loop+0x60/0xb0 [ 594.640280][T12109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.640298][T12109] RIP: 0033:0x7f9c0418f749 [ 594.640314][T12109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 594.640329][T12109] RSP: 002b:00007f9c04fff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 594.640350][T12109] RAX: ffffffffffffffda RBX: 00007f9c043e5fa0 RCX: 00007f9c0418f749 [ 594.640363][T12109] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 594.640376][T12109] RBP: 00007f9c04fff090 R08: 0000000000000000 R09: 0000000000000000 [ 594.640387][T12109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 594.640398][T12109] R13: 00007f9c043e6038 R14: 00007f9c043e5fa0 R15: 00007f9c0450fa28 [ 594.640430][T12109] [ 595.015811][T11613] usb 7-1: Using ep0 maxpacket: 32 [ 595.023082][T11613] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 595.032217][T11613] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 595.053584][T11613] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 595.070556][ T5158] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 595.079091][ T5158] usb 10-1: invalid MIDI out EP 0 [ 595.084225][T11613] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 595.151643][ T5158] snd-usb-audio 10-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 595.214890][T12105] bond5: (slave veth3): Enslaving as an active interface with a down link [ 595.237012][T12115] bond5: entered promiscuous mode [ 595.265192][T12115] bond5: entered allmulticast mode [ 595.274903][ T7968] udevd[7968]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 595.288493][T12115] 8021q: adding VLAN 0 to HW filter on device bond5 [ 595.350150][T11613] usb 7-1: config 0 interface 0 has no altsetting 0 [ 595.403945][T11613] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 595.413786][T11613] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 595.423572][T11613] usb 7-1: Product: syz [ 595.428368][T11613] usb 7-1: Manufacturer: syz [ 595.433158][T11613] usb 7-1: SerialNumber: syz [ 595.444120][T11613] usb 7-1: config 0 descriptor?? [ 595.451862][T12120] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4068521576 (4068521576 ns) > initial count (2794446801 ns). Using initial count to start timer. [ 595.475065][T11613] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 595.493299][T11613] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 595.502307][T12124] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4068521576 (4068521576 ns) > initial count (2794446801 ns). Using initial count to start timer. [ 595.687515][T12107] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1419'. [ 595.696928][T12107] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1419'. [ 596.064403][T12126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 596.074430][T12126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 596.094828][ T5903] usb 7-1: USB disconnect, device number 40 [ 596.104852][ T5903] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 596.283333][T12134] input: syz0 as /devices/virtual/input/input62 [ 596.441749][T11617] usb 10-1: USB disconnect, device number 38 [ 596.599803][T12147] Invalid logical block size (201) [ 596.617502][T12148] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1428'. [ 597.185431][ T5903] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 597.540053][ T5903] usb 10-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 597.587228][ T5903] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 597.711516][ T5903] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 597.983324][ T5903] usb 10-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 597.997220][T11613] usb 9-1: new full-speed USB device number 41 using dummy_hcd [ 598.100326][T12160] binder: 12157:12160 ioctl c0306201 2000000003c0 returned -14 [ 598.428722][ T5903] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 598.519758][ T5903] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.555526][T11617] usb 7-1: new full-speed USB device number 41 using dummy_hcd [ 598.706745][T11617] usb 7-1: not running at top speed; connect to a high speed hub [ 598.724735][T11617] usb 7-1: config 1 interface 0 has no altsetting 0 [ 598.744274][T11617] usb 7-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 598.763496][T11617] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.782190][T11617] usb 7-1: Product: syz [ 598.792707][T12167] netlink: 212408 bytes leftover after parsing attributes in process `syz.8.1435'. [ 598.802374][T11617] usb 7-1: Manufacturer: syz [ 598.822835][T11617] usb 7-1: SerialNumber: syz [ 599.047996][T12165] netlink: 612 bytes leftover after parsing attributes in process `syz.6.1434'. [ 599.067691][T12165] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1434'. [ 599.300218][T11617] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input64 [ 599.399444][ T5182] bcm5974 7-1:1.0: could not read from device [ 599.475563][T11617] usb 7-1: USB disconnect, device number 41 [ 599.584276][ T5903] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 599.666257][ T5903] usb 10-1: invalid MIDI out EP 0 [ 600.084070][T10679] udevd[10679]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 600.121467][ T5903] snd-usb-audio 10-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 600.741957][T12186] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1439'. [ 600.752681][T12186] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1439'. [ 600.769029][T12185] delete_channel: no stack [ 601.123687][ T5158] usb 10-1: USB disconnect, device number 39 [ 601.285214][T12201] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1444'. [ 601.403177][T12204] FAULT_INJECTION: forcing a failure. [ 601.403177][T12204] name failslab, interval 1, probability 0, space 0, times 0 [ 601.416563][T12204] CPU: 1 UID: 0 PID: 12204 Comm: syz.6.1445 Not tainted syzkaller #0 PREEMPT(full) [ 601.416587][T12204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 601.416597][T12204] Call Trace: [ 601.416606][T12204] [ 601.416616][T12204] dump_stack_lvl+0x189/0x250 [ 601.416647][T12204] ? __pfx____ratelimit+0x10/0x10 [ 601.416713][T12204] ? __pfx_dump_stack_lvl+0x10/0x10 [ 601.416735][T12204] ? __pfx__printk+0x10/0x10 [ 601.416757][T12204] ? __pfx___might_resched+0x10/0x10 [ 601.416778][T12204] should_fail_ex+0x414/0x560 [ 601.416800][T12204] should_failslab+0xa8/0x100 [ 601.416820][T12204] __kmalloc_noprof+0xcb/0x7f0 [ 601.416837][T12204] ? ethnl_default_notify+0x1f5/0xb70 [ 601.416866][T12204] ethnl_default_notify+0x1f5/0xb70 [ 601.416892][T12204] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 601.416912][T12204] ? __pfx_ethnl_default_notify+0x10/0x10 [ 601.416948][T12204] ? mutex_is_locked+0x17/0x50 [ 601.416967][T12204] ? rtnl_is_locked+0x15/0x20 [ 601.416993][T12204] ethnl_default_set_doit+0x4f8/0x890 [ 601.417025][T12204] genl_family_rcv_msg_doit+0x215/0x300 [ 601.417057][T12204] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 601.417084][T12204] ? bpf_lsm_capable+0x9/0x20 [ 601.417105][T12204] ? security_capable+0x7e/0x2e0 [ 601.417129][T12204] genl_rcv_msg+0x60e/0x790 [ 601.417153][T12204] ? __pfx_genl_rcv_msg+0x10/0x10 [ 601.417168][T12204] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 601.417203][T12204] netlink_rcv_skb+0x208/0x470 [ 601.417221][T12204] ? __lock_acquire+0xab9/0xd20 [ 601.417239][T12204] ? __pfx_genl_rcv_msg+0x10/0x10 [ 601.417263][T12204] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 601.417302][T12204] ? down_read+0x1ad/0x2e0 [ 601.417328][T12204] genl_rcv+0x28/0x40 [ 601.417349][T12204] netlink_unicast+0x82f/0x9e0 [ 601.417387][T12204] ? __pfx_netlink_unicast+0x10/0x10 [ 601.417406][T12204] ? netlink_sendmsg+0x642/0xb30 [ 601.417423][T12204] ? skb_put+0x11b/0x210 [ 601.417446][T12204] netlink_sendmsg+0x805/0xb30 [ 601.417478][T12204] ? __pfx_netlink_sendmsg+0x10/0x10 [ 601.417503][T12204] ? aa_sock_msg_perm+0xf1/0x1d0 [ 601.417525][T12204] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 601.417543][T12204] ? __pfx_netlink_sendmsg+0x10/0x10 [ 601.417567][T12204] __sock_sendmsg+0x21c/0x270 [ 601.417590][T12204] ____sys_sendmsg+0x505/0x830 [ 601.417616][T12204] ? __pfx_____sys_sendmsg+0x10/0x10 [ 601.417647][T12204] ? import_iovec+0x74/0xa0 [ 601.417676][T12204] ___sys_sendmsg+0x21f/0x2a0 [ 601.417699][T12204] ? __pfx____sys_sendmsg+0x10/0x10 [ 601.417759][T12204] ? __fget_files+0x2a/0x420 [ 601.417778][T12204] ? __fget_files+0x3a0/0x420 [ 601.417807][T12204] __x64_sys_sendmsg+0x19b/0x260 [ 601.417833][T12204] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 601.417865][T12204] ? __pfx_ksys_write+0x10/0x10 [ 601.417887][T12204] ? do_syscall_64+0xbe/0xfa0 [ 601.417913][T12204] do_syscall_64+0xfa/0xfa0 [ 601.417932][T12204] ? lockdep_hardirqs_on+0x9c/0x150 [ 601.417951][T12204] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.417969][T12204] ? clear_bhb_loop+0x60/0xb0 [ 601.417991][T12204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.418009][T12204] RIP: 0033:0x7f312b58f749 [ 601.418024][T12204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 601.418039][T12204] RSP: 002b:00007f312c449038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 601.418058][T12204] RAX: ffffffffffffffda RBX: 00007f312b7e5fa0 RCX: 00007f312b58f749 [ 601.418072][T12204] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 601.418084][T12204] RBP: 00007f312c449090 R08: 0000000000000000 R09: 0000000000000000 [ 601.418094][T12204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 601.418103][T12204] R13: 00007f312b7e6038 R14: 00007f312b7e5fa0 R15: 00007f312b90fa28 [ 601.418130][T12204] [ 601.862254][T12206] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.1446'. [ 602.185766][T11617] usb 7-1: new full-speed USB device number 42 using dummy_hcd [ 602.360993][T11617] usb 7-1: not running at top speed; connect to a high speed hub [ 602.370996][T11617] usb 7-1: config 1 interface 0 has no altsetting 0 [ 602.380919][T11617] usb 7-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 602.390549][T11617] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.399442][T11617] usb 7-1: Product: syz [ 602.403664][T11617] usb 7-1: Manufacturer: syz [ 602.408615][T11617] usb 7-1: SerialNumber: syz [ 602.466683][T11615] usb 10-1: new full-speed USB device number 40 using dummy_hcd [ 602.605756][T11615] usb 10-1: device descriptor read/64, error -71 [ 602.622422][T12210] netlink: 612 bytes leftover after parsing attributes in process `syz.6.1448'. [ 602.644059][T12210] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1448'. [ 602.782994][T11617] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input65 [ 602.796383][ T5182] bcm5974 7-1:1.0: could not read from device [ 602.809868][T11617] bcm5974 7-1:1.0: could not read from device [ 602.822984][ T5182] bcm5974 7-1:1.0: could not read from device [ 602.838206][T11617] input: failed to attach handler mousedev to device input65, error: -5 [ 602.849470][ T5182] bcm5974 7-1:1.0: could not read from device [ 602.863828][T11617] usb 7-1: USB disconnect, device number 42 [ 602.878664][T11615] usb 10-1: new full-speed USB device number 41 using dummy_hcd [ 602.887034][T12225] syzkaller1: entered promiscuous mode [ 602.887070][ T5182] bcm5974 7-1:1.0: could not read from device [ 602.892722][T12225] syzkaller1: entered allmulticast mode [ 603.058418][T11615] usb 10-1: device descriptor read/64, error -71 [ 603.155552][ T5158] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 603.176036][T11615] usb usb10-port1: attempt power cycle [ 603.327167][ T5158] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 603.338464][ T5158] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 603.350079][ T5158] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 603.363465][ T5158] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 603.373392][ T5158] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.386894][ T5158] usb 9-1: config 0 descriptor?? [ 603.434701][T12229] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:16x16 (0x33424752, 8, 0, 0, 0) [ 603.515415][T11615] usb 10-1: new full-speed USB device number 42 using dummy_hcd [ 603.546482][T11615] usb 10-1: device descriptor read/8, error -71 [ 603.798681][T11615] usb 10-1: new full-speed USB device number 43 using dummy_hcd [ 603.836721][T11615] usb 10-1: device descriptor read/8, error -71 [ 603.869944][ T5158] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 603.967000][T11615] usb usb10-port1: unable to enumerate USB device [ 604.188388][ T5158] usb 9-1: USB disconnect, device number 42 [ 604.645413][T11617] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 604.808883][T11617] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 604.820037][T11617] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 604.832288][T11617] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 604.842688][T11617] usb 7-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 604.863177][T11617] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 604.873553][T11617] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.912481][T11617] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 604.920895][T11617] usb 7-1: invalid MIDI out EP 0 [ 604.992110][T11617] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 605.179383][T12249] netlink: 212408 bytes leftover after parsing attributes in process `syz.8.1458'. [ 606.019452][T12262] syzkaller0: entered promiscuous mode [ 606.025142][T12262] syzkaller0: entered allmulticast mode [ 606.222675][T12270] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1465'. [ 606.500192][T12273] binder: 12272:12273 unknown command 0 [ 606.506411][T12273] binder: 12272:12273 ioctl c0306201 200000000080 returned -22 [ 606.515172][T12273] binder: BINDER_SET_CONTEXT_MGR already set [ 606.523425][T12273] binder: 12272:12273 ioctl 4018620d 200000000100 returned -16 [ 606.533093][T12273] binder: BINDER_SET_CONTEXT_MGR already set [ 606.539344][T12273] binder: 12272:12273 ioctl 4018620d 200000004a80 returned -16 [ 607.161052][T12285] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(3) [ 607.167608][T12285] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 607.226836][T12285] vhci_hcd vhci_hcd.0: Device attached [ 607.259829][T12288] vhci_hcd vhci_hcd.0: port 0 already used [ 607.273676][T12286] vhci_hcd: connection closed [ 607.273997][ T6603] vhci_hcd: stop threads [ 607.288555][ T6603] vhci_hcd: release socket [ 607.293274][ T6603] vhci_hcd: disconnect device [ 607.925097][T11617] usb 7-1: USB disconnect, device number 43 [ 607.974735][T12304] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1475'. [ 608.032258][T12304] 8021q: adding VLAN 0 to HW filter on device bond2 [ 608.047536][T12312] bond2: entered allmulticast mode [ 608.121318][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 608.121337][ T30] audit: type=1326 audit(1764651136.597:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12308 comm="syz.7.