last executing test programs: 20m43.764452556s ago: executing program 3 (id=1212): openat$vmci(0xffffffffffffff9c, &(0x7f0000001000), 0x2, 0x0) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f00000000c0)={0x3, @pix_mp={0x60, 0xe, 0x31364d4e, 0x5, 0x9, [{0x7fff, 0xe}, {0x7fffffff, 0xffff8959}, {0x9, 0x3}, {0x6, 0x47}, {0xe563, 0x3}, {0x7, 0x8}, {0xfffffff8, 0x4}, {0x80000000, 0x4}], 0x7, 0x3, 0x7, 0x1, 0x7}}) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(r0, 0x40045109, 0x0) syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x2) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = syz_io_uring_setup(0x23d, &(0x7f0000000680)={0x0, 0x425e5, 0x10100, 0x3, 0x202e0}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f00000025c0)={{r2}, "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"}) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0x31a0}}) io_uring_enter(r2, 0x2648, 0x1d5e, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, 0x0, 0x0) accept4(r7, 0x0, 0x0, 0x800) io_uring_enter(0xffffffffffffffff, 0x627, 0x4c1, 0x43, 0x0, 0x30) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0x80000, @multicast2}}}], 0x20}, 0x0) recvmsg$unix(r9, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000240)=0x3) read$dsp(r1, &(0x7f0000000280)=""/79, 0x4f) r10 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x400, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r10, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x400, 0x1ee, 0xfffff02a, 0x6, 0x6}, 0x14) r11 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r11, 0x6, 0x0, 0x0, 0x0) r12 = fsmount(r11, 0x0, 0x0) fchdir(r12) 20m41.817472387s ago: executing program 3 (id=1218): socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fc, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771], [0xc35, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x100000, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r1, 0x9) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x4657, &(0x7f0000000500)={0x0, 0x151, 0x200, 0x1, 0x3bd}) r3 = io_uring_setup(0x2cf, &(0x7f0000000040)={0x0, 0xc89f, 0xd000, 0xa, 0xf4, 0x0, r2}) ustat(0x3, &(0x7f0000000000)) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) recvfrom(r1, &(0x7f0000000100)=""/201, 0xc9, 0x10001, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000700), 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r6, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000740)={&(0x7f0000000840)=ANY=[@ANYBLOB="55b60000030000000000000080abd9be6e287ad8c5167c85ba504a4436fc2835596c87d6217244ff57b57d281e31dd873d48f8bf745a4413b69fd67519099134a980033c2c0d0234cb89933da666c163b19b3555fbfa9a46fc6fbd4a49c87b4bce0dd7b70e13e16a291fc52859eb60dcc700"/129, @ANYRES16=r7], 0x74}, 0x1, 0x0, 0x0, 0x4089}, 0x40) sendmsg$IPVS_CMD_FLUSH(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f00000006c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00012cbd7000fedbdf25110000000c00e07f080008000500000063124f5e82968a3b3a56d867"], 0x20}}, 0x40041) r8 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r8, &(0x7f00000000c0)="ab", 0xfffd, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) 20m41.376516738s ago: executing program 3 (id=1220): syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, r3, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x5}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x5}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x3}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x6}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x8000}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4004890) unshare(0x66020000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r5 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback, 0x47}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newsa={0xfc, 0x16, 0x633, 0x0, 0x80000000, {{@in=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@broadcast, 0x4d2, 0x32}, @in6=@loopback={0x1900}, {}, {0x5, 0xffffffffffffffff, 0x0, 0x5}, {0x4, 0x2}, 0x6, 0x2, 0xa, 0x4, 0x18, 0x19}, [@mark={0xc, 0x15, {0x35075c, 0x1}}]}, 0xfc}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) r6 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000180)={'dvmrp1\x00', &(0x7f0000000100)=@ethtool_test={0x1a, 0x8001, 0x5, 0x1, [0xfffffffffffffff8]}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0xa0, 0x71, 0x10, 0x1d}}, 0x0, 0x7fff, 0x53, 0x0, 0x0, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) r7 = socket(0x2000000000000021, 0x2, 0x10000000000002) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) sendmmsg(r7, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r7, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={0x0, 0x1100}, 0x1, 0x7}, 0x40000) 20m38.240493851s ago: executing program 3 (id=1236): r0 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00\xee\b\xce\xde\xe9\x8d\xd2\xc19\xe8\xda\b\xd6\xb2\x95\xf6,\xdb\x8c\xd2\xa4l\xd7\xfa\x8a\xd7F\xb8\xb4{r.\xd2\xea\xec\xdbXe&J \xe9\x16\x82\xe8=\x83\x88sN\x83N`\xf9\xec\xe1\xb16\xfb*\xf5\xd5\\\xa7\xebe\xbe\x9d\xd7\xf5\xb9<\xb2\xc4\xf9:\xef\xc0g\xc3\xb5\x7f\xc0\xcck.5=\xcc\x10Y\xad^*\x10\x00\x00\x00\x00\x00\x00\x00\x0e%\x84\x95bXy\x81;o\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa9{b\xab\x91\x88\xba\xa5J\xfd\xd2\x96R\x06\xeeP\x0f\xb0\xad_\x0e\xf6\xe7k\xbf\x93)\x02ym\x91\xc0\x8c\xeb\xd9\xda=\\\xa0\xdeke\xb6\xef\x10\xd2\xbd9\x87<[BKq\t*t\x9e\xf9\xa6\xb5\xda\tb\xcc%?\x14Y\x9b\x18nx\x19\x11\xb7\x9d~\xc5{O\xd0S\xbdi\xf8\"P>4\x05E|h?\x0f\xf5\xf8\x8c\xce\xebXN\xb7\xc0F\xbao\xf7\xab\xedO\x96\xa1(\n\x1e\xf9\xbe/.\xe2^\xb0\xb6{\x1fdX\x100v\xab\xce\x05\x00i\x85\xf63\x05\b\xd8\xeb\xdf\x00\x00]N\xe1\x9di&\r\xd2pw\x85\vQ \x82v\x8a7\xb6\xf8\x1c\x8c\xf0\xaf\xfa\x17\xbeD\a\vM\x87\xc0Q\x9d4c\xb1^\xeeF\x96\xa1{OV\xe0\x1e#\xb3w\xc7\x87\xdd\'c\xcf.\x04\x8b\x9e\xef-b\xbe\x17T\xee\xe1\xf7\'+s\x15\xeb\xb1D\x86\x93\x1e\xf9\xf1L\x0f\x9b7/\xd9D\x91\xc47hI\xbc\x13.@R\x8b\xe2x\x97:A\xf1\xb6\xe2\xc8\xb2\x9bD\xb2P\xdc\xd4\xb1\xa50\x9f\x83~)\x9b7-\x80&r\xbc\xf60x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) write$binfmt_aout(r3, 0x0, 0x1920) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500), 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x38) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000040)={0xa0000, 0x0, {[0x7, 0xf66, 0xc9b, 0x9, 0x5, 0x6, 0xe5, 0x100000000]}}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r6, 0x4068aea3, &(0x7f00000001c0)={0xbc, 0x0, 0x2}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000380)=[@code={0xa, 0x66, {"653e460f01b944080000b86d000000ba000000000f300f07f30fc732c7442400cb000000c74424027f5e2a22ff2c2466bad10466ed260f01f866f341c0990098000033f3420f09b9800000c00f3235000800000d30"}}], 0x66}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000002c0)={[0x35, 0x7, 0x0, 0x180, 0x4, 0x10, 0xf1, 0x403, 0x80, 0x2, 0x6, 0x9, 0x0, 0x9, 0x0, 0xbdb], 0xfec00000, 0x3c4210}) ioctl$KVM_RUN(r7, 0xae80, 0x0) fallocate(r0, 0x0, 0x0, 0x200401) r8 = creat(&(0x7f0000000400)='./file0\x00', 0x120) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x4, &(0x7f0000000000)={0x0, 0xc, 0x2, @tid=r9}, 0x0) ptrace(0x10, r9) ptrace$setregs(0x1a, r9, 0xc, &(0x7f0000000000)) fcntl$setownex(r8, 0xf, &(0x7f0000000440)={0x0, r9}) 20m34.864648947s ago: executing program 3 (id=1250): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x6, @multicast2, 0x4e22, 0x1, 'wrr\x00', 0x20, 0x1b53, 0x13}, 0x2c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003300)=ANY=[@ANYBLOB="3c1100003e00010329bd700000dcdf25030000"], 0x113c}}, 0x8004) (async) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003300)=ANY=[@ANYBLOB="3c1100003e00010329bd700000dcdf25030000"], 0x113c}}, 0x8004) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r4 = socket(0x200000000000011, 0x2, 0xd) getsockopt$packet_int(r4, 0x107, 0xe, 0x0, &(0x7f00000000c0)) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r5, 0x5407, &(0x7f0000000040)={0x6, 0x7, 0x9, 0x0, 0x1, "100056f200"}) ioctl$TIOCMSET(r5, 0x5418, &(0x7f0000000000)=0x8001) (async) ioctl$TIOCMSET(r5, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) r6 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r6, 0x40085112, &(0x7f0000000000)=@t={0x4, 0x8, 0x1, 0x2}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0xffffffffffffff5a) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @mcast1, 0x5}, {0xa, 0x0, 0x0, @loopback}}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @mcast1, 0x5}, {0xa, 0x0, 0x0, @loopback}}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000300)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x3}}, 0x10) (async) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000300)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x3}}, 0x10) mmap(&(0x7f000022b000/0x3000)=nil, 0x3000, 0x3000008, 0x10010, r1, 0x90815000) pread64(r6, &(0x7f0000000100)=""/48, 0x30, 0x20000000000040) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x20000, 0x0, 0x2}, 0x18) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200000) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200000) 20m33.995025213s ago: executing program 3 (id=1256): socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000386dd0a00100014004000000060ec970200140400fb8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) 20m33.671897578s ago: executing program 32 (id=1256): socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000386dd0a00100014004000000060ec970200140400fb8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) 17m25.92469869s ago: executing program 5 (id=2118): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000540), 0x42200) unshare(0x8040480) pselect6(0x40, &(0x7f0000000000)={0x4, 0x10001, 0x9, 0x2, 0x6, 0x7, 0x100000001, 0xfffffffffffffff9}, 0x0, &(0x7f00000000c0)={0x8, 0x3, 0x5, 0x7, 0x8, 0x6, 0x200000fefdffff, 0x8}, &(0x7f0000000140), 0x0) 17m25.758431672s ago: executing program 5 (id=2120): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x4a38, 0x80203) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000400)={0x53, 0x4, 0x6, 0xb4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000500)="2aca04000000", 0x0, 0x2, 0x10016, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}) 17m25.570783723s ago: executing program 5 (id=2122): socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x6409bb4441860fdf, 0x84) socket$inet_udplite(0x2, 0x2, 0x88) userfaultfd(0x80001) r0 = open(&(0x7f0000000140)='./file0\x00', 0x12002, 