last executing test programs: 6m54.937334827s ago: executing program 0 (id=1722): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000140)={0x0, &(0x7f0000000440)=[@code={0xa, 0x63, {"66400f3566ba4000edc423594b8c880b00000054c74424003430d6d9c74424024f000000c7442406000000000f011c242e470f01c80f01ca26470f78020fc79ae6512e4a0f019da77b00006466410fd5692e"}}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0x80, 0x3ff}}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0x69, 0x5, 0x80, 0x2}}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0x3b, 0x4289, 0x1}}, @cpuid={0x64, 0x18, {0x2, 0x3ff}}, @out_dx={0x6a, 0x28, {0x5335, 0x2, 0x6}}, @wrmsr={0x65, 0x20, {0xb5f, 0x5}}, @in_dx={0x69, 0x20, {0xca42, 0x4}}, @wrmsr={0x65, 0x20, {0x381, 0x4}}], 0x19b}) (async) r0 = gettid() (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r1, &(0x7f0000000080)="99", 0x1) (async) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000100)='ns/uts\x00') (async) r2 = fanotify_init(0x200, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r2, 0x101, 0x48001051, r3, 0x0) (async) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f00000001c0)) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc89c, 0xc000, 0x2, 0x20002f7}) (async) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc89c, 0xc000, 0x2, 0x20002f7}) (async) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc89c, 0xc000, 0x2, 0x20002f7}) (async) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x28283) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000040)={0x40002008}) (async) epoll_pwait(0xffffffffffffffff, &(0x7f00000024c0)=[{}], 0x1, 0x81, 0x0, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0xa, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd25, 0x1, {0x0, 0x0, 0x0, r10, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc891}, 0x20000000) 6m54.762782159s ago: executing program 0 (id=1723): r0 = socket(0x80000000000000a, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x9, 0x8, 0x2}]}) ioctl$XFS_IOC_GOINGDOWN(r0, 0x8004587d, &(0x7f0000000180)=0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) 6m53.9106804s ago: executing program 0 (id=1727): syz_emit_ethernet(0x331, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) 6m53.820412492s ago: executing program 0 (id=1728): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_route={{0xa}, {0x448, 0x2, [@TCA_ROUTE4_POLICE={0x444, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x4, 0x7f, 0x2, 0x7, {0x9, 0x2, 0x5, 0x4, 0x2, 0xa}, {0x3, 0x1, 0x8, 0x1, 0x3, 0x9}, 0x480000, 0x5, 0x2}}, @TCA_POLICE_RATE={0x404, 0x2, [0xffffffff, 0xad4, 0x10000, 0x5, 0xb60b, 0x2, 0x8, 0x1, 0x7, 0x8, 0x5, 0x4, 0xb2, 0x3, 0xcb9, 0x7, 0x7, 0x8000, 0x9, 0x10, 0xce3, 0x9, 0x7, 0x414b, 0x4603, 0x7, 0xff, 0x1, 0x5, 0x10, 0x5, 0x1ff, 0x100, 0x80002, 0x639d, 0x0, 0x2, 0x9, 0x15b, 0x9, 0x0, 0x80, 0x40, 0x1, 0x29, 0x3ff, 0x542, 0x3, 0x10000003, 0x4, 0x6, 0x4, 0x6, 0x6, 0x15e6, 0xc, 0x4, 0x7f, 0x9, 0x0, 0x83c, 0x0, 0x8, 0x52, 0x2, 0xa7ac, 0x7, 0xfffffffa, 0x4, 0x3, 0x2, 0x0, 0x9, 0x8, 0x9, 0x34b, 0x2, 0x0, 0xcd, 0x40, 0x7fffffff, 0x6, 0x44, 0x8, 0x1, 0x80, 0x3, 0xffff, 0x0, 0x4, 0x2, 0xd, 0x1, 0x8, 0x5, 0x100, 0x0, 0x7, 0x6, 0xfffffff7, 0x5, 0x2c000000, 0x64454b99, 0x1, 0x2, 0x3, 0x401, 0x4, 0x447, 0x0, 0x5c58, 0x0, 0x8001, 0x80000001, 0x169, 0x5, 0x4, 0xfffffff8, 0x584b, 0x7a498270, 0x7, 0x2, 0x3ec, 0x8, 0x1ff, 0xbc5f, 0x0, 0x7b685e6b, 0x9, 0x0, 0x7, 0x6, 0x8001, 0x9, 0x0, 0x5, 0x400, 0x0, 0xfff, 0x9, 0x6, 0x10000, 0x9cd, 0xff, 0x4, 0x7, 0x6, 0xb1, 0x7, 0x7, 0x80, 0x2, 0x4, 0x6, 0xf0, 0x8, 0x8, 0x3, 0x8, 0x3, 0x0, 0x9, 0x2, 0x1ff, 0x10001, 0x2, 0x6, 0xfffffffe, 0x4, 0xfffffff8, 0x3, 0x5, 0x8, 0x6, 0x3, 0x0, 0xffffffff, 0x1, 0x4, 0x7, 0x4, 0x5, 0x4, 0x1ff, 0xfffffffc, 0x5, 0x952, 0x0, 0x7f, 0x3, 0x326, 0x5, 0x3, 0x0, 0x5, 0x0, 0x1, 0x6, 0x100, 0x4, 0x5, 0xe87b, 0x2, 0x8, 0x7fff, 0x9, 0x4, 0x2, 0x6, 0x7fff, 0x1, 0x2, 0xa, 0xf, 0x800, 0x0, 0x2e, 0x4, 0x100, 0x6, 0x2, 0x5d6, 0x0, 0x2, 0xee4, 0x9, 0x3, 0x7, 0x0, 0x4, 0x30e73fe0, 0x7, 0x3, 0x7ff, 0x2, 0x400, 0x1, 0x400000, 0x96c3, 0x1000, 0x0, 0x322c, 0x10001, 0x3, 0x94b, 0x4, 0x2, 0x2, 0x5, 0x8, 0x4, 0x3, 0x2, 0xa, 0x1]}]}]}}]}, 0x478}, 0x1, 0x0, 0x0, 0x8c8}, 0x20004804) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004a00)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000440)="93e0dd4c3248782c367e8cf4da4a7b15a81cadccb9f74ad8255954b933dd4b60e6664a9bdc4960bcf07052", 0x2b}, {&(0x7f0000000500)="a32dade3cd860e07dfa8149b964cba080b5dceceb1d44fa6fb711f46d5ebb2d0525bdbb3ddeb1ec5c97ee03a644553527cbfeb7f8bb9fa196ce4a3", 0x3b}], 0x2}}], 0x1, 0x800) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a"], 0x1d0}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000040)="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", 0x4d9}], 0x1}, 0x240009bd) bpf$PROG_LOAD(0x5, &(0x7f0000001e00)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r4 = userfaultfd(0x80801) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r5, 0x1, &(0x7f0000000000)=[&(0x7f0000004280)={0x0, 0x0, 0x20, 0x0, 0x1fff, r4, 0x0, 0x0, 0x6}]) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0\x00') sendmsg$sock(r1, &(0x7f0000000b80)={&(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @local}, 0x1, 0x1, 0x2, 0x1}}, 0x80, &(0x7f0000000b00)=[{&(0x7f00000007c0)="823514ac3e85f05c1a61eb", 0xb}, {&(0x7f0000000800)="479b000e2eb49d923225813e89c9f09159fcf879923120e8bc54a390ed60a702a961fe6269ded08815f1232f4c7abe958d86ee4fb395937cd650ddcc4c9268af9eb3203d19036df8e0f6ea23d5d85e6e1da9ee63c93fb235a5b9e33ed3f2b5ce37bcb0af9900b3f39141a2c51947ee59ea8160abe0700d34fc9d05c33ea1f79370252a1363b9ea7d3cbf39ca2ba4c32b790f3e90", 0x94}, {&(0x7f00000008c0)=')|', 0x2}, {&(0x7f0000000900)}, {&(0x7f0000000940)="f4599e937c1350b8bbf38320e4b92ca5adc9e116afb4269a469498badfa030e65e87f9ef5e008096a4dc28ab991ca6bd42ede8d6eb6d06d671accbed623a76d4b410a04cc8f572572b1031a12e69f6ea3e89030e9ed14d432efad0d7e3c50c0507e0acdff361aaa7794c8e4ed38c500891c63656273ea5b3f08e2a68143702cec1a81a4aeb7a7ce5dfd5cfb49db2d2a011d005ff5b25a4441f5a4f339be225a81a", 0xa1}, {&(0x7f0000000a00)="38247791e8ba64b0e6acf3e1c5418f51e1a0a4dccf767afe347b6ea41d78e6b0a788671b522149d67b1a8f737ba10e4a275f9c4739271f6c6d32a01eaf8054fd44a332272fca17a9acbb5ac3e710e3c36d8cd9be569da1dfc921f42ab0064e711bdc86c14685b328731cc73f92129349b1733399da7ad89a05493b9c6f783f1586b2f09b84f2384eda957581ad084401a2d17b1afb90343ee97e71512f5ce8cf8ffef07b98e3757a93ff35912b5acef7b8f366614a0c1b911c60ccab36695f0754387cb92aa2", 0xc6}], 0x6}, 0xc801) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x200000d5}, 0x4008014) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r7, 0x4020aeb2, &(0x7f0000000300)={0x0, 0x45, @ioapic={0xd000, 0xfffffbff, 0x2, 0x9, 0x0, [{0x3, 0x6}, {0x6, 0xf8, 0xb, '\x00', 0xda}, {0xff, 0x9, 0x3, '\x00', 0xe2}, {0x5, 0xe, 0x7, '\x00', 0x3}, {0x8, 0x2, 0x4, '\x00', 0x40}, {0x9, 0x5, 0xd, '\x00', 0xea}, {0x9, 0x68, 0x4, '\x00', 0xe}, {0x26, 0x8, 0xa0, '\x00', 0x56}, {0x3, 0x7, 0x4, '\x00', 0x4}, {0x13, 0x10, 0x9d, '\x00', 0x1}, {0x0, 0xc2, 0x38, '\x00', 0x6}, {0x5, 0x1, 0x5, '\x00', 0x4}, {0x7, 0x2, 0x1}, {0xe, 0x0, 0x8, '\x00', 0x8}, {0xa, 0xb, 0x9, '\x00', 0x7}, {0x7f, 0x2, 0x80, '\x00', 0x65}, {0x9c, 0x3, 0x8, '\x00', 0xe}, {0x6, 0x1, 0x6, '\x00', 0x3}, {0x1, 0x9, 0x1, '\x00', 0xb}, {0x4, 0x81, 0x9}, {0x2f, 0xf, 0x1c, '\x00', 0x2}, {0x6, 0x1, 0xf, '\x00', 0xfc}, {0xff, 0x1, 0x4, '\x00', 0x7}, {0x81, 0x3, 0x1, '\x00', 0x9}]}}) 6m53.563259009s ago: executing program 0 (id=1731): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x1, @broadcast, 'lo\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x40047452, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="34000000000801040000000000000000000000000900010055797a300000000006000240000000000400048005000300110000409419f9bceef2e9dc7289070f8ce054dceb748ea6b0bc3925b411c9db76af523b952999a7a8fc172d23ad37bdd04d8481f09b84ca5987f0bb77a733ea67bb3aae054a20b3ce0a8b15d7ef3a940539a9efa5139575d4a566d0a6778bd7f8a583fb13e0b91bf8a584799aecd2a26e304818424ce7ed90e9fc842c763c59ba4410978708bcff05620d16dc1fd4a4"], 0x34}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="d300000000010000180a00000000000000000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc, &(0x7f000000cf3d)=""/195}, 0x23) ioctl$VHOST_SET_VRING_CALL(r3, 0x4008af21, &(0x7f0000000080)={0x1, r4}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x9, &(0x7f0000000000)=0x0) io_pgetevents(r5, 0x9, 0x9, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000000108010300000000e2248bbe475df43e0000000000000000"], 0x14}}, 0x0) recvmmsg(r1, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r6 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0236748773bd36c1ab000002000040000000000000000000"], 0x18}, 0x20000000) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x2010, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000300), &(0x7f0000000340)=0xc) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000004102, 0x0) syz_io_uring_setup(0x52a, &(0x7f0000000440)={0x0, 0x74c2, 0x1, 0x1, 0x261, 0x0, r9}, &(0x7f00000004c0)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r9, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x12}) syz_io_uring_submit(r8, r11, &(0x7f00000002c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x1b, 0x0, @fd=r0, 0x9, 0x0, 0x2, 0x1, 0x1}) ioctl$UI_SET_SWBIT(r7, 0x4004556d, 0x9) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000900)={0x1ec, 0x1, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@CTA_TUPLE_MASTER={0x50, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x21}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_NAT_DST={0x64, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast2}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast2}]}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xff}]}, @CTA_NAT_DST={0x34, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast2}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast2}]}, @CTA_TUPLE_ORIG={0xa0, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x14}}}}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x1}, 0x44080) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_delroute={0x4c, 0x19, 0x901, 0x0, 0x0, {0x2, 0x38, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @loopback}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @ILA_ATTR_LOCATOR={0xc, 0x1, 0x1000}}, @RTA_UID={0x8, 0x19, 0xee00}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_FLOW={0x8, 0xb, 0xc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 6m53.178234107s ago: executing program 0 (id=1733): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000206d049cc20000000000010902a400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000a00)={0x2c, &(0x7f0000000840)={0x40, 0xe, 0x5, {0x5, 0x21, "b1b564"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 6m52.786510825s ago: executing program 32 (id=1733): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000206d049cc20000000000010902a400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000a00)={0x2c, &(0x7f0000000840)={0x40, 0xe, 0x5, {0x5, 0x21, "b1b564"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 3m17.040880154s ago: executing program 1 (id=2691): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x22, 0x2, 0x24) setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r5 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) ioctl$int_in(r5, 0x5421, &(0x7f0000000f00)=0x7) write$RDMA_USER_CM_CMD_GET_EVENT(r5, &(0x7f0000000880)={0xc, 0x8, 0x144, {0x0}}, 0x10) r6 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) connect$netlink(0xffffffffffffffff, &(0x7f00000000c0)=@unspec, 0xc) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="0f8666f2a665f0ff0f0fc73666ba21003e0f01c5c4c1ed665a0aa00f06ea009000002c00c4c1b81516", 0x29}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000140)="0f300fc79a0000440f20c066350c000000440f22c0440f20c0663508000000440f22c066b8a46f1e8e66efbafc0c66ed360f1ad33ef30fa7c00f0fbd000094a1c71ea152660f38804000f0093d", 0x4d}], 0x1, 0x5, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, 0x0) syz_emit_vhci(0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, 0x0) gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x3e, 0x2, @thr={&(0x7f0000000240)="6d7a7442f7f011c15d9bbd91509eba6e885ae61365d74bedcf34bf041435761bdadc92477ada01c45244fbe85af3b3a73279814b4fdd69a48ad7b0ddd9dbe9a39e31a0be37db56aa3ecb1f75fc19462310073ef21603108cecd23785f4bc13fe1f4ccc903edfc167c253c54c63fd46466a6aff4180b2dfddddc33eee3ec4e5a2264564da784e86573880c600997b014ef5c93a646a2511a6422cd84a7efeeb4414cacc0d073d50e5513a054b38b43ddea137494c88bb928172f90fc3", &(0x7f0000000100)="660544a8acee3d505d91a8bb5fa72b06e7c2a0de762f7787dbfb3218a61e6e31fd0e2bbe1cf4eb288bc8fc"}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) 3m15.396772198s ago: executing program 1 (id=2700): prctl$PR_SCHED_CORE(0x3e, 0xffffffffffffffff, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0xb1}, {0x6}]}, 0x10) syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f0000002280)) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[], 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x4000000) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0xfffffffffffffeb9, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) unshare(0x2000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0xa, 0x5}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) dup3(0xffffffffffffffff, r5, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f00000000c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000500)={0x44, 0x0, &(0x7f0000000740)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 3m12.242960073s ago: executing program 1 (id=2712): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) (async) readahead(0xffffffffffffffff, 0x800, 0x100000001) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x8a02) ioctl$SG_IO(r1, 0x2285, &(0x7f00000026c0)={0x0, 0xffffffffffffffff, 0xf2, 0x4, @scatter={0x5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)}, {&(0x7f0000000200)=""/162, 0xa2}, {&(0x7f0000000400)=""/225, 0xe1}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/146, 0x92}]}, &(0x7f00000015c0)="a3395e20d6fef0fab84c41e979f647c626f8771425de73ad94440f68a4d548d92c83a345aeb4fece91b3b7ecb21bb33db5344f6aad2711f4c590782dc5e00622a665a540624f7c4a652964003e2480a2e1a624d26b7ce65cf2353fd610a2dd881895751e1be811b693ce54f1442193478d8e51ebfc216b3a94e5b39cb964afefd05c19cc0bd5fe8337587e4d5e7fdee6a19e16932d0edcf3b5ed28b20f56bf4442dbca237841b75b3356cbcd2f5764deb2ab9cf0b4d02913bfc7cf8f7bbeab99ed4c10cc7948eb17d1c4e3de70ab88f4f467640f1fca3229bf93778c31246f2eadf6ba880e60a2f6418a792794357d0ff6c1", &(0x7f00000016c0)=""/4096, 0x1, 0x10, 0x0, &(0x7f0000000180)}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_FREQUENCY(r3, 0xc02c5638, &(0x7f00000000c0)={0x3, 0x2, 0x1}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4) (async) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x80, 0xfd}]}, 0x10) (async) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0xff6f}}}}}}}, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000182000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0xaaaaaaaaaaaab19, 0x4f, 0x0, 0x0) (async) socket(0xa, 0x2, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r8, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000001c0)="b9800000c00f3235000400000f30440f20c03508000000440f22c036646665f36526f20f22a5430f01c566ba4000edc4a39979250b00000008b9800000c00f3235010000000f30f245ab48b800000000000000800f23c00f21f83500000b000f23f8c481e57dcd", 0x67}], 0x1, 0x10, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x48}, [@ldst={0x3, 0x3, 0x3, 0xa, 0x0, 0xff00}], {0x95, 0x0, 0x74}}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) ioctl$KVM_RUN(r9, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f00003e1000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) 3m12.114584608s ago: executing program 1 (id=2713): socket$netlink(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$packet(0x11, 0x3, 0x300) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x2, 0x801) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0x8000000, 0xd000, 0xa, 0x0, 0xa, 0x93, 0xfe, 0x0, 0x0, 0xfe, 0x0, 0x3}, {0x25000, 0x8000000, 0x3, 0x1, 0x40, 0x3, 0x4, 0x9, 0x0, 0x0, 0x0, 0x42}, {0xeeef0000, 0xeeef0000, 0x13, 0x8, 0x0, 0x0, 0xb, 0x0, 0x81, 0xe, 0x84, 0x3}, {0x100000, 0x0, 0x0, 0x0, 0x0, 0x3, 0xff}, {0x11000, 0xd000, 0x0, 0x0, 0x0, 0x80, 0x84, 0x0, 0x2, 0x0, 0x1a}, {0x11001006, 0x8000000, 0xd, 0x0, 0x0, 0x8f, 0xd5, 0x9, 0x0, 0x0, 0x84, 0x1}, {0xb000, 0x80a0000, 0x4, 0xf0, 0x0, 0xfe, 0xfd, 0x0, 0x2}, {0x1, 0x0, 0xf, 0xf9, 0x0, 0x2, 0x0, 0xc, 0x0, 0x3, 0x0, 0x40}, {0x6000, 0x4}, {0x8000000, 0xfffe}, 0x0, 0x0, 0xdddd1000, 0x0, 0xb, 0x6001, 0x900, [0x5, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f00000000c0)={0x7, 0x2, 0x2, r4, 0xb}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0x2, 0x5, 0x0, 0x4002004c4, 0x100000001, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2], 0x8080000, 0x1144}) ioctl$KVM_RUN(r5, 0xae80, 0x0) getsockopt$XDP_MMAP_OFFSETS(r5, 0x11b, 0x1, &(0x7f0000000340), &(0x7f00000003c0)=0x80) close_range(r1, 0xffffffffffffffff, 0x0) syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r6 = syz_create_resource$binfmt(&(0x7f00000002c0)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r6, 0x42, 0x1ff) ioctl$XFS_IOC_GETBMAP(r3, 0xc0205826, &(0x7f0000000300)={0x8, 0x8, 0xffffffff, 0x4, 0x16c000}) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = creat(&(0x7f0000000140)='./file0\x00', 0x18a) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r7, @ANYRES64=r0], 0x0) 3m11.826683033s ago: executing program 1 (id=2716): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}, 0x38) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) r2 = fsopen(&(0x7f00000001c0)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x0, 0xe40, 0xfffffe6d, &(0x7f0000000100)="5c71f91b05c413550230b4c817a628", 0x0, 0x1, 0x0, 0x302, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x48) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x202, 0x0) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001964d408861a92e03f530102030109022400010200100309041f0202e917f300090502020002020000090582020002"], 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$rtl8150(r4, &(0x7f0000000340)={0x14, &(0x7f0000000240)={0x40, 0x2, 0xe3, {0xe3, 0x21, "b6f94dc469126b7c378a36c6273d49bca0ffaa8d8bcbc2251246a6af432a264e06319a161ee4dec2a77922284ea6abfdec74c0867ea0874ce9558bd50a4293701d77adf61e4f39bec1b68befbe186ec4dead045900e28836971d3e7e61ce16b12d4198056634ab4002abf8ebeb4a11dc9f04bc1fd23a601e0ee00b888866e3dbec85740c697f12791e1440f89e79fb6b3595a699b775b2365cdc034d4d0ec3961cbb25c64a2bb6d0592a94d7a3a3c1598e36551795f203fc8ec781446c64a3ef06cf57345db3f75c771e73caae275e85694a68e93f429d2f9235033bd7c4bb60e1"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x101d}}}, &(0x7f00000005c0)={0x2c, &(0x7f0000000380)=ANY=[@ANYBLOB="0007b10000005854af297317efd943c67ac8a379a38340c13073a4f48f58b10d24558eb4910cb8479033e550cec57e12d39c705c2f5fba2e2c5b53567c0078603ffeb3fd29c0b0ac0a23acdd4ed1b7e7d7bfe5264b87d00359538b2be3279b33e1b31e6a0c0646572fb4e4d80c195867df6ab0794095e5e75524880d09bd3a9f8c2989c724979470846a470dbfa415cd63d4b1c5c5620bb8733ec55b90862c41bdf0dcc9933430c65bfaecf445dcc7"], &(0x7f0000000440)={0x0, 0xa, 0x1, 0xe}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000004c0)={0xc0, 0x5, 0x2, "52d3"}, &(0x7f0000000500)}) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r5, 0x4020aed2, &(0x7f0000000180)={0x9000, 0xb000, 0x8}) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x48, 0x12, 0x1, 0x0, 0x0, {@in=@dev}, [@srcaddr={0x14, 0xd, @in=@multicast1}, @mark={0xc}]}, 0x48}}, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r5, 0x4020aed2, &(0x7f0000000080)={0xf000, 0x8000, 0x8}) 3m9.843331989s ago: executing program 5 (id=2722): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xa9525000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)="4d43e79b8b97c8c2b7546f783a923e9c77479221684a7c6a8e62c9edb7374ec0f1c86eeb859c1cb9bf701708215b9c70c0166285ecffe617", 0x38, r0}, 0x68) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') unshare(0x28000600) read$FUSE(r1, 0x0, 0x0) 3m9.717925389s ago: executing program 1 (id=2723): r0 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006df57108e2042414ebc7010203010902380003960000000904cc070002596105052406000105240006000d240f01900800000000070008060600000011090401"], 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000000280)={0x14, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x8000) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000046c0), 0x4, 0x4004010) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0x101, 0xffffffff}, 0x0) setxattr$incfs_metadata(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', &(0x7f00000000c0), &(0x7f0000000200), 0x0, 0x1) lsetxattr$security_capability(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), &(0x7f0000000140)=@v2={0x2000000, [{0x4, 0x3}, {0x4, 0x4}]}, 0x14, 0x0) truncate(&(0x7f0000000180)='./cgroup/cgroup.procs\x00', 0x7) socket$inet_mptcp(0x2, 0x1, 0x106) unshare(0x8000000) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs2/custom1\x00', 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000100)={0x972, 0x1, {0x0}, {}, 0x9, 0x6a00000000}) sched_getattr(r6, &(0x7f00000001c0)={0x38}, 0x38, 0x0) mkdir(&(0x7f0000000240)='./file1/file4/file7/file6\x00', 0xaf) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000"], 0x24, 0x0) dup3(r5, r4, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) syz_usb_control_io$uac1(r0, 0x0, 0x0) 3m9.43632792s ago: executing program 5 (id=2724): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) capset(&(0x7f0000000040)={0x19980330, 0xffffffffffffffff}, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f0000002280)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x3) close_range(0xffffffffffffffff, r1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000300)={0x6, 0x2, 0x4}) bpf$MAP_CREATE(0x0, &(0x7f00000022c0)=ANY=[@ANYBLOB="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", @ANYBLOB="d8d0120aad3c31364f015ea0b1418731423235da", @ANYRES32=r0, @ANYRES8=r1, @ANYRES64=r1, @ANYBLOB="850b64fe9e3a4fc2cab4e76f9455136d5259876ab762bcfd835f00df60ae7c11a99811c975538925ec58a027c197fe558bf98b660f6b956f216aa0004cb626d8093408d0354b086fe382e8302264d9914534a790596c7571c5348062ef0be0064d92ccd9678e1e7a73b4f36c81a966ca", @ANYRES16=r0, @ANYRES16, @ANYRESDEC=0x0], 0x50) unshare(0x62040200) r2 = socket$inet6(0xa, 0x5, 0x7) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x8, @vifc_lcl_addr=@rand_addr=0xc0586300, @private=0xffffffff}, 0x10) setsockopt$MRT_FLUSH(r7, 0x0, 0xd4, &(0x7f0000000000)=0x8, 0x4) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="30100f98", @ANYRES16=r8, @ANYBLOB="0100000000000000000007000000050012000700000014000800"/42], 0x30}}, 0x2) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000340)={0x7, 0x80000, r2}) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x40058) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000001000000125bd3000f9dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="040000002700040008001b000000000008002e0001000000c983824866fe7f939f5cbf3e01598171e6d293428844"], 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5, 0x2de07c, 0x334e8b}) 3m7.390948444s ago: executing program 5 (id=2731): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180), 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x200) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000040)={0xfdfdffff, 0xd, 0xffffffff, 0x40000005, 0xb, "088aefdd2000"}) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_test', 0x80100, 0x9c) fsetxattr$security_capability(r5, &(0x7f0000000000), 0x0, 0x0, 0x1) fgetxattr(r5, &(0x7f0000000000)=ANY=[], 0x0, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x16, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, @flow_dissector=0x11, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r6, &(0x7f0000000200)={0x2, 0x4e22, @remote}, 0x10) setsockopt$IP_VS_SO_SET_STOPDAEMON(r6, 0x0, 0x1f, 0x0, 0x0) r7 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x66, 0x0, &(0x7f0000000040)) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x845, 0x9, 0xfffffffffffffffd, 0x8, 0x10000, 0x0, 0x4002004c2, 0x2000000000fff, 0x1400000000000000, 0x0, 0x3fd, 0x1080, 0x3, 0x0, 0x8, 0x4000000000008d], 0x100000, 0x80}) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 3m6.183808097s ago: executing program 5 (id=2733): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x1, 0xffffffff, @loopback, 0x92}, 0x1c) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x865c, 0x840) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='/'], 0x20) ioctl$FS_IOC_GETVERSION(r3, 0xc0145b0e, &(0x7f0000000040)) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f0000000080)={0x8, 0x8, [0x0, 0xfffffffa]}) 3m4.455505167s ago: executing program 5 (id=2735): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x622000, 0x0) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000040)) (async) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x3ff) ioctl$XFS_IOC_EXCHANGE_RANGE(r0, 0x40285881, &(0x7f0000000080)={r0, 0x0, 0xbf57, 0x9, 0xa, 0x8}) (async) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f00000001c0)={&(0x7f00000000c0)=""/206, 0xce}) (async) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000600)={0x1, 0x1, 0x1b, 0x17, 0x13, &(0x7f0000000200)}) (async) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000640)={0x7ff, 0x0, 0xa, 0xf}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000680), 0x111000, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x70, r2, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2cbfabc7}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x41}, 0x10) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000840)) (async) io_uring_enter(r1, 0x40f7, 0xd999, 0x7, &(0x7f0000000880)={[0x100000001]}, 0x8) (async) ioctl$DVB_DEMUX_DMX_GET_STC(r1, 0xc0106f32, &(0x7f00000008c0)={0xb}) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r1, 0x8983, &(0x7f0000000900)) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000940)=0x16) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000980)={{0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, {0xa, 0x4e22, 0xe6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xfffffff8}, 0xffffffffffffffff, {[0x1f4, 0x9, 0x4, 0x25fe, 0x9, 0x3, 0x1, 0x4]}}, 0x5c) (async) setsockopt(r1, 0x5, 0x1, &(0x7f0000000a00)="f8ac8c1f01f7fccc956057488c529fc3a3c7572109e08a887dca6cbd8181a54a738f2c096506fe99d0341a1a25d7069ca675d8748a5946d415bcbf22c1268ef423e546ac7ff24fae74b4c55ea278219004d2888f7917d90c62457d86ed672dc545f3e156d0e7cebef8151b2d9e5abe742933d7b21c15ff358eb00590e1dbe5a9f5fb79371a77d11aa6d6a90146e9584ae643896864bc7d8b74f81fb32837057e70c0298d79138691e412f0dbf06d5f92b0df2c55de1a5eb735f4b102a0afce94398f3064c681e20d80c52f66fe03980f839e50aad742465ba50013db64ce973fda95", 0xe2) (async) r4 = getpgid(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x4, r4, 0x0, 0x0) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000b00)=0x1000, 0x4) (async) r5 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r5, &(0x7f0000000b40)=""/37, 0x25, 0x0, &(0x7f0000000b80)={0x2, 0x0, @multicast2}, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000bc0)={'veth1_to_team\x00'}) (async) r6 = openat$cgroup_ro(r1, &(0x7f0000000c00)='cgroup.controllers\x00', 0x0, 0x0) ioctl$XFS_IOC_GETBMAP(r6, 0xc0205826, &(0x7f0000000c40)={0x4, 0x7fffffffffffffff, 0xf248, 0xdeff, 0x2}) (async) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000000c80)=""/110) (async) waitid(0x0, r4, &(0x7f0000000d00), 0x8, &(0x7f0000000d80)) (async) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000e40), &(0x7f0000000e80)=0xc) 3m4.24992577s ago: executing program 5 (id=2736): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000004000000200000008000300", @ANYRES32=r1, @ANYBLOB="0800a0bc816713009e09001008002700020000fa070024266c28"], 0x34}}, 0x80) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000040)='./file1\x00', 0x7f7) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') (async) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') r4 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, &(0x7f0000000140)=0x0, &(0x7f00000004c0)=0x0) io_uring_register$IORING_REGISTER_NAPI(r4, 0x1b, &(0x7f0000000300)={0x80003, 0x47}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000003c0)={[0x3, 0x9, 0x0, 0x4, 0xfffffffffffffffd, 0x2, 0x0, 0x7f, 0x80000000000, 0x1, 0x0, 0x7, 0x10001, 0x80000001, 0x9, 0x6], 0x0, 0x200240}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x80, 0x40, 0x2, 0x1, {{0x19, 0x4, 0x3, 0x3a, 0x64, 0x65, 0x0, 0xe1, 0x29, 0x0, @loopback, @private=0xa010100, {[@end, @generic={0x0, 0x12, "8bffdada945f7452b2de1e567e575b65"}, @timestamp={0x44, 0x14, 0xbb, 0x0, 0x5, [0x8, 0x8, 0x4, 0x3e70]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x17, 0x47, [@multicast2, @remote, @empty, @multicast1, @broadcast]}, @timestamp={0x44, 0xc, 0xcf, 0x0, 0x4, [0x5, 0x3]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x80, 0x40, 0x2, 0x1, {{0x19, 0x4, 0x3, 0x3a, 0x64, 0x65, 0x0, 0xe1, 0x29, 0x0, @loopback, @private=0xa010100, {[@end, @generic={0x0, 0x12, "8bffdada945f7452b2de1e567e575b65"}, @timestamp={0x44, 0x14, 0xbb, 0x0, 0x5, [0x8, 0x8, 0x4, 0x3e70]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x17, 0x47, [@multicast2, @remote, @empty, @multicast1, @broadcast]}, @timestamp={0x44, 0xc, 0xcf, 0x0, 0x4, [0x5, 0x3]}]}}}}}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r8 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x39d}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) io_uring_enter(r8, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x40702) (async) syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x40702) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) (async) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r11, 0xae60) ioctl$KVM_SET_IRQCHIP(r11, 