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5b1b8f749 code=0x7ffc0000 [ 608.150866][ C0] vkms_vblank_simulate: vblank timer overrun [ 608.235691][ T30] audit: type=1326 audit(1764651136.597:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12308 comm="syz.7.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5b1b8f749 code=0x7ffc0000 [ 608.273011][T12318] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1476'. [ 608.323768][ T30] audit: type=1326 audit(1764651136.597:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12308 comm="syz.7.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fb5b1b8f749 code=0x7ffc0000 [ 608.352610][ T30] audit: type=1326 audit(1764651136.597:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12308 comm="syz.7.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5b1b8f749 code=0x7ffc0000 [ 608.378013][T11614] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 608.390293][T11614] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 608.403837][ T30] audit: type=1326 audit(1764651136.597:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12308 comm="syz.7.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5b1b8f749 code=0x7ffc0000 [ 608.428252][ T30] audit: type=1326 audit(1764651136.597:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12308 comm="syz.7.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7fb5b1b8f749 code=0x7ffc0000 [ 608.452544][ T30] audit: type=1326 audit(1764651136.597:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12308 comm="syz.7.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5b1b8f749 code=0x7ffc0000 [ 608.493065][T12329] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1479'. [ 608.509007][T12328] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1478'. [ 608.518213][T12329] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1479'. [ 608.551561][T12329] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1479'. [ 608.567142][ T30] audit: type=1326 audit(1764651136.597:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12308 comm="syz.7.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5b1b8f749 code=0x7ffc0000 [ 608.590434][T12329] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1479'. [ 608.609598][ T30] audit: type=1326 audit(1764651136.597:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12308 comm="syz.7.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb5b1b8f749 code=0x7ffc0000 [ 608.632693][ T30] audit: type=1326 audit(1764651136.597:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12308 comm="syz.7.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5b1b8f749 code=0x7ffc0000 [ 609.394378][T12352] Invalid logical block size (1030) [ 609.534725][T12362] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1488'. [ 609.668852][T12360] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1487'. [ 610.841573][T12372] FAULT_INJECTION: forcing a failure. [ 610.841573][T12372] name failslab, interval 1, probability 0, space 0, times 0 [ 610.919292][T12372] CPU: 1 UID: 0 PID: 12372 Comm: syz.8.1491 Not tainted syzkaller #0 PREEMPT(full) [ 610.919313][T12372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 610.919320][T12372] Call Trace: [ 610.919327][T12372] [ 610.919332][T12372] dump_stack_lvl+0x189/0x250 [ 610.919351][T12372] ? __pfx____ratelimit+0x10/0x10 [ 610.919363][T12372] ? __pfx_dump_stack_lvl+0x10/0x10 [ 610.919376][T12372] ? __pfx__printk+0x10/0x10 [ 610.919385][T12372] ? netlink_sendmsg+0x805/0xb30 [ 610.919398][T12372] ? __x64_sys_sendmsg+0x19b/0x260 [ 610.919411][T12372] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.919425][T12372] should_fail_ex+0x414/0x560 [ 610.919441][T12372] should_failslab+0xa8/0x100 [ 610.919454][T12372] kmem_cache_alloc_noprof+0x74/0x6e0 [ 610.919470][T12372] ? skb_clone+0x212/0x3a0 [ 610.919486][T12372] skb_clone+0x212/0x3a0 [ 610.919501][T12372] __netlink_deliver_tap+0x404/0x850 [ 610.919520][T12372] ? netlink_deliver_tap+0x2e/0x1b0 [ 610.919534][T12372] netlink_deliver_tap+0x19c/0x1b0 [ 610.919547][T12372] netlink_sendskb+0x68/0x140 [ 610.919559][T12372] netlink_unicast+0x397/0x9e0 [ 610.919569][T12372] ? __asan_memcpy+0x40/0x70 [ 610.919587][T12372] ? __pfx_netlink_unicast+0x10/0x10 [ 610.919603][T12372] netlink_rcv_skb+0x28c/0x470 [ 610.919614][T12372] ? __lock_acquire+0xab9/0xd20 [ 610.919625][T12372] ? __pfx_genl_rcv_msg+0x10/0x10 [ 610.919637][T12372] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 610.919659][T12372] ? down_read+0x1ad/0x2e0 [ 610.919673][T12372] genl_rcv+0x28/0x40 [ 610.919682][T12372] netlink_unicast+0x82f/0x9e0 [ 610.919698][T12372] ? __pfx_netlink_unicast+0x10/0x10 [ 610.919711][T12372] ? netlink_sendmsg+0x642/0xb30 [ 610.919722][T12372] ? skb_put+0x11b/0x210 [ 610.919736][T12372] netlink_sendmsg+0x805/0xb30 [ 610.919753][T12372] ? __pfx_netlink_sendmsg+0x10/0x10 [ 610.919767][T12372] ? aa_sock_msg_perm+0xf1/0x1d0 [ 610.919781][T12372] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 610.919794][T12372] ? __pfx_netlink_sendmsg+0x10/0x10 [ 610.919807][T12372] __sock_sendmsg+0x21c/0x270 [ 610.919819][T12372] ____sys_sendmsg+0x505/0x830 [ 610.919835][T12372] ? __pfx_____sys_sendmsg+0x10/0x10 [ 610.919853][T12372] ? import_iovec+0x74/0xa0 [ 610.919865][T12372] ___sys_sendmsg+0x21f/0x2a0 [ 610.919880][T12372] ? __pfx____sys_sendmsg+0x10/0x10 [ 610.919912][T12372] ? __fget_files+0x2a/0x420 [ 610.919922][T12372] ? __fget_files+0x3a0/0x420 [ 610.919938][T12372] __x64_sys_sendmsg+0x19b/0x260 [ 610.919953][T12372] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 610.919970][T12372] ? __pfx_ksys_write+0x10/0x10 [ 610.919982][T12372] ? do_syscall_64+0xbe/0xfa0 [ 610.919996][T12372] do_syscall_64+0xfa/0xfa0 [ 610.920007][T12372] ? lockdep_hardirqs_on+0x9c/0x150 [ 610.920018][T12372] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.920027][T12372] ? clear_bhb_loop+0x60/0xb0 [ 610.920046][T12372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.920056][T12372] RIP: 0033:0x7f866438f749 [ 610.920065][T12372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 610.920074][T12372] RSP: 002b:00007f86652e9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 610.920085][T12372] RAX: ffffffffffffffda RBX: 00007f86645e5fa0 RCX: 00007f866438f749 [ 610.920093][T12372] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 610.920099][T12372] RBP: 00007f86652e9090 R08: 0000000000000000 R09: 0000000000000000 [ 610.920106][T12372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 610.920111][T12372] R13: 00007f86645e6038 R14: 00007f86645e5fa0 R15: 00007f866470fa28 [ 610.920128][T12372] [ 612.785878][T11607] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 612.945760][T11607] usb 7-1: Using ep0 maxpacket: 8 [ 612.952512][T11607] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 612.980265][T11607] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 613.042050][T11607] usb 7-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00 [ 613.082508][T11607] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.120247][T11607] usb 7-1: config 0 descriptor?? [ 613.482940][T11607] usbhid 7-1:0.0: can't add hid device: -71 [ 613.496965][T11607] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 613.515653][T11607] usb 7-1: USB disconnect, device number 44 [ 615.054819][T12440] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1508'. [ 615.104893][T12440] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 615.930412][T12459] vim2m vim2m.0: vidioc_s_fmt queue busy [ 616.038656][T12454] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 616.185102][T12470] FAULT_INJECTION: forcing a failure. [ 616.185102][T12470] name failslab, interval 1, probability 0, space 0, times 0 [ 616.216170][T12469] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 616.251101][T12470] CPU: 0 UID: 0 PID: 12470 Comm: syz.9.1513 Not tainted syzkaller #0 PREEMPT(full) [ 616.251126][T12470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 616.251136][T12470] Call Trace: [ 616.251143][T12470] [ 616.251152][T12470] dump_stack_lvl+0x189/0x250 [ 616.251178][T12470] ? __pfx____ratelimit+0x10/0x10 [ 616.251197][T12470] ? __pfx_dump_stack_lvl+0x10/0x10 [ 616.251215][T12470] ? __pfx__printk+0x10/0x10 [ 616.251235][T12470] ? __pfx___might_resched+0x10/0x10 [ 616.251254][T12470] ? fs_reclaim_acquire+0x7d/0x100 [ 616.251277][T12470] should_fail_ex+0x414/0x560 [ 616.251300][T12470] should_failslab+0xa8/0x100 [ 616.251319][T12470] __kmalloc_noprof+0xcb/0x7f0 [ 616.251336][T12470] ? sock_kmalloc+0xd6/0x160 [ 616.251360][T12470] sock_kmalloc+0xd6/0x160 [ 616.251384][T12470] skcipher_recvmsg+0x571/0x11d0 [ 616.251431][T12470] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 616.251451][T12470] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 616.251468][T12470] ? security_socket_recvmsg+0x7e/0x2e0 [ 616.251488][T12470] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 616.251508][T12470] sock_recvmsg+0x22c/0x270 [ 616.251530][T12470] ____sys_recvmsg+0x1c9/0x460 [ 616.251562][T12470] ? __pfx_____sys_recvmsg+0x10/0x10 [ 616.251598][T12470] ? import_iovec+0x74/0xa0 [ 616.251619][T12470] ___sys_recvmsg+0x1b5/0x510 [ 616.251646][T12470] ? __pfx____sys_recvmsg+0x10/0x10 [ 616.251694][T12470] ? __fget_files+0x3a0/0x420 [ 616.251725][T12470] __x64_sys_recvmsg+0x198/0x260 [ 616.251752][T12470] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 616.251784][T12470] ? __pfx_ksys_write+0x10/0x10 [ 616.251806][T12470] ? do_syscall_64+0xbe/0xfa0 [ 616.251830][T12470] do_syscall_64+0xfa/0xfa0 [ 616.251848][T12470] ? lockdep_hardirqs_on+0x9c/0x150 [ 616.251869][T12470] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.251887][T12470] ? clear_bhb_loop+0x60/0xb0 [ 616.251908][T12470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.251926][T12470] RIP: 0033:0x7f64ae58f749 [ 616.251943][T12470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 616.251958][T12470] RSP: 002b:00007f64ac72d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 616.251978][T12470] RAX: ffffffffffffffda RBX: 00007f64ae7e6090 RCX: 00007f64ae58f749 [ 616.251991][T12470] RDX: 0000000000012060 RSI: 0000200000000540 RDI: 000000000000000b [ 616.252002][T12470] RBP: 00007f64ac72d090 R08: 0000000000000000 R09: 0000000000000000 [ 616.252013][T12470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 616.252025][T12470] R13: 00007f64ae7e6128 R14: 00007f64ae7e6090 R15: 00007f64ae90fa28 [ 616.252055][T12470] [ 616.516122][ C0] vkms_vblank_simulate: vblank timer overrun [ 616.525604][T12474] fuse: Bad value for 'fd' [ 617.134378][T12483] input: syz1 as /devices/virtual/input/input67 [ 617.227811][T12483] binder: 12475:12483 ioctl c0306201 0 returned -14 [ 617.835706][T11607] IPVS: starting estimator thread 0... [ 617.937708][T12498] IPVS: using max 50 ests per chain, 120000 per kthread [ 618.174088][T12483] syz.6.1517 (12483): drop_caches: 2 [ 618.375122][ T6608] IPVS: stop unused estimator thread 0... [ 619.300834][T12513] bond0: (slave netdevsim0): Enslaving as an active interface with a down link [ 619.390567][T12515] vivid-002: ================= START STATUS ================= [ 619.405135][T12515] vivid-002: Radio HW Seek Mode: Bounded [ 619.412988][T12515] vivid-002: Radio Programmable HW Seek: false [ 619.419956][T12515] vivid-002: RDS Rx I/O Mode: Block I/O [ 619.426324][T12515] vivid-002: Generate RBDS Instead of RDS: false [ 619.435602][ T5828] Bluetooth: hci0: command 0x0406 tx timeout [ 619.442201][T12491] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 619.443577][T12515] vivid-002: RDS Reception: true [ 619.455591][T12515] vivid-002: RDS Program Type: 0 inactive [ 619.461426][T12515] vivid-002: RDS PS Name: inactive [ 619.467204][T12515] vivid-002: RDS Radio Text: inactive [ 619.472717][T12515] vivid-002: RDS Traffic Announcement: false inactive [ 619.479751][T12515] vivid-002: RDS Traffic Program: false inactive [ 619.486619][T12515] vivid-002: RDS Music: false inactive [ 619.492353][T12515] vivid-002: ================== END STATUS ================== [ 619.679721][T12520] FAULT_INJECTION: forcing a failure. [ 619.679721][T12520] name failslab, interval 