0x389) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) r2 = syz_create_resource$binfmt(0x0) r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) close(r3) execveat$binfmt(r0, r2, 0x0, 0x0, 0x400) openat$binfmt(0xffffffffffffff9c, r2, 0x2, 0x0) execveat$binfmt(0xffffffffffffff9c, r2, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x48010) syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7ffd, 0x0, 0x9, 0x0, 0xfffffdfffffffffe, 0xfa11, 0x1}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = syz_open_dev$audion(&(0x7f0000000040), 0x1, 0x820080) openat$rtc(0xffffffffffffff9c, &(0x7f0000002600), 0x101840, 0x0) r6 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x3, 0x8d, 0x0, r5}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=""/6, 0x6}], 0x1, 0x0, 0x1}) io_uring_enter(r6, 0x567, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) socket(0x10, 0x80002, 0x0) 17m24.452662498s ago: executing program 5 (id=2124): syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24048044}, 0xc004) socket$nl_rdma(0x10, 0x3, 0x14) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r0, 0xc008aec1, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x8480, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000100)={0xffffffffffffff59, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000080)={0x28, 0x4, r2, 0x0, &(0x7f00008ae000/0x2000)=nil, 0x2000, 0xfffffffffffffffc}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r4, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000}) mkdir(&(0x7f0000000280)='./file0\x00', 0x98) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='\x00', 0x89901) ioctl$IOMMU_IOAS_COPY(r3, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r4, r4, 0x3, 0xfffffffffffffffa, 0x3fff}) ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, &(0x7f0000000180)={0x28, 0x6, r4, 0x0, &(0x7f0000000340)="c2", 0x1, 0x7a}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000480)={0x28, 0x6, r4, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r9) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f00000004c0)={'veth0_to_bond\x00', @multicast}) write$tun(r8, &(0x7f00000001c0)=ANY=[], 0xc2) 17m23.540701476s ago: executing program 5 (id=2127): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x800c0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETCARRIER(r2, 0x400454e2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCSETSW2(r5, 0x402c542c, &(0x7f0000000100)={0x4, 0x1, 0x5, 0x5, 0x1, "ce2b71d8d3932430b759b3857bd4a543fef5cb", 0x40, 0x1}) r6 = socket$rds(0x15, 0x5, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f0000000240)=@sack_info={r8, 0x2}, &(0x7f0000000280)=0xffa6) bind$rds(r6, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r9 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r9, 0xc0405602, &(0x7f00000000c0)={0x8, 0x1, 0x2, "3a7107ca5de21f000000f373000000e0ff00", 0x56595559}) sendmsg$rds(r6, &(0x7f0000000000)={&(0x7f0000000180)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000002640)=""/102389, 0x117cd}], 0x1, 0x1903d, 0xfffffffffffffffe}}], 0x48, 0x40000}, 0x0) ioctl$SNDCTL_SEQ_PANIC(r4, 0x5111) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) getdents(r3, &(0x7f0000000000)=""/182, 0xb6) r10 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r11 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sigaltstack(&(0x7f0000000340)={&(0x7f00000001c0)=""/98, 0x80000002, 0x62}, 0x0) write$apparmor_exec(r11, 0x0, 0x8) fsopen(&(0x7f00000000c0)='binfmt_misc\x00', 0x0) ioctl$KVM_GET_MSRS_cpu(r10, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0x48a, 0x0, 0x9}]}) 17m23.367728695s ago: executing program 5 (id=2129): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x2000, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000030900010073797a310000000054000000030a010400000000000000000100ffff0900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6f6163767461700000000900010073797a310000000064000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000040004800b00070066696c74657200000900030073797a7200000000080007006e6174"], 0x330}}, 0x4008800) 17m23.095002007s ago: executing program 33 (id=2129): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x2000, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000030900010073797a310000000054000000030a010400000000000000000100ffff0900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6f6163767461700000000900010073797a310000000064000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000040004800b00070066696c74657200000900030073797a7200000000080007006e6174"], 0x330}}, 0x4008800) 5.908049618s ago: executing program 2 (id=6757): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f00000003c0)={0x6, 0x118, 0xfa00, {{0xb, 0x0, "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", 0xaf, 0x56, 0x6, 0x9, 0x3, 0x8, 0x31, 0x1}}}, 0x120) 5.576779372s ago: executing program 2 (id=6758): socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) socket$inet6(0xa, 0x805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$watch_queue(&(0x7f0000000040), 0x80) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0002, 0x0) pipe2(&(0x7f0000000080), 0x4800) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xa888, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 4.955999829s ago: executing program 2 (id=6761): r0 = socket(0xa, 0xa, 0x3) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$kcm(0xa, 0x922000000003, 0x11) recvmsg(r2, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) close(r2) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) r4 = socket(0x400000000010, 0x3, 0xfffffffe) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0xffe0}, {0xffff, 0x3}, {0x1, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x3) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010701700ff000000000001090224000100000000090400000103f50000092100000001220500090581030000000000"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="002205000000abc668d0c1826d300061c8b6b6091028edfa61aa57b924d5a35b433d115e62e1070b21a7e898cab4794035cee639e74520878c08b85695e978401d734e58dd5fbe1251d42dcc74d8bfefb0c3fe939032572ba04549b15e0896698cd23182bb43041ecc9476f3590a91e5b1e38008abcc1cb468c3aa9c78df018c40a5244d9df8c317764e70a3d403076ed1ee80201459e6415e075a055ee99dd04256f12553dc9f"], 0x0}, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x40000081, 0x0, 0xaf66}]}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) memfd_create(&(0x7f0000000100)='+\x88\xc7s\x00\x00\x942nodev\x00\x00\x8cZ_Pv\x03\xa7\xc1\b\xec\x90Q\x85\x83\xcd\x16\xdcw\'\x8a\xe5N\x8c\x17\xfd\xc5\xad\xd5y\x15\x1fx\x17\f\xbc\xd1.\x8cA\x17\x86\xb7-j!Y\x92\xd9\xc4\r8\xd0\xc9X\xa7\x11\xa3\xf0\x8a*\xbc\x87\xcd\x1fl\xfc\xf3]\xb8\xbd\x02\v<\fl\xa6]\xa5\xfb\x05\xcb\x9c\xe2\xc8\x05\xa5\xa5\xeb\xa9\xef\xe3\xf1b\x81\xec\xac\xb6\x80\xd5\xf5S\x85\x06O\x05\xb8\xa1\x15\xcc\x17\xe8s\x95\x95B\xee_\x98\x91)\xe7\xa8+\x8c\xee\x83@q\x16\xcf3\x0f\x81\xa8\xa9`i\x01m:\xcc\x1c\xed<\xcfA3n\xfd\n>\x03\xae\f \xdbH\'\x05\x82\xdbLE\x14\xcdq\x1abcf\xdb8\xe9a\xa8\x00'/201, 0x2) syz_usb_connect(0x5, 0x59, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000ec13b2106c04e814280b0102030109024700010000000009046900000e010000182402010202"], 0x0) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r8, 0x8000000000000003, {}, 0xfd}, 0x18) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4048aec9, 0x0) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x0, 0xffff, 0x1, 0x200006, 0x0, 0x0, 0x0, 0x40}}, 0x50) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace$setregs(0xd, r9, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) request_key(&(0x7f0000000200)='ceph\x00', &(0x7f0000000380)={'syz', 0x2}, &(0x7f0000000480)='$\x00', 0x0) 4.912595025s ago: executing program 1 (id=6763): socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, 0x0, 0x4040800) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) epoll_create1(0x80000) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) 3.87286371s ago: executing program 1 (id=6768): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'ip6gretap0\x00', &(0x7f0000000100)=@ethtool_ts_info}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f00000004c0)=0x200000000) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000000)=0x200000000) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000240)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYRES32=r4], 0xd4}, 0x1, 0x0, 0x0, 0x4048080}, 0x2404c0c0) r6 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100}, &(0x7f0000000400), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r6, 0x16, &(0x7f0000000380)={&(0x7f0000001000)}, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1b000000000000001c000000000004"], 0x48) io_uring_enter(r6, 0x26c3, 0xdfffeffb, 0x4c, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x164, 0x1a, 0x800, 0x70bd2a, 0x25dfdbfc, {0xff, 0x7c}, [@nested={0x4, 0x142}, @generic="d630823d1b236207111b2217d06de6cd3f4c641c239baa829c7012c9ae95d1be96134b23331b4b5751ae5b38bc1e44c31fdfd52649ac42e21f924df0ebebedab5be9c2a65d9b71be2503fb0ff4d6b567bd4b5b46075c572b6c1724ad04d53caf8ee8add8002254c5a254ccd33635", @nested={0xdb, 0x3ffe, 0x0, 0x1, [@generic="6df81483eff8e78082b97b601338650c3f06be4b2213ae87c8c19e77039264be1a764ee6fa484d15204ea9519c191da1a15087a95c010c7c8862bc014caf31c7cfa3def2096acd3bf5ceb334fc90c0d7f7d92d60c793a38491f0006d8d55ae875946755725ec4593ff5603052ee958ea0e13833bc512acf304b892625758f60355237c23fd8072590a9cbcb223bb4ab09d4cc3777185ff1e55b0cae0fd76cc3be39b1e1a38920dd6eecbe8f1a61c1e5992ecc3c8162991574f17b03d318ae7d9b7b02c5b174ac22ffd978eddc9a99e1ebc1d86", @typed={0x4, 0x6, 0x0, 0x0, @binary="dcdb8ab3f219a788e353f89188ce594a82e17275232d08172d11b4bff90f9c1b69e6b629cbef1fd0d05a6f7d5ceb78bdc9cdf22e2744e9e7179f8151bae513ac99c4c7e2005a49f222c8ec169e5d4ebd9367fd70443aebe2a84e1935c5b26507d58416c24343d327da75ded5d6ab7882a94d379e7cef8cf3a0f19495e23f225af9a2fb5ce2fc46d0ad22e51eab25af072284a9d386ca"}]}]}, 0xffffff4b}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000080)='cubic', 0x4) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r8, 0x0, 0x0, 0x10) syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) 3.256473442s ago: executing program 4 (id=6775): r0 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x13, r0, 0x0) fallocate(r0, 0x0, 0x9e1f, 0x575) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x3804, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) (fail_nth: 49) 3.129311454s ago: executing program 0 (id=6776): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000300)={0x1, 0x2}) (async) ioctl$DRM_IOCTL_GET_UNIQUE(r1, 0xc0106401, &(0x7f0000000340)={0x58, 0x0}) r2 = socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x5, 0x0) (async) pipe2$watch_queue(&(0x7f00000006c0), 0x80) (async, rerun: 32) r3 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f00000001c0)=0x0) (rerun: 32) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) (async) r7 = syz_io_uring_setup(0xcaf, &(0x7f0000000100)={0x0, 0xb601, 0x1, 0x5, 0x17a}, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r6, 0xc000000, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, 0x1e}) io_uring_enter(r7, 0x847ba, 0x20000000, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)) io_uring_enter(r3, 0x351a, 0x100, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001280)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r11, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001300), 0x200803, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0x4188aea7, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r12 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) (async, rerun: 64) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000022"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 64) syz_usb_control_io$uac1(r12, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.696890823s ago: executing program 1 (id=6777): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x4a38, 0x80203) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000400)={0x53, 0x4, 0x6, 0xb4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000500)="a7ca04000000", 0x0, 0x2, 0x10016, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000}) 2.696776189s ago: executing program 4 (id=6778): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x5000000}, 0x0) 2.630645035s ago: executing program 2 (id=6780): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000140)={{0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x400040, &(0x7f0000000040)={@align=0x9, {0xb21, 0x1, 0x80, 0xffffffffffffffda}}, 0x40, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x2}, {[0x4, 0x8, 0x6, 0x6]}, 0x6, 0x1b, &(0x7f0000000100)=""/27}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000000, 0x20010, r0, 0x53cd2000) syz_open_procfs$pagemap(0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x28a400) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) r2 = socket$inet(0x2, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r2, 0x8008f512, &(0x7f00000001c0)) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r4, @ANYRES16=r1, @ANYRESHEX=r3], 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) 2.552723624s ago: executing program 1 (id=6781): timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0x1bf5f000) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) socket$pppoe(0x18, 0x1, 0x0) socket$igmp6(0xa, 0x3, 0x2) r1 = socket$key(0xf, 0x3, 0x2) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x44}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000a80)={{0x5, 0x2, 0x3355, 0x2, '\x00', 0x81}, 0x1, [0x6, 0x9, 0x91, 0x907a, 0xffffffff, 0x60, 0x1, 0xf, 0x1, 0x8, 0xfffffffffffdeffd, 0x63, 0xfff, 0x110000001, 0xffffffff, 0x5, 0x51, 0xa5, 0x0, 0xb6, 0x8000000000000000, 0x8, 0x7, 0x4, 0x6, 0x102, 0x100000000001, 0x77, 0x0, 0x9, 0xc, 0xc, 0x1, 0x63, 0x4, 0x4, 0x8, 0xffffffffffff7fff, 0x6, 0x100000000000008, 0x5, 0x0, 0x8, 0x401, 0x3, 0xc1bd, 0xffffffff, 0x8000000000000001, 0x8, 0x0, 0x8, 0x10000000072, 0x9, 0x2, 0x6a44d0ea, 0xffffffffffffffff, 0x9, 0x5f0, 0xfffffffffffff2e2, 0x17, 0x6, 0xfffffffffffffffa, 0x8000000000000001, 0xf0, 0x26e69303, 0x9, 0x2, 0x5, 0x2, 0x1, 0x9, 0x7, 0xe0000000000000, 0xd, 0x20000000081, 0x80000001, 0x7ff, 0x6, 0x6, 0x3ff, 0x2, 0x10000, 0xfffffffffffffffb, 0x2000000006, 0x100000001, 0x1, 0xd, 0x4007dd, 0xffffffffffffefff, 0x8d6, 0x0, 0x0, 0x4, 0xafb1, 0xe, 0xffe00, 0x1, 0xb, 0x1, 0x1, 0x1, 0x10000, 0x1fd, 0xc, 0x0, 0x7, 0x5, 0x0, 0x3, 0x7, 0xaad, 0x4, 0x4000000001, 0xb, 0xe2, 0x6, 0x6, 0x11, 0x7, 0x0, 0x9, 0xd, 0x3f, 0x52a7, 0x83d0, 0xf0, 0x104000000, 0x140000000]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x3800, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000040)={0x6, 0x0, 0x0, {0xfff7fffe, 0xbde, 0xb, 0x10000}}) r4 = fsopen(&(0x7f0000000000)='esdfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000280)='auto_da_alloc', &(0x7f00000002c0)='0\x00', 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x900, 0x0) syz_emit_ethernet(0x7a, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) recvmmsg(r1, 0x0, 0x0, 0x2140, 0x0) sendmsg$key(r1, 0x0, 0x0) 2.514398021s ago: executing program 4 (id=6782): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x3, 0x3, 0xda8}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x5000, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {0x88a8, 0xfff1}, {}, {0x2, 0xb}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40098}, 0x4008000) 2.340716222s ago: executing program 0 (id=6784): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x6a6487, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x9}}, &(0x7f0000000000)='syzkaller\x00', 0x8, 0xff5, &(0x7f0000001840)=""/4085, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x11d}, 0x94) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d06, 0x0, 0x1}]}) 2.079849619s ago: executing program 0 (id=6785): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="8d19b21e5d0c9600b6e29ae680d132e4c1fb44687e524a3303", 0x19) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010102cab4c508720c14008a570102030109022400010b00e0090904f405021df4520809000303000005088109050b"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) 2.030705231s ago: executing program 6 (id=6786): r0 = socket(0x200000000000011, 0x2, 0xd) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000080)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0xe0, 0x0, 0x6, 0x0, @local, @private=0xa010102}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 1.936943353s ago: executing program 4 (id=6787): renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000001440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (fail_nth: 7) 1.879337994s ago: executing program 6 (id=6788): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0xfe33) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc25c4110, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'dvmrp0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, 0x0, 0x2000c88c) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) gettid() r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x5}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x24}, 0x0) 1.617324589s ago: executing program 4 (id=6789): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f00000003c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmmsg$inet(r0, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000280)="eeb416521ea998399e3c91134641c3d18e7e296cdd88858e624d395e5d7c3bb976b95589cd363fafb3c7a7d5f76a1b767b7f45713f06f7732d75df5eb196f5b270aee56286baf79f72130763408540ff9a888e3b9a1dc81e0f2173372af41df3d04982dd57093ed3d9b34be1f9c9d9f801b6fb924ff7ffbd69388dc6218ee18343bd59a10bba84381fbc8bd3b027e2ce343b1a613103021b5373e2d8327328", 0x9f}, {&(0x7f0000000340)="7cff0e545d457d06ccf2e4ae23702a453eb35ef97c9efeeb8b0f678a9bdf8776357622b3d2951b43f48a57b76355b01381871a2b4e4e4d9545f422cc91f41a72113c6b78f58c3ed3397d1b33806682bb6498222e0da337bce66137601223", 0x5e}, {&(0x7f0000000580)="64c1ca5e99a2937ce2f85208e8e947282932ce0df1bbdf4d8ad9cec8c500761b5cca9a27f2a8ecea56e3aec9ea021d42625ed98d2c4dff3024fc02eb87840b6246af5dd5f63c26778901ddc21c009e81370bc18866a6654ada19dc124aa0b927efa9a46666cfac4a09b144fcea6691a2d419", 0x72}, {&(0x7f0000000200)="4337ad2f85e303bdcccabb27cfe79bf512aa75c9f20d976636665797b6abbf80c93e9d", 0x23}, {&(0x7f00000027c0)="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", 0x160}], 0x5}}], 0x1, 0x1) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002e40)=ANY=[], 0x1058}, 0x1, 0x0, 0x34000, 0x40080}, 0x4000) 1.484023967s ago: executing program 2 (id=6790): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) set_mempolicy(0x1, 0x0, 0xfffffffffffffffe) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000100)={0x2, @vbi={0x81, 0xff, 0x4, 0x31324d4e, [0x6, 0x7], [0x7, 0x3ff], 0x13b}}) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = socket$kcm(0x2, 0x1, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f00000001c0)="2e0f01c866b9800000c00f326635000400000f300f20e06635800000000f22e0360fc77df3ff9e0000f2d99806000fa7c0b800008ed866db440026da02", 0x3d}], 0x1, 0x51, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_NESTED_STATE(r7, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x0, 0xdddd1000}, {'\x00', "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e80900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700"}}) ioctl$KVM_RUN(r7, 0xae80, 0x0) sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r4}) r8 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x20200) ioctl$SG_GET_NUM_WAITING(r8, 0x227d, &(0x7f00000000c0)) sendmsg$kcm(r3, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) close(r3) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c0000000206010800000000000000000100000005000100070000000900020073797a30000000071400078008001240fffffffe080013400800ffff050004000000000010000300686173683a69702c6d616300050005000a"], 0x5c}, 0x1, 0x0, 0x0, 0x40084}, 0x0) socket$xdp(0x2c, 0x3, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000008000100000a40000000090a010400000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000b04001280140000001100010000000000000000000100000a"], 0x68}, 0x1, 0x0, 0x0, 0x2004c850}, 0x40) 1.190021484s ago: executing program 1 (id=6791): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000019000/0x1000)=nil, 0x3000}) 1.122143187s ago: executing program 1 (id=6792): syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000d40)=ANY=[@ANYBLOB="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", @ANYBLOB, @ANYBLOB="a69945682356f9129fdefea986c207a4d2e94e80b201328ca11757f5a035c2297fbc8f8711f60c07ef71824f5c4ae5511b7dbf6e48655ffadc04bafd49eeb67e7ab5ffccac846d3eb5504f156060f706953139a47a28c813f54e9a7851df1fdaca7a796401cac76914647d5517c123fdfa8e96df9f9d7666d9a6094908ba76a706d55ff7b1ae961706a04d16f68ceadc2160e66cfbe89999ce386ee273ba5991a9f071d7d17982", @ANYRES16, @ANYRES32], 0x13b) r0 = socket(0x2, 0x80805, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010e"], 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r2, 0x707, &(0x7f00000000c0)={&(0x7f0000000080)=[{0x7, 0x0, 0x0, 0x0}, {0x2, 0x6a10, 0x1000, &(0x7f0000001700)="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"}], 0x2}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000000)=0x7fff, 0x2, 0x3) r3 = socket(0x1d, 0x2, 0x6) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) r5 = syz_open_procfs(0x0, &(0x7f00000007c0)='numa_maps\x00') read$FUSE(r5, &(0x7f0000002840)={0x2020}, 0x2020) ioctl$VIDIOC_QUERYMENU(r4, 0xc008561c, &(0x7f0000000040)={0xf0f000, 0xfffffffc, @name="211ac0912fb1a36f4826fb7943a679c23dc6871e0875cca67b171f10622e1233"}) setsockopt$inet6_tcp_TLS_TX(r3, 0x6a, 0x1, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) read$FUSE(r6, &(0x7f0000002080)={0x2020}, 0x2020) ioctl$BTRFS_IOC_SCRUB_CANCEL(r6, 0x941c, 0x0) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="e1", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 671.902165ms ago: executing program 4 (id=6793): ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000080)={0x3, 0xffffffffffffffff, 0x80000}) ioctl$VT_RELDISP(r0, 0x5605) r1 = socket$can_raw(0x1d, 0x3, 0x1) dup(r1) r2 = socket(0x2b, 0x80801, 0x1) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'wg1\x00', &(0x7f00000000c0)=@ethtool_ts_info}) socket$nl_generic(0x10, 0x3, 0x10) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) mknod$loop(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, 0x1) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(r5, 0x8004510a, &(0x7f00000001c0)) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r8, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {0x0, 0x4107}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x880) r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f024, 0x40000000}) ioctl$vim2m_VIDIOC_S_FMT(r9, 0xc0d05605, &(0x7f0000000540)={0x2, @pix={0x3, 0x401, 0x3132564e, 0x1, 0x3, 0x3, 0xc, 0x7, 0x0, 0xf, 0x0, 0x3}}) ioctl$DVB_DEMUX_DMX_SET_BUFFER_SIZE(r4, 0x6f2d, 0x852c) getdents64(r6, &(0x7f0000001f80)=""/4102, 0x1006) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) readlink(&(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000740)=""/196, 0xc4) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000300)={0x1, 0x0, 0x1000, 0x6f, &(0x7f00000000c0)="1c517ebe168841430a8e964e36e33b43ed4fc7570e47627c3bb77256a13cf81fbc75319c90a929b3afe59dc38747ca4e2e2c133b9fc8a3cb38893acea3aefecce258d838cf4ed4c90ff626caec56da6e0523694bb5b6196f0c67b6dd355acfc1a0a91ba2bb13a80e0c930c67ab2a6e", 0x5c, 0x0, &(0x7f0000000140)="e2264bb071461158dc29525907950b07ee82de07ea1034141cd8d9e2cd2cd60108fa820b2b2fb2ccf73c9fd610aa9724a176b7c7957baf24d73b4dc2a7d2143895a5835f82daa4a713c3c9e3d04050294cf74a2b575389eb03b30db4"}) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r11, @ANYRES16=r10, @ANYBLOB="a28c2a608d"], 0x0) 494.714312ms ago: executing program 6 (id=6794): io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x1f, &(0x7f00000004c0)={0x0}, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9fa0000000f01d9660f78c4020a3ef32e650f09b805000000b90000c0fe0fae41d901000000b87f8b7f26ba000000000f30660fc775022e0fba600c980f320f3566b857000f20c035000000800f22c0", 0x55}], 0x1, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fd6000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xc, 0x0, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, 0x54}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 472.535526ms ago: executing program 2 (id=6795): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) setns(0xffffffffffffffff, 0x24020000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x120) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x1800) openat(0xffffffffffffff9c, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x441, 0x104) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) socket$inet(0x2, 0x801, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) pipe2(&(0x7f0000000100), 0x0) writev(r6, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 414.685429ms ago: executing program 6 (id=6796): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000180)={0x18, r1, 0x1, 0x0, &(0x7f00000001c0)=[{0x0, 0x1}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001fc0)=ANY=[@ANYBLOB="bf16000000000000b70700000100e07f50700000280004005f0000000000000095000200000000007ae9413df8ff0af5aa35339f4b382c4cad9d5bb74f432ba1fa21b7b6fa7a9b857b7210967ea0af1ba23d699b89e890c10500000000000000000000000000ac0e064c27bdfbd301150500000000000000bfdc991194f19f1ec9acd8595b95060000009ad3bf16a461e48e955a772d4062093f4cb1c3d9532abad2085401f098eb039ae4f4103699b9e079000098cc07c09c1a72cb6d47cea7ad73827cccc21842599e0ae7b91f0b878b9267aa0b2874ffdea613e892f0f9ff940f905d6d985bf6e4155a9c479936c3e690b6ad68e4cb6dd65fd7bf3124702c6b1c2aea53ee0cb83ff1807459c7cba77cedca0bff6d8370c33e2bd9cebd29c152ff9dc8c2772fe552fecfcd17782bd0362300400cbd21207e5263d86508416780983c2f380bc01cefe9773a9a5cd5b24aa24a561e72393c0ce2bf44825b05c138779fe74f884c2472ab45c2af60289cb199963312dd1929096c6f49d116f1612a7b97f77169fa5e8a66a372ef8e3ee7167f7d2a26fc6c3cfa4dc58602162e31e4a43654a24cc9d9628e9377223d6eb3460e3b10a0dc9495635a9fca19d7beb5e700498b43bdadc916c01264d22d7969530633f94b257fbc5da7a96820e31444c0b0f62619c9e351996185e4015510875b774666ba5c0ba9845ad25b578d0000a68945f230e8e4064074cec7567c47c0fbf5ac9260bcb70c000000000000000000000000000000003d5d51a158f2b007d2f5d46f8eba50277138af4ddded7074741638ff8fd5189c2a4b55d3a6ff1a80139e"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x15}, 0x48) 352.860039ms ago: executing program 0 (id=6797): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @empty}], 0x1d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffffffffffff}, 0x800, 0x0, 0x1, 0x1, 0x80}, 0x20) 294.530393ms ago: executing program 0 (id=6798): r0 = mq_open(&(0x7f000084dff0)='rmdF\x17\x16\xbc\xec', 0x6e93ebbbcc0884f2, 0x0, 0x0) r1 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x30) mq_notify(r0, &(0x7f0000000200)={0x0, 0x26, 0x0, @thr={0x0, 0x0}}) mq_timedsend(r0, 0x0, 0x0, 0x4, 0x0) 273.30462ms ago: executing program 6 (id=6799): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f00000003c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) symlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='./file1\x00') symlink(&(0x7f0000000280)='./file1/file0\x00', &(0x7f00000002c0)='./file0\x00') quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f0000000080)=@filename='./file1\x00', 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adff012255f674412d02000000880b5f04596a5e99fce658be2f200c699223886d8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683623f1a5dc6e3c7e20eb7a98ecf3bd2cf898e924abe26ac296f660e69ba982fd76e00dcff7f0000ca6b78ad833488cfe4109eaf009eddcf21f5c63cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cdf2000000db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856eb1ed9474480737a55ebb0bd701f7fb21135c6172eba7eb8a341f07e5a2d1e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d93a433f50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1a9ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc5223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d0700000000000000d6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100070000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36315745cb149f3cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aafe1140cff0be4c6f8df084c5e9734ae30aa9af030025f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409d004d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3ba47d8f71d290ed1b1a11f7a67125170c88c3b6a50692cc0064fc6bbd312536ac15016c85c6332226401b110da9c786eeca22debc99335587b54c13c3107008fa069af8223b38ced735c2d906551004d8dc10d88738488da01ffa4add56474573c964a270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958f2046fa0c1619a6554b82d9c162eb61ca74f1ffdaccf0ea5f06e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada8000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb01352638f56dae0249d15ba8767259658878b7492cfbacde9b57cf4de00788adce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433e866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76d7a23d06acb1d2d4c58faea84158bb440df2a694f4cdcaa4f65c22efffffffffffdd00000000d503d79986958115ae07b70f991430b7fb475d77b869ee02000000000000000000001ffff0ef89b2a68d2b05c995445d8a7700bcdfbec74fb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900000635376413c29f7c6f7b7e29b9a0c64e68328661f0c06e21f7d7dc22174ea4447a6f60edef3a4168d40200fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000007000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164ef876915a3f2491e4793e590dcc71de10da96366c1e992c0068c940dd4422c9882d3aa0f8a797b8fea6efcfb5276b7679f15559edaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd04000000de17e1e13b93669b79556abb722d9c085b189b5fd1f30e8dc813f608830b110001732135e8e7262f290000923bfb6b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe552018014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646a1cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489e8946d5c8156197bcb66fd5606c63e3389ee9e8552381646365066ef9a36a449c96485c22ad1aa423b7b89efbc6cd54000bb0ea5f4f1e8773144fb6ac9a44d43593d77e66aa7ed7f3d4e7b211590c738888d02b2dbb0b2ba73ec72e1d8d7360a128499dd19e1e7b9b0671f4f58515b45ecb9964f3c4ddb8234391d514f8d996d8d6dd7f8fadfee2d7a0035638ce27c2936cb04b30a0eb0cde0000000000000040000000ec3c12ecee8fc3a40000000000000000e215b00ce2570b930723cbadb4033d1b8aaa2cfb3fb89e4a6e89737fd6232218a9e0c099d1eb59d60b3cca089785642f327139bc4394fb6d547a9b3c22599e780c1da7433fb47615d372e3fffe9703e37d5c87d513165278650738efcc04d27b766cf7f60066edd292f6c8a2174f391ed164bb1816819ceb3e378e776d422bc946cd9501accebeac3a5b31d8abc68ae537cd44a04e6bc21c35a7beab2610c51e593676bf635a20f597f4631b91454d182f826071f5210bd6d93173589929b23801e63c2266fde13b5a04b8d48be057c752bc415a756ea9b4d34156c4f73dd5e5924ef101a5fcdaf37c7ba2c4a9de9b000000000000000000000000000000a73b862e4b63c245616b522345587d0ee65a6902bdd0abd941e8aba37510b222ae544f395edd1b92ad53fc68f08ea00edc5e10d768836169dd296d56b306e8b75778c37571792a6c3d8b02ef378ebd59422cdd008bef6f80a80a68641ea5ed4f1126bb676098c10bf663eb3fb8c839364d28fd046dc64b35f9c3397ce6f4ad357b0000000000090000000088c7a8e2638f650a6f04a6f33a090f59414d6ebcbc687e66d600000000bd0a58ea6d36fc2cf9b9a71c137a2a22adb1006f371d4faf47285fd66fe0389afb96854bb360edcdf11b4ff6dd578bba93e949d240cde9b5836cb46032484dc