0x8208ae63, &(0x7f0000000600)={0x1, 0x0, @pic={0x5, 0x3, 0xfc, 0x8, 0x8, 0x0, 0x7f, 0x1, 0x8, 0x5, 0xf, 0x80, 0x9, 0x2, 0x5, 0x8}}) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) (async) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_REGS(r12, 0x4090ae82, &(0x7f0000000000)={[0x33, 0x790, 0x80000001, 0x17d, 0x400000004, 0xffffffffffffffff, 0xf1, 0x8, 0x0, 0x42, 0x0, 0x3b9, 0xfffffffffffffffe, 0x0, 0x0, 0x8], 0x8000000, 0x3c4210}) ioctl$KVM_SET_IRQCHIP(r11, 0x8208ae63, &(0x7f00000009c0)={0x0, 0x0, @pic={0x6, 0xe4, 0x62, 0x4, 0x78, 0x7, 0x5, 0x1, 0x2, 0xfe, 0x64, 0x2, 0xb6, 0x6, 0x0, 0x1}}) (async) ioctl$KVM_SET_IRQCHIP(r11, 0x8208ae63, &(0x7f00000009c0)={0x0, 0x0, @pic={0x6, 0xe4, 0x62, 0x4, 0x78, 0x7, 0x5, 0x1, 0x2, 0xfe, 0x64, 0x2, 0xb6, 0x6, 0x0, 0x1}}) ioctl$KVM_RUN(r12, 0xae80, 0x0) (async) ioctl$KVM_RUN(r12, 0xae80, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_STATX={0x15, 0x40, 0x0, r7, &(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x400, 0x6000, 0x0, {0x0, r9}}) 2m54.203245119s ago: executing program 33 (id=2723): r0 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006df57108e2042414ebc7010203010902380003960000000904cc070002596105052406000105240006000d240f01900800000000070008060600000011090401"], 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000000280)={0x14, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x8000) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000046c0), 0x4, 0x4004010) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0x101, 0xffffffff}, 0x0) setxattr$incfs_metadata(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', &(0x7f00000000c0), &(0x7f0000000200), 0x0, 0x1) lsetxattr$security_capability(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), &(0x7f0000000140)=@v2={0x2000000, [{0x4, 0x3}, {0x4, 0x4}]}, 0x14, 0x0) truncate(&(0x7f0000000180)='./cgroup/cgroup.procs\x00', 0x7) socket$inet_mptcp(0x2, 0x1, 0x106) unshare(0x8000000) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs2/custom1\x00', 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000100)={0x972, 0x1, {0x0}, {}, 0x9, 0x6a00000000}) sched_getattr(r6, &(0x7f00000001c0)={0x38}, 0x38, 0x0) mkdir(&(0x7f0000000240)='./file1/file4/file7/file6\x00', 0xaf) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000"], 0x24, 0x0) dup3(r5, r4, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) syz_usb_control_io$uac1(r0, 0x0, 0x0) 2m49.204793832s ago: executing program 34 (id=2736): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000004000000200000008000300", @ANYRES32=r1, @ANYBLOB="0800a0bc816713009e09001008002700020000fa070024266c28"], 0x34}}, 0x80) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000040)='./file1\x00', 0x7f7) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') (async) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') r4 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, &(0x7f0000000140)=0x0, &(0x7f00000004c0)=0x0) io_uring_register$IORING_REGISTER_NAPI(r4, 0x1b, &(0x7f0000000300)={0x80003, 0x47}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000003c0)={[0x3, 0x9, 0x0, 0x4, 0xfffffffffffffffd, 0x2, 0x0, 0x7f, 0x80000000000, 0x1, 0x0, 0x7, 0x10001, 0x80000001, 0x9, 0x6], 0x0, 0x200240}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x80, 0x40, 0x2, 0x1, {{0x19, 0x4, 0x3, 0x3a, 0x64, 0x65, 0x0, 0xe1, 0x29, 0x0, @loopback, @private=0xa010100, {[@end, @generic={0x0, 0x12, "8bffdada945f7452b2de1e567e575b65"}, @timestamp={0x44, 0x14, 0xbb, 0x0, 0x5, [0x8, 0x8, 0x4, 0x3e70]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x17, 0x47, [@multicast2, @remote, @empty, @multicast1, @broadcast]}, @timestamp={0x44, 0xc, 0xcf, 0x0, 0x4, [0x5, 0x3]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x80, 0x40, 0x2, 0x1, {{0x19, 0x4, 0x3, 0x3a, 0x64, 0x65, 0x0, 0xe1, 0x29, 0x0, @loopback, @private=0xa010100, {[@end, @generic={0x0, 0x12, "8bffdada945f7452b2de1e567e575b65"}, @timestamp={0x44, 0x14, 0xbb, 0x0, 0x5, [0x8, 0x8, 0x4, 0x3e70]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x17, 0x47, [@multicast2, @remote, @empty, @multicast1, @broadcast]}, @timestamp={0x44, 0xc, 0xcf, 0x0, 0x4, [0x5, 0x3]}]}}}}}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r8 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x39d}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) io_uring_enter(r8, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x40702) (async) syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x40702) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) (async) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r11, 0xae60) ioctl$KVM_SET_IRQCHIP(r11, 0x8208ae63, &(0x7f0000000600)={0x1, 0x0, @pic={0x5, 0x3, 0xfc, 0x8, 0x8, 0x0, 0x7f, 0x1, 0x8, 0x5, 0xf, 0x80, 0x9, 0x2, 0x5, 0x8}}) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) (async) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_REGS(r12, 0x4090ae82, &(0x7f0000000000)={[0x33, 0x790, 0x80000001, 0x17d, 0x400000004, 0xffffffffffffffff, 0xf1, 0x8, 0x0, 0x42, 0x0, 0x3b9, 0xfffffffffffffffe, 0x0, 0x0, 0x8], 0x8000000, 0x3c4210}) ioctl$KVM_SET_IRQCHIP(r11, 0x8208ae63, &(0x7f00000009c0)={0x0, 0x0, @pic={0x6, 0xe4, 0x62, 0x4, 0x78, 0x7, 0x5, 0x1, 0x2, 0xfe, 0x64, 0x2, 0xb6, 0x6, 0x0, 0x1}}) (async) ioctl$KVM_SET_IRQCHIP(r11, 0x8208ae63, &(0x7f00000009c0)={0x0, 0x0, @pic={0x6, 0xe4, 0x62, 0x4, 0x78, 0x7, 0x5, 0x1, 0x2, 0xfe, 0x64, 0x2, 0xb6, 0x6, 0x0, 0x1}}) ioctl$KVM_RUN(r12, 0xae80, 0x0) (async) ioctl$KVM_RUN(r12, 0xae80, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_STATX={0x15, 0x40, 0x0, r7, &(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x400, 0x6000, 0x0, {0x0, r9}}) 32.980566558s ago: executing program 2 (id=3126): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r6, @ANYBLOB="8249e900800005001c00378009000100626f6e64000000000c0002800500100006000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x20000c10}, 0x4) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x3) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) unshare(0x400) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r2, 0x40786e88, &(0x7f0000000680)={{&(0x7f00000001c0)=[{0x94, 0x3, 0x6, {0x4, 0x80000000}, 0x1, 0x1000000000000, 0x5}, {0xffffffffffffff00, 0x5, 0x7, {0x5, 0x3}, 0x0, 0x800, 0xfffffffe}], 0x2, 0x40, 0xffff, 0x2}, {&(0x7f0000000600)=[{0x20ac16df, 0x8}, {0xffffffffffffffff, 0x84f4}, {0x8, 0x7f}, {0x9, 0x7fff}, {0x3, 0x100000000}, {0x7fffffff, 0x5}], 0x6, 0x10, 0x4b96, 0x4}, {&(0x7f0000000240)=[0x3, 0x8, 0x4, 0x2e90], 0x4, 0x8, 0x5, 0xffffffff}, {&(0x7f0000000300)=[{0x7ff, 0x3, 0x9, 0x2130, 0x9}], 0x1, 0x28, 0x7, 0x3}, {&(0x7f0000000580)=[0x1b05, 0x4, 0x0, 0x7ff], 0x4, 0x8, 0x1, 0x1}}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r8, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000940)={0x14, r9, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20040050}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="06000000040000005b0000008a00000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={0xffffffffffffffff, r10}, 0xc) mknod$loop(0x0, 0x2000, 0x0) ioctl$TCSETSW2(r3, 0x80047456, &(0x7f0000000040)={0x3, 0xb, 0xfffffffe, 0x7fffffff, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0xffffffff}) 31.718808766s ago: executing program 6 (id=3130): socket(0x23, 0x6, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f00000000c0)=0x20) write$binfmt_elf32(r2, 0x0, 0x4cd) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000100)=0x1) write$dsp(r2, &(0x7f0000000140)="755a5398d512d39077459e67ee110daaf0413bc745ef85b89f2141d513969bd8", 0xffaa) 30.511446129s ago: executing program 7 (id=3133): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000540)={0x0, "8044cc316a5ff3a32e8ef23593da9e51"}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000001540)={r1, 0xcdc, 0x9, 0x1}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000100)={0x1, 0x1, 0xa, 0x20, 0x139, &(0x7f0000000480)}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newlink={0x38, 0x10, 0x439, 0x0, 0x60000, {0x0, 0x0, 0x0, r5, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r5}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x8000000) sendto$packet(r0, &(0x7f0000000180)="280320000a0014000000fbf719143baa111f43c851ffab286e16195ecf3d77cc32b6d70339980700e6669d3c865c6b96e84000050016f37fe8c0295f5c", 0x3d, 0x840, &(0x7f0000000000)={0x11, 0x86dd, r5, 0x1, 0x2, 0x6, @multicast}, 0x14) 30.265001148s ago: executing program 7 (id=3134): syz_usb_connect(0x3, 0x36, &(0x7f0000000d80)={{0x12, 0x1, 0x100, 0x85, 0xf1, 0xd8, 0x10, 0xbfd, 0x126, 0xbde4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xbd, 0x80, 0x3, "", [{{0x9, 0x4, 0x3a, 0x6, 0x2, 0xd1, 0xd5, 0xb2, 0x13, [], [{{0x9, 0x5, 0x8, 0x2, 0x400, 0xfe, 0x0, 0x9}}, {{0x9, 0x5, 0xb, 0x2, 0x40, 0x7, 0x6}}]}}]}}]}}, 0x0) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x1, &(0x7f0000000000)=""/30, &(0x7f0000000040)=0x1e) 29.782928121s ago: executing program 2 (id=3135): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001240)=@newlink={0x50, 0x10, 0x421, 0x4, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x26d2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x3}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x25}]}}}, @IFLA_BROADCAST={0xa}]}, 0x50}}, 0xc080) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x1, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0xfffffffffffffffc}) r4 = open(&(0x7f0000000040)='.\x00', 0x0, 0x6c) fcntl$notify(r4, 0x402, 0x5) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r5, 0xc0d05604, &(0x7f00000002c0)={0x8, @sliced={0x8001, [0x6, 0x6, 0x6, 0x400, 0x8, 0x1ff, 0x3, 0x0, 0x79a, 0x6, 0x150a, 0x7fff, 0x7, 0x4000, 0x6, 0x2, 0xfffb, 0x7, 0xfffd, 0x7, 0x80, 0x8000, 0x2, 0x4294, 0x4, 0x5, 0xeb95, 0x1, 0xa, 0x4, 0x5, 0x7, 0x0, 0x7f, 0xa62c, 0x7, 0xffff, 0x8, 0x40, 0x9, 0x6, 0x6, 0xf, 0x8, 0x192, 0x9, 0x7, 0xfcc4], 0x6}}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) ftruncate(r6, 0x6000000) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x20048000) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f00000028c0)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) fsopen(&(0x7f0000000040)='ceph\x00', 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x2e, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) creat(&(0x7f0000000580)='./bus\x00', 0x0) rename(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./file1\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) 28.414208558s ago: executing program 4 (id=3136): timer_create(0x3, &(0x7f0000000000)={0x0, 0x39, 0x6}, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000040)={0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) syz_io_uring_setup(0x83, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500, 0x0, 0x352}, &(0x7f0000000240), &(0x7f0000001880)) 28.32431803s ago: executing program 7 (id=3137): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = fanotify_init(0x10, 0x1000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, r0, 0x2deb2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) brk(0x800000000002) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$CEC_ADAP_G_LOG_ADDRS(0xffffffffffffffff, 0x805c6103, &(0x7f0000000100)) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) modify_ldt$write2(0x11, &(0x7f0000000000)={0x6, 0x20001000, 0xffffffffffffbfff, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x10) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = dup(r8) write$UHID_INPUT(r9, &(0x7f0000000040)={0xf, {"a2e3ad214fc752f90b5e094f4bf70e0dd038e7ff7fc6e5539b1b4d078b089b3b0838721a0890e0878f0e1ac6e7049b3d6c959b4c9a240d9b67f3988f7ef319520100ffe8d178708c523c921b1b5b31320d075d0736cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f0000000c558cdc0a3621c56cea8d20fa911afe40db6ebe8cac64289fd3da232f1b5dbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000e0a37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146680400416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d483d4675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb53682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516ab68032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d95f2e8c77d95a3d3a6df40babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e08d4db9d76864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f39a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60559516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251aec29b32f8210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ac015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67784f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a700d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001100)=@deltclass={0x64, 0x29, 0x1, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x5}, {0xc, 0x9}, {0x4, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x6, 0xaf}}, @tclass_kind_options=@c_multiq={0xb}, @TCA_RATE={0x6, 0x5, {0x2c, 0x8}}, @TCA_RATE={0x6, 0x5, {0x80, 0x4}}, @TCA_RATE={0x6, 0x5, {0x2, 0x9}}, @TCA_RATE={0x6, 0x5, {0x5, 0x2}}, @tclass_kind_options=@c_taprio={0xb}]}, 0x64}, 0x1, 0x0, 0x0, 0x4040011}, 0x0) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) r10 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001740), 0x80000, 0x0) ioctl$RTC_UIE_ON(r10, 0x7003) ioctl$RTC_WKALM_SET(r10, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0x14, 0x3b, 0x11, 0x10, 0x4, 0xe80, 0x5, 0x40}}) close(r10) syz_open_dev$ttys(0xc, 0x2, 0x0) 28.139229705s ago: executing program 4 (id=3138): socket(0x10, 0x80002, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x8, 0x8001, 0x5, 0x6, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video4linux(0x0, 0x9, 0x34f081) r2 = syz_open_dev$media(&(0x7f0000000000), 0x8000009, 0x8800) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, &(0x7f0000000280)={0x0, 0x8, 0x0, &(0x7f0000001d40), 0x0, 0x0, 0x0, 0xffffffffffffff08, 0x0, 0x0, 0x50, 0x0, 0x0}) r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) close(r3) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'bond0\x00', 0x8}, 0x18) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x0, 0x1000000d, 0x8001, 0x299c0, 0x7, 0x800, 0xfc5, 0xfffffffe, 0x5}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_80211_join_ibss(0x0, &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) setpriority(0x2, 0x0, 0x7fffff7ffffffffb) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc}) sendmsg$rds(r4, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r4, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20040800}, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x271c, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents(r5, &(0x7f0000000040)=""/44, 0x2c) 27.989923769s ago: executing program 2 (id=3139): set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000096ca077900"/20, @ANYRES32=0x0, @ANYBLOB="0000000008290400240012800b000100697036746e6c0000140002800600120000000000060012"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRESOCT=r0, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007663616e000000000400028008000a"], 0x3c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x4000000) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000096ca077900"/20, @ANYRES32=0x0, @ANYBLOB="0000000008290400240012800b000100697036746e6c0000140002800600120000000000060012"], 0x44}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRESOCT=r0, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007663616e000000000400028008000a"], 0x3c}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x4000000) (async) 27.744672273s ago: executing program 2 (id=3140): select(0x64, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x0, 0xea60}) (async) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x8000000, 0x0, 0xff, 0x1, 0x0, 0x2}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@rand_addr=' \x01\x00', 0x8000000, 0x1, 0x1, 0x4, 0xffff, 0xd330}, 0x20) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee20009058a"], 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) r5 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r5, 0xc2604110, &(0x7f0000000040)={0x0, [[0x89ef8], [0x207], [0x7]], '\x00', [{}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x1}, {}, {}, {}, {}, {0xfffffc00}], '\x00', 0x1000}) (async, rerun: 64) r6 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001b61e308d016a91052300102030109021b0001000000000904000001ff7f880009050302"], 0x0) (rerun: 64) syz_usb_control_io$hid(r6, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="20311e0000008fb8001ee63f19402a2733b0ca07a2be0fce26b5239fa9cb910000003578"], 0x0, 0x0, 0x0, 0x0}) (async) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000002380)="c744240000000080c744240200000000c7442406000000000f011424b9a90900000f320f32c744240005000000c744240200000100c7442406000000000f01142448b802000000000000000f23d80f21f835400000a00f23f866b806018ec067430f01c248b800180000000000000f23d80f21f835800000100f23f82e0f1c440a0966b89a008ee0", 0x88}], 0x1, 0x11, 0x0, 0x0) (async) syz_clone3(&(0x7f0000000480)={0x1108000, 0x0, 0x0, 0x0, {0x1e}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) r8 = fsopen(&(0x7f0000000800)='hfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000280)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\bb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xd7\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) (async) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r4, 0x4068aea3, &(0x7f00000002c0)={0xbc, 0x0, 0x2}) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00'}) (async) r9 = fsopen(&(0x7f0000000140)='hfsplus\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000040)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) syz_usb_control_io$uac1(r1, 0x0, 0x0) (async) setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0x3, &(0x7f00000000c0)=0x3ff, 0x4) 26.557350761s ago: executing program 4 (id=3143): r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) sendmmsg$unix(r4, &(0x7f0000000680), 0x4924924924925c6, 0x0) (fail_nth: 15) 26.117484386s ago: executing program 7 (id=3144): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x3c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) preadv2(r2, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) (async) preadv2(r2, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) socket$pppl2tp(0x18, 0x1, 0x1) (async) r3 = socket$pppl2tp(0x18, 0x1, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000007ec0)=[{{&(0x7f0000000240)=@hci, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000000380)=""/117, 0x75}, {&(0x7f0000000980)=""/195, 0xc3}, {&(0x7f00000002c0)=""/87, 0x57}, {&(0x7f0000000a80)=""/53, 0x35}], 0x5, &(0x7f0000000b40)=""/143, 0x8f}, 0x4}, {{&(0x7f0000000c00)=@nfc, 0x80, &(0x7f0000000d80)}, 0x9}, {{&(0x7f0000000dc0)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000001040)=[{&(0x7f0000000e40)=""/169, 0xa9}, {&(0x7f0000000f00)=""/117, 0x75}, {&(0x7f0000000f80)=""/20, 0x14}, {&(0x7f0000000fc0)=""/65, 0x41}, {&(0x7f0000003200)=""/4096, 0x1000}], 0x5, &(0x7f0000004200)=""/4096, 0x1000}, 0x5}, {{&(0x7f00000010c0)=@can, 0x80, &(0x7f00000064c0)=[{&(0x7f0000001140)=""/141, 0x8d}, {&(0x7f0000005200)=""/234, 0xea}, {&(0x7f0000005300)=""/246, 0xf6}, {&(0x7f0000005400)=""/4096, 0x1000}, {&(0x7f0000006400)=""/160, 0xa0}], 0x5, &(0x7f0000006540)=""/48, 0x30}, 0xd2f}, {{&(0x7f0000006580)=@can, 0x80, &(0x7f0000006780)=[{&(0x7f0000006600)=""/67, 0x43}, {&(0x7f0000006680)=""/136, 0x88}, {&(0x7f0000006740)=""/8, 0x8}], 0x3, &(0x7f00000067c0)=""/4, 0x4}, 0x8001}, {{0x0, 0x0, &(0x7f0000007b40)}}, {{&(0x7f0000007bc0)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000007e00)=[{&(0x7f0000007c40)=""/133, 0x85}, {&(0x7f0000007d00)=""/111, 0x6f}, {&(0x7f0000007d80)=""/77, 0x4d}], 0x3, &(0x7f0000007e40)=""/94, 0x5e}, 0x8}], 0x7, 0x2000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1002}]}) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1002}]}) r6 = socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f000034d000/0x3000)=nil, 0x3000, 0xc) ptrace$PTRACE_GETSIGMASK(0x420a, 0x0, 0x8, &(0x7f00000001c0)) sendmsg$NL80211_CMD_GET_SURVEY(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="a90303000000000000003200000008004001"], 0x1c}}, 0x4004050) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002cbd7010fddbdf2505000000080009000200000008000c00a80a0000060001000500000008000b"], 0x3c}}, 0x20000034) sendmsg$L2TP_CMD_SESSION_DELETE(r8, 0x0, 0x30) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r8, 0x0, 0x30) 26.116342949s ago: executing program 6 (id=3145): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x4a38, 0x8000) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000140)={0x53, 0xfffffffffffffffb, 0x0, 0x20, @buffer={0x0, 0x0, 0x0}, &(0x7f00000001c0), 0x0, 0x1000000c, 0x0, 0x3, 0x0}) unshare(0x6a040000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x12, r3, 0x0) ftruncate(r3, 0xc17a) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x100}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, r3, 0x1342e000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x400c0c0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x141802, 0x0) r6 = fsopen(&(0x7f0000000040)='smb3\x00', 0x0) close(0x3) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) close(r6) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x24, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x4c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) 25.574747077s ago: executing program 4 (id=3146): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac010902"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="31010000dccd5e08cb060700000800000001090224000100007e000904"], 0x0) r1 = syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x181000) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000a80)='\x00', 0x1}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000180)={&(0x7f0000000000)="dd", 0x1}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000140)={&(0x7f0000000100)="e3", 0x1, 0x0}) r3 = socket$packet(0x11, 0x2, 0x300) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x182000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000280)={0x80, 0x10, 0x10, 0x0, 0x6, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8, 0x8, 0x40000000}, {0x0, 0x400006}, {0x0, 0xb, 0xfffffffd}, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000002, 0x0, 0xfffffffc, 0x400009, 0x6, 0x0, 0x17, 0x0, 0x1, 0x6}) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x6020400) setns(0xffffffffffffffff, 0x24020000) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_INET6={0x4, 0x2d}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048020}, 0x8024) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f0000000080)={r2}) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110014a696d4003041060"], 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) syz_usb_disconnect(r0) 25.5504788s ago: executing program 7 (id=3147): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0043, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'decodes', ' ', 'none'}, 0xd) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x64c546c48307211d) connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x1ff, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004800) io_submit(0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="ffff2ae3d84a31dbdf2503"], 0x14}, 0x1, 0x0, 0x0, 0x4005c}, 0x400c084) r6 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000240)=@keyring={'key_or_keyring:', r6, 0x30}) request_key(0x0, &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000140)='mptcp_pm\x00', r6) r7 = socket(0x2, 0x3, 0xfc) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$pokeuser(0x6, r8, 0x388, 0x5) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x100) ptrace$pokeuser(0x6, r8, 0x358, 0x1000) sendfile(r7, r1, 0x0, 0xffba83) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f0000000000)) 25.053402612s ago: executing program 3 (id=3148): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x18, 0x25, 0x301, 0x70bd26, 0x8000, {0x1}, [@nested={0x4, 0x147}]}, 0x18}, 0x1, 0x0, 0x0, 0x4840}, 0x44004) listen(r0, 0x4) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000140), 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f0000000040)=0xf132, 0x4) r3 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040040}, 0x4004) recvmsg$unix(0xffffffffffffffff, 0x0, 0x20) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x1, 0x7, 0x80000000, 0x102, {{0x15, 0x4, 0x1, 0x5, 0x54, 0x65, 0x0, 0x2c, 0x2f, 0x0, @rand_addr=0x64010102, @local, {[@generic={0xc2, 0x8, "7c07663ed3c5"}, @timestamp_addr={0x44, 0x14, 0x6c, 0x1, 0xc, [{@dev={0xac, 0x14, 0x14, 0x12}, 0xa}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}]}, @end, @generic={0x44, 0xe, "654f182bc59353489c70d15d"}, @timestamp_prespec={0x44, 0x14, 0xf1, 0x3, 0x8, [{@rand_addr=0x64010101, 0x4}, {@local, 0x1004}]}]}}}}}) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00') lseek(r7, 0x9, 0x3) r8 = syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502) ioctl$MEDIA_IOC_G_TOPOLOGY(r8, 0xc0487c04, &(0x7f0000002f00)={0x0, 0xfffffffffffffd41, 0x0, 0x0, 0x39, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000380)=[{}], 0x0, 0x0, 0x0}) ioctl$MEDIA_IOC_SETUP_LINK(r8, 0xc0347c03, &(0x7f0000000200)={{0x80000000, 0x0, 0x0, [0x4, 0x9]}, {0x80000000, 0x0, 0x0, [0x8, 0xe7]}, 0x1, [0x3, 0xffffb4b5]}) rt_sigqueueinfo(0x0, 0xb, &(0x7f0000000080)={0x36, 0x208, 0xfffffff3}) pselect6(0x0, 0x0, &(0x7f0000000080)={0x7c, 0x1, 0x4, 0x5, 0x3, 0x2, 0x6b9cae00, 0x9}, &(0x7f00000000c0)={0x2, 0x3ff, 0x0, 0x9e9, 0x4, 0x4, 0xba}, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000552a5920240401c05faa010203010902"], 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000001052ccc1c7c242455144250a2f766270255929e30c4ae74e0c956c54d038a32fe07a102e768097caa1ec1bebeb9a886510d73812e2855f728d550eee354474f38acb05ad3f94b5525be7eb68f91bf1f58b64359985e68f62de433c6007cdfaeb039cf79c71a3510054a79be54a6fe7a3a391bc84ab7a4b254b1e930f4cf65f3c54199b26c7fde8ed16127a01dc7636d833e939dcf7202d23155840c104d6e5d8c625a1b3d2ba792a7484731b35b406d400bc599ba8b6dee2248d4d78cb2bee787a190038177bece044f8f20a0e8d483dcf7c6f85d8e1307c5e321be9d365e5706c", @ANYRES16=r6, @ANYBLOB="010000000000000000000600000008000300", @ANYRES32=r9, @ANYBLOB="0800050007000000"], 0x24}}, 0x10) 24.614672318s ago: executing program 2 (id=3149): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) read(0xffffffffffffffff, 0x0, 0x0) r0 = memfd_secret(0x0) mmap(&(0x7f0000d53000/0x2000)=nil, 0x2000, 0x2000008, 0x4010, r0, 0xd4fb8000) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000180)=ANY=[@ANYRESHEX=r0], &(0x7f0000000540)={0xfffffffffffffeac, 0x0, 0x0, 0x0}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000100)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB="00000100000004"], 0x0, 0x0, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000008c0)={0x84, &(0x7f00000002c0)={0x40, 0x93cbdfa27418ee13, 0xe, "f9ba220c4c93375f37405c9a93c9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004a00003c00000000000590780a0101010a010120441405430000000000000004640101020040000000040000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c040002b9dc4ed84597f2b3a354d52a90780000"], 0x0) 22.85564351s ago: executing program 7 (id=3150): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xd, 0x3}, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x8000) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xd, 0x4}, {}, {0x7, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x4, 0x1, 0x9185}, {0x4, 0x1, 0x8, 0x2, 0x8, 0x1, 0x2}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x20000, 0x0) close(r10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r11, 0x42}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)="aac1", 0x2}], 0x1}, 0x4) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000c40)={0x8000203d}) r12 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r12, 0x11b, 0x4, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) socket$nl_generic(0x10, 0x3, 0x10) 22.163094043s ago: executing program 4 (id=3151): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0xf) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = fanotify_init(0x200, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="120100005864e6082c105162687e010203010902120001000000000904"], 0x0) fanotify_mark(r3, 0x1, 0x4800003e, r2, 0x0) r4 = syz_io_uring_setup(0x959, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000540)=0x0, &(0x7f0000000000)=0x0) name_to_handle_at(r2, &(0x7f0000000040)='./file0\x00', &(0x7f0000000740)=ANY=[@ANYBLOB="100900000000c2ad00ffff02010000000000000400000002e8af3d878e2c689ec2443c748628fbc30f730a21f22f7aced3c8fd1b4268c6dec6c286aaa9c2b74d56b07ebe1e1d0ce2e4c9191e8b84ecde7309a8564ee1536883aec2e500fccb910e32edeaabb482b7420cac7da63f403d759efcbf2c9e9e0dad38cc19f9a9d6a6225dcb15777d305a16b6a396724c256a06dbb0091aa903975a0fb70d18fbe17d8f72ab161b10ff8fb54b037dfe"], 0x0, 0x1000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) r7 = socket$alg(0x26, 0x5, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r7, 0x1, 0x53, &(0x7f0000000580)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f00000005c0)=0x2c) bind$alg(r7, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000640)={r1}) setsockopt$MRT_ASSERT(r8, 0x0, 0xcf, &(0x7f0000000680)=0x1, 0x4) ioctl$XFS_IOC_FSINUMBERS(r7, 0xc0205867, &(0x7f0000000600)={&(0x7f0000000700)=0x1, 0x8, &(0x7f0000000180)=[{}, {}, {}, {}, {}], &(0x7f00000000c0)}) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f01c, 0x2}) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 21.919055817s ago: executing program 3 (id=3152): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) (fail_nth: 28) 21.509175878s ago: executing program 2 (id=3153): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac010902"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="31010000dccd5e08cb060700000800000001090224000100007e000904"], 0x0) r1 = syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x181000) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000a80)='\x00', 0x1}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000180)={&(0x7f0000000000)="dd", 0x1}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000140)={&(0x7f0000000100)="e3", 0x1, 0x0}) r3 = socket$packet(0x11, 0x2, 0x300) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x182000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000280)={0x80, 0x10, 0x10, 0x0, 0x6, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8, 0x8, 0x40000000}, {0x0, 0x400006}, {0x0, 0xb, 0xfffffffd}, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000002, 0x0, 0xfffffffc, 0x400009, 0x6, 0x0, 0x17, 0x0, 0x1, 0x6}) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setns(0xffffffffffffffff, 0x24020000) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_INET6={0x4, 0x2d}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048020}, 0x8024) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f0000000080)={r2}) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110014a696d4003041060"], 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) syz_usb_disconnect(r0) 20.90570775s ago: executing program 3 (id=3154): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), 0xffffffffffffffff) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x38, r0, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xf4, 0x2e}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x177f}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x38}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0) creat(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) (async) r4 = creat(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) syz_io_uring_setup(0x2406, &(0x7f0000000040)={0x0, 0x0, 0x32, 0x0, 0xffffffff, 0x0, r4}, 0x0, 0x0) 20.68679351s ago: executing program 3 (id=3155): openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="0218000014000000000000000000000005000500000000000a00ffff00000000fe8000000000000000000000000000aa0000000000000000080012000000000003000000000000001000000000000000000000000000000002000002000000000000000000000000fc010000000000000000000000000000050006006c0000000a"], 0xa0}}, 0x0) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = syz_io_uring_setup(0x313f, &(0x7f0000000080)={0x0, 0xfffffffd, 0x10100, 0x3, 0x179}, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r6 = semget$private(0x0, 0x6, 0x0) semtimedop(r6, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r6, &(0x7f00000000c0)=[{0x2}], 0x1) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r7) close(r7) openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) semop(r6, &(0x7f0000000000)=[{0x2}, {0x3, 0x1, 0x1400}], 0x2) semctl$GETZCNT(r6, 0x2, 0xf, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x40, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="1a", 0x1}, {0x0, 0x47}], 0x2}) io_uring_enter(r3, 0x4d10, 0x2, 0x2, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="640000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="3a0a050023080000440012800b000100697036746e6c00"], 0x64}, 0x1, 0x0, 0x0, 0x14000880}, 0x40080) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b000000000000000000000000800000275fc9dbe4cc21bbb692ba505d00000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x17, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r9, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000280)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb0, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0xf5, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000740)={'syztnl2\x00', &(0x7f00000006c0)={'syztnl2\x00', r10, 0x2f, 0x2, 0x0, 0x7fffffff, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2={0xfc, 0x2, '\x00', 0x1}, 0x10, 0x80, 0x4, 0xd26}}) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000980)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000940)={&(0x7f00000007c0)={0x160, 0x0, 0x300, 0x70bd25, 0x25dfdbfe, {}, [{{0x8, 0x1, r10}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r10}}, {0x8}}}]}}, {{0x8, 0x1, r11}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r10}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8, 0x6, r10}}}]}}]}, 0x160}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 19.788316628s ago: executing program 3 (id=3156): r0 = syz_usb_connect(0x5, 0x64, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(r0) syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x101, 0x0, 0x0, 0x0, 0x10, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x33, 0x10, 0x7, "", [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x7, 0x1, 0x2, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x8a, 0x3, 0x5}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x1, 0x9, 0x9}}]}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0xa, 0x2, 0x7f, 0x20, 0xff}, 0x17, &(0x7f0000000080)={0x5, 0xf, 0x17, 0x2, [@wireless={0xb, 0x10, 0x1, 0x8, 0x30, 0x7, 0x80, 0xdb, 0x18}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0xb, 0x5, 0x5b}]}, 0x3, [{0xca, &(0x7f00000000c0)=@string={0xca, 0x3, "0e294e00e3a73e3dd5956d0873392bca160847f7b8d79c86ea4e6570f82e06994442bd295b4a4b008c612f490a0c57f475344c0a903df283619c26549d408440be950164c62d94017f32b128454045a8f1736859f2a504b9b07578b08be4d55e2092272725a947e23f8e44cb959acf90bb0b197c5636c2870ccef9fbf6ce3cdc9d8125a9ae9203785a161c2cf7a4c13b020cbd3bd0383062fa6090c4369be51899550648189cbd49d0710284f31c5672d902f84407136eb7f46256cefd05d1319f08f7d76128e695"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x437}}, {0x100, &(0x7f0000000200)=@string={0x100, 0x3, "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"}}]}) syz_usb_control_io$hid(r0, &(0x7f0000000500)={0x24, &(0x7f0000000340)={0x20, 0x21, 0xdc, {0xdc, 0x1a, "caee73c2d6f4740ead2b56d508aaafc1992f6d84a6532f28212c35111f2d7729fdc228a8dde0310d455dd85268a030a9c5b9f1577247adbf2fd0952086d0fa3e298fa846e0956fa34b6d38a214eeab06d141a182dec63b53884419acc2692d2b6b63d7f19f1433b102e1a48add7f618b918eaf1e68b0ad078d7ef3cb4590ca6e8887e409b2a6d1def99ba40d434558ff7a3dc3a1135276f6fafcb83d6cf42e13451a20d9139ccc6ba7255f9d01db4e97ae96557f8fa885eff1d3179091fc6fcb3afd34d2e0aa3cb804725aaee4c096fe3d92f6105dbaef1fc56b"}}, &(0x7f0000000440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41d}}, &(0x7f0000000480)={0x0, 0x22, 0x15, {[@global=@item_012={0x2, 0x1, 0x8, "a284"}, @local=@item_012={0x2, 0x2, 0x1, "e9ac"}, @global=@item_4={0x3, 0x1, 0x9, "5a4f8469"}, @local=@item_4={0x3, 0x2, 0x8, "42c0dbc6"}, @local=@item_012={0x1, 0x2, 0x8, "85"}, @global=@item_012={0x2, 0x1, 0x0, "0ced"}]}}, &(0x7f00000004c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x2, 0x1, {0x22, 0x60c}}}}, &(0x7f00000007c0)={0x2c, &(0x7f0000000540)={0x20, 0x9, 0x97, "4c3b81b9b1618acd2d6ca2b66114af0ce94839c59190014cecf9794ac382ddb58d9b75d58fc0bee08e241f260afa9d3dd76ba4d900b1c30e7b8d68836dc5d8bb2632c84da71c3cd25e9278d75c4b1a6254c1b1676c7c8791876c68c1c0cfcd91c1a6db792b598afd7c2e46fae2fb87a5c73a4b076106828ee15b06d826fcf2c02593bd5d0ffef89580fba6ce4cca2ea310082562145fd9"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x10}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000680)={0x20, 0x1, 0xbc, "5eeb3653b13481fa5439bfec617056a632bc3ecc2b482a9c2f5de127b9a4afc59f36527061ccc190b5f794c9293b7577569531f50303b0671f5a6d88b284980325bca35f4822a1ac389746f293283332a2812483e80da569dca9bc011c31f9188d29d443cd91bb5efce779fd75ae55bca12f78aad5235d38401e426f40519b7c5a7e1f9df3aaffe1c2ad950206eabba3b7ccfc073b07e39bb0be0c7a315b88c76de5dbcb1b85088cbc524f1ea25a666107d9586dccee65d08d63c655"}, &(0x7f0000000780)={0x20, 0x3, 0x1, 0x1}}) 18.820966591s ago: executing program 4 (id=3157): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0x400000000000004) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000001c0)=0x100000, 0x4) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffdbb}, 0x48) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="88000000000101040000000000000000020000002400018014000180080001000000000008000200e00000010c0002800500010000000000240002800c000280050001000000000014000180080001000000000008000200e0000002080007400000000024000e800c00028005000100840000001400018008000100ac14142608000200ac0414bb"], 0x88}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x401, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x84c0}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_ALL_TARGETS={0x8, 0xa, 0x1}, @IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x9}, @IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x9}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001040)=@bpf_tracing={0x1a, 0xb, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, [@printk={@s}]}, &(0x7f0000000e40)='syzkaller\x00', 0xfffffff7, 0x8d, &(0x7f0000000e80)=""/141, 0x40f00, 0x4, '\x00', 0x0, 0xc5bfc5ddedeeb593, 0xffffffffffffffff, 0x8, &(0x7f0000000f40)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000f80)={0x1, 0x10, 0x6, 0x80}, 0x10, 0x2e7d, r4, 0x2, &(0x7f0000000fc0)=[0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001000)=[{0x5, 0x3, 0x0, 0xa}, {0x5, 0x2, 0x2, 0x2}], 0x10, 0xfe8}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001100)=@generic={&(0x7f0000000140)='./file0\x00', r5}, 0x18) 18.546265802s ago: executing program 6 (id=3158): syz_emit_ethernet(0x331, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) 18.43524647s ago: executing program 6 (id=3159): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001500010300"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) readv(r4, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="240000002100df4c2abd70c6270000220000e900104e88cb7634ce58ea220000"], 0x24}, 0x1, 0x0, 0x0, 0x24000014}, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0xa7e, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x2000, 0x3, 0x4, 0x0, 0xd, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, "a730ba01"}, 0x0, 0x1, {0x0}}) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r6, 0xc01064bd, &(0x7f0000000300)={&(0x7f00000001c0)="7d69ab58", 0x4, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r6, 0xc01864ba, &(0x7f0000000340)={0x6, 0x0, r7}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000000)=0x1) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="b700000017000000bfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff0000000015040000000001d80f030000000300003404000001ed0a0014040000170000803c400000000000007b0a00fe000000004e04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efefb202ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff0c710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf1dbf6d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040bef29b66e3858d051c096e37c4f46010400000000c3da29faf75ddd1aa96960bca97af13382cb881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d0cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090d030000003acec439c163fcd7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e22ce67f1231bd236486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931481747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885769754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8269b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347932a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd23834a50d7eb8e327fb5db12cbd6a9efe8e671c4f251fe3bf440cabdfe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa2c910fb8de24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f8089322d84ac523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe91c921ac1476027772c87d1767e31a3446cd57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c828c02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007f00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d05d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b530500d8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400098abb869921911480a876fbba698801937e8b4264eb6f5137bd9b075f1488d22230592a79000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462aa2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783fefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9be0bdd37220e316f2297743dd4731614a50c16c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd08000000e843591d2618e2d2cdc7081c8fafffe9c350a5c554a387de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119d2a673bdae05779208409e6cf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8a9d3374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c7963c2ba910969f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21d24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a4ee271e35ed9eed636338f1835fc957729d63dc1bfc7b772cbe536c2d3aff27c22f9a2f876512616a5bdaf22a16e19d1b5f52abb40b433983d0cf50234de659c1a397ce901000000caae1bcfdce33dae6adc260321702f239c25ab181390e7dc8c1e5b1cf3b4fef1cd5c44a89b5e5d8314e02f4673ded90bce9a4025b0232eec970f7aa17f175a14e8dc8de9bac0006b98a8283eee5665f3aede28228e0468dbcf8b776fe4c629d3af183a7cba5adf77f23d31f9d5a183c0da4e95f75b1496a97a46a06e4e1f5a8438d49dbd493ba2482c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) 17.288948698s ago: executing program 6 (id=3160): socket$l2tp6(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r2, 0x0, 0x12, &(0x7f00000000c0)=0x1f5, 0x4) setsockopt$inet_int(r2, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r2, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x121001, 0x0) r3 = syz_io_uring_setup(0x1110, &(0x7f0000000140)={0x0, 0x4, 0x400, 0x2}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0xa, 0x0, 0x0, 0x440000, 0x1, 0x1}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) 16.735432233s ago: executing program 3 (id=3161): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac010902"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="31010000dccd5e08cb060700000800000001090224000100007e000904"], 0x0) r1 = syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x181000) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000a80)='\x00', 0x1}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000180)={&(0x7f0000000000)="dd", 0x1}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000140)={&(0x7f0000000100)="e3", 0x1, 0x0}) r3 = socket$packet(0x11, 0x2, 0x300) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x182000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000280)={0x80, 0x10, 0x10, 0x0, 0x6, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8, 0x8, 0x40000000}, {0x0, 0x400006}, {0x0, 0xb, 0xfffffffd}, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000002, 0x0, 0xfffffffc, 0x400009, 0x6, 0x0, 0x17, 0x0, 0x1, 0x6}) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x6020400) setns(0xffffffffffffffff, 0x24020000) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_INET6={0x4, 0x2d}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048020}, 0x8024) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f0000000080)={r2}) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110014a696d4003041060"], 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) syz_usb_disconnect(r0) 16.021108224s ago: executing program 6 (id=3162): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) brk(0x800000000002) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$CEC_ADAP_G_LOG_ADDRS(0xffffffffffffffff, 0x805c6103, &(0x7f0000000100)) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) modify_ldt$write2(0x11, &(0x7f0000000000)={0x6, 0x20001000, 0xffffffffffffbfff, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x10) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r9, 0x84, 0x6, &(0x7f0000000e80)={0x0, @in={{0x2, 0x4e21, @loopback}}}, &(0x7f0000000f40)=0x84) write$UHID_INPUT(r8, &(0x7f0000000040)={0xf, {"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", 0x1000}}, 0x1006) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=@deltclass={0x60, 0x29, 0x1, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x5}, {0xc, 0x9}, {0x4, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x6, 0xaf}}, @tclass_kind_options=@c_sfb={0x8}, @TCA_RATE={0x6, 0x5, {0x2c, 0x8}}, @tclass_kind_options=@c_mqprio={0xb}, @TCA_RATE={0x6, 0x5, {0x2, 0x9}}, @TCA_RATE={0x6, 0x5, {0x5, 0x2}}, @TCA_RATE={0x6, 0x5, {0x9, 0x4}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040011}, 0x0) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) r10 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001740), 0x80000, 0x0) ioctl$RTC_UIE_ON(r10, 0x7003) ioctl$RTC_WKALM_SET(r10, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0x14, 0x3b, 0x11, 0x10, 0x4, 0xe80, 0x5, 0x40}}) close(r10) 7.511928451s ago: executing program 35 (id=3150): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xd, 0x3}, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x8000) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xd, 0x4}, {}, {0x7, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x4, 0x1, 0x9185}, {0x4, 0x1, 0x8, 0x2, 0x8, 0x1, 0x2}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x20000, 0x0) close(r10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r11, 0x42}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)="aac1", 0x2}], 0x1}, 0x4) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000c40)={0x8000203d}) r12 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r12, 0x11b, 0x4, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) socket$nl_generic(0x10, 0x3, 0x10) 6.009169345s ago: executing program 36 (id=3153): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac010902"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="31010000dccd5e08cb060700000800000001090224000100007e000904"], 0x0) r1 = syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x181000) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000a80)='\x00', 0x1}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000180)={&(0x7f0000000000)="dd", 0x1}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000140)={&(0x7f0000000100)="e3", 0x1, 0x0}) r3 = socket$packet(0x11, 0x2, 0x300) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x182000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000280)={0x80, 0x10, 0x10, 0x0, 0x6, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8, 0x8, 0x40000000}, {0x0, 0x400006}, {0x0, 0xb, 0xfffffffd}, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000002, 0x0, 0xfffffffc, 0x400009, 0x6, 0x0, 0x17, 0x0, 0x1, 0x6}) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setns(0xffffffffffffffff, 0x24020000) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_INET6={0x4, 0x2d}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048020}, 0x8024) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f0000000080)={r2}) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110014a696d4003041060"], 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) syz_usb_disconnect(r0) 3.517783986s ago: executing program 37 (id=3157): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0x400000000000004) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000001c0)=0x100000, 0x4) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffdbb}, 0x48) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="88000000000101040000000000000000020000002400018014000180080001000000000008000200e00000010c0002800500010000000000240002800c000280050001000000000014000180080001000000000008000200e0000002080007400000000024000e800c00028005000100840000001400018008000100ac14142608000200ac0414bb"], 0x88}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x401, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x84c0}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_ALL_TARGETS={0x8, 0xa, 0x1}, @IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x9}, @IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x9}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001040)=@bpf_tracing={0x1a, 0xb, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, [@printk={@s}]}, &(0x7f0000000e40)='syzkaller\x00', 0xfffffff7, 0x8d, &(0x7f0000000e80)=""/141, 0x40f00, 0x4, '\x00', 0x0, 0xc5bfc5ddedeeb593, 0xffffffffffffffff, 0x8, &(0x7f0000000f40)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000f80)={0x1, 0x10, 0x6, 0x80}, 0x10, 0x2e7d, r4, 0x2, &(0x7f0000000fc0)=[0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001000)=[{0x5, 0x3, 0x0, 0xa}, {0x5, 0x2, 0x2, 0x2}], 0x10, 0xfe8}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001100)=@generic={&(0x7f0000000140)='./file0\x00', r5}, 0x18) 1.010288156s ago: executing program 38 (id=3161): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac010902"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="31010000dccd5e08cb060700000800000001090224000100007e000904"], 0x0) r1 = syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x181000) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000a80)='\x00', 0x1}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000180)={&(0x7f0000000000)="dd", 0x1}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000140)={&(0x7f0000000100)="e3", 0x1, 0x0}) r3 = socket$packet(0x11, 0x2, 0x300) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x182000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000280)={0x80, 0x10, 0x10, 0x0, 0x6, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8, 0x8, 0x40000000}, {0x0, 0x400006}, {0x0, 0xb, 0xfffffffd}, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000002, 0x0, 0xfffffffc, 0x400009, 0x6, 0x0, 0x17, 0x0, 0x1, 0x6}) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x6020400) setns(0xffffffffffffffff, 0x24020000) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_INET6={0x4, 0x2d}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048020}, 0x8024) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f0000000080)={r2}) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110014a696d4003041060"], 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) syz_usb_disconnect(r0) 0s ago: executing program 39 (id=3162): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) brk(0x800000000002) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$CEC_ADAP_G_LOG_ADDRS(0xffffffffffffffff, 0x805c6103, &(0x7f0000000100)) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) modify_ldt$write2(0x11, &(0x7f0000000000)={0x6, 0x20001000, 0xffffffffffffbfff, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x10) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r9, 0x84, 0x6, &(0x7f0000000e80)={0x0, @in={{0x2, 0x4e21, @loopback}}}, &(0x7f0000000f40)=0x84) write$UHID_INPUT(r8, &(0x7f0000000040)={0xf, {"a2e3ad214fc752f90b5e094f4bf70e0dd038e7ff7fc6e5539b1b4d078b089b3b0838721a0890e0878f0e1ac6e7049b3d6c959b4c9a240d9b67f3988f7ef319520100ffe8d178708c523c921b1b5b31320d075d0736cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f0000000c558cdc0a3621c56cea8d20fa911afe40db6ebe8cac64289fd3da232f1b5dbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000e0a37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146680400416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d483d4675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb53682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516ab68032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d95f2e8c77d95a3d3a6df40babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e08d4db9d76864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f39a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60559516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251aec29b32f8210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ac015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67784f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a700d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=@deltclass={0x60, 0x29, 0x1, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x5}, {0xc, 0x9}, {0x4, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x6, 0xaf}}, @tclass_kind_options=@c_sfb={0x8}, @TCA_RATE={0x6, 0x5, {0x2c, 0x8}}, @tclass_kind_options=@c_mqprio={0xb}, @TCA_RATE={0x6, 0x5, {0x2, 0x9}}, @TCA_RATE={0x6, 0x5, {0x5, 0x2}}, @TCA_RATE={0x6, 0x5, {0x9, 0x4}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040011}, 0x0) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) r10 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001740), 0x80000, 0x0) ioctl$RTC_UIE_ON(r10, 0x7003) ioctl$RTC_WKALM_SET(r10, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0x14, 0x3b, 0x11, 0x10, 0x4, 0xe80, 0x5, 0x40}}) close(r10) kernel console output (not intermixed with test programs): 6] ? __pfx_ksys_write+0x10/0x10 [ 876.767366][T17666] do_syscall_64+0x14d/0xf80 [ 876.767385][T17666] ? trace_irq_disable+0x3b/0x150 [ 876.767410][T17666] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 876.767428][T17666] ? clear_bhb_loop+0x40/0x90 [ 876.767450][T17666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 876.767467][T17666] RIP: 0033:0x7f9fd3d9c799 [ 876.767484][T17666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 876.767500][T17666] RSP: 002b:00007f9fd4bcb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 876.767519][T17666] RAX: ffffffffffffffda RBX: 00007f9fd4015fa0 RCX: 00007f9fd3d9c799 [ 876.767533][T17666] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000003 [ 876.767544][T17666] RBP: 00007f9fd4bcb090 R08: 0000000000000000 R09: 0000000000000000 [ 876.767555][T17666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 876.767565][T17666] R13: 00007f9fd4016038 R14: 00007f9fd4015fa0 R15: 00007f9fd413fa48 [ 876.767593][T17666] [ 877.149261][T16749] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 877.239645][T16749] usb 7-1: USB disconnect, device number 15 [ 877.355686][ T5888] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 877.385071][T17628] udevd[17628]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 877.535711][ T5888] usb 3-1: Invalid ep0 maxpacket: 64 [ 877.597974][T17672] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2915'. [ 877.679758][ T5888] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 877.786056][T16749] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 877.835663][ T5888] usb 3-1: Invalid ep0 maxpacket: 64 [ 877.847922][ T5888] usb usb3-port1: attempt power cycle [ 877.959516][T16749] usb 7-1: Using ep0 maxpacket: 32 [ 877.987138][T16749] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 878.005974][T16749] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 878.037414][T16749] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 878.097841][T16749] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 878.138411][T16749] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 878.172831][T16749] usb 7-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 878.215709][ T5888] usb 3-1: new low-speed USB device number 11 using dummy_hcd [ 878.231679][T16749] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.243515][T16749] usb 7-1: Product: syz [ 878.251650][T16749] usb 7-1: Manufacturer: syz [ 878.261605][T16749] usb 7-1: SerialNumber: syz [ 878.281396][T16749] usb 7-1: config 0 descriptor?? [ 878.386042][ T5888] usb 3-1: Invalid ep0 maxpacket: 64 [ 878.515705][ T5888] usb 3-1: new low-speed USB device number 12 using dummy_hcd [ 878.526332][T17685] usb usb8: usbfs: process 17685 (syz.3.2916) did not claim interface 0 before use [ 878.578633][ T5888] usb 3-1: Invalid ep0 maxpacket: 64 [ 878.598885][ T5888] usb usb3-port1: unable to enumerate USB device [ 878.986134][T16749] iforce 7-1:0.0: usb_submit_urb failed: -32 [ 879.132590][T16749] input input58: Device does not respond to id packet M [ 879.359742][T16749] iforce 7-1:0.0: usb_submit_urb failed: -32 [ 879.442791][T16749] input input58: Device does not respond to id packet P [ 879.528512][T16749] input input58: Device does not respond to id packet B [ 879.585101][T17699] input: syz1 as /devices/virtual/input/input59 [ 879.731719][T16749] input input58: Device does not respond to id packet N [ 879.770264][T17700] netlink: 'syz.3.2921': attribute type 11 has an invalid length. [ 879.931417][T16749] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 880.070222][T16749] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 880.084593][T17706] netlink: 2048 bytes leftover after parsing attributes in process `syz.2.2923'. [ 880.114470][T16749] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 880.123632][T17706] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2923'. [ 880.205867][T16749] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 880.276239][T16749] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input58 [ 880.435691][ T5888] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 880.605737][ T5888] usb 3-1: Using ep0 maxpacket: 32 [ 880.612881][ T5888] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 880.621669][ T5888] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 880.641798][ T5888] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 880.662065][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 880.683511][ T5888] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 880.716790][ T5888] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 880.744387][ T5888] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 880.763817][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 880.781882][ T5888] usb 3-1: config 0 descriptor?? [ 880.994923][ T5888] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 881.009761][ T5888] usb 3-1: USB disconnect, device number 13 [ 881.053362][ T5888] usblp0: removed [ 881.160501][T16749] usb 7-1: USB disconnect, device number 16 [ 881.505702][ T5888] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 881.598598][T17723] fuse: Bad value for 'fd' [ 881.676837][ T5888] usb 3-1: Using ep0 maxpacket: 32 [ 881.710261][ T5888] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 881.741592][ T5888] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 881.803236][ T5888] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 881.835792][T15560] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 881.843460][T16749] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 881.876765][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 881.899718][ T5888] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 881.909659][ T10] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 881.924485][ T5888] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 881.939992][ T5888] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 881.950560][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.972236][ T5888] usb 3-1: config 0 descriptor?? [ 882.036722][T15560] usb 5-1: Using ep0 maxpacket: 16 [ 882.044479][T16749] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 882.063339][T15560] usb 5-1: config 0 has no interfaces? [ 882.069956][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 882.086370][T16749] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 882.107365][T15560] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 882.121355][T17709] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2925'. [ 882.142502][T16749] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 882.154846][T15560] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 882.170999][ T10] usb 8-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 882.175998][T16749] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 882.205063][ T5888] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 882.215630][T15560] usb 5-1: Manufacturer: syz [ 882.232283][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.257388][T15560] usb 5-1: config 0 descriptor?? [ 882.270843][T16749] usb 7-1: SerialNumber: syz [ 882.296976][ T10] usb 8-1: Product: syz [ 882.301171][ T10] usb 8-1: Manufacturer: syz [ 882.363828][ T10] usb 8-1: SerialNumber: syz [ 882.399260][ T10] usb 8-1: config 0 descriptor?? [ 882.529574][T16749] usb 7-1: 0:2 : does not exist [ 882.535839][ T10] as10x_usb: device has been detected [ 882.587124][ T10] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 882.658649][ T10] usb 8-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 882.709573][T16749] usb 7-1: USB disconnect, device number 17 [ 882.722832][T17723] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2926'. [ 882.733165][ T10] as10x_usb: error during firmware upload part1 [ 882.734731][T17723] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2926'. [ 882.804613][T17081] udevd[17081]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 882.826512][ T10] Registered device Sky IT Digital Key (green led) [ 883.102892][T17720] Set syz1 is full, maxelem 6117 reached [ 883.469601][ T24] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 883.648377][ T24] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 883.710967][ T24] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 883.783222][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 883.898435][ T24] usb 7-1: config 0 descriptor?? [ 883.942442][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 884.529414][T16749] usb 3-1: USB disconnect, device number 14 [ 884.585390][ T24] pwc: recv_control_msg error -32 req 02 val 2700 [ 884.593007][T16749] usblp0: removed [ 884.628850][ T10] usb 5-1: USB disconnect, device number 17 [ 884.950028][T15560] usb 8-1: USB disconnect, device number 12 [ 885.241598][T15560] Unregistered device Sky IT Digital Key (green led) [ 885.384728][T15560] as10x_usb: device has been disconnected [ 885.535657][T17746] netlink: 'syz.4.2933': attribute type 11 has an invalid length. [ 885.756080][T17754] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 885.782679][T17756] netlink: 'syz.2.2934': attribute type 11 has an invalid length. [ 885.813165][T17757] netlink: 'syz.7.2935': attribute type 2 has an invalid length. [ 885.844906][T17757] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2935'. [ 887.296719][ T24] pwc: recv_control_msg error -71 req 02 val 2c00 [ 887.315264][ T24] pwc: recv_control_msg error -71 req 04 val 1000 [ 887.322514][ T24] pwc: recv_control_msg error -71 req 04 val 1300 [ 887.332928][ T24] pwc: recv_control_msg error -71 req 04 val 1400 [ 887.340993][ T24] pwc: recv_control_msg error -71 req 02 val 2000 [ 887.348602][ T24] pwc: recv_control_msg error -71 req 02 val 2100 [ 887.355542][ T24] pwc: recv_control_msg error -71 req 04 val 1500 [ 887.363450][T17764] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2937'. [ 887.390436][ T24] pwc: recv_control_msg error -71 req 02 val 2500 [ 887.398597][ T24] pwc: recv_control_msg error -71 req 02 val 2400 [ 887.405649][ T24] pwc: recv_control_msg error -71 req 02 val 2600 [ 887.412645][ T24] pwc: recv_control_msg error -71 req 02 val 2900 [ 887.422477][ T24] pwc: recv_control_msg error -71 req 02 val 2800 [ 887.437175][ T24] pwc: recv_control_msg error -71 req 04 val 1100 [ 887.444703][T17767] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2938'. [ 887.454819][ T24] pwc: recv_control_msg error -71 req 04 val 1200 [ 887.484970][ T24] pwc: Registered as video103. [ 887.493164][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input60 [ 887.533039][ T24] usb 7-1: USB disconnect, device number 18 [ 890.840118][T17790] xt_ecn: cannot match TCP bits for non-tcp packets [ 891.448417][T17782] netlink: 'syz.6.2942': attribute type 5 has an invalid length. [ 891.691291][T17798] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2947'. [ 891.701423][T17798] netem: invalid attributes len -7 [ 891.716090][T17798] netem: change failed [ 891.866148][ T5881] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 892.051450][ T5881] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 892.089805][ T5881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.139294][ T5881] usb 3-1: config 0 descriptor?? [ 892.392634][ T5881] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 892.815678][ T10] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 892.999485][ T10] usb 7-1: config 0 has an invalid descriptor of length 56, skipping remainder of the config [ 893.052163][ T10] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 893.107001][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 893.155128][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 64 [ 893.201127][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 49616, setting to 64 [ 893.245663][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 893.255974][T17815] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 893.267228][T17815] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 893.298176][ T10] usb 7-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 893.315653][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.333259][ T10] usb 7-1: Product: syz [ 893.339121][ T10] usb 7-1: Manufacturer: syz [ 893.351746][ T10] usb 7-1: SerialNumber: syz [ 893.373907][ T10] usb 7-1: config 0 descriptor?? [ 893.391580][T17811] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 893.401279][T17811] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 894.605801][ T10] rc_core: IR keymap rc-snapstream-firefly not found [ 894.613802][ T10] Registered IR keymap rc-empty [ 894.620868][ T10] rc rc0: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 894.632577][T17821] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2954'. [ 894.660242][ T10] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input61 [ 894.689018][ T5881] [drm:udl_init] *ERROR* Selecting channel failed [ 894.725167][ T10] input: syz syz mouse as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input62 [ 894.775492][ T5881] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 894.815857][ T5881] [drm] Initialized udl on minor 2 [ 894.824762][ T10] usb 7-1: USB disconnect, device number 19 [ 894.824800][ C0] ati_remote 7-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19 [ 894.866218][ T5881] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 894.918570][ T5881] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 894.927709][ T983] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 894.958883][T17828] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:0 [ 894.978602][ T983] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 894.986937][ T5881] usb 3-1: USB disconnect, device number 15 [ 895.055917][ T983] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 895.355658][ T983] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 895.406873][T17835] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2958'. [ 895.469568][T17835] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 895.525773][ T983] usb 4-1: device descriptor read/64, error -71 [ 895.557338][ T5881] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 895.726550][ T5881] usb 3-1: Using ep0 maxpacket: 32 [ 895.755233][ T5881] usb 3-1: config 0 has an invalid interface number: 61 but max is 1 [ 895.776704][ T5881] usb 3-1: config 0 has no interface number 1 [ 895.787575][ T983] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 895.799771][ T5881] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 895.815832][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.825091][ T5881] usb 3-1: Product: syz [ 895.834956][ T5881] usb 3-1: Manufacturer: syz [ 895.840321][ T5881] usb 3-1: SerialNumber: syz [ 895.866140][ T5881] usb 3-1: config 0 descriptor?? [ 895.945678][ T983] usb 4-1: device descriptor read/64, error -71 [ 895.986798][ T5881] viperboard 3-1:0.61: version 0.00 found at bus 003 address 016 [ 896.045910][ T10] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 896.063658][ T983] usb usb4-port1: attempt power cycle [ 896.076452][ T5881] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 896.135691][ T5881] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 896.138120][T17847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 896.146617][ T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 896.184970][T17847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 896.250535][ T5881] viperboard 3-1:0.0: version 0.00 found at bus 003 address 016 [ 896.258867][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 896.271961][ T10] usb 8-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 896.311630][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 896.339818][ T5881] viperboard-i2c viperboard-i2c.5.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 896.355981][ T10] usb 8-1: Product: syz [ 896.367091][ T10] usb 8-1: Manufacturer: syz [ 896.371747][ T10] usb 8-1: SerialNumber: syz [ 896.378180][ T5881] viperboard-i2c viperboard-i2c.5.auto: probe with driver viperboard-i2c failed with error -5 [ 896.404682][ T10] usb 8-1: config 0 descriptor?? [ 896.446582][ T983] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 896.471710][ T5881] usb 3-1: USB disconnect, device number 16 [ 896.527469][ T983] usb 4-1: device descriptor read/8, error -71 [ 896.769961][ T983] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 896.836912][ T983] usb 4-1: device descriptor read/8, error -71 [ 896.958605][ T983] usb usb4-port1: unable to enumerate USB device [ 896.998971][T17862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 897.012606][T17862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 897.039179][ T10] peak_usb 8-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 897.051459][ T10] peak_usb 8-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 897.156555][ T10] peak_usb 8-1:0.0: probe with driver peak_usb failed with error -71 [ 897.202171][ T10] usb 8-1: USB disconnect, device number 13 [ 897.375729][ T5881] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 897.545700][ T5881] usb 3-1: Using ep0 maxpacket: 32 [ 897.553613][ T5881] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 897.562780][ T5881] usb 3-1: config 0 has no interface number 0 [ 897.574063][ T5881] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 897.584923][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.593332][ T5881] usb 3-1: Product: syz [ 897.598295][ T5881] usb 3-1: Manufacturer: syz [ 897.609033][ T5881] usb 3-1: SerialNumber: syz [ 897.640694][ T5881] usb 3-1: config 0 descriptor?? [ 897.674578][ T5881] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 897.689714][T17871] syzkaller0: entered promiscuous mode [ 897.696633][T17871] syzkaller0: entered allmulticast mode [ 897.711969][ T5881] usb 3-1: selecting invalid altsetting 1 [ 897.728709][ T5881] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 897.756510][ T5881] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 897.769014][ T5881] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 897.778297][ T5881] usb 3-1: media controller created [ 897.806413][ T5881] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 897.904311][T17861] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 897.910942][T17861] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 897.926245][ T983] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 897.945719][T17876] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 897.952256][T17876] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 897.966346][T17861] vhci_hcd vhci_hcd.0: Device attached [ 897.974929][ T5881] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 897.982173][T17875] vhci_hcd: connection closed [ 897.991438][ T5881] zl10353_read_register: readreg error (reg=127, ret==-71) [ 897.997793][T17876] vhci_hcd vhci_hcd.0: Device attached [ 898.008313][ T5881] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 898.011636][ T49] vhci_hcd vhci_hcd.2: stop threads [ 898.023372][T17883] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(11) [ 898.029978][T17883] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 898.045495][ T49] vhci_hcd vhci_hcd.2: release socket [ 898.061604][T17883] vhci_hcd vhci_hcd.0: Device attached [ 898.077604][ T49] vhci_hcd vhci_hcd.2: disconnect device [ 898.083545][T17888] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(14) [ 898.090161][T17888] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 898.122090][ T983] usb 7-1: config 0 has an invalid interface number: 168 but max is 0 [ 898.139781][ T5881] usb 3-1: USB disconnect, device number 17 [ 898.146562][ T983] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 898.160812][T17888] vhci_hcd vhci_hcd.0: Device attached [ 898.172149][ T983] usb 7-1: config 0 has no interface number 0 [ 898.182573][ T983] usb 7-1: config 0 interface 168 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 898.200973][ T983] usb 7-1: config 0 interface 168 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 898.220849][ T983] usb 7-1: config 0 interface 168 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16 [ 898.247820][ T983] usb 7-1: New USB device found, idVendor=0959, idProduct=2bd0, bcdDevice=48.98 [ 898.248334][T17873] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(10) [ 898.259361][ T983] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 898.263453][T17873] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 898.293652][T17874] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(17) [ 898.293792][ T983] usb 7-1: config 0 descriptor?? [ 898.300316][T17874] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 898.324184][ T983] HFC-S_USB 7-1:0.168: probe with driver HFC-S_USB failed with error -5 [ 898.325804][ T5936] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 898.342953][T17876] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 898.351290][T17873] vhci_hcd vhci_hcd.0: Device attached [ 898.356999][T17874] vhci_hcd vhci_hcd.0: Device attached [ 898.366707][T17873] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 898.386275][T17873] vhci_hcd vhci_hcd.0: pdev(3) rhport(7) sockfd(22) [ 898.392892][T17873] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 898.403518][T17873] vhci_hcd vhci_hcd.0: Device attached [ 898.431469][T17896] vhci_hcd: connection closed [ 898.431859][ T12] vhci_hcd vhci_hcd.3: stop threads [ 898.442410][T17894] vhci_hcd: connection closed [ 898.444805][T17892] vhci_hcd: connection closed [ 898.446789][T17889] vhci_hcd: connection closed [ 898.451305][T17885] vhci_hcd: connection closed [ 898.459660][ T12] vhci_hcd vhci_hcd.3: release socket [ 898.469970][T17881] vhci_hcd: connection reset by peer [ 898.488548][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 898.504419][ T12] vhci_hcd vhci_hcd.3: stop threads [ 898.515783][ T12] vhci_hcd vhci_hcd.3: release socket [ 898.530146][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 898.557196][ T12] vhci_hcd vhci_hcd.3: stop threads [ 898.564730][ T983] usb 7-1: USB disconnect, device number 20 [ 898.573085][ T12] vhci_hcd vhci_hcd.3: release socket [ 898.597954][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 898.623106][ T12] vhci_hcd vhci_hcd.3: stop threads [ 898.644243][ T12] vhci_hcd vhci_hcd.3: release socket [ 898.671809][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 898.706515][ T12] vhci_hcd vhci_hcd.3: stop threads [ 898.712323][ T12] vhci_hcd vhci_hcd.3: release socket [ 898.732886][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 898.769898][ T12] vhci_hcd vhci_hcd.3: stop threads [ 898.775187][ T12] vhci_hcd vhci_hcd.3: release socket [ 898.789384][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 899.840131][T17916] tipc: Failed to remove unknown binding: 66,1,1/0:930340998/930341000 [ 899.876691][T17916] tipc: Failed to remove unknown binding: 66,1,1/0:930340998/930341000 [ 901.193521][T17950] FAULT_INJECTION: forcing a failure. [ 901.193521][T17950] name failslab, interval 1, probability 0, space 0, times 0 [ 901.269729][T17951] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2980'. [ 901.313130][T17950] CPU: 0 UID: 0 PID: 17950 Comm: syz.2.2981 Tainted: G L syzkaller #0 PREEMPT(full) [ 901.313151][T17950] Tainted: [L]=SOFTLOCKUP [ 901.313156][T17950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 901.313162][T17950] Call Trace: [ 901.313167][T17950] [ 901.313172][T17950] dump_stack_lvl+0xe8/0x150 [ 901.313192][T17950] should_fail_ex+0x412/0x560 [ 901.313210][T17950] should_failslab+0xa8/0x100 [ 901.313237][T17950] __kmalloc_cache_noprof+0x88/0x660 [ 901.313249][T17950] ? nft_netdev_hook_alloc+0x5a/0x570 [ 901.313271][T17950] nft_netdev_hook_alloc+0x5a/0x570 [ 901.313286][T17950] ? nft_pernet+0x23/0x240 [ 901.313301][T17950] nf_tables_parse_netdev_hooks+0x138/0x950 [ 901.313320][T17950] nft_chain_parse_hook+0xb10/0x13f0 [ 901.313340][T17950] ? __pfx_nft_chain_parse_hook+0x10/0x10 [ 901.313355][T17950] ? nft_pernet+0x23/0x240 [ 901.313371][T17950] nf_tables_newchain+0x102e/0x2890 [ 901.313391][T17950] ? __pfx_nf_tables_newchain+0x10/0x10 [ 901.313413][T17950] ? nft_trans_table_add+0x230/0x430 [ 901.313428][T17950] ? nfnl_pernet+0x23/0x240 [ 901.313446][T17950] ? __nla_parse+0x40/0x60 [ 901.313458][T17950] nfnetlink_rcv+0x1240/0x27b0 [ 901.313488][T17950] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 901.313510][T17950] ? ref_tracker_free+0x693/0x840 [ 901.313537][T17950] ? __netlink_deliver_tap+0x807/0x850 [ 901.313552][T17950] ? netlink_deliver_tap+0x2e/0x1b0 [ 901.313574][T17950] netlink_unicast+0x80f/0x9b0 [ 901.313591][T17950] ? __pfx_netlink_unicast+0x10/0x10 [ 901.313605][T17950] ? netlink_sendmsg+0x650/0xb40 [ 901.313613][T17950] ? skb_put+0x11b/0x210 [ 901.313625][T17950] netlink_sendmsg+0x813/0xb40 [ 901.313639][T17950] ? __pfx_netlink_sendmsg+0x10/0x10 [ 901.313650][T17950] ? aa_sock_msg_perm+0xf1/0x1b0 [ 901.313666][T17950] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 901.313679][T17950] ____sys_sendmsg+0x972/0x9f0 [ 901.313696][T17950] ? __pfx_____sys_sendmsg+0x10/0x10 [ 901.313711][T17950] ? import_iovec+0x73/0xa0 [ 901.313724][T17950] ___sys_sendmsg+0x2a5/0x360 [ 901.313738][T17950] ? __pfx____sys_sendmsg+0x10/0x10 [ 901.313766][T17950] ? __fget_files+0x2a/0x420 [ 901.313780][T17950] ? __fget_files+0x3a0/0x420 [ 901.313799][T17950] __x64_sys_sendmsg+0x1bd/0x2a0 [ 901.313811][T17950] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 901.313827][T17950] ? __pfx_ksys_write+0x10/0x10 [ 901.313844][T17950] do_syscall_64+0x14d/0xf80 [ 901.313856][T17950] ? trace_irq_disable+0x3b/0x150 [ 901.313869][T17950] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 901.313880][T17950] ? clear_bhb_loop+0x40/0x90 [ 901.313895][T17950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 901.313908][T17950] RIP: 0033:0x7f688ab9c799 [ 901.313918][T17950] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 901.313927][T17950] RSP: 002b:00007f6888dee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 901.313940][T17950] RAX: ffffffffffffffda RBX: 00007f688ae15fa0 RCX: 00007f688ab9c799 [ 901.313948][T17950] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000003 [ 901.313955][T17950] RBP: 00007f6888dee090 R08: 0000000000000000 R09: 0000000000000000 [ 901.313965][T17950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 901.313973][T17950] R13: 00007f688ae16038 R14: 00007f688ae15fa0 R15: 00007f688af3fa48 [ 901.313999][T17950] [ 902.069260][T17958] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 902.233784][T17962] netlink: 'syz.2.2983': attribute type 1 has an invalid length. [ 902.277144][T17962] netlink: 'syz.2.2983': attribute type 2 has an invalid length. [ 902.341554][T17947] vivid-004: disconnect [ 902.708384][T17942] vivid-004: reconnect [ 902.835686][ T24] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 903.016430][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 903.023560][ T24] usb 4-1: config 0 has an invalid interface number: 143 but max is 0 [ 903.035409][ T24] usb 4-1: config 0 has no interface number 0 [ 903.042813][ T24] usb 4-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 903.057554][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.117298][T17981] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2989'. [ 903.128655][T17982] libceph: resolve '0..' (ret=-3): failed [ 903.145748][ T24] usb 4-1: config 0 descriptor?? [ 903.388778][T17977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 903.417434][T17977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 903.449838][T17977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 903.469416][T17977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 903.493922][ T24] viperboard 4-1:0.143: version 0.00 found at bus 004 address 057 [ 903.515802][ T5936] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 903.568270][ T24] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 903.587548][ T24] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 903.622597][ T24] usb 4-1: USB disconnect, device number 57 [ 904.124455][T17994] cgroup: fork rejected by pids controller in /syz4 [ 904.208060][T18022] FAULT_INJECTION: forcing a failure. [ 904.208060][T18022] name failslab, interval 1, probability 0, space 0, times 0 [ 904.270727][T18022] CPU: 0 UID: 0 PID: 18022 Comm: syz.3.2993 Tainted: G L syzkaller #0 PREEMPT(full) [ 904.270752][T18022] Tainted: [L]=SOFTLOCKUP [ 904.270757][T18022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 904.270763][T18022] Call Trace: [ 904.270768][T18022] [ 904.270773][T18022] dump_stack_lvl+0xe8/0x150 [ 904.270793][T18022] should_fail_ex+0x412/0x560 [ 904.270811][T18022] should_failslab+0xa8/0x100 [ 904.270825][T18022] __kmalloc_cache_noprof+0x88/0x660 [ 904.270838][T18022] ? nft_netdev_hook_alloc+0x220/0x570 [ 904.270855][T18022] nft_netdev_hook_alloc+0x220/0x570 [ 904.270874][T18022] nf_tables_parse_netdev_hooks+0x138/0x950 [ 904.270893][T18022] nft_chain_parse_hook+0xb10/0x13f0 [ 904.270912][T18022] ? __pfx_nft_chain_parse_hook+0x10/0x10 [ 904.270928][T18022] ? nft_pernet+0x23/0x240 [ 904.270944][T18022] nf_tables_newchain+0x102e/0x2890 [ 904.270964][T18022] ? __pfx_nf_tables_newchain+0x10/0x10 [ 904.270987][T18022] ? nft_trans_table_add+0x230/0x430 [ 904.271003][T18022] ? nfnl_pernet+0x23/0x240 [ 904.271020][T18022] ? __nla_parse+0x40/0x60 [ 904.271039][T18022] nfnetlink_rcv+0x1240/0x27b0 [ 904.271069][T18022] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 904.271095][T18022] ? ref_tracker_free+0x693/0x840 [ 904.271123][T18022] ? __netlink_deliver_tap+0x807/0x850 [ 904.271138][T18022] ? netlink_deliver_tap+0x2e/0x1b0 [ 904.271160][T18022] netlink_unicast+0x80f/0x9b0 [ 904.271178][T18022] ? __pfx_netlink_unicast+0x10/0x10 [ 904.271192][T18022] ? netlink_sendmsg+0x650/0xb40 [ 904.271200][T18022] ? skb_put+0x11b/0x210 [ 904.271213][T18022] netlink_sendmsg+0x813/0xb40 [ 904.271227][T18022] ? __pfx_netlink_sendmsg+0x10/0x10 [ 904.271238][T18022] ? aa_sock_msg_perm+0xf1/0x1b0 [ 904.271254][T18022] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 904.271267][T18022] ____sys_sendmsg+0x972/0x9f0 [ 904.271286][T18022] ? __pfx_____sys_sendmsg+0x10/0x10 [ 904.271302][T18022] ? import_iovec+0x73/0xa0 [ 904.271315][T18022] ___sys_sendmsg+0x2a5/0x360 [ 904.271329][T18022] ? __pfx____sys_sendmsg+0x10/0x10 [ 904.271357][T18022] ? __fget_files+0x2a/0x420 [ 904.271372][T18022] ? __fget_files+0x3a0/0x420 [ 904.271391][T18022] __x64_sys_sendmsg+0x1bd/0x2a0 [ 904.271404][T18022] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 904.271420][T18022] ? __pfx_ksys_write+0x10/0x10 [ 904.271440][T18022] do_syscall_64+0x14d/0xf80 [ 904.271452][T18022] ? trace_irq_disable+0x3b/0x150 [ 904.271474][T18022] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 904.271492][T18022] ? clear_bhb_loop+0x40/0x90 [ 904.271513][T18022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 904.271531][T18022] RIP: 0033:0x7fad5299c799 [ 904.271548][T18022] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 904.271557][T18022] RSP: 002b:00007fad53885028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 904.271568][T18022] RAX: ffffffffffffffda RBX: 00007fad52c15fa0 RCX: 00007fad5299c799 [ 904.271576][T18022] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000003 [ 904.271582][T18022] RBP: 00007fad53885090 R08: 0000000000000000 R09: 0000000000000000 [ 904.271588][T18022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 904.271594][T18022] R13: 00007fad52c16038 R14: 00007fad52c15fa0 R15: 00007fad52d3fa48 [ 904.271610][T18022] [ 905.217645][T18030] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2996'. [ 905.258891][T18030] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 905.346012][ T24] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 905.497643][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 905.532439][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 905.577086][ T24] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 905.616338][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 905.662280][ T24] usb 4-1: SerialNumber: syz [ 905.738424][T18044] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2999'. [ 905.950559][T18028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 906.020200][T18028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 906.179284][ T24] usb 4-1: skipping empty audio interface (v1) [ 906.311935][ T5936] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 906.363248][ T24] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 906.424274][ T24] usb 4-1: USB disconnect, device number 58 [ 906.473116][T17628] udevd[17628]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 906.597430][ T5936] usb 8-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 906.618242][ T5936] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 906.648538][ T5936] usb 8-1: config 0 descriptor?? [ 906.659067][ T5936] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 906.723433][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 906.723453][ T30] audit: type=1800 audit(1774346243.669:2926): pid=18063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3002" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 906.761447][T18064] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3001'. [ 907.732566][ T5936] gspca_stv06xx: HDCS-1000/1100 sensor detected [ 907.861652][ T30] audit: type=1326 audit(1774346244.899:2927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18075 comm="syz.3.3006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad5299c799 code=0x7ffc0000 [ 907.971164][ T30] audit: type=1326 audit(1774346244.899:2928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18075 comm="syz.3.3006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad5299c799 code=0x7ffc0000 [ 908.125795][ T24] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 908.309048][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 908.330226][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 908.385767][ T24] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 908.402631][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.425048][ T24] usb 4-1: Product: syz [ 908.435699][ T24] usb 4-1: Manufacturer: syz [ 908.448113][ T24] usb 4-1: SerialNumber: syz [ 908.752177][ T24] usb 4-1: 0:2 : does not exist [ 908.850761][ T24] usb 4-1: USB disconnect, device number 59 [ 908.893572][T17628] udevd[17628]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 908.929682][T10276] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 909.096836][T10276] usb 5-1: device descriptor read/64, error -71 [ 909.335690][T10276] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 909.372344][T18093] loop2: detected capacity change from 0 to 7 [ 909.383604][T17628] Dev loop2: unable to read RDB block 7 [ 909.394205][T17628] loop2: AHDI p1 p2 p3 [ 909.404336][T17628] loop2: partition table partially beyond EOD, truncated [ 909.418156][T17628] loop2: p1 start 1818582900 is beyond EOD, truncated [ 909.438198][T17628] loop2: p3 start 335544320 is beyond EOD, truncated [ 909.461419][T18093] Dev loop2: unable to read RDB block 7 [ 909.477340][T18093] loop2: AHDI p1 p2 p3 [ 909.485404][T18093] loop2: partition table partially beyond EOD, truncated [ 909.492648][T10276] usb 5-1: device descriptor read/64, error -71 [ 909.509213][T18093] loop2: p1 start 1818582900 is beyond EOD, truncated [ 909.523786][T18093] loop2: p3 start 335544320 is beyond EOD, truncated [ 909.606305][T10276] usb usb5-port1: attempt power cycle [ 909.623536][ T30] audit: type=1326 audit(1774346244.899:2929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18075 comm="syz.3.3006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad5299c799 