1, probability 0, space 0, times 0 [ 619.693041][T12520] CPU: 1 UID: 0 PID: 12520 Comm: syz.8.1529 Not tainted syzkaller #0 PREEMPT(full) [ 619.693068][T12520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 619.693078][T12520] Call Trace: [ 619.693086][T12520] [ 619.693095][T12520] dump_stack_lvl+0x189/0x250 [ 619.693127][T12520] ? __pfx____ratelimit+0x10/0x10 [ 619.693147][T12520] ? __pfx_dump_stack_lvl+0x10/0x10 [ 619.693170][T12520] ? __pfx__printk+0x10/0x10 [ 619.693207][T12520] ? __lock_acquire+0xab9/0xd20 [ 619.693233][T12520] should_fail_ex+0x414/0x560 [ 619.693261][T12520] should_failslab+0xa8/0x100 [ 619.693284][T12520] kmem_cache_alloc_noprof+0x74/0x6e0 [ 619.693312][T12520] ? skb_clone+0x212/0x3a0 [ 619.693343][T12520] skb_clone+0x212/0x3a0 [ 619.693371][T12520] __netlink_deliver_tap+0x404/0x850 [ 619.693406][T12520] ? netlink_deliver_tap+0x2e/0x1b0 [ 619.693515][T12520] netlink_deliver_tap+0x19c/0x1b0 [ 619.693542][T12520] netlink_unicast+0x7fa/0x9e0 [ 619.693570][T12520] ? __pfx_netlink_unicast+0x10/0x10 [ 619.693587][T12520] ? netlink_sendmsg+0x642/0xb30 [ 619.693606][T12520] ? skb_put+0x11b/0x210 [ 619.693628][T12520] netlink_sendmsg+0x805/0xb30 [ 619.693656][T12520] ? __pfx_netlink_sendmsg+0x10/0x10 [ 619.693677][T12520] ? aa_sock_msg_perm+0xf1/0x1d0 [ 619.693699][T12520] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 619.693716][T12520] ? __pfx_netlink_sendmsg+0x10/0x10 [ 619.693736][T12520] __sock_sendmsg+0x21c/0x270 [ 619.693755][T12520] ____sys_sendmsg+0x505/0x830 [ 619.693780][T12520] ? __pfx_____sys_sendmsg+0x10/0x10 [ 619.693819][T12520] ? import_iovec+0x74/0xa0 [ 619.693837][T12520] ___sys_sendmsg+0x21f/0x2a0 [ 619.693861][T12520] ? __pfx____sys_sendmsg+0x10/0x10 [ 619.693907][T12520] ? __fget_files+0x2a/0x420 [ 619.693923][T12520] ? __fget_files+0x3a0/0x420 [ 619.693946][T12520] __x64_sys_sendmsg+0x19b/0x260 [ 619.693969][T12520] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 619.693999][T12520] ? __pfx_ksys_write+0x10/0x10 [ 619.694018][T12520] ? do_syscall_64+0xbe/0xfa0 [ 619.694040][T12520] do_syscall_64+0xfa/0xfa0 [ 619.694058][T12520] ? lockdep_hardirqs_on+0x9c/0x150 [ 619.694076][T12520] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.694093][T12520] ? clear_bhb_loop+0x60/0xb0 [ 619.694112][T12520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.694128][T12520] RIP: 0033:0x7f866438f749 [ 619.694145][T12520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 619.694159][T12520] RSP: 002b:00007f86652e9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 619.694175][T12520] RAX: ffffffffffffffda RBX: 00007f86645e5fa0 RCX: 00007f866438f749 [ 619.694188][T12520] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 619.694200][T12520] RBP: 00007f86652e9090 R08: 0000000000000000 R09: 0000000000000000 [ 619.694212][T12520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 619.694223][T12520] R13: 00007f86645e6038 R14: 00007f86645e5fa0 R15: 00007f866470fa28 [ 619.694251][T12520] [ 619.694316][T12520] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1529'. [ 620.035297][T12491] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 620.069926][T12491] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 620.085917][T12491] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 620.099846][T12491] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 620.113086][T12491] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 620.124659][T12491] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 620.139676][T12491] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 620.159427][T12491] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 620.171735][T12491] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 620.455635][T11617] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 620.525507][T11615] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 620.615937][T11617] usb 2-1: Using ep0 maxpacket: 32 [ 620.627489][T11617] usb 2-1: unable to get BOS descriptor or descriptor too short [ 620.639057][T11617] usb 2-1: config 0 has an invalid interface number: 63 but max is 0 [ 620.661129][T11617] usb 2-1: config 0 has no interface number 0 [ 620.675435][T11617] usb 2-1: config 0 interface 63 has no altsetting 0 [ 620.699750][T11617] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0113, bcdDevice=d5.e8 [ 620.724816][T11615] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 620.745528][T11617] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.754131][T11615] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 620.778955][T11617] usb 2-1: Product: syz [ 620.790628][T11617] usb 2-1: Manufacturer: syz [ 620.791211][T11615] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 620.811342][T11617] usb 2-1: SerialNumber: syz [ 620.841799][T11617] usb 2-1: config 0 descriptor?? [ 620.847494][T11615] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 620.856219][T11615] usb 10-1: SerialNumber: syz [ 621.166255][T11617] kvaser_usb 2-1:0.63: error -ENODEV: Cannot get usb endpoint(s) [ 621.262034][T11617] usb 2-1: USB disconnect, device number 53 [ 621.376447][T11615] usb 10-1: 0:2 : does not exist [ 621.493958][T11615] usb 10-1: USB disconnect, device number 44 [ 621.509528][ T5828] Bluetooth: hci0: command 0x0406 tx timeout [ 621.662475][T10679] udevd[10679]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 622.145525][ T5826] Bluetooth: hci6: command 0x0406 tx timeout [ 622.146558][ T5146] Bluetooth: hci5: command 0x0406 tx timeout [ 622.151893][ T5828] Bluetooth: hci1: command 0x0406 tx timeout [ 622.225749][ T5828] Bluetooth: hci7: command 0x0406 tx timeout [ 622.299658][T12563] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1541'. [ 622.323110][T12563] openvswitch: netlink: Flow key attr not present in new flow. [ 622.365485][T11615] usb 10-1: new high-speed USB device number 45 using dummy_hcd [ 622.525447][T11615] usb 10-1: Using ep0 maxpacket: 8 [ 622.549142][T11615] usb 10-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 622.570098][T11615] usb 10-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 622.595664][T11615] usb 10-1: config 0 interface 0 has no altsetting 0 [ 622.615872][T11615] usb 10-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 622.636010][T11615] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.658551][T11615] usb 10-1: config 0 descriptor?? [ 623.095153][T11615] smartjoyplus 0003:0B43:0003.000D: ignoring exceeding usage max [ 623.151736][T11615] smartjoyplus 0003:0B43:0003.000D: unbalanced collection at end of report description [ 623.167645][T11615] smartjoyplus 0003:0B43:0003.000D: parse failed [ 623.190164][T11615] smartjoyplus 0003:0B43:0003.000D: probe with driver smartjoyplus failed with error -22 [ 623.246371][T11617] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 623.314979][T11607] usb 10-1: USB disconnect, device number 45 [ 623.407943][T11617] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 623.418785][T11617] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 623.433406][T11617] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 623.443323][T11617] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 623.454429][T11617] usb 9-1: SerialNumber: syz [ 623.486066][T11615] usb 7-1: new full-speed USB device number 45 using dummy_hcd [ 623.656938][T11615] usb 7-1: not running at top speed; connect to a high speed hub [ 623.669536][T11615] usb 7-1: config 1 interface 0 has no altsetting 0 [ 623.680368][T11615] usb 7-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 623.705660][T11615] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.713799][T11615] usb 7-1: Product: syz [ 623.719455][T11615] usb 7-1: Manufacturer: syz [ 623.726707][T11617] usb 9-1: 0:2 : does not exist [ 623.733994][T11615] usb 7-1: SerialNumber: syz [ 623.748207][T11617] usb 9-1: USB disconnect, device number 43 [ 623.785839][T10679] udevd[10679]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 623.959049][T12597] netlink: 612 bytes leftover after parsing attributes in process `syz.6.1553'. [ 623.971340][T12597] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1553'. [ 623.987217][T12597] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1553'. [ 624.017131][T11615] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input68 [ 624.031576][ T5182] bcm5974 7-1:1.0: could not read from device [ 624.047530][ T5182] bcm5974 7-1:1.0: could not read from device [ 624.074344][ T5182] bcm5974 7-1:1.0: could not read from device [ 624.087086][T11615] usb 7-1: USB disconnect, device number 45 [ 624.096328][ T5182] bcm5974 7-1:1.0: could not read from device [ 624.215577][T11607] usb 10-1: new high-speed USB device number 46 using dummy_hcd [ 624.225766][ T5828] Bluetooth: hci5: command 0x0406 tx timeout [ 624.232504][ T5146] Bluetooth: hci1: command 0x0406 tx timeout [ 624.232517][ T5826] Bluetooth: hci6: command 0x0406 tx timeout [ 624.305708][ T5826] Bluetooth: hci7: command 0x0406 tx timeout [ 624.405510][T11607] usb 10-1: Using ep0 maxpacket: 16 [ 624.414215][T11607] usb 10-1: config 0 has an invalid interface number: 41 but max is 0 [ 624.423735][T11607] usb 10-1: config 0 has no interface number 0 [ 624.430931][T11607] usb 10-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 624.442917][T11607] usb 10-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 624.462655][T11607] usb 10-1: config 0 interface 41 has no altsetting 0 [ 624.478473][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.485017][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.498652][T11607] usb 10-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 624.508538][T11607] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.517928][T11607] usb 10-1: Product: syz [ 624.522296][T11607] usb 10-1: Manufacturer: syz [ 624.548433][T11607] usb 10-1: SerialNumber: syz [ 624.580035][T11607] usb 10-1: config 0 descriptor?? [ 624.599581][T12604] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 624.612114][T12604] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 624.662735][T12621] FAULT_INJECTION: forcing a failure. [ 624.662735][T12621] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 624.684205][T12621] CPU: 1 UID: 0 PID: 12621 Comm: syz.1.1559 Not tainted syzkaller #0 PREEMPT(full) [ 624.684232][T12621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 624.684244][T12621] Call Trace: [ 624.684253][T12621] [ 624.684264][T12621] dump_stack_lvl+0x189/0x250 [ 624.684296][T12621] ? __pfx____ratelimit+0x10/0x10 [ 624.684319][T12621] ? __pfx_dump_stack_lvl+0x10/0x10 [ 624.684341][T12621] ? __pfx__printk+0x10/0x10 [ 624.684373][T12621] should_fail_ex+0x414/0x560 [ 624.684402][T12621] _copy_to_user+0x31/0xb0 [ 624.684422][T12621] simple_read_from_buffer+0xe1/0x170 [ 624.684446][T12621] proc_fail_nth_read+0x1b3/0x220 [ 624.684474][T12621] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 624.684501][T12621] ? rw_verify_area+0x2a6/0x4d0 [ 624.684525][T12621] ? __lock_acquire+0xab9/0xd20 [ 624.684543][T12621] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 624.684570][T12621] vfs_read+0x200/0xa30 [ 624.684585][T12621] ? fdget_pos+0x247/0x320 [ 624.684609][T12621] ? __pfx___mutex_lock+0x10/0x10 [ 624.684632][T12621] ? __pfx_vfs_read+0x10/0x10 [ 624.684650][T12621] ? __fget_files+0x2a/0x420 [ 624.684673][T12621] ? __fget_files+0x3a0/0x420 [ 624.684691][T12621] ? __fget_files+0x2a/0x420 [ 624.684719][T12621] ksys_read+0x145/0x250 [ 624.684739][T12621] ? __pfx_ksys_read+0x10/0x10 [ 624.684759][T12621] ? do_syscall_64+0xbe/0xfa0 [ 624.684783][T12621] do_syscall_64+0xfa/0xfa0 [ 624.684802][T12621] ? lockdep_hardirqs_on+0x9c/0x150 [ 624.684823][T12621] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.684840][T12621] ? clear_bhb_loop+0x60/0xb0 [ 624.684861][T12621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.684878][T12621] RIP: 0033:0x7f9c0418e15c [ 624.684894][T12621] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 624.684919][T12621] RSP: 002b:00007f9c04fde030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 624.684939][T12621] RAX: ffffffffffffffda RBX: 00007f9c043e6090 RCX: 00007f9c0418e15c [ 624.684952][T12621] RDX: 000000000000000f RSI: 00007f9c04fde0a0 RDI: 0000000000000005 [ 624.684964][T12621] RBP: 00007f9c04fde090 R08: 0000000000000000 R09: 0000000000000000 [ 624.684976][T12621] R10: 0000200000000540 R11: 0000000000000246 R12: 0000000000000001 [ 624.684986][T12621] R13: 00007f9c043e6128 R14: 00007f9c043e6090 R15: 00007f9c0450fa28 [ 624.685017][T12621] [ 624.829936][T12604] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 625.000799][T12604] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 626.035482][T11615] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 626.188173][T11615] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 626.199026][T11615] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 626.212609][T11615] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 626.222118][T11615] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 626.232210][T11615] usb 2-1: SerialNumber: syz [ 626.524756][T11615] usb 2-1: 0:2 : does not exist [ 626.564487][T11615] usb 2-1: USB disconnect, device number 54 [ 626.616400][T10679] udevd[10679]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 626.909311][T11607] CoreChips 10-1:0.41: probe with driver CoreChips failed with error -71 [ 626.928979][T11607] usb 10-1: USB disconnect, device number 46 [ 627.548123][T12664] input: syz0 as /devices/virtual/input/input69 [ 627.677777][T12673] netlink: 104 bytes leftover