19c93db7b6e5afa10547c78e76a3111557346e52566df196fd630561bb908fff4d2e19562aabd43742a26a43799f8636fa04ceb40c9e4ca1cfbbc7b949cd245a3ee118fd0d4f639444539af8766028d4ac4d4c548e290199e0dacbb4f6796b39bf32934d941ba2f88e3ebd0cf8e24f99eca86e4ca9b2cd2b54044a7fc4631572a6378a32df288785f146275c1f548e2a0c1016744e05f9de5044373d7650125027547eefe7b2d8c8871bb65395fae99d8456883705bfdfb00001854b2e5efa8aaf25827d659f592b1575281ec125de7fb91cd81d91dcb19f5cdf1e1e2b4a8a1389753a09110538689e38e07fb2dc72bd4fd11d7bc16aac5d85c6101bb722895248e463a5fb45ce0e564e90cb19d5993b471687ae4165e29cf2f58082115f5f8569896eedfd798733223e6d6584997510c374912ab798bd4af4654c01bb2c411bc36468ddd62b4eba5cfc8953526e0e5b1359797956152d0098ce47c62c3fe5a23219389622b7f65bf03527d25c3941b9cf1ffeedf6d99082bb57ea871c12213cc40900f83033bc18c529171fae324c315bc6ce358831d0230412212acfd5fc8d5cb0d028cf568e8bb40e27befe2ff01f7c6674a4d86d900633ea36641e0a781ea0ea7f2d928b8b22e2f97dd13348927375baea6863bef4acf4299096ada5cdd2a0eaafaa760a79d102d1e0c0000000000000000007926653b8d79ce16a432f124786a0bc3c5b7d196822492ae1ccf91aeac16406ad6f9cd3d96d57fceba8360ae49f73351814c9c2972f11064aaf3739d9100f9c0e4d0cb17d50c82e305ba7d62cf1cc6da26e34982a8c74dd8122cf5b5e7c34fd2712a0cef05e4d8ec7dd363219676bd9b19943185b132eb35a695e208dfa5cecdb1d6425c8879063c0f11bd64291a4209ee6dc1d9e9010013f6148c603e6a335e298efd6ab5cccc47a2c568c6afec54f8251bd840752addf200371361c9eedf05ed98585cf6d99e9e56055064bda2d373369761238c278147cd0eb7799f6b9c9fcaa3fd282154994f5b25420c86db9b6401e885de1c615a719a1c83e8fbbb181282dbaf3313a4e4a4877e9f37607e2cd6da0cf6371ec06a75f5a4206b2418ad8897ae149085d63f01f22eca44033234b3930b4d5da756669a1d59d69e7de54abf439988ed7ec33c2d0a901bb0985a24878984d8a4340fa9a356d100926fb5f2ef9976366a61b8cc2bcb1c072b0e9c564852388e1edff10d75b3832792e471cc15b40380f94d834243080158603fbc9134d6983c540525447478984611c0d9666941bfc0a30db47a8828b6e5c51aee2094599b4ce52795750e1764f1657ca8c5633c71287239dddf5c651496f7bbd148c937f083d2e4e0197dbc6ff0649c749707b17399b1d7efad23abb8b40b38704737e15662ae4913a4a001cd3b71c7af75b5ffad9780650c800a40ca80ddc41987919142fd28dbf22db5f4c435415a03455e1d55d1783ccef97d7e4655cf839d06f06e137bbe462a03b3100231914b19739dd57b4f12d026ad0c7fd3"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmmsg$inet(r2, &(0x7f00000001c0), 0x0, 0x4000041) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002e40)=ANY=[], 0x1058}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) 92.074693ms ago: executing program 6 (id=6800): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084"], 0x48}, 0x1, 0x0, 0x0, 0x4850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) unshare(0x28000600) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@deltaction={0x14, 0x31, 0x100, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x5) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$FUSE_INIT(r4, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x40080000, 0x0, 0x0, 0x7, 0xa15, 0x0, 0x0, 0x1}}, 0x50) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) tee(0xffffffffffffffff, r5, 0x8f5, 0xb) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000002c0)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe, 0x80000000}, {0xfffffff9}]}}) 0s ago: executing program 0 (id=6801): r0 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0xdcb8, 0x10, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xc5e2, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x77, 0x29c680}) io_uring_enter(r0, 0x3518, 0xaddf, 0x2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000740)='./file0\x00', 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r6 = io_uring_setup(0xd71, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6(0xa, 0x3, 0x7fffffff) setsockopt$inet6_int(r8, 0x29, 0x21, &(0x7f0000000180)=0x8, 0x1) setsockopt$inet6_int(r7, 0x29, 0xb, &(0x7f00000001c0)=0x7, 0x4) getsockopt$inet6_buf(r7, 0x29, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000240)=0x60) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) r9 = fsopen(&(0x7f00000029c0)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, &(0x7f00000003c0)={0x6, 0x0, 0x0, 0x0}, 0x20) kernel console output (not intermixed with test programs): 62][ T6218] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1501.937965][ T6218] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1501.976050][ T6218] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1502.007141][ T6218] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1502.033887][ T6218] usb 5-1: config 1 has no interface number 1 [ 1502.064253][ T6218] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1502.122644][ T6218] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1502.166729][ T6218] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1502.221192][ T6218] usb 5-1: Product: syz [ 1502.237106][ T6218] usb 5-1: Manufacturer: syz [ 1502.269559][ T6218] usb 5-1: SerialNumber: syz [ 1502.589536][ T6218] usb 5-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 1502.603799][ T6218] usb 5-1: MIDIStreaming interface descriptor not found [ 1502.756642][T23057] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1502.835973][ T6218] usb 5-1: USB disconnect, device number 21 [ 1502.971945][T23057] usb 2-1: Using ep0 maxpacket: 32 [ 1502.999953][T23057] usb 2-1: config 1 has an invalid interface number: 233 but max is 0 [ 1503.023970][T23057] usb 2-1: config 1 has no interface number 0 [ 1503.026514][T13667] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1503.036497][T23057] usb 2-1: config 1 interface 233 has no altsetting 0 [ 1503.075125][T23057] usb 2-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=34.ac [ 1503.104898][T23057] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1503.126710][T23057] usb 2-1: Product: syz [ 1503.134043][T23057] usb 2-1: Manufacturer: syz [ 1503.159442][T23057] usb 2-1: SerialNumber: syz [ 1503.232480][T27893] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6281'. [ 1503.247055][T27894] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6280'. [ 1503.445026][T13667] usb 1-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 1503.608750][T13667] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1503.661146][T13667] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1503.699256][T23057] imon_raw 2-1:1.233: IR endpoint missing [ 1503.727579][T13667] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1503.772795][T13667] usb 1-1: config 0 descriptor?? [ 1503.851184][T23057] usb 2-1: USB disconnect, device number 54 [ 1505.668052][T23046] usb 1-1: USB disconnect, device number 72 [ 1505.826758][ T6218] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1506.092699][ T29] kauditd_printk_skb: 196 callbacks suppressed [ 1506.092720][ T29] audit: type=1326 audit(1770881869.714:2489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27928 comm="syz.6.6290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2e5d9bf79 code=0x7ffc0000 [ 1506.127070][ T29] audit: type=1326 audit(1770881869.714:2490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27928 comm="syz.6.6290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2e5d9bf79 code=0x7ffc0000 [ 1506.154623][ T29] audit: type=1326 audit(1770881869.714:2491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27928 comm="syz.6.6290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2e5d9bf79 code=0x7ffc0000 [ 1506.206116][ T6218] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1506.244109][T27930] veth1_macvtap: left allmulticast mode [ 1506.256340][ T6218] usb 3-1: config 1 has no interface number 0 [ 1506.266505][ T6218] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1506.286529][ T6218] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1506.305963][ T6218] usb 3-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1506.336652][ T6218] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1506.368611][ T29] audit: type=1326 audit(1770881869.714:2492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27928 comm="syz.6.6290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2e5d9bf79 code=0x7ffc0000 [ 1506.416972][ T6218] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1506.448615][ T29] audit: type=1326 audit(1770881869.754:2493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27928 comm="syz.6.6290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7ff2e5d9bf79 code=0x7ffc0000 [ 1506.499482][ T29] audit: type=1326 audit(1770881869.754:2494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27928 comm="syz.6.6290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2e5d9bf79 code=0x7ffc0000 [ 1506.587178][ T29] audit: type=1326 audit(1770881869.754:2495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27928 comm="syz.6.6290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff2e5d9bce2 code=0x7ffc0000 [ 1506.610812][ T6218] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1506.626425][ T6218] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1506.628453][ T29] audit: type=1326 audit(1770881869.754:2496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27928 comm="syz.6.6290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7ff2e5d9bd77 code=0x7ffc0000 [ 1506.634463][ T6218] usb 3-1: Product: syz [ 1506.634485][ T6218] usb 3-1: Manufacturer: syz [ 1506.634502][ T6218] usb 3-1: SerialNumber: syz [ 1506.670984][ T29] audit: type=1326 audit(1770881869.754:2497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27928 comm="syz.6.6290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7ff2e5d58d11 code=0x7ffc0000 [ 1506.815649][ T29] audit: type=1326 audit(1770881869.754:2498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27928 comm="syz.6.6290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7ff2e5d9cd89 code=0x7ffc0000 [ 1506.880660][T27924] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1507.506344][T27924] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1507.641564][ T6218] cdc_ncm 3-1:1.1: bind() failure [ 1507.832115][T27924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1507.922471][T27924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1508.077939][T27954] netlink: 'syz.6.6297': attribute type 10 has an invalid length. [ 1508.116849][T13410] usb 3-1: USB disconnect, device number 25 [ 1508.186486][T27954] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6297'. [ 1509.134270][T13410] IPVS: starting estimator thread 0... [ 1509.226809][T27969] IPVS: using max 26 ests per