code=0x7ffc0000 [ 909.775674][ T30] audit: type=1326 audit(1774346244.899:2930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18075 comm="syz.3.3006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad5299c799 code=0x7ffc0000 [ 909.865241][ T5936] STV06xx 8-1:0.0: probe with driver STV06xx failed with error -71 [ 909.867912][ T30] audit: type=1326 audit(1774346244.899:2931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18075 comm="syz.3.3006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7fad5299c799 code=0x7ffc0000 [ 909.980371][ T5936] usb 8-1: USB disconnect, device number 14 [ 909.986745][T10276] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 910.017397][T10276] usb 5-1: device descriptor read/8, error -71 [ 910.039244][ T30] audit: type=1326 audit(1774346244.899:2932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18075 comm="syz.3.3006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad5299c799 code=0x7ffc0000 [ 910.130667][ T30] audit: type=1326 audit(1774346244.899:2933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18075 comm="syz.3.3006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad5299c799 code=0x7ffc0000 [ 910.185894][ T5881] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 910.212810][ T30] audit: type=1326 audit(1774346244.899:2934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18075 comm="syz.3.3006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad5299c799 code=0x7ffc0000 [ 910.260006][T10276] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 910.276638][T10276] usb 5-1: device descriptor read/8, error -71 [ 910.277215][ T30] audit: type=1326 audit(1774346244.899:2935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18075 comm="syz.3.3006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fad5299c799 code=0x7ffc0000 [ 910.355768][ T5881] usb 3-1: Using ep0 maxpacket: 16 [ 910.358297][ T5881] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 910.358328][ T5881] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 910.358348][ T5881] usb 3-1: config 0 has no interface number 0 [ 910.360448][ T5881] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 910.360478][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.360499][ T5881] usb 3-1: Product: syz [ 910.360516][ T5881] usb 3-1: Manufacturer: syz [ 910.360532][ T5881] usb 3-1: SerialNumber: syz [ 910.363290][ T5881] usb 3-1: config 0 descriptor?? [ 910.401608][T10276] usb usb5-port1: unable to enumerate USB device [ 910.586412][ T5880] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 910.643656][T18107] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 910.747928][ T5880] usb 4-1: config 2 has an invalid interface number: 1 but max is 0 [ 910.756168][ T5880] usb 4-1: config 2 has no interface number 0 [ 910.765779][T18097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 910.774580][T18097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 910.784602][T18112] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3016'. [ 910.816605][ T5880] usb 4-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=47.78 [ 910.840826][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.876217][ T5880] usb 4-1: Product: syz [ 910.881294][ T5880] usb 4-1: Manufacturer: syz [ 910.899496][ T5880] usb 4-1: SerialNumber: syz [ 911.085885][ T9] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 911.204497][ T5880] usb 4-1: selecting invalid altsetting 1 [ 911.221271][ T5880] snd-usb-us122l 4-1:2.1: usb_set_interface error [ 911.235989][ T5880] snd-usb-us122l 4-1:2.1: probe with driver snd-usb-us122l failed with error -22 [ 911.248697][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 911.266729][ T9] usb 7-1: config 0 has no interfaces? [ 911.277654][ T5880] usb 4-1: USB disconnect, device number 60 [ 911.285918][ T9] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 911.303387][ T9] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 911.322672][ T9] usb 7-1: Product: syz [ 911.335615][ T9] usb 7-1: Manufacturer: syz [ 911.352639][ T9] usb 7-1: SerialNumber: syz [ 911.370943][ T9] usb 7-1: config 0 descriptor?? [ 911.611176][T18114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 911.628036][T18114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 912.010333][T18142] loop2: detected capacity change from 0 to 7 [ 912.038433][T18142] Dev loop2: unable to read RDB block 7 [ 912.047720][ T5880] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 912.069572][T18142] loop2: AHDI p1 p2 p3 [ 912.069611][T18142] loop2: partition table partially beyond EOD, truncated [ 912.069900][T18142] loop2: p1 start 1818582900 is beyond EOD, truncated [ 912.069934][T18142] loop2: p3 start 335544320 is beyond EOD, truncated [ 912.203774][ T5880] usb 5-1: device descriptor read/64, error -71 [ 912.339414][T18140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 912.390924][T18140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 912.435691][ T5880] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 912.566201][ T24] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 912.595708][ T5880] usb 5-1: device descriptor read/64, error -71 [ 912.706402][ T5880] usb usb5-port1: attempt power cycle [ 912.715445][T18129] bridge0: port 2(bridge_slave_1) entered disabled state [ 912.723169][T18129] bridge0: port 1(bridge_slave_0) entered disabled state [ 912.761965][ T24] usb 4-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 912.787059][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.825827][ T24] usb 4-1: Product: syz [ 912.849750][ T24] usb 4-1: Manufacturer: syz [ 912.865020][ T24] usb 4-1: SerialNumber: syz [ 912.899485][ T24] usb 4-1: config 0 descriptor?? [ 912.900925][ T5881] uvcvideo 3-1:0.105: Found UVC 0.00 device syz (046d:08d3) [ 912.932993][ T24] hub 4-1:0.0: bad descriptor, ignoring hub [ 912.973659][ T24] hub 4-1:0.0: probe with driver hub failed with error -5 [ 912.994313][ T5881] uvcvideo 3-1:0.105: No valid video chain found. [ 913.026605][ T24] f81232 4-1:0.0: f81534a converter detected [ 913.062638][T18150] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3024'. [ 913.075783][ T5880] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 913.101714][ T5881] usb 3-1: USB disconnect, device number 18 [ 913.126395][ T5880] usb 5-1: device descriptor read/8, error -71 [ 913.153123][T18150] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3024'. [ 913.262130][T18155] netlink: 6032 bytes leftover after parsing attributes in process `syz.3.3023'. [ 913.334915][ T24] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 913.375525][ T24] f81534a ttyUSB0: probe with driver f81534a failed with error -5 [ 913.426315][ T5880] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 913.474578][ T5880] usb 5-1: device descriptor read/8, error -71 [ 913.495762][ T5881] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 913.615941][ T5880] usb usb5-port1: unable to enumerate USB device [ 913.638380][ T24] usb 4-1: reset high-speed USB device number 61 using dummy_hcd [ 913.677639][ T5881] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 913.695669][ T5881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 913.735393][ T5881] usb 3-1: config 0 descriptor?? [ 913.806307][ T24] usb 4-1: device descriptor read/64, error -71 [ 913.984077][ T5881] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 914.067783][ T24] usb 4-1: reset high-speed USB device number 61 using dummy_hcd [ 914.195364][T18152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 914.234807][T18152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 914.242754][ T24] usb 4-1: device descriptor read/64, error -71 [ 914.277057][T18129] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 914.328923][ T5881] [drm:udl_init] *ERROR* Selecting channel failed [ 914.381267][T18163] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3026'. [ 914.407560][ T5881] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 914.415302][T18129] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 914.434681][ T5881] [drm] Initialized udl on minor 2 [ 914.469188][ T5881] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 914.489511][ T5881] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 914.499214][T18133] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 914.518198][ T24] usb 4-1: reset high-speed USB device number 61 using dummy_hcd [ 914.531385][T18133] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 914.545175][ T5881] usb 3-1: USB disconnect, device number 19 [ 914.556712][T18133] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 914.568709][ T24] usb 4-1: device descriptor read/8, error -71 [ 914.815745][ T24] usb 4-1: reset high-speed USB device number 61 using dummy_hcd [ 914.860966][ T24] usb 4-1: device descriptor read/8, error -71 [ 914.995994][ T24] usb 4-1: USB disconnect, device number 61 [ 915.023218][ T24] f81232 4-1:0.0: device disconnected [ 915.325741][ T24] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 915.356341][ T77] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 915.375807][ T77] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 915.395296][ T77] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 915.460796][ T77] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 915.667443][ T10] usb 7-1: USB disconnect, device number 21 [ 915.970288][T18199] netlink: 116 bytes leftover after parsing attributes in process `syz.4.3034'. [ 915.988385][T18196] netlink: 'syz.7.3032': attribute type 1 has an invalid length. [ 916.030512][T18196] netlink: 'syz.7.3032': attribute type 2 has an invalid length. [ 916.069889][ T10] usb 7-1: new full-speed USB device number 22 using dummy_hcd [ 916.111674][T18201] fuse: Bad value for 'rootmode' [ 916.248749][ T10] usb 7-1: config 0 has an invalid interface number: 231 but max is 0 [ 916.257296][ T10] usb 7-1: config 0 has no interface number 0 [ 916.275974][ T10] usb 7-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 916.311824][ T10] usb 7-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 916.333445][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.353353][ T10] usb 7-1: Product: syz [ 916.367820][ T10] usb 7-1: Manufacturer: syz [ 916.380429][ T10] usb 7-1: SerialNumber: syz [ 916.415662][T18133] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 916.423580][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 916.574435][ T10] usb 7-1: config 0 descriptor?? [ 916.579960][T18133] usb 5-1: device descriptor read/64, error -32 [ 916.630453][T18184] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 916.740743][T18215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3039'. [ 916.875757][T18133] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 917.028422][ T10] plusb 7-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.6-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, c2:85:d3:db:7c:ea [ 917.189586][T18133] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 917.237010][T18133] usb 5-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 917.362937][T18133] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.459649][T18133] usb 5-1: config 0 descriptor?? [ 917.613612][T18133] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 917.635683][ T24] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 917.935792][T18133] usb 5-1: USB disconnect, device number 28 [ 917.975777][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 917.993047][ T24] usb 4-1: config 0 has no interfaces? [ 918.016823][ T24] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 918.102572][ T24] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 918.181238][ T24] usb 4-1: Product: syz [ 918.181263][ T24] usb 4-1: Manufacturer: syz [ 918.181278][ T24] usb 4-1: SerialNumber: syz [ 918.197134][ T24] usb 4-1: config 0 descriptor?? [ 918.402570][T18225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 918.471426][T18225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 918.935931][ T24] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 918.971694][T18253] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3045'. [ 919.108198][ T5881] usb 7-1: USB disconnect, device number 22 [ 919.128048][ T24] usb 8-1: Using ep0 maxpacket: 8 [ 919.164255][ T24] usb 8-1: config 2 has an invalid interface number: 31 but max is 0 [ 919.196081][ T5881] plusb 7-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.6-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 919.233892][T18249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 919.245175][T18249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 919.261841][ T24] usb 8-1: config 2 has no interface number 0 [ 919.284769][ T24] usb 8-1: config 2 interface 31 has no altsetting 0 [ 919.319695][T18255] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3045'. [ 919.340304][ T24] usb 8-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 919.380538][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.435651][ T24] usb 8-1: Product: syz [ 919.464155][ T24] usb 8-1: Manufacturer: syz [ 919.485756][ T24] usb 8-1: SerialNumber: syz [ 919.945196][ T24] ch9200 8-1:2.31: probe with driver ch9200 failed with error -22 [ 920.068434][ T24] usb 8-1: USB disconnect, device number 15 [ 920.267413][ T30] kauditd_printk_skb: 52 callbacks suppressed [ 920.267431][ T30] audit: type=1326 audit(1774346257.309:2988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18267 comm="syz.7.3048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fd3d9c799 code=0x7ffc0000 [ 920.297028][T18248] bridge0: port 2(bridge_slave_1) entered disabled state [ 920.304697][T18248] bridge0: port 1(bridge_slave_0) entered disabled state [ 920.509935][ T30] audit: type=1326 audit(1774346257.379:2989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18273 comm="syz.4.3050" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fac4cf9c799 code=0x0 [ 920.579598][T18278] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3048'. [ 920.599733][ T30] audit: type=1326 audit(1774346257.399:2990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18267 comm="syz.7.3048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9fd3d9c799 code=0x7ffc0000 [ 920.706602][ T30] audit: type=1326 audit(1774346257.409:2991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18267 comm="syz.7.3048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fd3d9c799 code=0x7ffc0000 [ 920.846626][ T30] audit: type=1326 audit(1774346257.409:2992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18267 comm="syz.7.3048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fd3d9c799 code=0x7ffc0000 [ 920.975132][ T30] audit: type=1326 audit(1774346257.689:2993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18267 comm="syz.7.3048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f9fd3d9c799 code=0x7ffc0000 [ 921.115678][ T30] audit: type=1326 audit(1774346257.689:2994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18267 comm="syz.7.3048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fd3d9c799 code=0x7ffc0000 [ 921.259190][ T30] audit: type=1326 audit(1774346257.689:2995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18267 comm="syz.7.3048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fd3d9c799 code=0x7ffc0000 [ 921.485860][T16749] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 921.697235][T16749] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 921.705422][T16749] usb 5-1: config 0 has no interface number 0 [ 921.721824][T16749] usb 5-1: config 0 interface 133 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 921.767869][T16749] usb 5-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 921.779625][T18248] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 921.815926][T16749] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.844483][T16749] usb 5-1: Product: syz [ 921.874962][T16749] usb 5-1: Manufacturer: syz [ 921.890013][T16749] usb 5-1: SerialNumber: syz [ 921.927516][T18248] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 921.956854][T16749] usb 5-1: config 0 descriptor?? [ 922.354095][T16749] keyspan 5-1:0.133: Keyspan 1 port adapter converter detected [ 922.384623][T16749] keyspan 5-1:0.133: unsupported endpoint type 0 [ 922.417357][T16749] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 81 [ 922.446221][T16749] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 1 [ 922.454052][T16749] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 2 [ 922.488922][T16749] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 922.521042][T16749] usb 5-1: USB disconnect, device number 29 [ 922.545545][T16749] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 922.560605][T16749] keyspan 5-1:0.133: device disconnected [ 922.852552][ T130] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.889945][ T130] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 923.120159][T18287] netlink: 'syz.2.3052': attribute type 1 has an invalid length. [ 923.133928][T18287] netlink: 'syz.2.3052': attribute type 2 has an invalid length. [ 923.216853][ T5881] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 923.389378][ T130] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 923.430312][T18304] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3055'. [ 923.463213][ T130] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 923.480873][T18304] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3055'. [ 923.552563][T18306] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3058'. [ 923.584627][T18306] netlink: 'syz.7.3058': attribute type 10 has an invalid length. [ 923.733189][T10276] usb 4-1: USB disconnect, device number 63 [ 923.740296][T18304] vlan2: entered allmulticast mode [ 923.746682][T18304] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 923.856716][T18133] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 923.864834][T18306] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 923.910077][T18306] team0: Failed to send options change via netlink (err -105) [ 923.932243][T18306] team0: Port device netdevsim0 added [ 923.957284][ T12] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 923.982583][T18309] syzkaller0: entered promiscuous mode [ 923.997572][T18309] syzkaller0: entered allmulticast mode [ 924.028550][T18133] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 924.078081][T18133] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 924.127261][T18133] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 924.162235][T18133] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.188025][T18133] usb 5-1: Product: syz [ 924.192465][T18133] usb 5-1: Manufacturer: syz [ 924.202642][T18133] usb 5-1: SerialNumber: syz [ 924.253871][T18133] usb 5-1: config 0 descriptor?? [ 924.373361][T18320] fuse: Invalid uid '0x0000000000000004' [ 924.475734][T10276] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 924.481456][T18133] usb 5-1: USB disconnect, device number 30 [ 924.655779][T10276] usb 8-1: device descriptor read/64, error -71 [ 924.926571][T10276] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 924.968571][T18133] hid_parser_main: 3989 callbacks suppressed [ 924.968591][T18133] hid-generic 0003:0008:FFFEFFFF.0028: unknown main item tag 0x0 [ 924.999858][T18133] hid-generic 0003:0008:FFFEFFFF.0028: unknown main item tag 0x6 [ 925.009576][T18133] hid-generic 0003:0008:FFFEFFFF.0028: item 0 1 0 8 parsing failed [ 925.034202][T18133] hid-generic 0003:0008:FFFEFFFF.0028: probe with driver hid-generic failed with error -22 [ 925.065727][T10276] usb 8-1: device descriptor read/64, error -71 [ 925.195749][T15560] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 925.203731][T10276] usb usb8-port1: attempt power cycle [ 925.284042][T18361] FAULT_INJECTION: forcing a failure. [ 925.284042][T18361] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 925.332223][T18361] CPU: 1 UID: 0 PID: 18361 Comm: syz.6.3069 Tainted: G L syzkaller #0 PREEMPT(full) [ 925.332245][T18361] Tainted: [L]=SOFTLOCKUP [ 925.332249][T18361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 925.332256][T18361] Call Trace: [ 925.332262][T18361] [ 925.332267][T18361] dump_stack_lvl+0xe8/0x150 [ 925.332286][T18361] should_fail_ex+0x412/0x560 [ 925.332303][T18361] _copy_from_user+0x2d/0xb0 [ 925.332316][T18361] ___sys_sendmsg+0x1c6/0x360 [ 925.332331][T18361] ? __pfx____sys_sendmsg+0x10/0x10 [ 925.332365][T18361] __sys_sendmmsg+0x27c/0x4e0 [ 925.332379][T18361] ? __pfx___sys_sendmmsg+0x10/0x10 [ 925.332390][T18361] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 925.332413][T18361] ? ksys_write+0x242/0x270 [ 925.332426][T18361] ? __pfx_ksys_write+0x10/0x10 [ 925.332439][T18361] __x64_sys_sendmmsg+0xa0/0xc0 [ 925.332452][T18361] do_syscall_64+0x14d/0xf80 [ 925.332463][T18361] ? trace_irq_disable+0x3b/0x150 [ 925.332477][T18361] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.332487][T18361] ? clear_bhb_loop+0x40/0x90 [ 925.332499][T18361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.332509][T18361] RIP: 0033:0x7f6831d9c799 [ 925.332520][T18361] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 925.332529][T18361] RSP: 002b:00007f6832b90028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 925.332542][T18361] RAX: ffffffffffffffda RBX: 00007f6832016090 RCX: 00007f6831d9c799 [ 925.332549][T18361] RDX: 04924924924925c6 RSI: 0000200000000680 RDI: 0000000000000007 [ 925.332556][T18361] RBP: 00007f6832b90090 R08: 0000000000000000 R09: 0000000000000000 [ 925.332562][T18361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 925.332568][T18361] R13: 00007f6832016128 R14: 00007f6832016090 R15: 00007f683213fa48 [ 925.332582][T18361] [ 925.815684][T15560] usb 3-1: Using ep0 maxpacket: 32 [ 925.823795][T15560] usb 3-1: config 0 has no interfaces? [ 925.835519][T15560] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 925.846762][T15560] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 925.869384][T10276] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 925.890400][T15560] usb 3-1: Product: syz [ 925.907388][T15560] usb 3-1: Manufacturer: syz [ 925.920792][T15560] usb 3-1: SerialNumber: syz [ 925.926477][T10276] usb 8-1: device descriptor read/8, error -71 [ 925.960261][T15560] usb 3-1: config 0 descriptor?? [ 926.180956][T10276] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 926.217644][T18351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 926.250531][T10276] usb 8-1: device descriptor read/8, error -71 [ 926.266000][T18351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 926.387801][T10276] usb usb8-port1: unable to enumerate USB device [ 926.666992][T18374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 926.729050][T18374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 926.766028][T18136] usb 3-1: USB disconnect, device number 20 [ 926.927161][T18372] bridge0: port 2(bridge_slave_1) entered disabled state [ 926.934612][T18372] bridge0: port 1(bridge_slave_0) entered disabled state [ 927.330901][T12664] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 927.345093][T12664] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 927.354204][T12664] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 927.363003][T12664] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 927.372015][T12664] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 927.522472][T18390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 927.560377][T18390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 927.756036][T18136] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 927.768036][T18372] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 927.872194][T18400] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3077'. [ 927.881860][T18372] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 927.901730][T18402] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3076'. [ 928.296616][T18386] netlink: 'syz.7.3074': attribute type 1 has an invalid length. [ 928.304499][T18386] netlink: 'syz.7.3074': attribute type 2 has an invalid length. [ 928.411117][T12664] Bluetooth: hci5: command 0x0406 tx timeout [ 928.678346][T18395] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3076'. [ 928.749958][ T77] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.773842][ T77] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.827840][ T77] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.875990][ T77] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.976539][T18413] FAULT_INJECTION: forcing a failure. [ 928.976539][T18413] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 929.026359][T18413] CPU: 1 UID: 0 PID: 18413 Comm: syz.3.3080 Tainted: G L syzkaller #0 PREEMPT(full) [ 929.026387][T18413] Tainted: [L]=SOFTLOCKUP [ 929.026395][T18413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 929.026405][T18413] Call Trace: [ 929.026413][T18413] [ 929.026421][T18413] dump_stack_lvl+0xe8/0x150 [ 929.026452][T18413] should_fail_ex+0x412/0x560 [ 929.026477][T18413] _copy_from_user+0x2d/0xb0 [ 929.026499][T18413] ___sys_sendmsg+0x1c6/0x360 [ 929.026525][T18413] ? __pfx____sys_sendmsg+0x10/0x10 [ 929.026588][T18413] __sys_sendmmsg+0x27c/0x4e0 [ 929.026614][T18413] ? __pfx___sys_sendmmsg+0x10/0x10 [ 929.026631][T18413] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 929.026676][T18413] ? ksys_write+0x242/0x270 [ 929.026697][T18413] ? __pfx_ksys_write+0x10/0x10 [ 929.026722][T18413] __x64_sys_sendmmsg+0xa0/0xc0 [ 929.026746][T18413] do_syscall_64+0x14d/0xf80 [ 929.026771][T18413] ? trace_irq_disable+0x3b/0x150 [ 929.026785][T18413] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 929.026796][T18413] ? clear_bhb_loop+0x40/0x90 [ 929.026807][T18413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 929.026817][T18413] RIP: 0033:0x7fad5299c799 [ 929.026827][T18413] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 929.026836][T18413] RSP: 002b:00007fad53864028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 929.026848][T18413] RAX: ffffffffffffffda RBX: 00007fad52c16090 RCX: 00007fad5299c799 [ 929.026855][T18413] RDX: 04924924924925c6 RSI: 0000200000000680 RDI: 0000000000000007 [ 929.026862][T18413] RBP: 00007fad53864090 R08: 0000000000000000 R09: 0000000000000000 [ 929.026869][T18413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 929.026874][T18413] R13: 00007fad52c16128 R14: 00007fad52c16090 R15: 00007fad52d3fa48 [ 929.026889][T18413] [ 929.448211][ T5825] Bluetooth: hci3: command tx timeout [ 929.703654][T18387] chnl_net:caif_netlink_parms(): no params data found [ 929.878992][T18430] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 930.240388][T18387] bridge0: port 1(bridge_slave_0) entered blocking state [ 930.297178][T18387] bridge0: port 1(bridge_slave_0) entered disabled state [ 930.339485][T18387] bridge_slave_0: entered allmulticast mode [ 930.376228][T18387] bridge_slave_0: entered promiscuous mode [ 930.435916][T18387] bridge0: port 2(bridge_slave_1) entered blocking state [ 930.536176][T18387] bridge0: port 2(bridge_slave_1) entered disabled state [ 930.562735][T18387] bridge_slave_1: entered allmulticast mode [ 930.584710][T18387] bridge_slave_1: entered promiscuous mode [ 930.726605][T18387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 930.742088][T18387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 930.807565][T18387] team0: Port device team_slave_0 added [ 930.874263][T18387] team0: Port device team_slave_1 added [ 931.051729][T18387] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 931.085848][T18387] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 931.172659][T18387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 931.223434][T18387] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 931.245849][T18387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 931.325912][T18443] FAULT_INJECTION: forcing a failure. [ 931.325912][T18443] name failslab, interval 1, probability 0, space 0, times 0 [ 931.368829][T18387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 931.396476][T18443] CPU: 0 UID: 0 PID: 18443 Comm: syz.6.3085 Tainted: G L syzkaller #0 PREEMPT(full) [ 931.396495][T18443] Tainted: [L]=SOFTLOCKUP [ 931.396499][T18443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 931.396506][T18443] Call Trace: [ 931.396511][T18443] [ 931.396518][T18443] dump_stack_lvl+0xe8/0x150 [ 931.396537][T18443] should_fail_ex+0x412/0x560 [ 931.396554][T18443] should_failslab+0xa8/0x100 [ 931.396568][T18443] __kmalloc_cache_noprof+0x88/0x660 [ 931.396580][T18443] ? nft_netdev_hook_alloc+0x220/0x570 [ 931.396594][T18443] ? __kmalloc_cache_noprof+0x15b/0x660 [ 931.396607][T18443] nft_netdev_hook_alloc+0x220/0x570 [ 931.396625][T18443] nf_tables_parse_netdev_hooks+0x138/0x950 [ 931.396644][T18443] nft_chain_parse_hook+0xb10/0x13f0 [ 931.396663][T18443] ? __pfx_nft_chain_parse_hook+0x10/0x10 [ 931.396678][T18443] ? nft_pernet+0x23/0x240 [ 931.396695][T18443] nf_tables_newchain+0x102e/0x2890 [ 931.396715][T18443] ? __pfx_nf_tables_newchain+0x10/0x10 [ 931.396737][T18443] ? nft_trans_table_add+0x230/0x430 [ 931.396753][T18443] ? nfnl_pernet+0x23/0x240 [ 931.396771][T18443] ? __nla_parse+0x40/0x60 [ 931.396783][T18443] nfnetlink_rcv+0x1240/0x27b0 [ 931.396795][T18443] ? is_bpf_text_address+0x26/0x2b0 [ 931.396823][T18443] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 931.396841][T18443] ? __lock_acquire+0x6b5/0x2cf0 [ 931.396870][T18443] ? netlink_deliver_tap+0x2e/0x1b0 [ 931.396893][T18443] netlink_unicast+0x80f/0x9b0 [ 931.396910][T18443] ? __pfx_netlink_unicast+0x10/0x10 [ 931.396924][T18443] ? netlink_sendmsg+0x650/0xb40 [ 931.396932][T18443] ? skb_put+0x11b/0x210 [ 931.396945][T18443] netlink_sendmsg+0x813/0xb40 [ 931.396959][T18443] ? __pfx_netlink_sendmsg+0x10/0x10 [ 931.396970][T18443] ? aa_sock_msg_perm+0xf1/0x1b0 [ 931.396985][T18443] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 931.397005][T18443] ____sys_sendmsg+0x972/0x9f0 [ 931.397032][T18443] ? __pfx_____sys_sendmsg+0x10/0x10 [ 931.397061][T18443] ? import_iovec+0x73/0xa0 [ 931.397080][T18443] ___sys_sendmsg+0x2a5/0x360 [ 931.397094][T18443] ? __pfx____sys_sendmsg+0x10/0x10 [ 931.397123][T18443] ? __fget_files+0x2a/0x420 [ 931.397137][T18443] ? __fget_files+0x3a0/0x420 [ 931.397155][T18443] __x64_sys_sendmsg+0x1bd/0x2a0 [ 931.397168][T18443] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 931.397184][T18443] ? __pfx_ksys_write+0x10/0x10 [ 931.397201][T18443] do_syscall_64+0x14d/0xf80 [ 931.397215][T18443] ? trace_irq_disable+0x3b/0x150 [ 931.397229][T18443] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 931.397239][T18443] ? clear_bhb_loop+0x40/0x90 [ 931.397251][T18443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 931.397261][T18443] RIP: 0033:0x7f6831d9c799 [ 931.397277][T18443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 931.397286][T18443] RSP: 002b:00007f6832bb1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 931.397298][T18443] RAX: ffffffffffffffda RBX: 00007f6832015fa0 RCX: 00007f6831d9c799 [ 931.397305][T18443] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000003 [ 931.397312][T18443] RBP: 00007f6832bb1090 R08: 0000000000000000 R09: 0000000000000000 [ 931.397318][T18443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 931.397324][T18443] R13: 00007f6832016038 R14: 00007f6832015fa0 R15: 00007f683213fa48 [ 931.397340][T18443] [ 931.735517][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.741937][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.762420][T12664] Bluetooth: hci3: command tx timeout [ 932.045658][T18136] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 932.074253][T18387] hsr_slave_0: entered promiscuous mode [ 932.148735][T18387] hsr_slave_1: entered promiscuous mode [ 932.191877][T18387] debugfs: 'hsr0' already exists in 'hsr' [ 932.205638][T18136] usb 7-1: Using ep0 maxpacket: 32 [ 932.245187][T18387] Cannot create hsr debugfs directory [ 932.256218][T18136] usb 7-1: config 0 has no interfaces? [ 932.273925][T18136] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 932.295817][T18136] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 932.331064][T18136] usb 7-1: Product: syz [ 932.347266][T18136] usb 7-1: Manufacturer: syz [ 932.366583][T18136] usb 7-1: SerialNumber: syz [ 932.386222][T18136] usb 7-1: config 0 descriptor?? [ 932.515700][ T796] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 932.607469][T18448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 932.619502][T18448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 932.688253][ T796] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 52, changing to 7 [ 932.714989][ T796] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 9272, setting to 1024 [ 932.759734][ T796] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 932.821449][ T796] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.856985][ T796] usb 3-1: config 0 descriptor?? [ 933.009609][T18458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 933.060527][T18458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 933.082222][ T796] ath6kl: Failed to submit usb control message: -71 [ 933.108159][ T796] ath6kl: unable to send the bmi data to the device: -71 [ 933.127699][T15560] usb 7-1: USB disconnect, device number 25 [ 933.134507][ T796] ath6kl: Unable to send get target info: -71 [ 933.166489][ T796] ath6kl: Failed to init ath6kl core: -71 [ 933.193278][ T796] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 933.248086][T18467] netlink: 'syz.3.3091': attribute type 1 has an invalid length. [ 933.265673][T18467] netlink: 'syz.3.3091': attribute type 2 has an invalid length. [ 933.275791][ T796] usb 3-1: USB disconnect, device number 21 [ 933.435207][T18474] FAULT_INJECTION: forcing a failure. [ 933.435207][T18474] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 933.484004][T18474] CPU: 0 UID: 0 PID: 18474 Comm: syz.7.3092 Tainted: G L syzkaller #0 PREEMPT(full) [ 933.484027][T18474] Tainted: [L]=SOFTLOCKUP [ 933.484031][T18474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 933.484037][T18474] Call Trace: [ 933.484042][T18474] [ 933.484047][T18474] dump_stack_lvl+0xe8/0x150 [ 933.484067][T18474] should_fail_ex+0x412/0x560 [ 933.484084][T18474] _copy_from_user+0x2d/0xb0 [ 933.484097][T18474] ___sys_sendmsg+0x1c6/0x360 [ 933.484112][T18474] ? __pfx____sys_sendmsg+0x10/0x10 [ 933.484145][T18474] __sys_sendmmsg+0x27c/0x4e0 [ 933.484159][T18474] ? __pfx___sys_sendmmsg+0x10/0x10 [ 933.484172][T18474] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 933.484196][T18474] ? ksys_write+0x242/0x270 [ 933.484208][T18474] ? __pfx_ksys_write+0x10/0x10 [ 933.484222][T18474] __x64_sys_sendmmsg+0xa0/0xc0 [ 933.484234][T18474] do_syscall_64+0x14d/0xf80 [ 933.484245][T18474] ? trace_irq_disable+0x3b/0x150 [ 933.484259][T18474] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 933.484270][T18474] ? clear_bhb_loop+0x40/0x90 [ 933.484282][T18474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 933.484292][T18474] RIP: 0033:0x7f9fd3d9c799 [ 933.484303][T18474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 933.484312][T18474] RSP: 002b:00007f9fd4baa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 933.484324][T18474] RAX: ffffffffffffffda RBX: 00007f9fd4016090 RCX: 00007f9fd3d9c799 [ 933.484332][T18474] RDX: 04924924924925c6 RSI: 0000200000000680 RDI: 0000000000000007 [ 933.484338][T18474] RBP: 00007f9fd4baa090 R08: 0000000000000000 R09: 0000000000000000 [ 933.484344][T18474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 933.484350][T18474] R13: 00007f9fd4016128 R14: 00007f9fd4016090 R15: 00007f9fd413fa48 [ 933.484365][T18474] [ 933.699756][T18387] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 933.900230][T18387] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 933.913854][T18368] Bluetooth: hci3: command tx timeout [ 933.919361][T18368] Bluetooth: hci6: command 0x0406 tx timeout [ 933.988294][T18387] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 934.051816][T18387] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 934.252923][T18489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3093'. [ 934.454368][T18387] 8021q: adding VLAN 0 to HW filter on device bond0 [ 934.502134][T18387] 8021q: adding VLAN 0 to HW filter on device team0 [ 934.526375][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 934.533497][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 934.565438][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 934.572584][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 934.634050][T18387] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 934.677890][T18387] veth0_vlan: entered promiscuous mode [ 934.712676][T18387] veth1_vlan: entered promiscuous mode [ 934.786568][ T796] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 934.976285][ T796] usb 3-1: Using ep0 maxpacket: 32 [ 935.021597][ T796] usb 3-1: config 0 has an invalid interface number: 119 but max is 0 [ 935.043886][T18387] veth0_macvtap: entered promiscuous mode [ 935.064682][ T796] usb 3-1: config 0 has no interface number 0 [ 935.113119][ T796] usb 3-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 935.135630][ T796] usb 3-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 935.153750][T18387] veth1_macvtap: entered promiscuous mode [ 935.237326][ T796] usb 3-1: config 0 interface 119 altsetting 0 endpoint 0x83 has an invalid bInterval 115, changing to 7 [ 935.273270][T18387] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 935.311061][ T796] usb 3-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 25972, setting to 1024 [ 935.348515][T18387] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 935.384561][ T30] audit: type=1326 audit(1774346272.419:2996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18504 comm="syz.6.3096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6831d9c799 code=0x7ffc0000 [ 935.416177][ T796] usb 3-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 935.449606][ T1164] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.485928][ T1164] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.516117][ T30] audit: type=1326 audit(1774346272.419:2997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18504 comm="syz.6.3096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f6831d9c799 code=0x7ffc0000 [ 935.541343][ T1164] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.554722][ T796] usb 3-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 935.580088][ T796] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 935.611332][ T796] usb 3-1: Product: syz [ 935.614657][ T1164] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.654960][ T796] usb 3-1: Manufacturer: syz [ 935.684957][ T796] usb 3-1: SerialNumber: syz [ 935.690309][ T30] audit: type=1326 audit(1774346272.419:2998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18504 comm="syz.6.3096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6831d9c799 code=0x7ffc0000 [ 935.732137][ T796] usb 3-1: config 0 descriptor?? [ 935.737390][T18507] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3096'. [ 935.808421][ T796] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.119/input/input63 [ 935.852448][ T30] audit: type=1326 audit(1774346272.419:2999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18504 comm="syz.6.3096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f6831d9c799 code=0x7ffc0000 [ 935.929511][ T5825] Bluetooth: hci3: command tx timeout [ 936.014495][ T30] audit: type=1326 audit(1774346272.459:3000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18504 comm="syz.6.3096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6831d9c502 code=0x7ffc0000 [ 936.196047][ T30] audit: type=1326 audit(1774346272.459:3001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18504 comm="syz.6.3096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6831d9c502 code=0x7ffc0000 [ 936.317164][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 936.374303][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 936.385912][ T30] audit: type=1326 audit(1774346272.459:3002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18504 comm="syz.6.3096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6831d9c799 code=0x7ffc0000 [ 936.529014][ T30] audit: type=1326 audit(1774346272.459:3003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18504 comm="syz.6.3096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6831d9c799 code=0x7ffc0000 [ 936.558002][ T6264] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 936.641631][ T6264] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 936.649624][ T30] audit: type=1326 audit(1774346272.459:3004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18504 comm="syz.6.3096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f6831d9c799 code=0x7ffc0000 [ 936.697015][T18522] IPv6: NLM_F_CREATE should be specified when creating new route [ 936.727248][ T30] audit: type=1326 audit(1774346272.459:3005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18504 comm="syz.6.3096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6831d9c799 code=0x7ffc0000 [ 936.751172][T18524] veth1_to_hsr: mtu less than device minimum [ 937.152356][T18534] FAULT_INJECTION: forcing a failure. [ 937.152356][T18534] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 937.202113][T18534] CPU: 0 UID: 0 PID: 18534 Comm: syz.6.3103 Tainted: G L syzkaller #0 PREEMPT(full) [ 937.202144][T18534] Tainted: [L]=SOFTLOCKUP [ 937.202150][T18534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 937.202162][T18534] Call Trace: [ 937.202170][T18534] [ 937.202179][T18534] dump_stack_lvl+0xe8/0x150 [ 937.202210][T18534] should_fail_ex+0x412/0x560 [ 937.202241][T18534] _copy_from_user+0x2d/0xb0 [ 937.202263][T18534] ___sys_sendmsg+0x1c6/0x360 [ 937.202290][T18534] ? __pfx____sys_sendmsg+0x10/0x10 [ 937.202351][T18534] __sys_sendmmsg+0x27c/0x4e0 [ 937.202376][T18534] ? __pfx___sys_sendmmsg+0x10/0x10 [ 937.202393][T18534] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 937.202434][T18534] ? ksys_write+0x242/0x270 [ 937.202456][T18534] ? __pfx_ksys_write+0x10/0x10 [ 937.202483][T18534] __x64_sys_sendmmsg+0xa0/0xc0 [ 937.202506][T18534] do_syscall_64+0x14d/0xf80 [ 937.202526][T18534] ? trace_irq_disable+0x3b/0x150 [ 937.202552][T18534] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 937.202571][T18534] ? clear_bhb_loop+0x40/0x90 [ 937.202593][T18534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 937.202612][T18534] RIP: 0033:0x7f6831d9c799 [ 937.202630][T18534] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 937.202645][T18534] RSP: 002b:00007f6832b90028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 937.202665][T18534] RAX: ffffffffffffffda RBX: 00007f6832016090 RCX: 00007f6831d9c799 [ 937.202678][T18534] RDX: 04924924924925c6 RSI: 0000200000000680 RDI: 0000000000000007 [ 937.202690][T18534] RBP: 00007f6832b90090 R08: 0000000000000000 R09: 0000000000000000 [ 937.202701][T18534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 937.202712][T18534] R13: 00007f6832016128 R14: 00007f6832016090 R15: 00007f683213fa48 [ 937.202739][T18534] [ 937.802391][T18538] dvmrp1: tun_chr_ioctl cmd 2147767506 [ 937.813590][T18538] netlink: 177296 bytes leftover after parsing attributes in process `syz.3.3107'. [ 938.050655][T18542] netlink: 'syz.4.3106': attribute type 1 has an invalid length. [ 938.065942][T18133] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 938.173198][T18542] netlink: 'syz.4.3106': attribute type 2 has an invalid length. [ 938.195351][T16749] usb 3-1: USB disconnect, device number 22 [ 938.356082][ T5881] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 938.375714][T18133] usb 8-1: Using ep0 maxpacket: 32 [ 938.384610][T18133] usb 8-1: config 0 has no interfaces? [ 938.397283][T18133] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 938.562947][T18555] bond1: option packets_per_slave: mode dependency failed, not supported in mode balance-xor(2) [ 938.605139][T18555] bond1 (unregistering): Released all slaves [ 938.640991][T18133] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 938.707347][T18133] usb 8-1: config 0 descriptor?? [ 938.916080][T18133] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 938.945253][T18536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 938.965365][T18536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 938.996489][ T10] usb 8-1: USB disconnect, device number 20 [ 939.075859][T18133] usb 3-1: Using ep0 maxpacket: 16 [ 939.087481][T18133] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 939.107023][T18133] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 939.118414][T18133] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 939.128065][T18133] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 939.137045][T18133] usb 3-1: SerialNumber: syz [ 939.161793][T18133] usb 3-1: 0:2 : does not exist [ 939.373861][T18133] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 939.424646][T18133] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 939.485496][T18133] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 939.500173][T18573] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3115'. [ 939.509342][ T10] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 939.540175][T18573] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3115'. [ 939.578310][T18133] usb 3-1: USB disconnect, device number 23 [ 939.607130][T18573] netlink: 'syz.6.3115': attribute type 25 has an invalid length. [ 939.631192][T18573] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3115'. [ 939.662906][T17628] udevd[17628]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 939.719794][ T10] usb 8-1: config 0 has an invalid interface number: 251 but max is 0 [ 939.728591][ T10] usb 8-1: config 0 has no interface number 0 [ 939.734808][ T10] usb 8-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 939.749347][ T10] usb 8-1: config 0 interface 251 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 939.763627][ T10] usb 8-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=f7.f4 [ 939.777246][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.785346][ T10] usb 8-1: Product: syz [ 939.790394][ T10] usb 8-1: Manufacturer: syz [ 939.795089][ T10] usb 8-1: SerialNumber: syz [ 939.805527][ T10] usb 8-1: config 0 descriptor?? [ 939.839818][ T10] ttusbir 8-1:0.251: cannot find expected altsetting [ 939.872364][T18578] netlink: 'syz.6.3117': attribute type 8 has an invalid length. [ 939.945769][ T5881] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 940.064373][T18584] FAULT_INJECTION: forcing a failure. [ 940.064373][T18584] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 940.094368][T18584] CPU: 0 UID: 0 PID: 18584 Comm: syz.2.3118 Tainted: G L syzkaller #0 PREEMPT(full) [ 940.094390][T18584] Tainted: [L]=SOFTLOCKUP [ 940.094395][T18584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 940.094401][T18584] Call Trace: [ 940.094406][T18584] [ 940.094412][T18584] dump_stack_lvl+0xe8/0x150 [ 940.094431][T18584] should_fail_ex+0x412/0x560 [ 940.094450][T18584] _copy_from_user+0x2d/0xb0 [ 940.094462][T18584] ___sys_sendmsg+0x1c6/0x360 [ 940.094482][T18584] ? __pfx____sys_sendmsg+0x10/0x10 [ 940.094515][T18584] __sys_sendmmsg+0x27c/0x4e0 [ 940.094530][T18584] ? __pfx___sys_sendmmsg+0x10/0x10 [ 940.094540][T18584] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 940.094563][T18584] ? ksys_write+0x242/0x270 [ 940.094576][T18584] ? __pfx_ksys_write+0x10/0x10 [ 940.094589][T18584] __x64_sys_sendmmsg+0xa0/0xc0 [ 940.094601][T18584] do_syscall_64+0x14d/0xf80 [ 940.094613][T18584] ? trace_irq_disable+0x3b/0x150 [ 940.094627][T18584] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.094637][T18584] ? clear_bhb_loop+0x40/0x90 [ 940.094653][T18584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.094668][T18584] RIP: 0033:0x7f688ab9c799 [ 940.094684][T18584] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 940.094695][T18584] RSP: 002b:00007f6888dcd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 940.094707][T18584] RAX: ffffffffffffffda RBX: 00007f688ae16090 RCX: 00007f688ab9c799 [ 940.094715][T18584] RDX: 04924924924925c6 RSI: 0000200000000680 RDI: 0000000000000007 [ 940.094721][T18584] RBP: 00007f6888dcd090 R08: 0000000000000000 R09: 0000000000000000 [ 940.094728][T18584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 940.094733][T18584] R13: 00007f688ae16128 R14: 00007f688ae16090 R15: 00007f688af3fa48 [ 940.094748][T18584] [ 940.305742][ T5881] usb 5-1: Using ep0 maxpacket: 16 [ 940.313023][ T5881] usb 5-1: config 0 has an invalid interface number: 4 but max is 0 [ 940.322143][ T5881] usb 5-1: config 0 has no interface number 0 [ 940.328856][ T5881] usb 5-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 940.342084][ T5881] usb 5-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 940.352295][ T5881] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 940.361361][ T5881] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 940.371557][ T5881] usb 5-1: config 0 descriptor?? [ 940.944421][ T796] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 941.015712][ T5881] usbhid 5-1:0.4: can't add hid device: -71 [ 941.040517][ T5881] usbhid 5-1:0.4: probe with driver usbhid failed with error -71 [ 941.066304][ T5881] usb 5-1: USB disconnect, device number 31 [ 941.126538][ T796] usb 4-1: Using ep0 maxpacket: 16 [ 941.163964][ T796] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 941.197857][ T796] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 941.233982][ T796] usb 4-1: Product: syz [ 941.238351][T16749] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 941.255178][ T796] usb 4-1: Manufacturer: syz [ 941.265410][ T796] usb 4-1: SerialNumber: syz [ 941.290591][ T796] usb 4-1: config 0 descriptor?? [ 941.328535][ T796] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 941.347208][T10276] usb 8-1: USB disconnect, device number 21 [ 941.409496][T16749] usb 3-1: Using ep0 maxpacket: 16 [ 941.426518][T16749] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 941.465423][T16749] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 941.506954][T16749] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 941.561615][T16749] usb 3-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 941.567805][T18592] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3121'. [ 941.605666][T16749] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 941.616040][T18592] netlink: 45 bytes leftover after parsing attributes in process `syz.3.3121'. [ 941.665497][T16749] usb 3-1: config 0 descriptor?? [ 941.693297][ T796] ssu100 4-1:0.0: probe with driver ssu100 failed with error -110 [ 941.823551][T18603] tipc: Can't bind to reserved service type 1 [ 942.095756][T10276] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 942.137004][T16749] nintendo 0003:057E:2019.0029: unknown main item tag 0x0 [ 942.154615][T16749] nintendo 0003:057E:2019.0029: unknown main item tag 0x0 [ 942.169238][T16749] nintendo 0003:057E:2019.0029: unknown main item tag 0x0 [ 942.185674][T16749] nintendo 0003:057E:2019.0029: unknown main item tag 0x0 [ 942.203190][T16749] nintendo 0003:057E:2019.0029: unknown main item tag 0x0 [ 942.260757][T16749] nintendo 0003:057E:2019.0029: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.2-1/input0 [ 942.287305][T10276] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 942.349022][T10276] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 942.375447][T10276] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 942.398932][T16749] nintendo 0003:057E:2019.0029: Failed to get joycon info; ret=-38 [ 942.412844][T10276] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 942.444691][T16749] nintendo 0003:057E:2019.0029: Failed to retrieve controller info; ret=-38 [ 942.456988][T10276] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 942.474179][T16749] nintendo 0003:057E:2019.0029: Failed to initialize controller; ret=-38 [ 942.521904][T10276] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 942.541703][T16749] nintendo 0003:057E:2019.0029: probe - fail = -38 [ 942.554831][T10276] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 942.563600][T16749] nintendo 0003:057E:2019.0029: probe with driver nintendo failed with error -38 [ 942.589356][T10276] usb 5-1: config 0 descriptor?? [ 942.604897][T16749] usb 3-1: USB disconnect, device number 24 [ 942.613575][T18603] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 943.139490][T18618] netlink: 'syz.2.3126': attribute type 1 has an invalid length. [ 943.148813][T18619] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 943.201264][T18618] netlink: 'syz.2.3126': attribute type 2 has an invalid length. [ 943.696366][T18619] tipc: Started in network mode [ 943.701354][T18619] tipc: Node identity ac14142f, cluster identity 4711 [ 943.727794][T18619] tipc: New replicast peer: 0.0.0.0 [ 943.740382][T18619] tipc: Enabled bearer , priority 10 [ 943.770412][T18368] Bluetooth: hci7: command 0x0406 tx timeout [ 943.777494][T10276] usbhid 5-1:0.0: can't add hid device: -71 [ 943.789365][T10276] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 943.813739][T10276] usb 5-1: USB disconnect, device number 32 [ 944.017297][T18629] netlink: 'syz.7.3128': attribute type 1 has an invalid length. [ 944.035748][T18629] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 944.672744][T18646] FAULT_INJECTION: forcing a failure. [ 944.672744][T18646] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 944.732726][T18646] CPU: 0 UID: 0 PID: 18646 Comm: syz.7.3132 Tainted: G L syzkaller #0 PREEMPT(full) [ 944.732755][T18646] Tainted: [L]=SOFTLOCKUP [ 944.732762][T18646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 944.732773][T18646] Call Trace: [ 944.732781][T18646] [ 944.732790][T18646] dump_stack_lvl+0xe8/0x150 [ 944.732821][T18646] should_fail_ex+0x412/0x560 [ 944.732852][T18646] _copy_from_user+0x2d/0xb0 [ 944.732874][T18646] ___sys_sendmsg+0x1c6/0x360 [ 944.732900][T18646] ? __pfx____sys_sendmsg+0x10/0x10 [ 944.732964][T18646] __sys_sendmmsg+0x27c/0x4e0 [ 944.732990][T18646] ? __pfx___sys_sendmmsg+0x10/0x10 [ 944.733009][T18646] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 944.733053][T18646] ? ksys_write+0x242/0x270 [ 944.733076][T18646] ? __pfx_ksys_write+0x10/0x10 [ 944.733101][T18646] __x64_sys_sendmmsg+0xa0/0xc0 [ 944.733124][T18646] do_syscall_64+0x14d/0xf80 [ 944.733144][T18646] ? trace_irq_disable+0x3b/0x150 [ 944.733169][T18646] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 944.733187][T18646] ? clear_bhb_loop+0x40/0x90 [ 944.733209][T18646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 944.733226][T18646] RIP: 0033:0x7f9fd3d9c799 [ 944.733243][T18646] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 944.733259][T18646] RSP: 002b:00007f9fd4baa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 944.733279][T18646] RAX: ffffffffffffffda RBX: 00007f9fd4016090 RCX: 00007f9fd3d9c799 [ 944.733292][T18646] RDX: 04924924924925c6 RSI: 0000200000000680 RDI: 0000000000000007 [ 944.733304][T18646] RBP: 00007f9fd4baa090 R08: 0000000000000000 R09: 0000000000000000 [ 944.733315][T18646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 944.733326][T18646] R13: 00007f9fd4016128 R14: 00007f9fd4016090 R15: 00007f9fd413fa48 [ 944.733362][T18646] [ 944.930820][T10276] tipc: Node number set to 2886997039 [ 945.425730][T10276] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 946.055678][T18133] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 946.215646][T18133] usb 8-1: Using ep0 maxpacket: 16 [ 946.231876][T18133] usb 8-1: config 1 has an invalid interface number: 58 but max is 0 [ 946.267263][T18133] usb 8-1: config 1 has no interface number 0 [ 946.294824][T18133] usb 8-1: config 1 interface 58 altsetting 6 bulk endpoint 0x8 has invalid maxpacket 1024 [ 946.332736][T18133] usb 8-1: config 1 interface 58 altsetting 6 bulk endpoint 0xB has invalid maxpacket 64 [ 946.357395][T18655] xfrm1: entered allmulticast mode [ 946.383299][T18133] usb 8-1: config 1 interface 58 has no altsetting 0 [ 946.426444][T18133] usb 8-1: New USB device found, idVendor=0bfd, idProduct=0126, bcdDevice=bd.e4 [ 946.478266][T18133] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.549257][T18133] usb 8-1: Product: syz [ 946.586013][T18133] usb 8-1: Manufacturer: syz [ 946.649961][T18133] usb 8-1: SerialNumber: syz [ 946.709118][T18651] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 946.726842][T18651] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 946.975855][T18133] kvaser_usb 8-1:1.58: error -ENODEV: Cannot get usb endpoint(s) [ 947.049299][T18133] usb 8-1: USB disconnect, device number 22 [ 947.976118][T18665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3139'. [ 948.004407][T18665] netlink: 'syz.2.3139': attribute type 18 has an invalid length. [ 948.045802][T18665] netlink: 'syz.2.3139': attribute type 18 has an invalid length. [ 948.070398][T18665] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3139'. [ 948.422253][ T796] usb 4-1: USB disconnect, device number 64 [ 948.435653][T16749] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 948.521613][T18678] rtc_cmos 00:00: Alarms can be up to one day in the future [ 948.566646][T16749] usb 3-1: device descriptor read/64, error -71 [ 948.807962][T16749] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 948.843809][T10276] rtc_cmos 00:00: Alarms can be up to one day in the future [ 948.873947][T10276] rtc_cmos 00:00: Alarms can be up to one day in the future [ 948.894250][T10276] rtc_cmos 00:00: Alarms can be up to one day in the future [ 948.914448][T10276] rtc_cmos 00:00: Alarms can be up to one day in the future [ 948.955731][T10276] rtc rtc0: __rtc_set_alarm: err=-22 [ 948.965821][T16749] usb 3-1: device descriptor read/64, error -71 [ 949.100505][T16749] usb usb3-port1: attempt power cycle [ 949.468895][T16749] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 949.503489][T18688] FAULT_INJECTION: forcing a failure. [ 949.503489][T18688] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 949.536229][T16749] usb 3-1: device descriptor read/8, error -71 [ 949.543385][T18688] CPU: 1 UID: 0 PID: 18688 Comm: syz.4.3143 Tainted: G L syzkaller #0 PREEMPT(full) [ 949.543409][T18688] Tainted: [L]=SOFTLOCKUP [ 949.543414][T18688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 949.543420][T18688] Call Trace: [ 949.543425][T18688] [ 949.543430][T18688] dump_stack_lvl+0xe8/0x150 [ 949.543449][T18688] should_fail_ex+0x412/0x560 [ 949.543467][T18688] _copy_from_user+0x2d/0xb0 [ 949.543480][T18688] ___sys_sendmsg+0x1c6/0x360 [ 949.543495][T18688] ? __pfx____sys_sendmsg+0x10/0x10 [ 949.543529][T18688] __sys_sendmmsg+0x27c/0x4e0 [ 949.543543][T18688] ? __pfx___sys_sendmmsg+0x10/0x10 [ 949.543553][T18688] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 949.543577][T18688] ? ksys_write+0x242/0x270 [ 949.543590][T18688] ? __pfx_ksys_write+0x10/0x10 [ 949.543603][T18688] __x64_sys_sendmmsg+0xa0/0xc0 [ 949.543616][T18688] do_syscall_64+0x14d/0xf80 [ 949.543627][T18688] ? trace_irq_disable+0x3b/0x150 [ 949.543641][T18688] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.543651][T18688] ? clear_bhb_loop+0x40/0x90 [ 949.543663][T18688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.543673][T18688] RIP: 0033:0x7fca9439c799 [ 949.543685][T18688] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 949.543694][T18688] RSP: 002b:00007fca95282028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 949.543706][T18688] RAX: ffffffffffffffda RBX: 00007fca94616090 RCX: 00007fca9439c799 [ 949.543714][T18688] RDX: 04924924924925c6 RSI: 0000200000000680 RDI: 0000000000000007 [ 949.543721][T18688] RBP: 00007fca95282090 R08: 0000000000000000 R09: 0000000000000000 [ 949.543727][T18688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 949.543733][T18688] R13: 00007fca94616128 R14: 00007fca94616090 R15: 