after parsing attributes in process `syz.7.1577'. [ 627.931553][T12684] netlink: 'syz.9.1583': attribute type 21 has an invalid length. [ 627.940369][T12684] netlink: 128 bytes leftover after parsing attributes in process `syz.9.1583'. [ 627.952010][T12684] netlink: 'syz.9.1583': attribute type 4 has an invalid length. [ 627.961183][T12684] netlink: 'syz.9.1583': attribute type 5 has an invalid length. [ 627.969295][T12684] netlink: 3 bytes leftover after parsing attributes in process `syz.9.1583'. [ 628.441794][T12685] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1581'. [ 628.506777][T11615] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 628.705627][T11615] usb 7-1: Using ep0 maxpacket: 16 [ 628.716897][T11615] usb 7-1: config 4 has an invalid interface number: 51 but max is 0 [ 628.735506][T11615] usb 7-1: config 4 has no interface number 0 [ 628.755707][T11615] usb 7-1: config 4 interface 51 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 16 [ 628.791303][T11615] usb 7-1: config 4 interface 51 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 628.821115][T11615] usb 7-1: config 4 interface 51 has no altsetting 0 [ 628.851564][T11615] usb 7-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 628.944860][T11615] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.973726][T11615] usb 7-1: Product: syz [ 628.979302][T11615] usb 7-1: Manufacturer: syz [ 628.989808][T11615] usb 7-1: SerialNumber: syz [ 629.023211][T12693] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 629.036536][T12693] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 629.276075][T12692] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 629.306395][T12692] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 629.380677][T11615] cdc_eem 7-1:4.51 usb0: register 'cdc_eem' at usb-dummy_hcd.6-1, CDC EEM Device, 6a:42:04:f2:75:68 [ 629.581600][T11615] usb 7-1: USB disconnect, device number 46 [ 629.604800][T11615] cdc_eem 7-1:4.51 usb0: unregister 'cdc_eem' usb-dummy_hcd.6-1, CDC EEM Device [ 629.998835][T12715] xt_CT: No such helper "snmp" [ 632.566284][T11607] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 632.799846][T11607] usb 7-1: config index 0 descriptor too short (expected 8028, got 92) [ 632.859372][T11607] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 632.907118][T11607] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 633.004977][T11607] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 633.052350][T11607] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.113866][T11607] usb 7-1: Product: syz [ 633.151891][T11607] usb 7-1: Manufacturer: syz [ 633.183781][T11607] usb 7-1: SerialNumber: syz [ 634.046177][T12771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 634.113283][T12771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 634.158654][T11607] cdc_ncm 7-1:1.0: SET_CRC_MODE failed [ 634.250818][T11607] cdc_ncm 7-1:1.0: bind() failure [ 634.386224][T11607] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 634.436787][T11607] cdc_ncm 7-1:1.1: bind() failure [ 634.504344][T11607] usb 7-1: USB disconnect, device number 47 [ 635.645938][T11615] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 635.859528][T11615] usb 7-1: Using ep0 maxpacket: 16 [ 635.948509][T11615] usb 7-1: unable to get BOS descriptor or descriptor too short [ 636.018486][T11615] usb 7-1: config 127 has an invalid interface number: 121 but max is 0 [ 636.070356][T11615] usb 7-1: config 127 has no interface number 0 [ 636.098403][T11615] usb 7-1: config 127 interface 121 has no altsetting 0 [ 636.207548][T11615] usb 7-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=ba.4a [ 636.298549][T11615] usb 7-1: New USB device strings: Mfr=65, Product=2, SerialNumber=3 [ 636.312497][T11615] usb 7-1: Product: syz [ 636.337602][T11615] usb 7-1: Manufacturer: syz [ 636.365623][T11615] usb 7-1: SerialNumber: syz [ 636.423475][T12806] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1609'. [ 636.469469][T12806] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1609'. [ 636.674750][T11615] usb_ehset_test 7-1:127.121: probe with driver usb_ehset_test failed with error -32 [ 636.707470][T11615] usb 7-1: USB disconnect, device number 48 [ 636.804840][T11614] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 636.815455][T11617] usb 10-1: new high-speed USB device number 47 using dummy_hcd [ 636.985845][T11617] usb 10-1: Using ep0 maxpacket: 32 [ 637.009739][T11617] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 637.021013][T11614] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 637.031932][T11617] usb 10-1: config 0 has no interface number 0 [ 637.046588][T11614] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.059735][T11614] usb 9-1: Product: syz [ 637.065187][T11614] usb 9-1: Manufacturer: syz [ 637.072219][T11614] usb 9-1: SerialNumber: syz [ 637.080265][T11617] usb 10-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 637.092659][T11617] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.168565][T11617] usb 10-1: Product: syz [ 637.176096][T11617] usb 10-1: Manufacturer: syz [ 637.184656][T11617] usb 10-1: SerialNumber: syz [ 637.193162][T11614] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 637.308133][T11617] usb 10-1: config 0 descriptor?? [ 637.340462][T11617] usb 10-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 637.365464][T11615] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 637.387603][T11617] usb 10-1: selecting invalid altsetting 1 [ 637.406686][T11617] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 637.519869][T11617] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 637.580190][T11617] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 637.618101][T11617] usb 10-1: media controller created [ 637.656271][T12805] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1609'. [ 637.680832][T11617] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 637.702280][T12805] bridge_slave_1: left allmulticast mode [ 637.717512][T12805] bridge_slave_1: left promiscuous mode [ 637.727629][T12805] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.780052][T12813] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1612'. [ 637.798180][T12813] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1612'. [ 637.857888][T12805] bridge_slave_0: left allmulticast mode [ 637.893042][T11612] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 637.902758][T12805] bridge_slave_0: left promiscuous mode [ 637.950490][T12805] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.042164][T11612] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 638.251273][T12813] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 638.557428][T11615] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 638.570200][T11615] ath9k_htc: Failed to initialize the device [ 638.674722][T11615] usb 9-1: ath9k_htc: USB layer deinitialized [ 638.844498][T11617] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 638.919849][T11617] usb 10-1: USB disconnect, device number 47 [ 639.769831][T12839] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1617'. [ 639.792405][T12839] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1617'. [ 639.885762][T12841] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 640.891826][T11617] usb 9-1: USB disconnect, device number 44 [ 644.015605][ T5903] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 644.194247][ T5903] usb 7-1: config 0 has an invalid interface number: 50 but max is 0 [ 644.214032][ T5903] usb 7-1: config 0 has no interface number 0 [ 644.243306][ T5903] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 644.265178][ T5903] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.287075][ T5903] usb 7-1: Product: syz [ 644.299025][ T5903] usb 7-1: Manufacturer: syz [ 644.311986][ T5903] usb 7-1: SerialNumber: syz [ 644.347324][ T5903] usb 7-1: config 0 descriptor?? [ 644.369023][ T5903] yurex 7-1:0.50: Could not find endpoints [ 644.728642][T12900] kvm: kvm [12898]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 644.764361][T12900] kvm: kvm [12898]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 644.889698][ T5903] usb 7-1: USB disconnect, device number 49 [ 645.324252][T12911] netlink: 64 bytes leftover after parsing attributes in process `syz.8.1635'. [ 645.579932][T12911] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 646.685553][T11615] usb 10-1: new high-speed USB device number 48 using dummy_hcd [ 646.861980][T11615] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 646.915677][T11615] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 646.979285][T11615] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 647.047560][T11615] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 647.064538][T11615] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.094798][T11615] usb 10-1: Product: syz [ 647.099741][T11615] usb 10-1: Manufacturer: syz [ 647.105914][T11615] usb 10-1: SerialNumber: syz [ 647.434436][T12926] tipc: Failed to remove unknown binding: 66,1,1/0:3624417557/3624417559 [ 647.491268][T12926] tipc: Failed to remove unknown binding: 66,1,1/0:3624417557/3624417559 [ 647.540285][T12926] tipc: Failed to remove unknown binding: 66,1,1/0:3624417557/3624417559 [ 647.840358][T11615] usb 10-1: 0:2 : does not exist [ 647.923421][T11615] usb 10-1: USB disconnect, device number 48 [ 647.975568][ T5903] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 648.140057][ T5903] usb 9-1: config 0 has an invalid interface number: 83 but max is 0 [ 648.140087][ T5903] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 648.140099][ T5903] usb 9-1: config 0 has no interface number 0 [ 648.140166][ T5903] usb 9-1: config 0 interface 83 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 648.140180][ T5903] usb 9-1: config 0 interface 83 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 648.140211][ T5903] usb 9-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 648.140224][ T5903] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.143452][ T5903] usb 9-1: config 0 descriptor?? [ 648.148896][ T5903] ttusbir 9-1:0.83: cannot find expected altsetting [ 648.490408][T12956] fuse: Bad value for 'fd' [ 650.700389][ T5903] usb 9-1: USB disconnect, device number 45 [ 651.448412][T12986] FAULT_INJECTION: forcing a failure. [ 651.448412][T12986] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 651.472379][T12986] CPU: 0 UID: 0 PID: 12986 Comm: syz.9.1658 Not tainted syzkaller #0 PREEMPT(full) [ 651.472408][T12986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 651.472421][T12986] Call Trace: [ 651.472430][T12986] [ 651.472439][T12986] dump_stack_lvl+0x189/0x250 [ 651.472471][T12986] ? __pfx____ratelimit+0x10/0x10 [ 651.472526][T12986] ? __pfx_dump_stack_lvl+0x10/0x10 [ 651.472550][T12986] ? __pfx__printk+0x10/0x10 [ 651.472570][T12986] ? __might_fault+0xb0/0x130 [ 651.472600][T12986] should_fail_ex+0x414/0x560 [ 651.472626][T12986] _copy_from_iter+0x1de/0x1790 [ 651.472655][T12986] ? rcu_is_watching+0x15/0xb0 [ 651.472679][T12986] ? kmalloc_reserve+0xbd/0x290 [ 651.472704][T12986] ? __pfx__copy_from_iter+0x10/0x10 [ 651.472729][T12986] ? __build_skb_around+0x262/0x3f0 [ 651.472755][T12986] ? netlink_sendmsg+0x642/0xb30 [ 651.472779][T12986] ? skb_put+0x11b/0x210 [ 651.472806][T12986] netlink_sendmsg+0x6b2/0xb30 [ 651.472837][T12986] ? __pfx_netlink_sendmsg+0x10/0x10 [ 651.472861][T12986] ? aa_sock_msg_perm+0xf1/0x1d0 [ 651.472882][T12986] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 651.472900][T12986] ? __pfx_netlink_sendmsg+0x10/0x10 [ 651.472921][T12986] __sock_sendmsg+0x21c/0x270 [ 651.472943][T12986] ____sys_sendmsg+0x505/0x830 [ 651.472983][T12986] ? __pfx_____sys_sendmsg+0x10/0x10 [ 651.473017][T12986] ? import_iovec+0x74/0xa0 [ 651.473039][T12986] ___sys_sendmsg+0x21f/0x2a0 [ 651.473066][T12986] ? __pfx____sys_sendmsg+0x10/0x10 [ 651.473123][T12986] ? __fget_files+0x2a/0x420 [ 651.473141][T12986] ? __fget_files+0x3a0/0x420 [ 651.473171][T12986] __x64_sys_sendmsg+0x19b/0x260 [ 651.473197][T12986] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 651.473230][T12986] ? __pfx_ksys_write+0x10/0x10 [ 651.473252][T12986] ? do_syscall_64+0xbe/0xfa0 [ 651.473278][T12986] do_syscall_64+0xfa/0xfa0 [ 651.473298][T12986] ? lockdep_hardirqs_on+0x9c/0x150 [ 651.473318][T12986] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.473336][T12986] ? clear_bhb_loop+0x60/0xb0 [ 651.473356][T12986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.473372][T12986] RIP: 0033:0x7f64ae58f749 [ 651.473388][T12986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 651.473401][T12986] RSP: 002b:00007f64af345038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 651.473420][T12986] RAX: ffffffffffffffda RBX: 00007f64ae7e5fa0 RCX: 00007f64ae58f749 [ 651.473434][T12986] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 651.473443][T12986] RBP: 00007f64af345090 R08: 0000000000000000 R09: 0000000000000000 [ 651.473453][T12986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 651.473464][T12986] R13: 00007f64ae7e6038 R14: 00007f64ae7e5fa0 R15: 00007f64ae90fa28 [ 651.473493][T12986] [ 651.804182][ C0] vkms_vblank_simulate: vblank timer overrun [ 651.947938][T12992] vivid-000: disconnect [ 652.000759][T12995] netlink: 'syz.9.1661': attribute type 1 has an invalid length. [ 652.009303][T12995] netlink: 'syz.9.1661': attribute type 2 has an invalid length. [ 652.012884][T12990] vivid-000: reconnect [ 652.356914][T13002] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1663'. [ 