chain, 62400 per kthread [ 1510.630051][T27935] geneve0: entered allmulticast mode [ 1510.637986][T27954] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1511.068368][T27982] syzkaller1: entered promiscuous mode [ 1511.086547][T27982] syzkaller1: entered allmulticast mode [ 1511.383734][T27990] fuse: Unknown parameter '0xffffffffffffffff0x0000000000000006' [ 1511.997872][T27999] netlink: 'syz.4.6307': attribute type 33 has an invalid length. [ 1513.720612][ T29] kauditd_printk_skb: 265 callbacks suppressed [ 1513.720636][ T29] audit: type=1326 audit(1770881877.344:2764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28019 comm="syz.1.6312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f535c19bf79 code=0x7ffc0000 [ 1513.823777][ T29] audit: type=1326 audit(1770881877.344:2765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28019 comm="syz.1.6312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f535c19bf79 code=0x7ffc0000 [ 1513.909314][ T29] audit: type=1326 audit(1770881877.404:2766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28019 comm="syz.1.6312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f535c19bf79 code=0x7ffc0000 [ 1513.986169][ T29] audit: type=1326 audit(1770881877.404:2767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28019 comm="syz.1.6312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f535c19bf79 code=0x7ffc0000 [ 1514.062004][ T29] audit: type=1326 audit(1770881877.404:2768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28019 comm="syz.1.6312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f535c19bf79 code=0x7ffc0000 [ 1514.140752][ T29] audit: type=1326 audit(1770881877.424:2769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28019 comm="syz.1.6312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f535c19bf79 code=0x7ffc0000 [ 1514.212947][ T29] audit: type=1326 audit(1770881877.424:2770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28019 comm="syz.1.6312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f535c19bf79 code=0x7ffc0000 [ 1514.292443][ T29] audit: type=1326 audit(1770881877.424:2771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28019 comm="syz.1.6312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f535c19bf79 code=0x7ffc0000 [ 1514.362853][ T29] audit: type=1326 audit(1770881877.424:2772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28019 comm="syz.1.6312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f535c19bf79 code=0x7ffc0000 [ 1514.463275][ T29] audit: type=1326 audit(1770881877.424:2773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28019 comm="syz.1.6312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f535c19bf79 code=0x7ffc0000 [ 1514.749944][T23057] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1514.936548][T23057] usb 2-1: Using ep0 maxpacket: 32 [ 1514.952190][T23057] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 1514.968860][T23057] usb 2-1: config 0 has no interface number 0 [ 1514.987077][T23057] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1515.002955][T23057] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1515.025023][T23057] usb 2-1: Product: syz [ 1515.043333][T23057] usb 2-1: Manufacturer: syz [ 1515.058530][T23057] usb 2-1: SerialNumber: syz [ 1515.079519][T23057] usb 2-1: config 0 descriptor?? [ 1515.093352][T23057] smsc95xx v2.0.0 [ 1515.708890][T23057] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 1515.743588][T23057] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1515.763424][T23057] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1515.796998][T23057] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 1515.831853][T23057] usb 2-1: USB disconnect, device number 55 [ 1516.546542][ T6218] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1516.699763][T28058] IPVS: Error connecting to the multicast addr [ 1516.767234][ T6218] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1516.840642][ T6218] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1516.923286][ T6218] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1516.982300][ T6218] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1517.019462][T28045] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1517.052738][ T6218] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1518.030500][T13667] usb 1-1: USB disconnect, device number 73 [ 1519.243487][T28089] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6334'. [ 1519.258879][T28089] erspan0: entered promiscuous mode [ 1519.264529][T28089] macvtap1: entered promiscuous mode [ 1519.270335][T28089] macvtap1: entered allmulticast mode [ 1519.275917][T28089] erspan0: entered allmulticast mode [ 1519.312524][T28089] erspan0: left allmulticast mode [ 1519.326618][T28089] erspan0: left promiscuous mode [ 1519.511382][T28096] netlink: 'syz.2.6335': attribute type 10 has an invalid length. [ 1519.650252][T28099] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6337'. [ 1519.682253][T28096] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 1519.700602][T28096] team0: Failed to send options change via netlink (err -105) [ 1519.708609][T28096] team0: Port device netdevsim0 added [ 1520.810354][T28127] netlink: 'syz.1.6345': attribute type 10 has an invalid length. [ 1520.876670][T23047] usb 1-1: new full-speed USB device number 74 using dummy_hcd [ 1521.053702][T23047] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1521.092303][T23047] usb 1-1: New USB device found, idVendor=0c70, idProduct=f00b, bcdDevice= 0.00 [ 1521.117420][T23047] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1521.143991][T23047] usb 1-1: config 0 descriptor?? [ 1521.282380][T28139] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6349'. [ 1521.376776][T28124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1521.385603][T28124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1521.651430][T23047] aquacomputer_d5next 0003:0C70:F00B.0056: hidraw0: USB HID v1.01 Device [HID 0c70:f00b] on usb-dummy_hcd.0-1/input0 [ 1521.710659][T28149] ALSA: mixer_oss: invalid OSS volume '' [ 1521.822646][T23047] usb 1-1: USB disconnect, device number 74 [ 1522.476534][T23047] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 1522.583904][T28167] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6357'. [ 1522.618080][T28167] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6357'. [ 1522.680587][T28172] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6356'. [ 1522.695324][T23047] usb 2-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 1522.759783][T23047] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1522.771143][T28167] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1522.824836][T23047] usb 2-1: config 0 descriptor?? [ 1522.953640][T23047] usb 2-1: selecting invalid altsetting 3 [ 1523.004414][T23047] comedi comedi5: could not set alternate setting 3 in high speed [ 1523.050706][T23047] usbduxsigma 2-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 1523.119256][T23047] usbduxsigma 2-1:0.0: probe with driver usbduxsigma failed with error -22 [ 1523.900059][T28187] ip6tnl1: entered allmulticast mode [ 1523.944707][T24721] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1523.995670][T24721] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1524.003565][T13667] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1524.306754][T13667] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1524.808213][T13667] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1525.319906][T13410] usb 2-1: USB disconnect, device number 56 [ 1525.355884][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 1525.355907][ T29] audit: type=1326 audit(1770881888.974:2811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28202 comm="syz.6.6369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2e5d9bf79 code=0x7ffc0000 [ 1525.425232][ T29] audit: type=1326 audit(1770881889.014:2812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28202 comm="syz.6.6369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2e5d9bf79 code=0x7ffc0000 [ 1525.465011][T28209] Invalid logical block size (65025) [ 1525.490789][ T29] audit: type=1326 audit(1770881889.014:2813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28202 comm="syz.6.6369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff2e5d9bf79 code=0x7ffc0000 [ 1525.530338][ T29] audit: type=1326 audit(1770881889.014:2814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28202 comm="syz.6.6369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2e5d9bf79 code=0x7ffc0000 [ 1525.555530][ T29] audit: type=1326 audit(1770881889.014:2815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28202 comm="syz.6.6369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2e5d9bf79 code=0x7ffc0000 [ 1525.585712][ T29] audit: type=1326 audit(1770881889.014:2816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28202 comm="syz.6.6369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7ff2e5d9bf79 code=0x7ffc0000 [ 1525.633785][ T29] audit: type=1326 audit(1770881889.014:2817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28202 comm="syz.6.6369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2e5d9bf79 code=0x7ffc0000 [ 1525.657760][ T29] audit: type=1326 audit(1770881889.014:2818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28202 comm="syz.6.6369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2e5d9bf79 code=0x7ffc0000 [ 1525.682189][ T29] audit: type=1326 audit(1770881889.024:2819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28202 comm="syz.6.6369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7ff2e5d9bf79 code=0x7ffc0000 [ 1525.813963][ T29] audit: type=1326 audit(1770881889.024:2820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28202 comm="syz.6.6369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2e5d9bf79 code=0x7ffc0000 [ 1526.337363][T23049] usb 3-1: new low-speed USB device number 26 using dummy_hcd [ 1526.537868][T23049] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1526.557837][T23049] usb 3-1: config 1 interface 0 altsetting 250 endpoint 0x1 is Bulk; changing to Interrupt [ 1526.581835][T23049] usb 3-1: config 1 interface 0 altsetting 250 endpoint 0x82 is Bulk; changing to Interrupt [ 1526.619810][T23049] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1526.655997][T23049] usb 3-1: string descriptor 0 read error: -22 [ 