00007fca9473fa48 [ 949.543748][T18688] [ 949.919017][T18694] xt_hashlimit: size too large, truncated to 1048576 [ 949.926552][T18695] xt_hashlimit: size too large, truncated to 1048576 [ 949.965779][T16749] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 949.986340][T16749] usb 3-1: device descriptor read/8, error -71 [ 950.096089][T16749] usb usb3-port1: unable to enumerate USB device [ 950.536242][T18133] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 950.735894][T18133] usb 5-1: Using ep0 maxpacket: 32 [ 950.746717][T18133] usb 5-1: config 0 has no interfaces? [ 950.759981][T18133] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 950.799678][T18133] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 950.829686][T18133] usb 5-1: Product: syz [ 950.846473][T18133] usb 5-1: Manufacturer: syz [ 950.862831][T18133] usb 5-1: SerialNumber: syz [ 950.898781][T18133] usb 5-1: config 0 descriptor?? [ 951.123401][T18701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 951.146018][T18701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 951.215670][T16749] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 951.365653][T16749] usb 4-1: Using ep0 maxpacket: 32 [ 951.384483][T16749] usb 4-1: config index 0 descriptor too short (expected 256, got 27) [ 951.407402][T16749] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 951.436087][T16749] usb 4-1: config 7 has no interfaces? [ 951.459465][T16749] usb 4-1: New USB device found, idVendor=0424, idProduct=c001, bcdDevice=aa.5f [ 951.475683][T16749] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.495051][T16749] usb 4-1: Product: syz [ 951.515357][T16749] usb 4-1: Manufacturer: syz [ 951.525465][T16749] usb 4-1: SerialNumber: syz [ 951.578591][T18714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 951.612329][T18714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 951.626050][T18133] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 951.795616][T18133] usb 3-1: device descriptor read/64, error -71 [ 952.075666][T18133] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 952.392019][T18713] bridge0: port 2(bridge_slave_1) entered disabled state [ 952.399731][T18713] bridge0: port 1(bridge_slave_0) entered disabled state [ 952.446130][T18133] usb 3-1: device descriptor read/64, error -71 [ 952.568099][T18133] usb usb3-port1: attempt power cycle [ 952.873007][T18713] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 952.900431][T18713] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 952.926358][T18133] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 952.957664][T18133] usb 3-1: device descriptor read/8, error -71 [ 953.205796][T18133] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 953.246993][T18133] usb 3-1: device descriptor read/8, error -71 [ 953.378159][T18133] usb usb3-port1: unable to enumerate USB device [ 953.702311][T15560] usb 5-1: USB disconnect, device number 34 [ 953.903081][T16749] usb 4-1: USB disconnect, device number 65 [ 954.013467][T18731] FAULT_INJECTION: forcing a failure. [ 954.013467][T18731] name failslab, interval 1, probability 0, space 0, times 0 [ 954.027003][T18731] CPU: 1 UID: 0 PID: 18731 Comm: syz.3.3152 Tainted: G L syzkaller #0 PREEMPT(full) [ 954.027040][T18731] Tainted: [L]=SOFTLOCKUP [ 954.027047][T18731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 954.027058][T18731] Call Trace: [ 954.027066][T18731] [ 954.027074][T18731] dump_stack_lvl+0xe8/0x150 [ 954.027105][T18731] should_fail_ex+0x412/0x560 [ 954.027136][T18731] should_failslab+0xa8/0x100 [ 954.027161][T18731] __kmalloc_cache_noprof+0x88/0x660 [ 954.027184][T18731] ? nft_netdev_hook_alloc+0x220/0x570 [ 954.027208][T18731] ? __kmalloc_cache_noprof+0x15b/0x660 [ 954.027233][T18731] nft_netdev_hook_alloc+0x220/0x570 [ 954.027267][T18731] nf_tables_parse_netdev_hooks+0x138/0x950 [ 954.027303][T18731] nft_chain_parse_hook+0xb10/0x13f0 [ 954.027340][T18731] ? __pfx_nft_chain_parse_hook+0x10/0x10 [ 954.027369][T18731] ? nft_pernet+0x23/0x240 [ 954.027400][T18731] nf_tables_newchain+0x102e/0x2890 [ 954.027438][T18731] ? __pfx_nf_tables_newchain+0x10/0x10 [ 954.027482][T18731] ? nft_trans_table_add+0x230/0x430 [ 954.027511][T18731] ? nfnl_pernet+0x23/0x240 [ 954.027544][T18731] ? __nla_parse+0x40/0x60 [ 954.027567][T18731] nfnetlink_rcv+0x1240/0x27b0 [ 954.027590][T18731] ? is_bpf_text_address+0x26/0x2b0 [ 954.027642][T18731] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 954.027677][T18731] ? __lock_acquire+0x6b5/0x2cf0 [ 954.027734][T18731] ? netlink_deliver_tap+0x2e/0x1b0 [ 954.027775][T18731] netlink_unicast+0x80f/0x9b0 [ 954.027808][T18731] ? __pfx_netlink_unicast+0x10/0x10 [ 954.027834][T18731] ? netlink_sendmsg+0x650/0xb40 [ 954.027850][T18731] ? skb_put+0x11b/0x210 [ 954.027873][T18731] netlink_sendmsg+0x813/0xb40 [ 954.027900][T18731] ? __pfx_netlink_sendmsg+0x10/0x10 [ 954.027921][T18731] ? aa_sock_msg_perm+0xf1/0x1b0 [ 954.027950][T18731] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 954.027974][T18731] ____sys_sendmsg+0x972/0x9f0 [ 954.028004][T18731] ? __pfx_____sys_sendmsg+0x10/0x10 [ 954.028040][T18731] ? import_iovec+0x73/0xa0 [ 954.028064][T18731] ___sys_sendmsg+0x2a5/0x360 [ 954.028091][T18731] ? __pfx____sys_sendmsg+0x10/0x10 [ 954.028146][T18731] ? __fget_files+0x2a/0x420 [ 954.028171][T18731] ? __fget_files+0x3a0/0x420 [ 954.028207][T18731] __x64_sys_sendmsg+0x1bd/0x2a0 [ 954.028231][T18731] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 954.028262][T18731] ? __pfx_ksys_write+0x10/0x10 [ 954.028294][T18731] do_syscall_64+0x14d/0xf80 [ 954.028315][T18731] ? trace_irq_disable+0x3b/0x150 [ 954.028340][T18731] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 954.028358][T18731] ? clear_bhb_loop+0x40/0x90 [ 954.028381][T18731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 954.028399][T18731] RIP: 0033:0x7fad5299c799 [ 954.028416][T18731] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 954.028431][T18731] RSP: 002b:00007fad53885028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 954.028452][T18731] RAX: ffffffffffffffda RBX: 00007fad52c15fa0 RCX: 00007fad5299c799 [ 954.028465][T18731] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000003 [ 954.028476][T18731] RBP: 00007fad53885090 R08: 0000000000000000 R09: 0000000000000000 [ 954.028488][T18731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 954.028499][T18731] R13: 00007fad52c16038 R14: 00007fad52c15fa0 R15: 00007fad52d3fa48 [ 954.028529][T18731] [ 954.796470][ T5881] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 954.853006][ T130] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 954.880079][ T130] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 954.916688][ T130] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 954.977598][ T5881] usb 5-1: Using ep0 maxpacket: 8 [ 955.016540][ T5881] usb 5-1: New USB device found, idVendor=102c, idProduct=6251, bcdDevice=7e.68 [ 955.035627][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 955.058338][ T5881] usb 5-1: Product: syz [ 955.062533][ T5881] usb 5-1: Manufacturer: syz [ 955.087807][T18724] syzkaller0: entered promiscuous mode [ 955.093379][ T5881] usb 5-1: SerialNumber: syz [ 955.095696][T18724] syzkaller0: entered allmulticast mode [ 955.098110][T18133] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 955.136573][ T5881] usb 5-1: config 0 descriptor?? [ 955.163012][ T5881] gspca_main: etoms-2.14.0 probing 102c:6251 [ 955.323662][T18133] usb 3-1: Using ep0 maxpacket: 32 [ 955.336644][T18133] usb 3-1: config 0 has no interfaces? [ 955.350423][T18133] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 955.389925][T18133] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 955.409127][T18133] usb 3-1: Product: syz [ 955.433662][T18133] usb 3-1: Manufacturer: syz [ 955.453826][T18133] usb 3-1: SerialNumber: syz [ 955.472910][T18133] usb 3-1: config 0 descriptor?? [ 955.719473][T18733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 955.730689][T18733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 956.194839][T18745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 956.220801][T18745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 956.244723][T10276] usb 3-1: USB disconnect, device number 33 [ 956.365679][T16749] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 956.505807][T16749] usb 4-1: device descriptor read/64, error -71 [ 956.745624][T16749] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 956.885665][T16749] usb 4-1: device descriptor read/64, error -71 [ 956.996105][T16749] usb usb4-port1: attempt power cycle [ 957.036170][T15560] usb 5-1: USB disconnect, device number 35 [ 957.375726][T16749] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 957.417002][T16749] usb 4-1: device descriptor read/8, error -71 [ 957.686464][T16749] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 957.716877][T16749] usb 4-1: device descriptor read/8, error -71 [ 957.835968][T16749] usb usb4-port1: unable to enumerate USB device [ 959.555721][T10276] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 959.725855][T10276] usb 4-1: Using ep0 maxpacket: 32 [ 959.859474][T10276] usb 4-1: config 0 has no interfaces? [ 959.888300][T10276] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 959.905599][T10276] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 959.924270][T10276] usb 4-1: Product: syz [ 959.934402][T10276] usb 4-1: Manufacturer: syz [ 959.944507][T10276] usb 4-1: SerialNumber: syz [ 959.959487][T10276] usb 4-1: config 0 descriptor?? [ 960.186484][T18763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 960.228469][T18763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 960.536654][T18769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 960.556900][T18769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 960.942480][T18774] rtc_cmos 00:00: Alarms can be up to one day in the future [ 961.839578][T10276] rtc_cmos 00:00: Alarms can be up to one day in the future [ 961.847199][T10276] rtc_cmos 00:00: Alarms can be up to one day in the future [ 961.862547][T10276] rtc_cmos 00:00: Alarms can be up to one day in the future [ 961.877125][T10276] rtc_cmos 00:00: Alarms can be up to one day in the future [ 961.892327][T10276] rtc rtc0: __rtc_set_alarm: err=-22 [ 968.606446][T18368] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 968.617068][T18368] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 968.625002][T18368] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 968.633777][T18368] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 968.641294][T18368] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 969.997744][T18368] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 970.007957][T18368] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 970.016148][T18368] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 970.026099][T18368] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 970.034374][T18368] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 970.735694][T18368] Bluetooth: hci1: command tx timeout [ 972.085930][T18368] Bluetooth: hci4: command tx timeout [ 972.500633][ T5825] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 972.510258][ T5825] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 972.518505][ T5825] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 972.527944][ T5825] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 972.536232][ T5825] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 972.809709][T18368] Bluetooth: hci1: command tx timeout [ 974.165721][T18368] Bluetooth: hci4: command tx timeout [ 974.572155][T18368] Bluetooth: hci8: command tx timeout [ 974.887109][T18368] Bluetooth: hci1: command tx timeout [ 975.047981][ T5825] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 975.058928][ T5825] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 975.067126][ T5825] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 975.075149][ T5825] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 975.083034][ T5825] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 976.026544][ T5825] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 976.034840][ T5825] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 976.042989][ T5825] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 976.053001][ T5825] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 976.060761][ T5825] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 976.255651][T18368] Bluetooth: hci4: command tx timeout [ 976.645608][T18368] Bluetooth: hci8: command tx timeout [ 976.965614][T18368] Bluetooth: hci1: command tx timeout [ 977.125692][T18368] Bluetooth: hci9: command tx timeout [ 978.085678][T18368] Bluetooth: hci10: command tx timeout [ 978.335644][T18368] Bluetooth: hci4: command tx timeout [ 978.725630][T18368] Bluetooth: hci8: command tx timeout [ 979.205630][T18368] Bluetooth: hci9: command tx timeout [ 980.175602][T18368] Bluetooth: hci10: command tx timeout [ 980.815709][T18368] Bluetooth: hci8: command tx timeout [ 981.295629][T18368] Bluetooth: hci9: command tx timeout [ 982.255616][T18368] Bluetooth: hci10: command tx timeout [ 983.365608][T18368] Bluetooth: hci9: command tx timeout [ 984.325625][T18368] Bluetooth: hci10: command tx timeout [ 992.898022][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.904341][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1028.572333][ T5825] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1028.582867][ T5825] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1028.591696][ T5825] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1028.600713][ T5825] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1028.608553][ T5825] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1030.079792][ T5825] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1030.090299][ T5825] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1030.098565][ T5825] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1030.106654][ T5825] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1030.114426][ T5825] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1030.645624][T18368] Bluetooth: hci11: command tx timeout [ 1032.165681][T18368] Bluetooth: hci12: command tx timeout [ 1032.726477][T18368] Bluetooth: hci11: command tx timeout [ 1033.077543][ T5825] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1033.088408][ T5825] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1033.098318][ T5825] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1033.107110][ T5825] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1033.114799][ T5825] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1034.246466][T18368] Bluetooth: hci12: command tx timeout [ 1034.805632][T18368] Bluetooth: hci11: command tx timeout [ 1035.080845][ T5825] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1035.091200][ T5825] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1035.100027][ T5825] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1035.108586][ T5825] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1035.116977][ T5825] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1035.205901][ T5825] Bluetooth: hci13: command tx timeout [ 1036.325700][ T5825] Bluetooth: hci12: command tx timeout [ 1036.564300][T18368] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 1036.574798][T18368] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 1036.582973][T18368] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 1036.600595][T18368] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 1036.608318][T18368] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 1036.889855][ T5825] Bluetooth: hci11: command tx timeout [ 1037.206068][ T5825] Bluetooth: hci14: command tx timeout [ 1037.285634][ T5825] Bluetooth: hci13: command tx timeout [ 1038.405604][ T5825] Bluetooth: hci12: command tx timeout [ 1038.645675][ T5825] Bluetooth: hci15: command tx timeout [ 1039.285618][ T5825] Bluetooth: hci14: command tx timeout [ 1039.365664][ T5825] Bluetooth: hci13: command tx timeout [ 1040.725618][ T5825] Bluetooth: hci15: command tx timeout [ 1041.365629][ T5825] Bluetooth: hci14: command tx timeout [ 1041.445659][ T5825] Bluetooth: hci13: command tx timeout [ 1042.805672][ T5825] Bluetooth: hci15: command tx timeout [ 1043.456557][ T5825] Bluetooth: hci14: command tx timeout [ 1044.885757][ T5825] Bluetooth: hci15: command tx timeout [ 1051.285659][T18368] Bluetooth: hci3: command 0x0406 tx timeout [ 1054.330102][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.345666][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1088.648097][T18368] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 1088.661951][T18368] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 1088.671082][T18368] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 1088.678917][T18368] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 1088.686692][T18368] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 Stopping sshd: stopped /usr/sbin/sshd (pid 5576) OK Stopping crond: stopped /usr/sbin/crond (pid 5564) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 5489) Stopping network: [ 1090.705208][T18384] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 1090.713944][T18384] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 1090.722086][T18384] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 1090.746047][T18384] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 1090.753672][T18384] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 1090.806189][T18842] Bluetooth: hci16: command tx timeout [ 1092.256926][T18368] Bluetooth: hci4: command 0x0406 tx timeout [ 1092.258170][T18842] Bluetooth: hci1: command 0x0406 tx timeout [ 1092.815822][T12664] Bluetooth: hci17: command tx timeout [ 1092.895581][T12664] Bluetooth: hci16: command tx timeout [ 1093.656381][T18842] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 1093.667100][T18842] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 1093.675058][T18842] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 1093.684070][T18842] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 1093.691737][T18842] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 1094.885706][T12664] Bluetooth: hci17: command tx timeout [ 1094.965797][T12664] Bluetooth: hci16: command tx timeout [ 1095.135979][T18842] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 1095.146223][T18842] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 1095.154433][T18842] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 1095.162541][T18842] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 1095.170650][T18842] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 1095.765963][T12664] Bluetooth: hci18: command tx timeout [ 1096.621175][T18384] Bluetooth: hci20: unexpected cc 0x0c03 length: 249 > 1 [ 1096.630783][T18384] Bluetooth: hci20: unexpected cc 0x1003 length: 249 > 9 [ 1096.638798][T18384] Bluetooth: hci20: unexpected cc 0x1001 length: 249 > 9 [ 1096.647523][T18384] Bluetooth: hci20: unexpected cc 0x0c23 length: 249 > 4 [ 1096.655084][T18384] Bluetooth: hci20: unexpected cc 0x0c38 length: 249 > 2 [ 1096.965663][T12664] Bluetooth: hci17: command tx timeout [ 1097.045705][T12664] Bluetooth: hci16: command tx timeout [ 1097.205791][T12664] Bluetooth: hci19: command tx timeout [ 1097.369718][T12664] Bluetooth: hci9: command 0x0406 tx timeout [ 1097.369732][T18384] Bluetooth: hci8: command 0x0406 tx timeout [ 1097.845818][T18368] Bluetooth: hci18: command tx timeout [ 1098.725691][T18368] Bluetooth: hci20: command tx timeout [ 1099.045670][T18368] Bluetooth: hci17: command tx timeout [ 1099.285641][T18368] Bluetooth: hci19: command tx timeout [ 1099.925852][T18368] Bluetooth: hci18: command tx timeout [ 1100.805564][T18842] Bluetooth: hci20: command tx timeout [ 1101.365563][T18842] Bluetooth: hci19: command tx timeout [ 1102.005766][T18842] Bluetooth: hci18: command tx timeout [ 1102.495643][T18842] Bluetooth: hci10: command 0x0406 tx timeout [ 1102.885597][T18842] Bluetooth: hci20: command tx timeout [ 1103.445573][T18842] Bluetooth: hci19: command tx timeout [ 1104.965555][T18842] Bluetooth: hci20: command tx timeout [ 1106.807592][ T31] INFO: task kworker/u8:4:77 blocked for more than 143 seconds. [ 1106.815270][ T31] Tainted: G L syzkaller #0 [ 1106.827239][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1106.836253][ T31] task:kworker/u8:4 state:D stack:21384 pid:77 tgid:77 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1106.848674][ T31] Workqueue: events_unbound linkwatch_event [ 1106.854604][ T31] Call Trace: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1106.858322][ T31] [ 1106.885042][ T31] __schedule+0x15dd/0x52d0 [ 1106.920301][ T31] ? __pfx___schedule+0x10/0x10 [ 1106.925206][ T31] ? schedule+0x90/0x360 [ 1106.936585][ T31] schedule+0x164/0x360 [ 1106.940795][ T31] schedule_preempt_disabled+0x13/0x30 [ 1106.946715][ T31] __mutex_lock+0x7fe/0x1300 [ 1106.951342][ T31] ? __mutex_lock+0x5ac/0x1300 [ 1106.956604][ T31] ? linkwatch_event+0xe/0x60 [ 1106.961319][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1106.968273][ T31] ? process_scheduled_works+0xa8d/0x18c0 [ 1106.974034][ T31] ? process_scheduled_works+0xa8d/0x18c0 [ 1106.980184][ T31] linkwatch_event+0xe/0x60 [ 1106.984719][ T31] process_scheduled_works+0xb6e/0x18c0 [ 1106.991758][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1106.999263][ T31] ? assign_work+0x3d5/0x5e0 [ 1107.004328][ T31] worker_thread+0xa53/0xfc0 [ 1107.009488][ T31] kthread+0x388/0x470 [ 1107.013578][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1107.020245][ T31] ? __pfx_kthread+0x10/0x10 [ 1107.024853][ T31] ret_from_fork+0x51e/0xb90 [ 1107.030719][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1107.036086][ T31] ? __switch_to+0xc7d/0x1450 [ 1107.040784][ T31] ? __pfx_kthread+0x10/0x10 [ 1107.045377][ T31] ret_from_fork_asm+0x1a/0x30 [ 1107.051386][ T31] [ 1107.064294][ T31] INFO: task kworker/u8:5:130 blocked for more than 143 seconds. [ 1107.072543][ T31] Tainted: G L syzkaller #0 [ 1107.079129][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1107.089100][ T31] task:kworker/u8:5 state:D stack:21248 pid:130 tgid:130 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1107.102093][ T31] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 1107.111139][ T31] Call Trace: [ 1107.114450][ T31] [ 1107.117459][ T31] __schedule+0x15dd/0x52d0 [ 1107.121997][ T31] ? __pfx___schedule+0x10/0x10 [ 1107.128534][ T31] ? schedule+0x90/0x360 [ 1107.132802][ T31] schedule+0x164/0x360 [ 1107.137056][ T31] schedule_preempt_disabled+0x13/0x30 [ 1107.142528][ T31] __mutex_lock+0x7fe/0x1300 [ 1107.148555][ T31] ? __mutex_lock+0x5ac/0x1300 [ 1107.153431][ T31] ? udp_tunnel_nic_device_sync_work+0x29/0xa10 [ 1107.160324][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1107.165369][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1107.171219][ T31] udp_tunnel_nic_device_sync_work+0x29/0xa10 [ 1107.177548][ T31] ? process_scheduled_works+0xa8d/0x18c0 [ 1107.183277][ T31] ? process_scheduled_works+0xa8d/0x18c0 [ 1107.189438][ T31] process_scheduled_works+0xb6e/0x18c0 [ 1107.195023][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1107.201350][ T31] ? assign_work+0x3d5/0x5e0 [ 1107.210583][ T31] worker_thread+0xa53/0xfc0 [ 1107.215239][ T31] kthread+0x388/0x470 [ 1107.220034][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1107.225162][ T31] ? __pfx_kthread+0x10/0x10 [ 1107.230170][ T31] ret_from_fork+0x51e/0xb90 [ 1107.234778][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1107.240489][ T31] ? __switch_to+0xc7d/0x1450 [ 1107.245194][ T31] ? __pfx_kthread+0x10/0x10 [ 1107.250339][ T31] ret_from_fork_asm+0x1a/0x30 [ 1107.255144][ T31] [ 1107.258691][ T31] INFO: task kworker/u8:13:6264 blocked for more than 143 seconds. [ 1107.271075][ T31] Tainted: G L syzkaller #0 [ 1107.277833][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1107.287088][ T31] task:kworker/u8:13 state:D stack:22208 pid:6264 tgid:6264 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1107.299462][ T31] Workqueue: netns cleanup_net [ 1107.304266][ T31] Call Trace: [ 1107.307995][ T31] [ 1107.310937][ T31] __schedule+0x15dd/0x52d0 [ 1107.315861][ T31] ? __pfx___schedule+0x10/0x10 [ 1107.320748][ T31] ? schedule+0x90/0x360 [ 1107.325006][ T31] schedule+0x164/0x360 [ 1107.329840][ T31] schedule_preempt_disabled+0x13/0x30 [ 1107.335321][ T31] __mutex_lock+0x7fe/0x1300 [ 1107.340576][ T31] ? __mutex_lock+0x5ac/0x1300 [ 1107.345372][ T31] ? cfg802154_pernet_exit+0x19/0xe0 [ 1107.351297][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1107.357515][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 1107.362840][ T31] cfg802154_pernet_exit+0x19/0xe0 [ 1107.370069][ T31] ops_undo_list+0x49f/0x940 [ 1107.374686][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 1107.381210][ T31] ? idr_destroy+0x218/0x290 [ 1107.386138][ T31] ? do_raw_spin_unlock+0xf5/0x210 [ 1107.391536][ T31] cleanup_net+0x56b/0x800 [ 1107.396333][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 1107.401284][ T31] ? process_scheduled_works+0xa8d/0x18c0 [ 1107.407486][ T31] ? process_scheduled_works+0xa8d/0x18c0 [ 1107.413222][ T31] process_scheduled_works+0xb6e/0x18c0 [ 1107.419638][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1107.426203][ T31] ? assign_work+0x3d5/0x5e0 [ 1107.430811][ T31] worker_thread+0xa53/0xfc0 [ 1107.435442][ T31] kthread+0x388/0x470 [ 1107.440276][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1107.445400][ T31] ? __pfx_kthread+0x10/0x10 [ 1107.453266][ T31] ret_from_fork+0x51e/0xb90 [ 1107.458323][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1107.463458][ T31] ? __switch_to+0xc7d/0x1450 [ 1107.469492][ T31] ? __pfx_kthread+0x10/0x10 [ 1107.474102][ T31] ret_from_fork_asm+0x1a/0x30 [ 1107.480771][ T31] [ 1107.483882][ T31] INFO: task syz.2.3153:18744 blocked for more than 144 seconds. [ 1107.493039][ T31] Tainted: G L syzkaller #0 [ 1107.499846][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1107.508863][ T31] task:syz.2.3153 state:D stack:26840 pid:18744 tgid:18732 ppid:15161 task_flags:0x400140 flags:0x00080002 [ 1107.521046][ T31] Call Trace: [ 1107.524329][ T31] [ 1107.537521][ T31] __schedule+0x15dd/0x52d0 [ 1107.542085][ T31] ? __pfx___schedule+0x10/0x10 [ 1107.547099][ T31] ? schedule+0x90/0x360 [ 1107.551500][ T31] schedule+0x164/0x360 [ 1107.556746][ T31] schedule_preempt_disabled+0x13/0x30 [ 1107.562229][ T31] __mutex_lock+0x7fe/0x1300 [ 1107.567577][ T31] ? __mutex_lock+0x5ac/0x1300 [ 1107.572363][ T31] ? rtnl_newlink+0x8a1/0x1be0 [ 1107.578420][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1107.583476][ T31] ? ns_capable+0x89/0xe0 [ 1107.588076][ T31] rtnl_newlink+0x8a1/0x1be0 [ 1107.592689][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 1107.598849][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1107.603811][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1107.609557][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1107.614517][ T31] ? unwind_next_frame+0xa5/0x23c0 [ 1107.619721][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1107.624814][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 1107.630256][ T31] ? kernel_text_address+0xa5/0xe0 [ 1107.635410][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 1107.640508][ T31] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1107.645763][ T31] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1107.651072][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1107.656640][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1107.661734][ T31] netlink_rcv_skb+0x232/0x4b0 [ 1107.667743][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1107.673227][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1107.678858][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 1107.684226][ T31] netlink_unicast+0x80f/0x9b0 [ 1107.690272][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1107.695657][ T31] ? netlink_sendmsg+0x650/0xb40 [ 1107.700706][ T31] ? skb_put+0x11b/0x210 [ 1107.704973][ T31] netlink_sendmsg+0x813/0xb40 [ 1107.710952][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1107.716347][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1107.721429][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1107.726968][ T31] ____sys_sendmsg+0x972/0x9f0 [ 1107.731743][ T31] ? futex_unqueue+0x211/0x240 [ 1107.736582][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1107.742023][ T31] ? import_iovec+0x73/0xa0 [ 1107.746732][ T31] ___sys_sendmsg+0x2a5/0x360 [ 1107.751427][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1107.756689][ T31] ? futex_wait+0x29a/0x380 [ 1107.761360][ T31] ? __fget_files+0x2a/0x420 [ 1107.766356][ T31] ? __fget_files+0x3a0/0x420 [ 1107.771067][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1107.777155][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1107.782641][ T31] ? rcu_is_watching+0x15/0xb0 [ 1107.787935][ T31] do_syscall_64+0x14d/0xf80 [ 1107.792536][ T31] ? trace_irq_disable+0x3b/0x150 [ 1107.799067][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1107.805149][ T31] ? clear_bhb_loop+0x40/0x90 [ 1107.810157][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1107.817195][ T31] RIP: 0033:0x7f688ab9c799 [ 1107.821623][ T31] RSP: 002b:00007f6888dac028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1107.830175][ T31] RAX: ffffffffffffffda RBX: 00007f688ae16180 RCX: 00007f688ab9c799 [ 1107.838385][ T31] RDX: 0000000000008024 RSI: 0000200000000140 RDI: 000000000000000a [ 1107.847748][ T31] RBP: 00007f688ac32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1107.855820][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1107.863908][ T31] R13: 00007f688ae16218 R14: 00007f688ae16180 R15: 00007f688af3fa48 [ 1107.872112][ T31] [ 1107.875213][ T31] INFO: task syz.4.3157:18749 blocked for more than 144 seconds. [ 1107.886982][ T31] Tainted: G L syzkaller #0 [ 