652.583479][ T4193] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 652.614124][ T4193] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 653.243782][T13025] fuse: Bad value for 'fd' [ 653.596083][ T30] kauditd_printk_skb: 71 callbacks suppressed [ 653.596099][ T30] audit: type=1326 audit(1764651182.047:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13024 comm="syz.1.1671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0418f749 code=0x7ffc0000 [ 653.762555][ T30] audit: type=1326 audit(1764651182.047:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13024 comm="syz.1.1671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0418f749 code=0x7ffc0000 [ 653.933232][ T30] audit: type=1326 audit(1764651182.357:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13024 comm="syz.1.1671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f9c0418f749 code=0x7ffc0000 [ 654.050879][ T30] audit: type=1326 audit(1764651182.357:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13024 comm="syz.1.1671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0418f749 code=0x7ffc0000 [ 654.158736][T13032] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1672'. [ 654.216433][ T30] audit: type=1326 audit(1764651182.357:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13024 comm="syz.1.1671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0418f749 code=0x7ffc0000 [ 654.377974][ T30] audit: type=1326 audit(1764651182.357:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13024 comm="syz.1.1671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9c0418f749 code=0x7ffc0000 [ 654.492698][ T30] audit: type=1326 audit(1764651182.357:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13024 comm="syz.1.1671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0418f749 code=0x7ffc0000 [ 654.551419][ T30] audit: type=1326 audit(1764651182.387:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13024 comm="syz.1.1671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9c0418df90 code=0x7ffc0000 [ 654.611114][ T30] audit: type=1326 audit(1764651182.387:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13024 comm="syz.1.1671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c0418f749 code=0x7ffc0000 [ 654.651980][ T30] audit: type=1326 audit(1764651182.517:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13024 comm="syz.1.1671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f9c0418f749 code=0x7ffc0000 [ 654.880230][T13045] fuse: Unknown parameter 'rootmS®€:v¼Š‰0000000000000040000' [ 655.215488][T11615] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 655.659623][T11615] usb 2-1: config index 0 descriptor too short (expected 2084, got 36) [ 655.669471][T11615] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 655.713716][T11615] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 655.762951][T11615] usb 2-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 655.809108][T11615] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.858865][T11615] usb 2-1: config 0 descriptor?? [ 656.215937][T13054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 656.421066][T13054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 656.884853][T13062] loop4: detected capacity change from 0 to 2560 [ 657.004396][T13062] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1678'. [ 657.058494][T10679] buffer_io_error: 636 callbacks suppressed [ 657.058515][T10679] Buffer I/O error on dev loop4, logical block 0, async page read [ 657.321391][T13062] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 657.433087][T13062] Buffer I/O error on dev loop4, logical block 1, lost async page write [ 657.562317][T13062] Buffer I/O error on dev loop4, logical block 2, lost async page write [ 657.573995][T13062] Buffer I/O error on dev loop4, logical block 3, lost async page write [ 657.594918][T13062] Buffer I/O error on dev loop4, logical block 4, lost async page write [ 657.615233][T13062] Buffer I/O error on dev loop4, logical block 5, lost async page write [ 657.641078][T13062] Buffer I/O error on dev loop4, logical block 6, lost async page write [ 657.657049][T13062] Buffer I/O error on dev loop4, logical block 7, lost async page write [ 657.670763][T13062] Buffer I/O error on dev loop4, logical block 8, lost async page write [ 657.978724][T13071] bond0: Removing last ns target with arp_interval on [ 658.002178][T13071] 8021q: adding VLAN 0 to HW filter on device bond0 [ 658.342800][T11615] usbhid 2-1:0.0: can't add hid device: -71 [ 658.361387][T11615] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 658.411911][T11615] usb 2-1: USB disconnect, device number 55 [ 659.858192][T13091] ERROR: Out of memory at tomoyo_memory_ok. [ 660.637652][T13120] FAULT_INJECTION: forcing a failure. [ 660.637652][T13120] name failslab, interval 1, probability 0, space 0, times 0 [ 660.699405][T13120] CPU: 1 UID: 0 PID: 13120 Comm: syz.7.1696 Not tainted syzkaller #0 PREEMPT(full) [ 660.699448][T13120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 660.699461][T13120] Call Trace: [ 660.699470][T13120] [ 660.699480][T13120] dump_stack_lvl+0x189/0x250 [ 660.699510][T13120] ? __pfx____ratelimit+0x10/0x10 [ 660.699532][T13120] ? __pfx_dump_stack_lvl+0x10/0x10 [ 660.699555][T13120] ? __pfx__printk+0x10/0x10 [ 660.699577][T13120] ? __pfx___might_resched+0x10/0x10 [ 660.699598][T13120] ? fs_reclaim_acquire+0x7d/0x100 [ 660.699624][T13120] should_fail_ex+0x414/0x560 [ 660.699652][T13120] should_failslab+0xa8/0x100 [ 660.699676][T13120] kmem_cache_alloc_noprof+0x74/0x6e0 [ 660.699705][T13120] ? skb_clone+0x212/0x3a0 [ 660.699734][T13120] skb_clone+0x212/0x3a0 [ 660.699757][T13120] ? nfnetlink_rcv+0x4ba/0x2590 [ 660.699794][T13120] nfnetlink_rcv+0x4ec/0x2590 [ 660.699818][T13120] ? __dev_queue_xmit+0x27b/0x3b50 [ 660.699838][T13120] ? __dev_queue_xmit+0x1d79/0x3b50 [ 660.699853][T13120] ? kasan_save_track+0x3e/0x80 [ 660.699870][T13120] ? __kasan_slab_alloc+0x6c/0x80 [ 660.699897][T13120] ? __dev_queue_xmit+0x27b/0x3b50 [ 660.699927][T13120] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 660.699964][T13120] ? ref_tracker_free+0x63a/0x7d0 [ 660.699988][T13120] ? __asan_memcpy+0x40/0x70 [ 660.700010][T13120] ? __pfx_ref_tracker_free+0x10/0x10 [ 660.700040][T13120] ? skb_clone+0x246/0x3a0 [ 660.700062][T13120] ? __netlink_deliver_tap+0x807/0x850 [ 660.700086][T13120] ? netlink_deliver_tap+0x2e/0x1b0 [ 660.700126][T13120] netlink_unicast+0x82f/0x9e0 [ 660.700157][T13120] ? __pfx_netlink_unicast+0x10/0x10 [ 660.700178][T13120] ? netlink_sendmsg+0x642/0xb30 [ 660.700200][T13120] ? skb_put+0x11b/0x210 [ 660.700233][T13120] netlink_sendmsg+0x805/0xb30 [ 660.700285][T13120] ? __pfx_netlink_sendmsg+0x10/0x10 [ 660.700312][T13120] ? aa_sock_msg_perm+0xf1/0x1d0 [ 660.700336][T13120] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 660.700356][T13120] ? __pfx_netlink_sendmsg+0x10/0x10 [ 660.700381][T13120] __sock_sendmsg+0x21c/0x270 [ 660.700404][T13120] ____sys_sendmsg+0x505/0x830 [ 660.700438][T13120] ? __pfx_____sys_sendmsg+0x10/0x10 [ 660.700472][T13120] ? import_iovec+0x74/0xa0 [ 660.700494][T13120] ___sys_sendmsg+0x21f/0x2a0 [ 660.700525][T13120] ? __pfx____sys_sendmsg+0x10/0x10 [ 660.700584][T13120] ? __fget_files+0x2a/0x420 [ 660.700604][T13120] ? __fget_files+0x3a0/0x420 [ 660.700635][T13120] __x64_sys_sendmsg+0x19b/0x260 [ 660.700662][T13120] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 660.700696][T13120] ? __pfx_ksys_write+0x10/0x10 [ 660.700718][T13120] ? do_syscall_64+0xbe/0xfa0 [ 660.700744][T13120] do_syscall_64+0xfa/0xfa0 [ 660.700764][T13120] ? lockdep_hardirqs_on+0x9c/0x150 [ 660.700786][T13120] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.700803][T13120] ? clear_bhb_loop+0x60/0xb0 [ 660.700825][T13120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.700843][T13120] RIP: 0033:0x7fb5b1b8f749 [ 660.700860][T13120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 660.700876][T13120] RSP: 002b:00007fb5b29d8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 660.700897][T13120] RAX: ffffffffffffffda RBX: 00007fb5b1de5fa0 RCX: 00007fb5b1b8f749 [ 660.700911][T13120] RDX: 0000000004000800 RSI: 0000200000000000 RDI: 0000000000000003 [ 660.700924][T13120] RBP: 00007fb5b29d8090 R08: 0000000000000000 R09: 0000000000000000 [ 660.700944][T13120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 660.700956][T13120] R13: 00007fb5b1de6038 R14: 00007fb5b1de5fa0 R15: 00007fb5b1f0fa28 [ 660.700988][T13120] [ 661.512433][T13126] usb usb8: usbfs: process 13126 (syz.7.1700) did not claim interface 0 before use [ 661.629814][T13128] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1702'. [ 661.667257][T13128] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1702'. [ 661.679934][T13128] netlink: 'syz.7.1702': attribute type 13 has an invalid length. [ 661.692924][T13128] netlink: 'syz.7.1702': attribute type 12 has an invalid length. [ 661.918977][T13144] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 663.102971][ T5903] IPVS: starting estimator thread 0... [ 663.225838][T13158] IPVS: using max 38 ests per chain, 91200 per kthread [ 666.530600][T13196] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1714'. [ 666.603633][T13196] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 667.167595][T13201] syzkaller0: entered promiscuous mode [ 667.193285][T13201] syzkaller0: entered allmulticast mode [ 667.506136][T11617] usb 7-1: new low-speed USB device number 50 using dummy_hcd [ 667.645714][T11617] usb 7-1: device descriptor read/64, error -71 [ 667.905653][T11617] usb 7-1: new low-speed USB device number 51 using dummy_hcd [ 668.166267][T11617] usb 7-1: device descriptor read/64, error -71 [ 668.276700][T11617] usb usb7-port1: attempt power cycle [ 668.626851][T11617] usb 7-1: new low-speed USB device number 52 using dummy_hcd [ 668.656458][T11617] usb 7-1: device descriptor read/8, error -71 [ 668.907248][T11617] usb 7-1: new low-speed USB device number 53 using dummy_hcd [ 668.947136][T11617] usb 7-1: device descriptor read/8, error -71 [ 669.096452][T11617] usb usb7-port1: unable to enumerate USB device [ 670.334441][T13232] input: syz0 as /devices/virtual/input/input72 [ 670.505304][T13236] FAULT_INJECTION: forcing a failure. [ 670.505304][T13236] name failslab, interval 1, probability 0, space 0, times 0 [ 670.519230][T13236] CPU: 1 UID: 0 PID: 13236 Comm: syz.6.1725 Not tainted syzkaller #0 PREEMPT(full) [ 670.519254][T13236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 670.519275][T13236] Call Trace: [ 670.519280][T13236] [ 670.519285][T13236] dump_stack_lvl+0x189/0x250 [ 670.519310][T13236] ? __pfx____ratelimit+0x10/0x10 [ 670.519323][T13236] ? __pfx_dump_stack_lvl+0x10/0x10 [ 670.519335][T13236] ? __pfx__printk+0x10/0x10 [ 670.519349][T13236] ? __pfx___might_resched+0x10/0x10 [ 670.519360][T13236] ? fs_reclaim_acquire+0x7d/0x100 [ 670.519375][T13236] should_fail_ex+0x414/0x560 [ 670.519390][T13236] should_failslab+0xa8/0x100 [ 670.519402][T13236] __kmalloc_cache_noprof+0x6f/0x6f0 [ 670.519412][T13236] ? do_signalfd4+0x135/0x370 [ 670.519430][T13236] do_signalfd4+0x135/0x370 [ 670.519445][T13236] __x64_sys_signalfd4+0x154/0x190 [ 670.519460][T13236] ? __pfx___x64_sys_signalfd4+0x10/0x10 [ 670.519472][T13236] ? arch_syscall_is_vdso_sigreturn+0x120/0x1a0 [ 670.519484][T13236] ? syscall_user_dispatch+0x4f/0x90 [ 670.519497][T13236] do_syscall_64+0xfa/0xfa0 [ 670.519509][T13236] ? lockdep_hardirqs_on+0x9c/0x150 [ 670.519522][T13236] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.519532][T13236] ? clear_bhb_loop+0x60/0xb0 [ 670.519547][T13236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.519559][T13236] RIP: 0033:0x7f312b58f749 [ 670.519569][T13236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 670.519578][T13236] RSP: 002b:00007f312c449038 EFLAGS: 00000246 ORIG_RAX: 0000000000000121 [ 670.519590][T13236] RAX: ffffffffffffffda RBX: 00007f312b7e5fa0 RCX: 00007f312b58f749 [ 670.519598][T13236] RDX: 0000000000000008 RSI: 0000200000000000 RDI: ffffffffffffffff [ 670.519605][T13236] RBP: 00007f312c449090 R08: 0000000000000000 R09: 0000000000000000 [ 670.519612][T13236] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 670.519618][T13236] R13: 00007f312b7e6038 R14: 00007f312b7e5fa0 R15: 00007f312b90fa28 [ 670.519634][T13236] [ 672.262220][T13250] loop6: detected capacity change from 0 to 524288000 [ 672.756735][T13240] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1726'. [ 672.975146][T13250] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 673.302665][T13263] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1730'. [ 673.378081][T13264] netlink: 276 bytes leftover after parsing attributes in process `syz.9.1729'. [ 673.403205][T13264] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 673.443295][T13271] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 673.485595][T13264] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 673.892000][T13281] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1734'. [ 673.906369][T13281] bond0: Removing last ns target with arp_interval on [ 673.926993][T13281] netlink: 179596 bytes leftover after parsing attributes in process `syz.8.1734'. [ 674.505701][T11614] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 674.675918][T11614] usb 7-1: Using ep0 maxpacket: 16 [ 674.730568][T11614] usb 7-1: config 0 has an invalid interface number: 194 but max is 0 [ 674.742562][T11614] usb 7-1: config 0 has no interface number 0 [ 674.757842][T11614] usb 