1526.666617][T23049] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1526.713247][T23049] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1526.746807][T28220] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1526.772742][T28220] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1527.097974][T28217] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6373'. [ 1527.107496][T28217] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1527.184473][T28220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1527.208374][T28220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1527.276683][T13410] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1527.451602][T13410] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1527.460922][T13410] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1527.470736][T13410] usb 2-1: Product: syz [ 1527.475190][T13410] usb 2-1: Manufacturer: syz [ 1527.485386][T13410] usb 2-1: SerialNumber: syz [ 1527.492585][T13410] usb 2-1: config 0 descriptor?? [ 1527.755742][T23047] usb 2-1: USB disconnect, device number 57 [ 1527.766778][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1527.785609][T28235] syzkaller0: entered promiscuous mode [ 1527.795848][T28235] syzkaller0: entered allmulticast mode [ 1528.367689][T23047] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1528.568951][T23047] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1528.587219][T23047] usb 5-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 1528.602229][T23047] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1528.628813][T23047] usb 5-1: config 0 descriptor?? [ 1528.663832][T23047] smsusb:smsusb_probe: board id=8, interface number 0 [ 1528.675362][T23047] smsusb:smsusb_probe: Device initialized with return code -19 [ 1528.937707][T13410] usb 3-1: USB disconnect, device number 26 [ 1529.079360][T23047] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1529.390340][T23047] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1529.418075][T28259] tipc: Started in network mode [ 1529.429424][T28259] tipc: Node identity 7f000001, cluster identity 4711 [ 1529.461252][T23047] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1529.482326][T28259] tipc: Enabling of bearer rejected, failed to enable media [ 1529.550014][T23047] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1529.602355][T23047] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1529.672926][T23047] usb 2-1: Manufacturer: syz [ 1529.681271][T28270] bond1: Unable to set up delay as MII monitoring is disabled [ 1529.711828][T23047] usb 2-1: config 0 descriptor?? [ 1529.735233][T28270] bond1 (unregistering): Released all slaves [ 1530.178591][T23047] pyra 0003:1E7D:2CF6.0057: unknown main item tag 0x0 [ 1530.215747][T23047] pyra 0003:1E7D:2CF6.0057: unknown main item tag 0x0 [ 1530.257901][T23047] pyra 0003:1E7D:2CF6.0057: unknown main item tag 0x0 [ 1530.301995][T23047] pyra 0003:1E7D:2CF6.0057: unknown main item tag 0x0 [ 1530.335096][T23047] pyra 0003:1E7D:2CF6.0057: unknown main item tag 0x0 [ 1530.374083][T23047] pyra 0003:1E7D:2CF6.0057: unknown main item tag 0x0 [ 1530.430285][T23047] pyra 0003:1E7D:2CF6.0057: unknown main item tag 0x0 [ 1530.501602][T23047] pyra 0003:1E7D:2CF6.0057: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 1530.727014][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1531.149656][T28294] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6390'. [ 1531.160391][T23047] pyra 0003:1E7D:2CF6.0057: couldn't init struct pyra_device [ 1531.193008][T23047] pyra 0003:1E7D:2CF6.0057: couldn't install mouse [ 1531.238041][T23047] pyra 0003:1E7D:2CF6.0057: probe with driver pyra failed with error -71 [ 1531.319018][T23047] usb 2-1: USB disconnect, device number 58 [ 1531.511766][T28296] fido_id[28296]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1531.906541][T23047] usb 5-1: USB disconnect, device number 22 [ 1532.296478][T23047] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 1532.498927][T23047] usb 5-1: config index 0 descriptor too short (expected 283, got 27) [ 1532.522844][T23047] usb 5-1: config 134 has too many interfaces: 190, using maximum allowed: 32 [ 1532.563384][T23047] usb 5-1: config 134 contains an unexpected descriptor of type 0x1, skipping [ 1532.599057][T23047] usb 5-1: config 134 has an invalid descriptor of length 0, skipping remainder of the config [ 1532.634263][T23047] usb 5-1: config 134 has 0 interfaces, different from the descriptor's value: 190 [ 1532.675553][T23047] usb 5-1: config index 1 descriptor too short (expected 283, got 27) [ 1532.705629][T23047] usb 5-1: config 134 has too many interfaces: 190, using maximum allowed: 32 [ 1532.741797][T23047] usb 5-1: config 134 contains an unexpected descriptor of type 0x1, skipping [ 1532.768267][T23047] usb 5-1: config 134 has an invalid descriptor of length 0, skipping remainder of the config [ 1532.838804][T23047] usb 5-1: config 134 has 0 interfaces, different from the descriptor's value: 190 [ 1532.890353][T23047] usb 5-1: config index 2 descriptor too short (expected 283, got 27) [ 1532.950954][T23047] usb 5-1: config 134 has too many interfaces: 190, using maximum allowed: 32 [ 1533.035498][T23047] usb 5-1: config 134 contains an unexpected descriptor of type 0x1, skipping [ 1533.109939][T23047] usb 5-1: config 134 has an invalid descriptor of length 0, skipping remainder of the config [ 1533.161199][T23047] usb 5-1: config 134 has 0 interfaces, different from the descriptor's value: 190 [ 1533.197740][T23047] usb 5-1: config index 3 descriptor too short (expected 283, got 27) [ 1533.231098][T23047] usb 5-1: config 134 has too many interfaces: 190, using maximum allowed: 32 [ 1533.266292][T23047] usb 5-1: config 134 contains an unexpected descriptor of type 0x1, skipping [ 1533.289658][T23047] usb 5-1: config 134 has an invalid descriptor of length 0, skipping remainder of the config [ 1533.331861][T23047] usb 5-1: config 134 has 0 interfaces, different from the descriptor's value: 190 [ 1533.380637][T23047] usb 5-1: config index 4 descriptor too short (expected 283, got 27) [ 1533.413438][T23047] usb 5-1: config 134 has too many interfaces: 190, using maximum allowed: 32 [ 1533.436675][T23047] usb 5-1: config 134 contains an unexpected descriptor of type 0x1, skipping [ 1533.459132][T23047] usb 5-1: config 134 has an invalid descriptor of length 0, skipping remainder of the config [ 1533.482504][T23047] usb 5-1: config 134 has 0 interfaces, different from the descriptor's value: 190 [ 1533.509627][T23047] usb 5-1: config index 5 descriptor too short (expected 283, got 27) [ 1533.526124][T23047] usb 5-1: config 134 has too many interfaces: 190, using maximum allowed: 32 [ 1533.557728][T23047] usb 5-1: config 134 contains an unexpected descriptor of type 0x1, skipping [ 1533.592728][T23047] usb 5-1: config 134 has an invalid descriptor of length 0, skipping remainder of the config [ 1533.631487][T23047] usb 5-1: config 134 has 0 interfaces, different from the descriptor's value: 190 [ 1533.672826][T23047] usb 5-1: config index 6 descriptor too short (expected 283, got 27) [ 1533.702806][T23047] usb 5-1: config 134 has too many interfaces: 190, using maximum allowed: 32 [ 1533.738146][T23047] usb 5-1: config 134 contains an unexpected descriptor of type 0x1, skipping [ 1533.778556][T23047] usb 5-1: config 134 has an invalid descriptor of length 0, skipping remainder of the config [ 1533.812420][T23047] usb 5-1: config 134 has 0 interfaces, different from the descriptor's value: 190 [ 1533.853513][T23047] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0000, bcdDevice= 0.00 [ 1533.872926][T23047] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1534.112133][T23047] usb 5-1: string descriptor 0 read error: -71 [ 1534.128916][T23047] usb 5-1: USB disconnect, device number 23 [ 1534.238987][T28337] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6402'. [ 1534.872679][T28355] program syz.4.6407 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1535.206693][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1535.605656][T28385] openvswitch: netlink: Flow actions attr not present in new flow. [ 1535.986252][T28397] syzkaller0: entered promiscuous mode [ 1536.010197][T28397] syzkaller0: entered allmulticast mode [ 1536.045708][T28397] tap0: tun_chr_ioctl cmd 2147767507 [ 1536.116523][T13667] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1536.277226][T13667] usb 5-1: Using ep0 maxpacket: 16 [ 1536.301089][T13667] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 1536.333116][T13667] usb 5-1: config 1 has no interface number 0 [ 1536.357439][T13667] usb 5-1: config 1 interface 7 has no altsetting 0 [ 1536.395110][T13667] usb 5-1: New USB device found, idVendor=eb1a, idProduct=2885, bcdDevice=cf.00 [ 1536.434064][T13667] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1536.469011][T13667] usb 5-1: Product: syz [ 1536.504514][T13667] usb 5-1: Manufacturer: syz [ 1536.520367][T13667] usb 5-1: SerialNumber: syz [ 1536.796503][T23047] usb 1-1: new full-speed USB device number 75 using dummy_hcd [ 1536.946546][T23047] usb 1-1: device descriptor read/64, error -71 [ 1536.970448][T23049] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1537.140010][T23049] usb 2-1: too many configurations: 102, using maximum allowed: 8 [ 1537.170250][T23049] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1537.184418][T28410] FAULT_INJECTION: forcing a failure. [ 1537.184418][T28410] name failslab, interval 1, probability 0, space 0, times 0 [ 1537.197099][T28410] CPU: 0 UID: 0 PID: 28410 Comm: syz.2.6426 Tainted: G L syzkaller #0 PREEMPT(full) [ 1537.197125][T28410] Tainted: [L]=SOFTLOCKUP [ 1537.197130][T28410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1537.197138][T28410] Call Trace: [ 1537.197145][T28410] [ 1537.197151][T28410] dump_stack_lvl+0xe8/0x150 [ 1537.197174][T28410] should_fail_ex+0x412/0x560 [ 1537.197196][T28410] should_failslab+0xa8/0x100 [ 1537.197214][T28410] ? skb_clone+0x212/0x3a0 [ 1537.197229][T28410] kmem_cache_alloc_noprof+0x87/0x650 [ 1537.197245][T28410] ? run_filter+0x23/0x270 [ 1537.197260][T28410] skb_clone+0x212/0x3a0 [ 1537.197274][T28410] ? packet_rcv+0x567/0x1720 [ 1537.197287][T28410] packet_rcv+0x65b/0x1720 [ 1537.197304][T28410] dev_queue_xmit_nit+0x5d5/0xad0 [ 1537.197318][T28410] ? dev_queue_xmit_nit+0x2d/0xad0 [ 1537.197335][T28410] dev_hard_start_xmit+0x1c1/0x7f0 [ 