1107.893494][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1107.902704][ T31] task:syz.4.3157 state:D stack:25192 pid:18749 tgid:18748 ppid:18387 task_flags:0x400140 flags:0x00080002 [ 1107.916304][ T31] Call Trace: [ 1107.919603][ T31] [ 1107.922536][ T31] __schedule+0x15dd/0x52d0 [ 1107.931580][ T31] ? __pfx___schedule+0x10/0x10 [ 1107.936591][ T31] ? schedule+0x90/0x360 [ 1107.940841][ T31] schedule+0x164/0x360 [ 1107.945002][ T31] schedule_preempt_disabled+0x13/0x30 [ 1107.950542][ T31] __mutex_lock+0x7fe/0x1300 [ 1107.955148][ T31] ? __mutex_lock+0x5ac/0x1300 [ 1107.960076][ T31] ? rtnl_newlink+0x8a1/0x1be0 [ 1107.964860][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1107.970090][ T31] ? ns_capable+0x89/0xe0 [ 1107.974440][ T31] rtnl_newlink+0x8a1/0x1be0 [ 1107.979181][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 1107.984300][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1107.990805][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1107.996830][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1108.001793][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1108.007262][ T31] ? unwind_next_frame+0xa5/0x23c0 [ 1108.012423][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1108.017611][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 1108.022924][ T31] ? kernel_text_address+0xa5/0xe0 [ 1108.029459][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 1108.034498][ T31] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1108.040494][ T31] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1108.045847][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1108.051325][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1108.056408][ T31] netlink_rcv_skb+0x232/0x4b0 [ 1108.061191][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1108.066733][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1108.072046][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 1108.077433][ T31] netlink_unicast+0x80f/0x9b0 [ 1108.082226][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1108.088447][ T31] ? netlink_sendmsg+0x650/0xb40 [ 1108.093802][ T31] ? skb_put+0x11b/0x210 [ 1108.102576][ T31] netlink_sendmsg+0x813/0xb40 [ 1108.108486][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1108.113802][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1108.119138][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1108.124443][ T31] ____sys_sendmsg+0x972/0x9f0 [ 1108.129324][ T31] ? futex_unqueue+0x211/0x240 [ 1108.134106][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1108.140938][ T31] ? import_iovec+0x73/0xa0 [ 1108.145463][ T31] ___sys_sendmsg+0x2a5/0x360 [ 1108.151156][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1108.156495][ T31] ? futex_wait+0x29a/0x380 [ 1108.161041][ T31] ? __fget_files+0x2a/0x420 [ 1108.165765][ T31] ? __fget_files+0x3a0/0x420 [ 1108.170479][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1108.175424][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1108.181044][ T31] ? rcu_is_watching+0x15/0xb0 [ 1108.185972][ T31] do_syscall_64+0x14d/0xf80 [ 1108.190569][ T31] ? trace_irq_disable+0x3b/0x150 [ 1108.195919][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.201990][ T31] ? clear_bhb_loop+0x40/0x90 [ 1108.206815][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.212712][ T31] RIP: 0033:0x7fca9439c799 [ 1108.218208][ T31] RSP: 002b:00007fca952a3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1108.226974][ T31] RAX: ffffffffffffffda RBX: 00007fca94615fa0 RCX: 00007fca9439c799 [ 1108.234957][ T31] RDX: 0000000020004090 RSI: 0000200000000180 RDI: 0000000000000003 [ 1108.243073][ T31] RBP: 00007fca94432c99 R08: 0000000000000000 R09: 0000000000000000 [ 1108.252698][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1108.261732][ T31] R13: 00007fca94616038 R14: 00007fca94615fa0 R15: 00007fca9473fa48 [ 1108.269891][ T31] [ 1108.272929][ T31] INFO: task syz.3.3161:18768 blocked for more than 144 seconds. [ 1108.280802][ T31] Tainted: G L syzkaller #0 [ 1108.287431][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1108.296249][ T31] task:syz.3.3161 state:D stack:26840 pid:18768 tgid:18762 ppid:16912 task_flags:0x400140 flags:0x00080002 [ 1108.308262][ T31] Call Trace: [ 1108.311552][ T31] [ 1108.314485][ T31] __schedule+0x15dd/0x52d0 [ 1108.319168][ T31] ? __pfx___schedule+0x10/0x10 [ 1108.324044][ T31] ? schedule+0x90/0x360 [ 1108.331545][ T31] schedule+0x164/0x360 [ 1108.338326][ T31] schedule_preempt_disabled+0x13/0x30 [ 1108.343803][ T31] __mutex_lock+0x7fe/0x1300 [ 1108.349009][ T31] ? __mutex_lock+0x5ac/0x1300 [ 1108.353797][ T31] ? rtnl_newlink+0x8a1/0x1be0 [ 1108.359993][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1108.365046][ T31] ? ns_capable+0x89/0xe0 [ 1108.370640][ T31] rtnl_newlink+0x8a1/0x1be0 [ 1108.375255][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 1108.380450][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1108.385407][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1108.390421][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1108.395385][ T31] ? unwind_next_frame+0xa5/0x23c0 [ 1108.400919][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1108.406015][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 1108.411224][ T31] ? kernel_text_address+0xa5/0xe0 [ 1108.416527][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 1108.421562][ T31] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1108.426578][ T31] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1108.431696][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1108.438259][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1108.443229][ T31] netlink_rcv_skb+0x232/0x4b0 [ 1108.448463][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1108.453942][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1108.459394][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 1108.464628][ T31] netlink_unicast+0x80f/0x9b0 [ 1108.470685][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1108.477302][ T31] ? netlink_sendmsg+0x650/0xb40 [ 1108.482256][ T31] ? skb_put+0x11b/0x210 [ 1108.487349][ T31] netlink_sendmsg+0x813/0xb40 [ 1108.492144][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1108.499058][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1108.504020][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1108.509395][ T31] ____sys_sendmsg+0x972/0x9f0 [ 1108.514180][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1108.519702][ T31] ? import_iovec+0x73/0xa0 [ 1108.524233][ T31] ___sys_sendmsg+0x2a5/0x360 [ 1108.529042][ T31] ? try_to_wake_up+0x832/0x1390 [ 1108.533991][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1108.539332][ T31] ? futex_wake+0x4ac/0x580 [ 1108.543862][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1108.549821][ T31] ? file_init_path+0x434/0x590 [ 1108.554710][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1108.560120][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1108.573822][ T31] ? rcu_is_watching+0x15/0xb0 [ 1108.579935][ T31] do_syscall_64+0x14d/0xf80 [ 1108.584544][ T31] ? trace_irq_disable+0x3b/0x150 [ 1108.591091][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.597309][ T31] ? clear_bhb_loop+0x40/0x90 [ 1108.601998][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.608012][ T31] RIP: 0033:0x7fad5299c799 [ 1108.612435][ T31] RSP: 002b:00007fad53843028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1108.621008][ T31] RAX: ffffffffffffffda RBX: 00007fad52c16180 RCX: 00007fad5299c799 [ 1108.629028][ T31] RDX: 0000000000008024 RSI: 0000200000000140 RDI: 000000000000000a [ 1108.637142][ T31] RBP: 00007fad52a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1108.645119][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1108.653725][ T31] R13: 00007fad52c16218 R14: 00007fad52c16180 R15: 00007fad52d3fa48 [ 1108.662860][ T31] [ 1108.674992][ T31] INFO: task syz.6.3162:18771 blocked for more than 145 seconds. [ 1108.683102][ T31] Tainted: G L syzkaller #0 [ 1108.690745][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1108.701526][ T31] task:syz.6.3162 state:D stack:28160 pid:18771 tgid:18764 ppid:16761 task_flags:0x400040 flags:0x00080002 [ 1108.713548][ T31] Call Trace: [ 1108.716946][ T31] [ 1108.719882][ T31] __schedule+0x15dd/0x52d0 [ 1108.724417][ T31] ? __pfx___schedule+0x10/0x10 [ 1108.730016][ T31] ? schedule+0x90/0x360 [ 1108.734276][ T31] schedule+0x164/0x360 [ 1108.738589][ T31] schedule_preempt_disabled+0x13/0x30 [ 1108.744059][ T31] __mutex_lock+0x7fe/0x1300 [ 1108.748742][ T31] ? __mutex_lock+0x5ac/0x1300 [ 1108.753513][ T31] ? __tun_chr_ioctl+0x3bc/0x1e10 [ 1108.758699][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1108.763761][ T31] __tun_chr_ioctl+0x3bc/0x1e10 [ 1108.769837][ T31] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1108.775140][ T31] ? __fget_files+0x2a/0x420 [ 1108.780177][ T31] ? __fget_files+0x3a0/0x420 [ 1108.784869][ T31] ? __fget_files+0x2a/0x420 [ 1108.789572][ T31] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1108.794518][ T31] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1108.800639][ T31] __se_sys_ioctl+0xfc/0x170 [ 1108.805245][ T31] do_syscall_64+0x14d/0xf80 [ 1108.811429][ T31] ? trace_irq_disable+0x3b/0x150 [ 1108.816612][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.822684][ T31] ? clear_bhb_loop+0x40/0x90 [ 1108.827458][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.833360][ T31] RIP: 0033:0x7f6831d9c799 [ 1108.837901][ T31] RSP: 002b:00007f6832b6f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1108.846418][ T31] RAX: ffffffffffffffda RBX: 00007f6832016180 RCX: 00007f6831d9c799 [ 1108.854396][ T31] RDX: 0000200000000040 RSI: 00000000400454ca RDI: 0000000000000008 [ 1108.862557][ T31] RBP: 00007f6831e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1108.870588][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1108.879635][ T31] R13: 00007f6832016218 R14: 00007f6832016180 R15: 00007f683213fa48 [ 1108.888594][ T31] [ 1108.891653][ T31] INFO: task syz.6.3162:18772 blocked for more than 145 seconds. [ 1108.899623][ T31] Tainted: G L syzkaller #0 [ 1108.907182][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1108.917385][ T31] task:syz.6.3162 state:D stack:26464 pid:18772 tgid:18764 ppid:16761 task_flags:0x400140 flags:0x00080002 [ 1108.929454][ T31] Call Trace: [ 1108.932735][ T31] [ 1108.936206][ T31] __schedule+0x15dd/0x52d0 [ 1108.940746][ T31] ? __pfx___schedule+0x10/0x10 [ 1108.945691][ T31] ? schedule+0x90/0x360 [ 1108.949959][ T31] schedule+0x164/0x360 [ 1108.954118][ T31] schedule_preempt_disabled+0x13/0x30 [ 1108.959713][ T31] __mutex_lock+0x7fe/0x1300 [ 1108.964338][ T31] ? __mutex_lock+0x5ac/0x1300 [ 1108.977232][ T31] ? rtnetlink_rcv_msg+0x722/0xbe0 [ 1108.982378][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1108.988567][ T31] rtnetlink_rcv_msg+0x722/0xbe0 [ 1108.993535][ T31] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1108.999220][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1109.004720][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1109.011296][ T31] netlink_rcv_skb+0x232/0x4b0 [ 1109.017173][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1109.022658][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1109.029487][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 1109.034721][ T31] netlink_unicast+0x80f/0x9b0 [ 1109.039654][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1109.045039][ T31] ? netlink_sendmsg+0x650/0xb40 [ 1109.050140][ T31] ? skb_put+0x11b/0x210 [ 1109.054400][ T31] netlink_sendmsg+0x813/0xb40 [ 1109.059333][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1109.064635][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1109.069681][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1109.074976][ T31] ____sys_sendmsg+0x972/0x9f0 [ 1109.079918][ T31] ? futex_unqueue+0x211/0x240 [ 1109.084792][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1109.090233][ T31] ? import_iovec+0x73/0xa0 [ 1109.094746][ T31] ___sys_sendmsg+0x2a5/0x360 [ 1109.100491][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1109.106114][ T31] ? futex_wait+0x29a/0x380 [ 1109.110659][ T31] ? __fget_files+0x2a/0x420 [ 1109.115343][ T31] ? __fget_files+0x3a0/0x420 [ 1109.120189][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1109.125136][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1109.131687][ T31] ? rcu_is_watching+0x15/0xb0 [ 1109.137777][ T31] do_syscall_64+0x14d/0xf80 [ 1109.142387][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1109.148518][ T31] ? clear_bhb_loop+0x40/0x90 [ 1109.153202][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1109.159363][ T31] RIP: 0033:0x7f6831d9c799 [ 1109.163805][ T31] RSP: 002b:00007f682fbf4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1109.172643][ T31] RAX: ffffffffffffffda RBX: 00007f6832016270 RCX: 00007f6831d9c799 [ 1109.180781][ T31] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000009 [ 1109.188947][ T31] RBP: 00007f6831e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1109.197065][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1109.205083][ T31] R13: 00007f6832016308 R14: 00007f6832016270 R15: 00007f683213fa48 [ 1109.214399][ T31] [ 1109.218046][ T31] INFO: task syz.6.3162:18773 blocked for more than 145 seconds. [ 1109.226291][ T31] Tainted: G L syzkaller #0 [ 1109.232798][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1109.242883][ T31] task:syz.6.3162 state:D stack:28120 pid:18773 tgid:18764 ppid:16761 task_flags:0x400140 flags:0x00080002 [ 1109.256302][ T31] Call Trace: [ 1109.259594][ T31] [ 1109.262580][ T31] __schedule+0x15dd/0x52d0 [ 1109.267621][ T31] ? __pfx___schedule+0x10/0x10 [ 1109.272489][ T31] ? schedule+0x90/0x360 [ 1109.277161][ T31] schedule+0x164/0x360 [ 1109.281329][ T31] schedule_preempt_disabled+0x13/0x30 [ 1109.296548][ T31] __mutex_lock+0x7fe/0x1300 [ 1109.301182][ T31] ? __mutex_lock+0x5ac/0x1300 [ 1109.306018][ T31] ? rtnetlink_rcv_msg+0x722/0xbe0 [ 1109.311146][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1109.318635][ T31] rtnetlink_rcv_msg+0x722/0xbe0 [ 1109.323604][ T31] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1109.329333][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1109.334815][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1109.340708][ T31] netlink_rcv_skb+0x232/0x4b0 [ 1109.345584][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1109.351207][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1109.356821][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 1109.362058][ T31] netlink_unicast+0x80f/0x9b0 [ 1109.368405][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1109.373721][ T31] ? netlink_sendmsg+0x650/0xb40 [ 1109.378947][ T31] ? skb_put+0x11b/0x210 [ 1109.383218][ T31] netlink_sendmsg+0x813/0xb40 [ 1109.388093][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1109.393541][ T31] ? __se_sys_ioctl+0x47/0x170 [ 1109.398543][ T31] ? do_syscall_64+0x14d/0xf80 [ 1109.403321][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1109.408408][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1109.413871][ T31] ____sys_sendmsg+0x972/0x9f0 [ 1109.418828][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1109.424134][ T31] ? import_iovec+0x73/0xa0 [ 1109.428945][ T31] ___sys_sendmsg+0x2a5/0x360 [ 1109.433716][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1109.439259][ T31] ? tomoyo_path_number_perm+0x219/0x630 [ 1109.444932][ T31] ? __fget_files+0x2a/0x420 [ 1109.449940][ T31] ? __fget_files+0x3a0/0x420 [ 1109.454644][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1109.459820][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1109.466816][ T31] ? rcu_is_watching+0x15/0xb0 [ 1109.471612][ T31] ? __pfx_kcov_ioctl+0x10/0x10 [ 1109.477697][ T31] do_syscall_64+0x14d/0xf80 [ 1109.482568][ T31] ? trace_irq_disable+0x3b/0x150 [ 1109.487909][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1109.493986][ T31] ? clear_bhb_loop+0x40/0x90 [ 1109.498740][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1109.504786][ T31] RIP: 0033:0x7f6831d9c799 [ 1109.509422][ T31] RSP: 002b:00007f682f7d1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1109.518629][ T31] RAX: ffffffffffffffda RBX: 00007f6832016360 RCX: 00007f6831d9c799 [ 1109.528648][ T31] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000009 [ 1109.536849][ T31] RBP: 00007f6831e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1109.544831][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1109.554194][ T31] R13: 00007f68320163f8 R14: 00007f6832016360 R15: 00007f683213fa48 [ 1109.562281][ T31] [ 1109.565460][ T31] [ 1109.565460][ T31] Showing all locks held in the system: [ 1109.573605][ T31] 1 lock held by khungtaskd/31: [ 1109.579613][ T31] #0: ffffffff8e75e5e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1109.590743][ T31] 3 locks held by kworker/u8:3/49: [ 1109.595938][ T31] #0: ffff88803146a948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 1109.616354][ T31] #1: ffffc90000b97c40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 1109.630202][ T31] #2: ffffffff8fbcea08 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 1109.639993][ T31] 3 locks held by kworker/u8:4/77: [ 1109.645113][ T31] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 1109.658257][ T31] #1: ffffc9000211fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 1109.669349][ T31] #2: ffffffff8fbcea08 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1109.678606][ T31] 3 locks held by kworker/u8:5/130: [ 1109.683840][ T31] #0: ffff888036cb7948 ((wq_completion)udp_tunnel_nic){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 1109.702690][ T31] #1: ffffc90002f37c40 ((work_completion)(&utn->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 1109.714467][ T31] #2: ffffffff8fbcea08 (rtnl_mutex){+.+.}-{4:4}, at: udp_tunnel_nic_device_sync_work+0x29/0xa10 [ 1109.725185][ T31] 1 lock held by dhcpcd/5490: [ 1109.730074][ T31] #0: ffffffff8fbcea08 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newroute+0x12b/0x250 [ 1109.739624][ T31] 2 locks held by getty/5577: [ 1109.744322][ T31] #0: ffff8880320de0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1109.754182][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 1109.764419][ T31] 4 locks held by kworker/u8:13/6264: [ 1109.771548][ T31] #0: ffff88801b6de948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 1109.783130][ T31] #1: ffffc9000cb87c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 1109.794031][ T31] #2: ffffffff8fbc0290 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 1109.803531][ T31] #3: ffffffff8fbcea08 (rtnl_mutex){+.+.}-{4:4}, at: cfg802154_pernet_exit+0x19/0xe0 [ 1109.815104][ T31] 3 locks held by kworker/1:1/15560: [ 1109.820529][ T31] #0: ffff88813fe0dd48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 1109.832961][ T31] #1: ffffc900052b7c40 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 1109.844174][ T31] #2: ffffffff8fbcea08 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0xa5/0xfe0 [ 1109.854051][ T31] 2 locks held by syz.5.2736/16707: [ 1109.859390][ T31] 3 locks held by kworker/1:5/16749: [ 1109.864681][ T31] #0: ffff88813fe0f148 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 1109.877338][ T31] #1: ffffc90003b17c40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 1109.888473][ T31] #2: ffffffff8fbcea08 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 1109.899146][ T31] 1 lock held by syz.7.3150/18721: [ 1109.904260][ T31] 1 lock held by syz.2.3153/18744: [ 1109.909472][ T31] #0: ffffffff8fbcea08 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0 [ 1109.920504][ T31] 2 locks held by syz.4.3157/18749: [ 1109.926211][ T31] #0: ffffffff9011ec80 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1109.935898][ T31] #1: ffffffff8fbcea08 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0 [ 1109.944968][ T31] 1 lock held by syz.3.3161/18768: [ 1109.950262][ T31] #0: ffffffff8fbcea08 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0 [ 1109.959545][ T31] 1 lock held by syz.6.3162/18771: [ 1109.964660][ T31] #0: ffffffff8fbcea08 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3bc/0x1e10 [ 1109.974118][ T31] 1 lock held by syz.6.3162/18772: [ 1109.979333][ T31] #0: ffffffff8fbcea08 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x722/0xbe0 [ 1109.990373][ T31] 1 lock held by syz.6.3162/18773: [ 1109.996055][ T31] #0: ffffffff8fbcea08 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x722/0xbe0 [ 1110.008969][ T31] 2 locks held by syz-executor/18778: [ 1110.014355][ T31] #0: ffffffff8fbc0290 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 1110.030568][ T31] #1: ffffffff8fbcea08 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 1110.042804][ T31] 2 locks held by syz-executor/18782: [ 1110.048420][ T31] #0: ffffffff8fbc0290 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 1110.058020][ T31] #1: ffffffff8fbcea08 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 1110.068823][ T31] 2 locks held by syz-executor/18785: [ 1110.074197][ T31] #0: ffffffff8fbc0290 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 1110.083716][ T31] #1: ffffffff8fbcea08 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 1110.097508][ T31] 2 locks held by syz-executor/18789: [ 1110.102895][ T31] #0: ffffffff8fbc0290 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 1110.112487][ T31] #1: ffffffff8fbcea08 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 1110.123295][ T31] 2 locks held by syz-executor/18792: [ 1110.128838][ T31] #0: ffffffff8fbc0290 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 1110.140164][ T31] #1: ffffffff8fbcea08 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 1110.150784][ T31] 2 locks held by syz-executor/18801: [ 1110.156205][ T31] #0: ffffffff8fbc0290 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 1110.165814][ T31] #1: ffffffff8fbcea08 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 1110.176478][ T31] 2 locks held by syz-executor/18804: [ 1110.181866][ T31] #0: ffffffff8fbc0290 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 1110.191484][ T31] #1: ffffffff8fbcea08 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 1110.202049][ T31] 2 locks held by syz-executor/18807: [ 1110.209125][ T31] #0: ffffffff8fbc0290 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 1110.218643][ T31] #1: ffffffff8fbcea08 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 1110.229528][ T31] 2 locks held by syz-executor/18810: [ 1110.234904][ T31] #0: ffffffff8fbc0290 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 1110.244431][ T31] #1: ffffffff8fbcea08 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 1110.256875][ T31] 2 locks held by syz-executor/18814: [ 1110.262261][ T31] #0: ffffffff8fbc0290 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 1110.271805][ T31] #1: ffffffff8fbcea08 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 1110.282435][ T31] 2 locks held by syz-executor/18824: [ 1110.287948][ T31] #0: ffffffff8fbc0290 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 1110.297505][ T31] #1: ffffffff8fbcea08 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 1110.308081][ T31] 2 locks held by ip/18844: [ 1110.312579][ T31] #0: ffff88808226a6f0 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 1110.324547][ T31] #1: ffffffff8fbcea08 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x92/0x200 [ 1110.333784][ T31] 2 locks held by syz-executor/18855: [ 1110.339932][ T31] #0: ffffffff8fbc0290 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 1110.349471][ T31] #1: ffffffff8fbcea08 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 1110.360101][ T31] 2 locks held by syz-executor/18865: [ 1110.367365][ T31] #0: ffffffff8fbc0290 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 1110.376979][ T31] #1: ffffffff8fbcea08 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 1110.387500][ T31] 2 locks held by syz-executor/18868: [ 1110.392869][ T31] #0: ffffffff8fbc0290 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 1110.402456][ T31] #1: ffffffff8fbcea08 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 1110.413074][ T31] 2 locks held by syz-executor/18871: [ 1110.420771][ T31] #0: ffffffff8fbc0290 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730 [ 1110.431790][ T31] #1: ffffffff8fbcea08 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 1110.442478][ T31] [ 1110.445816][ T31] ============================================= [ 1110.445816][ T31] [ 1110.454249][ T31] NMI backtrace for cpu 1 [ 1110.454268][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1110.454293][ T31] Tainted: [L]=SOFTLOCKUP [ 1110.454300][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1110.454311][ T31] Call Trace: [ 1110.454320][ T31] [ 1110.454328][ T31] dump_stack_lvl+0xe8/0x150 [ 1110.454359][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 1110.454392][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1110.454418][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1110.454447][ T31] sys_info+0x135/0x170 [ 1110.454469][ T31] watchdog+0xfd9/0x1030 [ 1110.454500][ T31] ? watchdog+0x21a/0x1030 [ 1110.454533][ T31] kthread+0x388/0x470 [ 1110.454552][ T31] ? __pfx_watchdog+0x10/0x10 [ 1110.454576][ T31] ? __pfx_kthread+0x10/0x10 [ 1110.454595][ T31] ret_from_fork+0x51e/0xb90 [ 1110.454621][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1110.454643][ T31] ? __switch_to+0xc7d/0x1450 [ 1110.454667][ T31] ? __pfx_kthread+0x10/0x10 [ 1110.454686][ T31] ret_from_fork_asm+0x1a/0x30 [ 1110.454726][ T31] [ 1110.454734][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1110.571415][ C0] NMI backtrace for cpu 0 [ 1110.571434][ C0] CPU: 0 UID: 0 PID: 16707 Comm: syz.5.2736 Tainted: G L syzkaller #0 PREEMPT(full) [ 1110.571456][ C0] Tainted: [L]=SOFTLOCKUP [ 1110.571462][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1110.571471][ C0] RIP: 0010:preempt_count_add+0xcb/0x190 [ 1110.571497][ C0] Code: 35 02 43 88 11 49 81 c6 48 15 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 ad fe 9b 00 49 89 1e 5b 41 5e 41 5f cc cc cc cc cc 89 fb 90 e8 d7 cc 17 03 85 c0 74 30 48 c7 c0 c4 [ 1110.571510][ C0] RSP: 0018:ffffc90003d578d8 EFLAGS: 00000246 [ 1110.571524][ C0] RAX: 1ffff1100674aa49 RBX: 1ffff920007aaf34 RCX: ffffffff9a279400 [ 1110.571535][ C0] RDX: 0000000000000000 RSI: ffffffff8e1699c5 RDI: ffffffff8bb025c4 [ 1110.571546][ C0] RBP: ffffc90003d57a98 R08: ffffc90003d57a07 R09: 0000000000000000 [ 1110.571556][ C0] R10: ffffc90003d579e0 R11: fffff520007aaf41 R12: ffff888057e76040 [ 1110.571567][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1110.571577][ C0] FS: 00007fddfdca86c0(0000) GS:ffff88812545d000(0000) knlGS:0000000000000000 [ 1110.571590][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1110.571600][ C0] CR2: 0000558d0b531ee8 CR3: 000000001ffa0000 CR4: 00000000003526f0 [ 1110.571614][ C0] Call Trace: [ 1110.571620][ C0] [ 1110.571627][ C0] __mutex_lock+0x174/0x1300 [ 1110.571652][ C0] ? io_cqring_wait+0x104e/0x18b0 [ 1110.571671][ C0] ? io_cqring_do_overflow_flush+0x1d/0x40 [ 1110.571695][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 1110.571716][ C0] ? __pfx_io_run_task_work+0x10/0x10 [ 1110.571737][ C0] io_cqring_do_overflow_flush+0x1d/0x40 [ 1110.571759][ C0] io_cqring_wait+0x104e/0x18b0 [ 1110.571777][ C0] ? io_queue_deferred+0x2f2/0x3e0 [ 1110.571806][ C0] ? __pfx_io_cqring_wait+0x10/0x10 [ 1110.571824][ C0] ? __pfx_io_wake_function+0x10/0x10 [ 1110.571852][ C0] __se_sys_io_uring_enter+0x5b5/0x18c0 [ 1110.571869][ C0] ? __pfx_do_futex+0x10/0x10 [ 1110.571891][ C0] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 1110.571914][ C0] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 1110.571930][ C0] do_syscall_64+0x14d/0xf80 [ 1110.571946][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1110.571962][ C0] ? clear_bhb_loop+0x40/0x90 [ 1110.571978][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1110.571993][ C0] RIP: 0033:0x7fddfcd9c799 [ 1110.572007][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1110.572019][ C0] RSP: 002b:00007fddfdca8028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1110.572034][ C0] RAX: ffffffffffffffda RBX: 00007fddfd016090 RCX: 00007fddfcd9c799 [ 1110.572045][ C0] RDX: 00000000ffffffdc RSI: 000000000000012a RDI: 0000000000000000 [ 1110.572055][ C0] RBP: 00007fddfce32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1110.572065][ C0] R10: 0000000000000017 R11: 0000000000000246 R12: 0000000000000000 [ 1110.572074][ C0] R13: 00007fddfd016128 R14: 00007fddfd016090 R15: 00007fddfd13fa48 [ 1110.572092][ C0] [ 1110.881203][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1110.888074][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1110.898740][ T31] Tainted: [L]=SOFTLOCKUP [ 1110.903045][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1110.913084][ T31] Call Trace: [ 1110.916350][ T31] [ 1110.919272][ T31] vpanic+0x56c/0xa60 [ 1110.923271][ T31] ? __pfx___schedule+0x10/0x10 [ 1110.928201][ T31] ? __pfx_vpanic+0x10/0x10 [ 1110.932694][ T31] ? __pfx_console_unlock+0x10/0x10 [ 1110.937892][ T31] panic+0xc5/0xd0 [ 1110.941631][ T31] ? __pfx_panic+0x10/0x10 [ 1110.946067][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1110.951452][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1110.957611][ T31] watchdog+0x1023/0x1030 [ 1110.961941][ T31] ? watchdog+0x21a/0x1030 [ 1110.966371][ T31] kthread+0x388/0x470 [ 1110.970438][ T31] ? __pfx_watchdog+0x10/0x10 [ 1110.975109][ T31] ? __pfx_kthread+0x10/0x10 [ 1110.979696][ T31] ret_from_fork+0x51e/0xb90 [ 1110.984283][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1110.989386][ T31] ? __switch_to+0xc7d/0x1450 [ 1110.994051][ T31] ? __pfx_kthread+0x10/0x10 [ 1110.998629][ T31] ret_from_fork_asm+0x1a/0x30 [ 1111.003394][ T31] [ 1111.006781][ T31] Kernel Offset: disabled [ 1111.011099][ T31] Rebooting in 86400 seconds..