7-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=b4.25 [ 674.770741][T11614] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.782936][T11614] usb 7-1: Product: syz [ 674.789755][T11614] usb 7-1: Manufacturer: syz [ 674.798034][T11614] usb 7-1: SerialNumber: syz [ 674.809350][T11614] usb 7-1: config 0 descriptor?? [ 674.862993][T11614] cypress_cy7c63 7-1:0.194: Cypress CY7C63xxx device now attached [ 675.072616][T11614] usb 7-1: USB disconnect, device number 54 [ 675.097695][T11614] cypress_cy7c63 7-1:0.194: Cypress CY7C63xxx device now disconnected [ 675.404862][T13296] netlink: 'syz.7.1741': attribute type 1 has an invalid length. [ 675.496638][T13299] netlink: 'syz.9.1742': attribute type 3 has an invalid length. [ 675.506549][T13299] netlink: 'syz.9.1742': attribute type 3 has an invalid length. [ 675.521918][T13299] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1742'. [ 675.543491][T13299] FAULT_INJECTION: forcing a failure. [ 675.543491][T13299] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 675.565979][T13299] CPU: 1 UID: 0 PID: 13299 Comm: syz.9.1742 Not tainted syzkaller #0 PREEMPT(full) [ 675.565999][T13299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 675.566014][T13299] Call Trace: [ 675.566027][T13299] [ 675.566036][T13299] dump_stack_lvl+0x189/0x250 [ 675.566062][T13299] ? __pfx____ratelimit+0x10/0x10 [ 675.566083][T13299] ? __pfx_dump_stack_lvl+0x10/0x10 [ 675.566104][T13299] ? __pfx__printk+0x10/0x10 [ 675.566122][T13299] ? __might_fault+0xb0/0x130 [ 675.566149][T13299] should_fail_ex+0x414/0x560 [ 675.566169][T13299] _copy_from_iter+0x1de/0x1790 [ 675.566196][T13299] ? rcu_is_watching+0x15/0xb0 [ 675.566220][T13299] ? kmalloc_reserve+0xbd/0x290 [ 675.566242][T13299] ? __pfx__copy_from_iter+0x10/0x10 [ 675.566267][T13299] ? __build_skb_around+0x262/0x3f0 [ 675.566290][T13299] ? netlink_sendmsg+0x642/0xb30 [ 675.566311][T13299] ? skb_put+0x11b/0x210 [ 675.566335][T13299] netlink_sendmsg+0x6b2/0xb30 [ 675.566366][T13299] ? __pfx_netlink_sendmsg+0x10/0x10 [ 675.566397][T13299] ? aa_sock_msg_perm+0xf1/0x1d0 [ 675.566419][T13299] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 675.566438][T13299] ? __pfx_netlink_sendmsg+0x10/0x10 [ 675.566461][T13299] __sock_sendmsg+0x21c/0x270 [ 675.566483][T13299] ____sys_sendmsg+0x505/0x830 [ 675.566511][T13299] ? __pfx_____sys_sendmsg+0x10/0x10 [ 675.566543][T13299] ? import_iovec+0x74/0xa0 [ 675.566563][T13299] ___sys_sendmsg+0x21f/0x2a0 [ 675.566589][T13299] ? __pfx____sys_sendmsg+0x10/0x10 [ 675.566646][T13299] ? __fget_files+0x2a/0x420 [ 675.566664][T13299] ? __fget_files+0x3a0/0x420 [ 675.566693][T13299] __x64_sys_sendmsg+0x19b/0x260 [ 675.566715][T13299] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 675.566745][T13299] ? __pfx_ksys_write+0x10/0x10 [ 675.566763][T13299] ? do_syscall_64+0xbe/0xfa0 [ 675.566787][T13299] do_syscall_64+0xfa/0xfa0 [ 675.566807][T13299] ? lockdep_hardirqs_on+0x9c/0x150 [ 675.566825][T13299] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.566839][T13299] ? clear_bhb_loop+0x60/0xb0 [ 675.566860][T13299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.566879][T13299] RIP: 0033:0x7f64ae58f749 [ 675.566905][T13299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 675.566920][T13299] RSP: 002b:00007f64af345038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 675.566940][T13299] RAX: ffffffffffffffda RBX: 00007f64ae7e5fa0 RCX: 00007f64ae58f749 [ 675.566951][T13299] RDX: 0000000004000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 675.566959][T13299] RBP: 00007f64af345090 R08: 0000000000000000 R09: 0000000000000000 [ 675.566969][T13299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 675.566978][T13299] R13: 00007f64ae7e6038 R14: 00007f64ae7e5fa0 R15: 00007f64ae90fa28 [ 675.567006][T13299] [ 675.911074][ C1] vkms_vblank_simulate: vblank timer overrun [ 676.045160][T13301] loop4: detected capacity change from 0 to 2560 [ 676.142482][T13301] buffer_io_error: 311 callbacks suppressed [ 676.142505][T13301] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 676.164165][T13301] Buffer I/O error on dev loop4, logical block 1, lost async page write [ 676.173774][T13301] Buffer I/O error on dev loop4, logical block 2, lost async page write [ 676.182817][T13301] Buffer I/O error on dev loop4, logical block 3, lost async page write [ 676.192100][T13301] Buffer I/O error on dev loop4, logical block 4, lost async page write [ 676.201215][T13301] Buffer I/O error on dev loop4, logical block 5, lost async page write [ 676.211082][T13301] Buffer I/O error on dev loop4, logical block 6, lost async page write [ 676.220267][T13301] Buffer I/O error on dev loop4, logical block 7, lost async page write [ 676.229817][T13301] Buffer I/O error on dev loop4, logical block 8, lost async page write [ 676.239389][T13301] Buffer I/O error on dev loop4, logical block 9, lost async page write [ 676.915760][T11614] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 677.085771][T11614] usb 2-1: Using ep0 maxpacket: 8 [ 677.146270][T11614] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 677.199265][T11614] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 677.287448][T11614] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 677.316441][T11614] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 677.364412][T11614] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 677.382891][T11614] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.580631][T13339] bond0: Removing last ns target with arp_interval on [ 677.701773][T11614] usb 2-1: usb_control_msg returned -32 [ 677.746436][T11614] usbtmc 2-1:16.0: can't read capabilities [ 677.785151][T13339] netlink: 179596 bytes leftover after parsing attributes in process `syz.8.1750'. [ 678.099333][T13350] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 679.228330][T13342] bond4: entered promiscuous mode [ 679.233779][T13342] bond4: entered allmulticast mode [ 679.245904][T13342] 8021q: adding VLAN 0 to HW filter on device bond4 [ 679.821641][T11614] usb 2-1: USB disconnect, device number 56 [ 681.459929][T13378] loop4: detected capacity change from 0 to 2560 [ 681.469567][T13378] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1760'. [ 681.529800][T13379] buffer_io_error: 315 callbacks suppressed [ 681.529823][T13379] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 681.544646][T13379] Buffer I/O error on dev loop4, logical block 1, lost async page write [ 681.554479][T13379] Buffer I/O error on dev loop4, logical block 2, lost async page write [ 681.564612][T13379] Buffer I/O error on dev loop4, logical block 3, lost async page write [ 681.573419][T13379] Buffer I/O error on dev loop4, logical block 4, lost async page write [ 681.582323][T13379] Buffer I/O error on dev loop4, logical block 5, lost async page write [ 681.604445][T13198] Buffer I/O error on dev loop4, logical block 256, lost async page write [ 681.617179][T13198] Buffer I/O error on dev loop4, logical block 257, lost async page write [ 681.632516][T13379] Buffer I/O error on dev loop4, logical block 6, lost async page write [ 681.641097][T13379] Buffer I/O error on dev loop4, logical block 7, lost async page write [ 681.929750][T13385] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1761'. [ 682.499647][T13368] bond3: entered promiscuous mode [ 682.504850][T13368] bond3: entered allmulticast mode [ 682.514577][T13368] 8021q: adding VLAN 0 to HW filter on device bond3 [ 683.199704][T13405] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 683.378967][T13413] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1767'. [ 683.398271][T13413] bond0: Removing last ns target with arp_interval on [ 683.416195][T13413] 8021q: adding VLAN 0 to HW filter on device bond0 [ 683.553351][T13413] netlink: 179596 bytes leftover after parsing attributes in process `syz.6.1767'. [ 684.430847][T13416] warning: `syz.9.1769' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 685.550822][T13434] loop4: detected capacity change from 0 to 2560 [ 685.614249][T13434] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1774'. [ 685.910351][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.916914][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.018935][T13443] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1776'. [ 686.056485][T13443] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1776'. [ 686.122642][T13446] input: syz1 as /devices/virtual/input/input73 [ 686.209086][T13443] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 686.805859][T11614] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 686.925239][T13465] fuse: Bad value for 'fd' [ 686.971397][T11614] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 686.982204][T11614] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 686.996426][T11614] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 687.006608][T11614] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 687.014717][T11614] usb 2-1: SerialNumber: syz [ 687.292515][T11614] usb 2-1: 0:2 : does not exist [ 687.308264][T11614] usb 2-1: USB disconnect, device number 57 [ 687.823739][T13477] bond0: Removing last ns target with arp_interval on [ 687.846661][T13477] netlink: 179596 bytes leftover after parsing attributes in process `syz.7.1784'. [ 688.915741][ T5158] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 689.140043][ T5158] usb 2-1: Using ep0 maxpacket: 8 [ 689.151509][ T5158] usb 2-1: unable to get BOS descriptor or descriptor too short [ 689.161170][ T5158] usb 2-1: config 4 interface 0 has no altsetting 0 [ 689.271536][ T5158] usb 2-1: string descriptor 0 read error: -22 [ 689.277901][ T5158] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 689.287342][ T5158] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.373225][ T5158] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 689.414089][T13446] syz.9.1777 (13446): drop_caches: 2 [ 689.421449][ T5158] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 689.545776][ T5158] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 689.595893][ T5158] usb 2-1: media controller created [ 689.681971][ T5158] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 690.487758][T13481] usb 2-1: dvb_usb_au6610: wlen=0, aborting [ 690.715641][T13507] bond2: entered promiscuous mode [ 690.720772][T13507] bond2: entered allmulticast mode [ 690.741373][T13507] 8021q: adding VLAN 0 to HW filter on device bond2 [ 691.361084][T13518] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1792'. [ 691.465719][T13518] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1792'. [ 691.516035][ T5158] zl10353_read_register: readreg error (reg=127, ret==0) [ 691.574804][T13518] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 693.860495][T13549] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1799'. [ 695.231231][T13569] binder: 13568:13569 ioctl c0306201 0 returned -14 [ 695.340073][T13571] pimreg: entered allmulticast mode [ 695.450668][T13572] pimreg: left allmulticast mode [ 695.670096][T13579] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1805'. [ 696.092892][ T5903] usb 2-1: USB disconnect, device number 58 [ 696.150877][T13589] binder: 13588:13589 unknown command 0 [ 696.172663][T13589] binder: 13588:13589 ioctl c0306201 200000000080 returned -22 [ 696.468704][T13592] netlink: 'syz.6.1810': attribute type 6 has an invalid length. [ 696.619394][T13592] IPv6: NLM_F_CREATE should be specified when creating new route [ 696.642383][T13592] IPv6: Can't replace route, no match found [ 697.043527][T13600] input: syz1 as /devices/virtual/input/input74 [ 697.045680][ T5903] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 697.073248][T13600] binder: 13596:13600 ioctl c0306201 0 returned -14 [ 697.208883][ T5903] usb 7-1: Using ep0 maxpacket: 32 [ 697.218830][ T5903] usb 7-1: config 0 has an invalid interface number: 132 but max is 0 [ 697.228029][ T5903] usb 7-1: config 0 has no interface number 0 [ 697.234119][ T5903] usb 7-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 697.250211][ T5903] usb 7-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 697.259955][ T5903] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.269371][ T5903] usb 7-1: Product: syz [ 697.273736][ T5903] usb 7-1: Manufacturer: syz [ 697.278913][ T5903] usb 7-1: SerialNumber: syz [ 697.310320][ T5903] usb 7-1: config 0 descriptor?? [ 697.380824][ T5903] em28xx 7-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 697.394817][ T5903] em28xx 7-1:0.132: Video interface 132 found: [ 697.800206][ T5903] em28xx 7-1:0.132: unknown em28xx chip ID (0) [ 697.872979][T13600] syz.7.1813 (13600): drop_caches: 2 [ 698.043720][T13616] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1817'. [ 698.946389][ T5903] em28xx 7-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 698.967860][T13595] em28xx 7-1:0.132: failed to trigger read from i2c address 0x0 (error=-5) [ 698.981304][ T5903] em28xx 7-1:0.132: board has no eeprom [ 699.085584][ T5903] em28xx 7-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 699.093569][ T5903] em28xx 7-1:0.132: analog set to bulk mode. [ 699.099936][T11607] em28xx 7-1:0.132: Registering V4L2 extension [ 699.139253][ T5903] usb 7-1: USB disconnect, device number 55 [ 699.167615][ T5903] em28xx 7-1:0.132: Disconnecting em28xx [ 699.478468][T11607] em28xx 7-1:0.132: Config register raw data: 0xffffffed [ 699.506958][T11607] em28xx 7-1:0.132: AC97 chip type couldn't be determined [ 699.514126][T11607] em28xx 7-1:0.132: No AC97 audio processor [ 699.577926][T11607] usb 7-1: Decoder not found [ 699.582570][T11607] em28xx 7-1:0.132: failed to create media graph [ 699.597110][T11607] em28xx 7-1:0.132: V4L2 device video103 deregistered [ 699.642997][T11607] em28xx 7-1:0.132: Remote control support is not available for this card. [ 699.675818][ T5903] em28xx 7-1:0.132: Closing input extension [ 699.690707][ T5903] em28xx 7-1:0.132: Freeing device [ 699.696657][T13671] netlink: 47 bytes leftover after parsing attributes in process `syz.6.1839'. [ 699.718436][T13671] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1839'. [ 700.256456][T13687] kvm: kvm [13686]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 700.290236][T13687] kvm: kvm [13686]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 700.740235][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 700.740252][ T30] audit: type=1326 audit(1764651229.217:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13711 comm="syz.9.1855" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f64ae58f749 code=0x0 [ 700.858027][T13720] netlink: 84 bytes leftover after parsing attributes in process `syz.8.1857'. [ 701.753665][T13766] netlink: 'syz.7.1874': attribute type 9 has an invalid length. [ 702.113205][T13784] 8021q: adding VLAN 0 to HW filter on device team0 [ 702.155852][T13784] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 702.553206][ T30] audit: type=1326 audit(1764651231.027:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13809 comm="syz.8.1895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f866438f749 code=0x7ffc0000 [ 702.594947][ T30] audit: type=1326 audit(1764651231.027:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13809 comm="syz.8.1895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f866438f749 code=0x7ffc0000 [ 702.618673][ T30] audit: type=1326 audit(1764651231.027:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13809 comm="syz.8.1895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f866438f749 code=0x7ffc0000 [ 702.691802][ T30] audit: type=1326 audit(1764651231.027:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13809 comm="syz.8.1895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f866438f749 code=0x7ffc0000 [ 702.989885][T13824] pimreg: tun_chr_ioctl cmd 1074812118 [ 703.007249][T13827] pimreg: tun_chr_ioctl cmd 1074025680 [ 704.106029][T13864] netlink: 'syz.9.1918': attribute type 12 has an invalid length. [ 704.139686][T13864] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1918'. [ 705.938357][T13905] kvm: requested 130742 ns i8254 timer period limited to 200000 ns [ 705.959286][T13905] kvm: requested 65371 ns i8254 timer period limited to 200000 ns [ 705.991517][T13905] kvm: requested 42742 ns i8254 timer period limited to 200000 ns [ 706.017683][T13905] kvm: requested 197790 ns i8254 timer period limited to 200000 ns [ 706.038390][T13905] kvm: requested 36876 ns i8254 timer period limited to 200000 ns [ 706.047867][T13905] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 706.058333][T13905] kvm: requested 50285 ns i8254 timer period limited to 200000 ns [ 706.070213][T13905] kvm: requested 33523 ns i8254 timer period limited to 200000 ns [ 706.087356][T13905] kvm: requested 118171 ns i8254 timer period limited to 200000 ns [ 706.114973][T13905] kvm: requested 60342 ns i8254 timer period limited to 200000 ns [ 706.545122][T13926] mmap: syz.6.1943 (13926): VmData 37412864 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 707.747596][T13976] sock: sock_set_timeout: `syz.7.1965' (pid 13976) tries to set negative timeout [ 707.891367][T13983] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1968'. [ 708.620867][ T30] audit: type=1326 audit(1764651237.087:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13991 comm="syz.7.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5b1b8f749 code=0x7ffc0000 [ 708.686142][ T30] audit: type=1326 audit(1764651237.087:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13991 comm="syz.7.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5b1b8f749 code=0x7ffc0000 [ 708.739036][ T30] audit: type=1326 audit(1764651237.097:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13991 comm="syz.7.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7fb5b1b8f749 code=0x7ffc0000 [ 708.865527][ T30] audit: type=1326 audit(1764651237.097:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13991 comm="syz.7.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5b1b8f749 code=0x7ffc0000 [ 708.911558][ T30] audit: type=1326 audit(1764651237.097:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13991 comm="syz.7.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb5b1b8f749 code=0x7ffc0000 [ 709.039146][ T30] audit: type=1326 audit(1764651237.097:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13991 comm="syz.7.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5b1b8f749 code=0x7ffc0000 [ 709.077883][ T30] audit: type=1326 audit(1764651237.097:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13991 comm="syz.7.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb5b1b8f749 code=0x7ffc0000 [ 709.132031][ T30] audit: type=1326 audit(1764651237.097:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13991 comm="syz.7.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5b1b8f749 code=0x7ffc0000 [ 709.165549][ T30] audit: type=1326 audit(1764651237.097:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13991 comm="syz.7.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7fb5b1b8f749 code=0x7ffc0000 [ 709.221699][ T30] audit: type=1326 audit(1764651237.097:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13991 comm="syz.7.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5b1b8f749 code=0x7ffc0000 [ 709.384952][T14005] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1973'. [ 711.022452][T14053] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1986'. [ 711.032084][T14053] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1986'. [ 711.161187][T14055] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1999'. [ 711.515630][T14053] macvlan0: entered allmulticast mode [ 711.521642][T14053] veth1_vlan: entered allmulticast mode [ 716.096028][T14179] netlink: 664 bytes leftover after parsing attributes in process `syz.6.2048'. [ 716.126249][T14179] netlink: 664 bytes leftover after parsing attributes in process `syz.6.2048'. [ 718.106106][T14220] capability: warning: `syz.7.2068' uses 32-bit capabilities (legacy support in use) [ 721.789911][T14314] netlink: 'syz.8.2105': attribute type 1 has an invalid length. [ 722.061977][T14320] 8021q: adding VLAN 0 to HW filter on device bond4 [ 722.112042][T14320] bond3: (slave bond4): making interface the new active one [ 722.139282][T14320] bond3: (slave bond4): Enslaving as an active interface with an up link [ 725.202814][T14424] [ 725.205287][T14424] ===================================================== [ 725.212903][T14424] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 725.221284][T14424] syzkaller #0 Not tainted [ 725.225807][T14424] ----------------------------------------------------- [ 725.234136][T14424] syz.6.2150/14424 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 725.243807][T14424] ffff888075165408 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 725.253217][T14424] [ 725.253217][T14424] and this task is already holding: [ 725.260856][T14424] ffff8880378cf028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 725.274173][T14424] which would create a new lock dependency: [ 725.281548][T14424] (&client->buffer_lock){....}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 725.289953][T14424] [ 725.289953][T14424] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 725.301606][T14424] (&dev->event_lock#2){..-.}-{3:3} [ 725.301651][T14424] [ 725.301651][T14424] ... which became SOFTIRQ-irq-safe at: [ 725.315872][T14424] lock_acquire+0x120/0x360 [ 725.320746][T14424] _raw_spin_lock_irqsave+0xa7/0xf0 [ 725.326300][T14424] input_event+0x76/0xe0 [ 725.331107][T14424] atp_complete_geyser_3_4+0x11f2/0x1e80 [ 725.337712][T14424] __usb_hcd_giveback_urb+0x376/0x540 [ 725.343397][T14424] dummy_timer+0x85f/0x44c0 [ 725.348194][T14424] __hrtimer_run_queues+0x52c/0xc60 [ 725.353953][T14424] hrtimer_run_softirq+0x187/0x2b0 [ 725.359278][T14424] handle_softirqs+0x286/0x870 [ 725.364667][T14424] __irq_exit_rcu+0xca/0x1f0 [ 725.369431][T14424] irq_exit_rcu+0x9/0x30 [ 725.373823][T14424] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 725.381015][T14424] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 725.388785][T14424] _raw_spin_unlock_irqrestore+0xa8/0x110 [ 725.395460][T14424] dummy_urb_enqueue+0x58a/0x780 [ 725.400829][T14424] usb_hcd_submit_urb+0x325/0x1aa0 [ 725.406527][T14424] atp_open+0x63/0xc0 [ 725.411441][T14424] input_open_device+0x1d3/0x390 [ 725.416920][T14424] mousedev_open_device+0xcc/0x150 [ 725.423105][T14424] mousedev_open+0x2ef/0x4a0 [ 725.429070][T14424] chrdev_open+0x4cc/0x5e0 [ 725.433591][T14424] do_dentry_open+0x7e4/0x1430 [ 725.438794][T14424] vfs_open+0x3b/0x340 [ 725.443156][T14424] path_openat+0x3045/0x3b80 [ 725.448051][T14424] do_filp_open+0x1fa/0x410 [ 725.452791][T14424] do_sys_openat2+0x121/0x1c0 [ 725.458020][T14424] __x64_sys_openat+0x138/0x170 [ 725.463228][T14424] do_syscall_64+0xfa/0xfa0 [ 725.468022][T14424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.475311][T14424] [ 725.475311][T14424] to a SOFTIRQ-irq-unsafe lock: [ 725.483479][T14424] (tasklist_lock){.+.+}-{3:3} [ 725.483509][T14424] [ 725.483509][T14424] ... which became SOFTIRQ-irq-unsafe at: [ 725.497229][T14424] ... [ 725.497242][T14424] lock_acquire+0x120/0x360 [ 725.505712][T14424] _raw_read_lock+0x36/0x50 [ 725.511854][T14424] __do_wait+0xde/0x740 [ 725.517674][T14424] do_wait+0x1f8/0x510 [ 725.522152][T14424] kernel_wait+0xab/0x170 [ 725.527088][T14424] call_usermodehelper_exec_work+0xbe/0x230 [ 725.534593][T14424] process_scheduled_works+0xae1/0x17b0 [ 725.541690][T14424] worker_thread+0x8a0/0xda0 [ 725.547871][T14424] kthread+0x711/0x8a0 [ 725.554293][T14424] ret_from_fork+0x4bc/0x870 [ 725.559243][T14424] ret_from_fork_asm+0x1a/0x30 [ 725.564633][T14424] [ 725.564633][T14424] other info that might help us debug this: [ 725.564633][T14424] [ 725.575670][T14424] Chain exists of: [ 725.575670][T14424] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 725.575670][T14424] [ 725.590513][T14424] Possible interrupt unsafe locking scenario: [ 725.590513][T14424] [ 725.599367][T14424] CPU0 CPU1 [ 725.605083][T14424] ---- ---- [ 725.610540][T14424] lock(tasklist_lock); [ 725.615666][T14424] local_irq_disable(); [ 725.622510][T14424] lock(&dev->event_lock#2); [ 725.630015][T14424] lock(&client->buffer_lock); [ 725.637762][T14424] [ 725.641660][T14424] lock(&dev->event_lock#2); [ 725.646635][T14424] [ 725.646635][T14424] *** DEADLOCK *** [ 725.646635][T14424] [ 725.654970][T14424] 7 locks held by syz.6.2150/14424: [ 725.660644][T14424] #0: ffff888029356118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480 [ 725.669976][T14424] #1: ffff88801e71e230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340 [ 725.680445][T14424] #2: ffffffff8df3d0a0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb6/0x340 [ 725.690761][T14424] #3: ffffffff8df3d0a0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 725.700793][T14424] #4: ffffffff8df3d0a0 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 725.710517][T14424] #5: ffff8880378cf028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 725.722232][T14424] #6: ffffffff8df3d0a0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 725.732873][T14424] [ 725.732873][T14424] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 725.743367][T14424] -> (&dev->event_lock#2){..-.}-{3:3} { [ 725.749680][T14424] IN-SOFTIRQ-W at: [ 725.754096][T14424] lock_acquire+0x120/0x360 [ 725.760470][T14424] _raw_spin_lock_irqsave+0xa7/0xf0 [ 725.768203][T14424] input_event+0x76/0xe0 [ 725.774478][T14424] atp_complete_geyser_3_4+0x11f2/0x1e80 [ 725.782059][T14424] __usb_hcd_giveback_urb+0x376/0x540 [ 725.789710][T14424] dummy_timer+0x85f/0x44c0 [ 725.797194][T14424] __hrtimer_run_queues+0x52c/0xc60 [ 725.804322][T14424] hrtimer_run_softirq+0x187/0x2b0 [ 725.812417][T14424] handle_softirqs+0x286/0x870 [ 725.820596][T14424] __irq_exit_rcu+0xca/0x1f0 [ 725.827692][T14424] irq_exit_rcu+0x9/0x30 [ 725.836618][T14424] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 725.845676][T14424] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 725.855553][T14424] _raw_spin_unlock_irqrestore+0xa8/0x110 [ 725.867560][T14424] dummy_urb_enqueue+0x58a/0x780 [ 725.875569][T14424] usb_hcd_submit_urb+0x325/0x1aa0 [ 725.883926][T14424] atp_open+0x63/0xc0 [ 725.891146][T14424] input_open_device+0x1d3/0x390 [ 725.898511][T14424] mousedev_open_device+0xcc/0x150 [ 725.905753][T14424] mousedev_open+0x2ef/0x4a0 [ 725.915073][T14424] chrdev_open+0x4cc/0x5e0 [ 725.923653][T14424] do_dentry_open+0x7e4/0x1430 [ 725.932576][T14424] vfs_open+0x3b/0x340 [ 725.940592][T14424] path_openat+0x3045/0x3b80 [ 725.949843][T14424] do_filp_open+0x1fa/0x410 [ 725.958951][T14424] do_sys_openat2+0x121/0x1c0 [ 725.967299][T14424] __x64_sys_openat+0x138/0x170 [ 725.975213][T14424] do_syscall_64+0xfa/0xfa0 [ 725.981860][T14424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.991554][T14424] INITIAL USE at: [ 725.995716][T14424] lock_acquire+0x120/0x360 [ 726.003369][T14424] _raw_spin_lock_irqsave+0xa7/0xf0 [ 726.011087][T14424] input_inject_event+0xa5/0x340 [ 726.018476][T14424] kbd_led_trigger_activate+0xbc/0x100 [ 726.028556][T14424] led_trigger_set+0x52d/0x950 [ 726.036120][T14424] led_trigger_set_default+0x260/0x2a0 [ 726.045366][T14424] led_classdev_register_ext+0x73d/0x930 [ 726.053701][T14424] input_leds_connect+0x517/0x790 [ 726.060661][T14424] input_register_device+0xd00/0x1140 [ 726.069450][T14424] atkbd_connect+0x72e/0xa00 [ 726.075997][T14424] serio_driver_probe+0x82/0xd0 [ 726.083678][T14424] really_probe+0x26d/0x9e0 [ 726.090413][T14424] __driver_probe_device+0x18c/0x2f0 [ 726.098750][T14424] driver_probe_device+0x4f/0x430 [ 726.107619][T14424] __driver_attach+0x452/0x700 [ 726.115604][T14424] bus_for_each_dev+0x233/0x2b0 [ 726.123071][T14424] serio_handle_event+0x1f9/0x8d0 [ 726.130109][T14424] process_scheduled_works+0xae1/0x17b0 [ 726.139107][T14424] worker_thread+0x8a0/0xda0 [ 726.148882][T14424] kthread+0x711/0x8a0 [ 726.155672][T14424] ret_from_fork+0x4bc/0x870 [ 726.164214][T14424] ret_from_fork_asm+0x1a/0x30 [ 726.173785][T14424] } [ 726.176545][T14424] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 726.189667][T14424] -> (&client->buffer_lock){....}-{3:3} { [ 726.197072][T14424] INITIAL USE at: [ 726.202040][T14424] lock_acquire+0x120/0x360 [ 726.208628][T14424] _raw_spin_lock+0x2e/0x40 [ 726.215738][T14424] evdev_pass_values+0xb9/0xbd0 [ 726.224210][T14424] evdev_events+0x1e6/0x340 [ 726.231882][T14424] input_pass_values+0x288/0x890 [ 726.239380][T14424] input_event_dispose+0x330/0x6b0 [ 726.246723][T14424] input_inject_event+0x1dd/0x340 [ 726.254367][T14424] evdev_write+0x2fc/0x480 [ 726.260656][T14424] vfs_write+0x27e/0xb30 [ 726.271040][T14424] ksys_write+0x145/0x250 [ 726.277408][T14424] do_syscall_64+0xfa/0xfa0 [ 726.284025][T14424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.293069][T14424] } [ 726.296206][T14424] ... key at: [] evdev_open.__key.25+0x0/0x20 [ 726.304725][T14424] ... acquired at: [ 726.308797][T14424] lock_acquire+0x120/0x360 [ 726.314587][T14424] _raw_spin_lock+0x2e/0x40 [ 726.319734][T14424] evdev_pass_values+0xb9/0xbd0 [ 726.326635][T14424] evdev_events+0x1e6/0x340 [ 726.331577][T14424] input_pass_values+0x288/0x890 [ 726.338624][T14424] input_event_dispose+0x330/0x6b0 [ 726.344906][T14424] input_inject_event+0x1dd/0x340 [ 726.351205][T14424] evdev_write+0x2fc/0x480 [ 726.356275][T14424] vfs_write+0x27e/0xb30 [ 726.361931][T14424] ksys_write+0x145/0x250 [ 726.368170][T14424] do_syscall_64+0xfa/0xfa0 [ 726.375223][T14424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.381759][T14424] [ 726.384748][T14424] [ 726.384748][T14424] the dependencies between the lock to be acquired [ 726.384762][T14424] and SOFTIRQ-irq-unsafe lock: [ 726.399374][T14424] -> (tasklist_lock){.+.+}-{3:3} { [ 726.404891][T14424] HARDIRQ-ON-R at: [ 726.409405][T14424] lock_acquire+0x120/0x360 [ 726.417844][T14424] _raw_read_lock+0x36/0x50 [ 726.426097][T14424] __do_wait+0xde/0x740 [ 726.433665][T14424] do_wait+0x1f8/0x510 [ 726.441647][T14424] kernel_wait+0xab/0x170 [ 726.448864][T14424] call_usermodehelper_exec_work+0xbe/0x230 [ 726.457436][T14424] process_scheduled_works+0xae1/0x17b0 [ 726.466316][T14424] worker_thread+0x8a0/0xda0 [ 726.474748][T14424] kthread+0x711/0x8a0 [ 726.481995][T14424] ret_from_fork+0x4bc/0x870 [ 726.492368][T14424] ret_from_fork_asm+0x1a/0x30 [ 726.501058][T14424] SOFTIRQ-ON-R at: [ 726.506523][T14424] lock_acquire+0x120/0x360 [ 726.514497][T14424] _raw_read_lock+0x36/0x50 [ 726.523615][T14424] __do_wait+0xde/0x740 [ 726.531020][T14424] do_wait+0x1f8/0x510 [ 726.537727][T14424] kernel_wait+0xab/0x170 [ 726.544866][T14424] call_usermodehelper_exec_work+0xbe/0x230 [ 726.554680][T14424] process_scheduled_works+0xae1/0x17b0 [ 726.563132][T14424] worker_thread+0x8a0/0xda0 [ 726.570021][T14424] kthread+0x711/0x8a0 [ 726.577152][T14424] ret_from_fork+0x4bc/0x870 [ 726.584474][T14424] ret_from_fork_asm+0x1a/0x30 [ 726.592237][T14424] INITIAL USE at: [ 726.596616][T14424] lock_acquire+0x120/0x360 [ 726.603380][T14424] _raw_write_lock_irq+0xa2/0xf0 [ 726.610778][T14424] copy_process+0x224f/0x3c00 [ 726.618656][T14424] kernel_clone+0x21e/0x840 [ 726.626239][T14424] user_mode_thread+0xdd/0x140 [ 726.633384][T14424] rest_init+0x23/0x300 [ 726.639813][T14424] start_kernel+0x3ae/0x410 [ 726.647486][T14424] x86_64_start_reservations+0x24/0x30 [ 726.655658][T14424] x86_64_start_kernel+0x143/0x1c0 [ 726.662910][T14424] common_startup_64+0x13e/0x147 [ 726.670329][T14424] INITIAL READ USE at: [ 726.674932][T14424] lock_acquire+0x120/0x360 [ 726.681902][T14424] _raw_read_lock+0x36/0x50 [ 726.688870][T14424] __do_wait+0xde/0x740 [ 726.695586][T14424] do_wait+0x1f8/0x510 [ 726.702302][T14424] kernel_wait+0xab/0x170 [ 726.709945][T14424] call_usermodehelper_exec_work+0xbe/0x230 [ 726.718739][T14424] process_scheduled_works+0xae1/0x17b0 [ 726.726982][T14424] worker_thread+0x8a0/0xda0 [ 726.734140][T14424] kthread+0x711/0x8a0 [ 726.740933][T14424] ret_from_fork+0x4bc/0x870 [ 726.749561][T14424] ret_from_fork_asm+0x1a/0x30 [ 726.757199][T14424] } [ 726.760039][T14424] ... key at: [] tasklist_lock+0x18/0x40 [ 726.769178][T14424] ... acquired at: [ 726.773273][T14424] lock_acquire+0x120/0x360 [ 726.778040][T14424] _raw_read_lock+0x36/0x50 [ 726.782928][T14424] send_sigurg+0x12b/0x420 [ 726.787822][T14424] sk_send_sigurg+0x6c/0x2e0 [ 726.792954][T14424] queue_oob+0x420/0x4f0 [ 726.798029][T14424] unix_stream_sendmsg+0xc3f/0xdf0 [ 726.804196][T14424] __sock_sendmsg+0x21c/0x270 [ 726.809299][T14424] ____sys_sendmsg+0x505/0x830 [ 726.815483][T14424] ___sys_sendmsg+0x21f/0x2a0 [ 726.820539][T14424] __x64_sys_sendmsg+0x19b/0x260 [ 726.827045][T14424] do_syscall_64+0xfa/0xfa0 [ 726.832356][T14424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.839452][T14424] [ 726.841870][T14424] -> (&f_owner->lock){....}-{3:3} { [ 726.847965][T14424] INITIAL USE at: [ 726.852408][T14424] lock_acquire+0x120/0x360 [ 726.859717][T14424] _raw_write_lock_irq+0xa2/0xf0 [ 726.866451][T14424] __f_setown+0x67/0x370 [ 726.873924][T14424] generic_setlease+0xd60/0x1240 [ 726.881153][T14424] fcntl_setlease+0x3a2/0x4c0 [ 726.888242][T14424] do_fcntl+0x6a9/0x1910 [ 726.894382][T14424] __se_sys_fcntl+0xc8/0x150 [ 726.901160][T14424] do_syscall_64+0xfa/0xfa0 [ 726.907784][T14424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.916314][T14424] INITIAL READ USE at: [ 726.921264][T14424] lock_acquire+0x120/0x360 [ 726.928423][T14424] _raw_read_lock_irqsave+0xaf/0x100 [ 726.937388][T14424] send_sigio+0x38/0x370 [ 726.944967][T14424] kill_fasync+0x24d/0x4d0 [ 726.954506][T14424] lease_break_callback+0x26/0x30 [ 726.963512][T14424] __break_lease+0x6a5/0x1620 [ 726.971854][T14424] do_dentry_open+0x751/0x1430 [ 726.980174][T14424] vfs_open+0x3b/0x340 [ 726.987571][T14424] path_openat+0x3045/0x3b80 [ 726.996536][T14424] do_filp_open+0x1fa/0x410 [ 727.005110][T14424] do_sys_openat2+0x121/0x1c0 [ 727.013650][T14424] __x64_sys_open+0x11e/0x150 [ 727.022229][T14424] do_syscall_64+0xfa/0xfa0 [ 727.030306][T14424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.039183][T14424] } [ 727.042022][T14424] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 727.052969][T14424] ... acquired at: [ 727.057123][T14424] lock_acquire+0x120/0x360 [ 727.062343][T14424] _raw_read_lock_irqsave+0xaf/0x100 [ 727.068519][T14424] send_sigio+0x38/0x370 [ 727.074176][T14424] kill_fasync+0x24d/0x4d0 [ 727.079153][T14424] lease_break_callback+0x26/0x30 [ 727.084815][T14424] __break_lease+0x6a5/0x1620 [ 727.090910][T14424] do_dentry_open+0x751/0x1430 [ 727.096300][T14424] vfs_open+0x3b/0x340 [ 727.101986][T14424] path_openat+0x3045/0x3b80 [ 727.108961][T14424] do_filp_open+0x1fa/0x410 [ 727.114421][T14424] do_sys_openat2+0x121/0x1c0 [ 727.120857][T14424] __x64_sys_open+0x11e/0x150 [ 727.126018][T14424] do_syscall_64+0xfa/0xfa0 [ 727.130995][T14424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.137265][T14424] [ 727.140413][T14424] -> (&new->fa_lock){....}-{3:3} { [ 727.146759][T14424] INITIAL USE at: [ 727.150945][T14424] lock_acquire+0x120/0x360 [ 727.158087][T14424] _raw_write_lock_irq+0xa2/0xf0 [ 727.165366][T14424] fasync_remove_entry+0xf1/0x1c0 [ 727.172170][T14424] sock_fasync+0x85/0xf0 [ 727.179857][T14424] __fput+0x8a2/0xa70 [ 727.186998][T14424] task_work_run+0x1d4/0x260 [ 727.195365][T14424] get_signal+0x11ec/0x1340 [ 727.202483][T14424] arch_do_signal_or_restart+0xa0/0x790 [ 727.209697][T14424] exit_to_user_mode_loop+0x72/0x130 [ 727.217910][T14424] do_syscall_64+0x2bd/0xfa0 [ 727.224685][T14424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.233705][T14424] INITIAL READ USE at: [ 727.238160][T14424] lock_acquire+0x120/0x360 [ 727.244667][T14424] _raw_read_lock_irqsave+0xaf/0x100 [ 727.252252][T14424] kill_fasync+0x199/0x4d0 [ 727.258726][T14424] sock_wake_async+0x137/0x160 [ 727.265762][T14424] sctp_data_ready+0x3bb/0x550 [ 727.272716][T14424] sctp_ulpq_tail_event+0x809/0xb70 [ 727.280556][T14424] do_ulpq_tail_event+0x109/0x160 [ 727.287721][T14424] sctp_datamsg_put+0x3ec/0x540 [ 727.295711][T14424] sctp_chunk_free+0x4a/0x60 [ 727.302918][T14424] __sctp_outq_teardown+0x7ab/0x9a0 [ 727.310562][T14424] sctp_association_free+0x240/0x7f0 [ 727.319284][T14424] sctp_do_sm+0x3eba/0x5a20 [ 727.326258][T14424] sctp_primitive_SHUTDOWN+0x98/0xc0 [ 727.334014][T14424] inet_shutdown+0x271/0x390 [ 727.341337][T14424] __x64_sys_shutdown+0x13f/0x1a0 [ 727.349277][T14424] do_syscall_64+0xfa/0xfa0 [ 727.356853][T14424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.367976][T14424] } [ 727.370957][T14424] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 727.380691][T14424] ... acquired at: [ 727.384749][T14424] lock_acquire+0x120/0x360 [ 727.389576][T14424] _raw_read_lock_irqsave+0xaf/0x100 [ 727.395264][T14424] kill_fasync+0x199/0x4d0 [ 727.401271][T14424] evdev_pass_values+0x627/0xbd0 [ 727.407020][T14424] evdev_events+0x1e6/0x340 [ 727.412076][T14424] input_pass_values+0x288/0x890 [ 727.418076][T14424] input_event_dispose+0x330/0x6b0 [ 727.424088][T14424] input_inject_event+0x1dd/0x340 [ 727.429903][T14424] evdev_write+0x2fc/0x480 [ 727.434554][T14424] vfs_write+0x27e/0xb30 [ 727.439103][T14424] ksys_write+0x145/0x250 [ 727.443884][T14424] do_syscall_64+0xfa/0xfa0 [ 727.449447][T14424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.456237][T14424] [ 727.458645][T14424] [ 727.458645][T14424] stack backtrace: [ 727.464957][T14424] CPU: 0 UID: 0 PID: 14424 Comm: syz.6.2150 Not tainted syzkaller #0 PREEMPT(full) [ 727.464975][T14424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 727.464985][T14424] Call Trace: [ 727.464995][T14424] [ 727.465003][T14424] dump_stack_lvl+0x189/0x250 [ 727.465027][T14424] ? __pfx_dump_stack_lvl+0x10/0x10 [ 727.465044][T14424] ? __pfx__printk+0x10/0x10 [ 727.465067][T14424] validate_chain+0x1f05/0x2140 [ 727.465092][T14424] __lock_acquire+0xab9/0xd20 [ 727.465108][T14424] ? kill_fasync+0x199/0x4d0 [ 727.465125][T14424] lock_acquire+0x120/0x360 [ 727.465139][T14424] ? kill_fasync+0x199/0x4d0 [ 727.465159][T14424] _raw_read_lock_irqsave+0xaf/0x100 [ 727.465176][T14424] ? kill_fasync+0x199/0x4d0 [ 727.465193][T14424] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 727.465208][T14424] ? do_raw_spin_lock+0x121/0x290 [ 727.465228][T14424] kill_fasync+0x199/0x4d0 [ 727.465245][T14424] ? kill_fasync+0x53/0x4d0 [ 727.465262][T14424] evdev_pass_values+0x627/0xbd0 [ 727.465278][T14424] ? evdev_pass_values+0x5c1/0xbd0 [ 727.465292][T14424] evdev_events+0x1e6/0x340 [ 727.465304][T14424] ? evdev_events+0x79/0x340 [ 727.465317][T14424] ? input_pass_values+0x8d/0x890 [ 727.465336][T14424] input_pass_values+0x288/0x890 [ 727.465356][T14424] ? input_handle_event+0x70c/0xf30 [ 727.465373][T14424] input_event_dispose+0x330/0x6b0 [ 727.465391][T14424] input_inject_event+0x1dd/0x340 [ 727.465407][T14424] ? input_inject_event+0xb6/0x340 [ 727.465423][T14424] evdev_write+0x2fc/0x480 [ 727.465437][T14424] ? __pfx_evdev_write+0x10/0x10 [ 727.465449][T14424] ? bpf_lsm_file_permission+0x9/0x20 [ 727.465467][T14424] ? security_file_permission+0x75/0x290 [ 727.465487][T14424] ? rw_verify_area+0x255/0x4d0 [ 727.465506][T14424] ? __lock_acquire+0xab9/0xd20 [ 727.465520][T14424] ? __pfx_evdev_write+0x10/0x10 [ 727.465532][T14424] vfs_write+0x27e/0xb30 [ 727.465547][T14424] ? __pfx_vfs_write+0x10/0x10 [ 727.465560][T14424] ? __fget_files+0x2a/0x420 [ 727.465575][T14424] ? __fget_files+0x2a/0x420 [ 727.465589][T14424] ? __fget_files+0x3a0/0x420 [ 727.465603][T14424] ? __fget_files+0x2a/0x420 [ 727.465619][T14424] ksys_write+0x145/0x250 [ 727.465633][T14424] ? __pfx_ksys_write+0x10/0x10 [ 727.465646][T14424] ? do_syscall_64+0xbe/0xfa0 [ 727.465665][T14424] do_syscall_64+0xfa/0xfa0 [ 727.465680][T14424] ? lockdep_hardirqs_on+0x9c/0x150 [ 727.465697][T14424] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.465711][T14424] ? clear_bhb_loop+0x60/0xb0 [ 727.465726][T14424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.465741][T14424] RIP: 0033:0x7f312b58f749 [ 727.465756][T14424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 727.465768][T14424] RSP: 002b:00007f312c449038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 727.465784][T14424] RAX: ffffffffffffffda RBX: 00007f312b7e5fa0 RCX: 00007f312b58f749 [ 727.465795][T14424] RDX: 0000000000000037 RSI: 0000200000000040 RDI: 0000000000000003 [ 727.465804][T14424] RBP: 00007f312b613f91 R08: 0000000000000000 R09: 0000000000000000 [ 727.465813][T14424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 727.465822][T14424] R13: 00007f312b7e6038 R14: 00007f312b7e5fa0 R15: 00007f312b90fa28 [ 727.465837][T14424]