1537.197358][T28410] __dev_queue_xmit+0x168f/0x3850 [ 1537.197373][T28410] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1537.197391][T28410] ? __dev_queue_xmit+0x274/0x3850 [ 1537.197412][T28410] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1537.197431][T28410] ? __copy_skb_header+0xa3/0x4a0 [ 1537.197446][T28410] ? __asan_memcpy+0x40/0x70 [ 1537.197459][T28410] ? __skb_clone+0x63/0x7a0 [ 1537.197475][T28410] ? __skb_clone+0x483/0x7a0 [ 1537.197492][T28410] ? skb_clone+0x246/0x3a0 [ 1537.197508][T28410] __netlink_deliver_tap+0x5ad/0x850 [ 1537.197533][T28410] ? netlink_deliver_tap+0x2e/0x1b0 [ 1537.197552][T28410] netlink_deliver_tap+0x19c/0x1b0 [ 1537.197571][T28410] netlink_unicast+0x7e3/0x9b0 [ 1537.197592][T28410] ? __pfx_netlink_unicast+0x10/0x10 [ 1537.197609][T28410] ? __alloc_skb+0x193/0x390 [ 1537.197628][T28410] ? netlink_sendmsg+0x650/0xb40 [ 1537.197654][T28410] ? skb_put+0x11b/0x210 [ 1537.197678][T28410] netlink_sendmsg+0x813/0xb40 [ 1537.197726][T28410] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1537.197759][T28410] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1537.197781][T28410] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1537.197799][T28410] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1537.197817][T28410] ____sys_sendmsg+0xa68/0xad0 [ 1537.197831][T28410] ? __might_fault+0xaf/0x130 [ 1537.197849][T28410] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1537.197876][T28410] ? import_iovec+0x73/0xa0 [ 1537.197892][T28410] ___sys_sendmsg+0x2a5/0x360 [ 1537.197905][T28410] ? __lock_acquire+0x6b5/0x2cf0 [ 1537.197920][T28410] ? __pfx____sys_sendmsg+0x10/0x10 [ 1537.197952][T28410] ? __fget_files+0x2a/0x420 [ 1537.197964][T28410] ? __fget_files+0x3a0/0x420 [ 1537.197981][T28410] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1537.197996][T28410] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1537.198016][T28410] ? __pfx_ksys_write+0x10/0x10 [ 1537.198036][T28410] do_syscall_64+0x14d/0xf80 [ 1537.198055][T28410] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1537.198067][T28410] ? clear_bhb_loop+0x40/0x90 [ 1537.198082][T28410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1537.198095][T28410] RIP: 0033:0x7f6184f9bf79 [ 1537.198109][T28410] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1537.198121][T28410] RSP: 002b:00007f6185e1d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1537.198137][T28410] RAX: ffffffffffffffda RBX: 00007f6185215fa0 RCX: 00007f6184f9bf79 [ 1537.198147][T28410] RDX: 0000000000008804 RSI: 0000200000000000 RDI: 0000000000000004 [ 1537.198155][T28410] RBP: 00007f6185e1d090 R08: 0000000000000000 R09: 0000000000000000 [ 1537.198163][T28410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1537.198173][T28410] R13: 00007f6185216038 R14: 00007f6185215fa0 R15: 00007f618533fa48 [ 1537.198191][T28410] [ 1537.204422][T23049] usb 2-1: can't read configurations, error -61 [ 1537.567835][T23047] usb 1-1: new full-speed USB device number 76 using dummy_hcd [ 1537.617010][T28410] team0: Device ipvlan1 failed to register rx_handler [ 1537.716526][T23047] usb 1-1: device descriptor read/64, error -71 [ 1537.756820][T23049] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1537.826897][T23047] usb usb1-port1: attempt power cycle [ 1537.918453][T23049] usb 2-1: too many configurations: 102, using maximum allowed: 8 [ 1537.935793][T23049] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1537.945964][T23049] usb 2-1: can't read configurations, error -61 [ 1537.960588][T23049] usb usb2-port1: attempt power cycle [ 1538.041594][T28417] blktrace: Concurrent blktraces are not allowed on loop4 [ 1538.166967][T23047] usb 1-1: new full-speed USB device number 77 using dummy_hcd [ 1538.187244][T23047] usb 1-1: device descriptor read/8, error -71 [ 1538.316480][T23049] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1538.337839][T23049] usb 2-1: too many configurations: 102, using maximum allowed: 8 [ 1538.348225][T23049] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1538.355950][T23049] usb 2-1: can't read configurations, error -61 [ 1538.426583][T23047] usb 1-1: new full-speed USB device number 78 using dummy_hcd [ 1538.447275][T23047] usb 1-1: device descriptor read/8, error -71 [ 1538.486659][T23049] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1538.519627][T23049] usb 2-1: too many configurations: 102, using maximum allowed: 8 [ 1538.530070][T23049] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1538.538032][T23049] usb 2-1: can't read configurations, error -61 [ 1538.544881][T23049] usb usb2-port1: unable to enumerate USB device [ 1538.558677][T23047] usb usb1-port1: unable to enumerate USB device [ 1539.252765][T13667] usb 5-1: USB disconnect, device number 24 [ 1539.704125][T13667] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1539.907911][T13667] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1539.907959][T13667] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1539.907998][T13667] usb 5-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1539.908014][T13667] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1539.922907][T13667] usb 5-1: config 0 descriptor?? [ 1540.006961][T13667] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1540.351481][T28463] FAULT_INJECTION: forcing a failure. [ 1540.351481][T28463] name failslab, interval 1, probability 0, space 0, times 0 [ 1540.387218][T28463] CPU: 1 UID: 0 PID: 28463 Comm: syz.2.6442 Tainted: G L syzkaller #0 PREEMPT(full) [ 1540.387248][T28463] Tainted: [L]=SOFTLOCKUP [ 1540.387253][T28463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1540.387261][T28463] Call Trace: [ 1540.387266][T28463] [ 1540.387272][T28463] dump_stack_lvl+0xe8/0x150 [ 1540.387295][T28463] should_fail_ex+0x412/0x560 [ 1540.387315][T28463] should_failslab+0xa8/0x100 [ 1540.387334][T28463] ? __alloc_skb+0x193/0x390 [ 1540.387346][T28463] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1540.387364][T28463] ? __alloc_skb+0x1d7/0x390 [ 1540.387382][T28463] ? __local_bh_enable_ip+0xd0/0x130 [ 1540.387397][T28463] ? __alloc_skb+0x193/0x390 [ 1540.387409][T28463] __alloc_skb+0x1d7/0x390 [ 1540.387424][T28463] ethnl_reply_init+0x59/0x200 [ 1540.387446][T28463] ethnl_default_doit+0x821/0xf40 [ 1540.387465][T28463] genl_family_rcv_msg_doit+0x22a/0x330 [ 1540.387480][T28463] ? __asan_memcpy+0x40/0x70 [ 1540.387496][T28463] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1540.387518][T28463] ? __dev_queue_xmit+0x274/0x3850 [ 1540.387537][T28463] genl_rcv_msg+0x61c/0x7a0 [ 1540.387555][T28463] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1540.387568][T28463] ? __pfx_ethnl_default_doit+0x10/0x10 [ 1540.387583][T28463] ? __pfx_ref_tracker_free+0x10/0x10 [ 1540.387600][T28463] ? __skb_clone+0x63/0x7a0 [ 1540.387617][T28463] netlink_rcv_skb+0x232/0x4b0 [ 1540.387637][T28463] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1540.387651][T28463] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1540.387667][T28463] ? genl_rcv+0x19/0x40 [ 1540.387689][T28463] ? down_read+0x272/0x2e0 [ 1540.387701][T28463] ? genl_rcv+0xd/0x40 [ 1540.387715][T28463] genl_rcv+0x28/0x40 [ 1540.387727][T28463] netlink_unicast+0x80f/0x9b0 [ 1540.387748][T28463] ? __pfx_netlink_unicast+0x10/0x10 [ 1540.387764][T28463] ? __alloc_skb+0x193/0x390 [ 1540.387776][T28463] ? netlink_sendmsg+0x650/0xb40 [ 1540.387793][T28463] ? skb_put+0x11b/0x210 [ 1540.387807][T28463] netlink_sendmsg+0x813/0xb40 [ 1540.387837][T28463] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1540.387857][T28463] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1540.387876][T28463] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1540.387894][T28463] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1540.387911][T28463] ____sys_sendmsg+0xa68/0xad0 [ 1540.387926][T28463] ? __might_fault+0xaf/0x130 [ 1540.387944][T28463] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1540.387963][T28463] ? import_iovec+0x73/0xa0 [ 1540.387978][T28463] ___sys_sendmsg+0x2a5/0x360 [ 1540.387991][T28463] ? __lock_acquire+0x6b5/0x2cf0 [ 1540.388007][T28463] ? __pfx____sys_sendmsg+0x10/0x10 [ 1540.388059][T28463] ? __fget_files+0x2a/0x420 [ 1540.388079][T28463] ? __fget_files+0x3a0/0x420 [ 1540.388108][T28463] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1540.388135][T28463] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1540.388159][T28463] ? __pfx_ksys_write+0x10/0x10 [ 1540.388181][T28463] do_syscall_64+0x14d/0xf80 [ 1540.388200][T28463] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1540.388211][T28463] ? trace_irq_disable+0x37/0x100 [ 1540.388231][T28463] ? clear_bhb_loop+0x40/0x90 [ 1540.388246][T28463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1540.388258][T28463] RIP: 0033:0x7f6184f9bf79 [ 1540.388272][T28463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1540.388283][T28463] RSP: 002b:00007f6185e1d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1540.388299][T28463] RAX: ffffffffffffffda RBX: 00007f6185215fa0 RCX: 00007f6184f9bf79 [ 1540.388308][T28463] RDX: 0000000000041840 RSI: 0000200000000e00 RDI: 0000000000000003 [ 1540.388317][T28463] RBP: 00007f6185e1d090 R08: 0000000000000000 R09: 0000000000000000 [ 1540.388325][T28463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1540.388333][T28463] R13: 00007f6185216038 R14: 00007f6185215fa0 R15: 00007f618533fa48 [ 1540.388352][T28463] [ 1541.147281][T28472] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6444'. [ 1541.403999][ T29] kauditd_printk_skb: 88 callbacks suppressed [ 1541.404020][ T29] audit: type=1326 audit(1770881905.024:2909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28466 comm="syz.2.6443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6184f9bf79 code=0x7ffc0000 [ 1541.492766][ T29] audit: type=1326 audit(1770881905.074:2910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28466 comm="syz.2.6443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6184f9bf79 code=0x7ffc0000 [ 1541.582481][ T29] audit: type=1326 audit(1770881905.154:2911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28466 comm="syz.2.6443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f6184f9bf79 code=0x7ffc0000 [ 1541.631524][ T29] audit: type=1326 audit(1770881905.154:2912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28466 comm="syz.2.6443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6184f9bf79 code=0x7ffc0000 [ 1541.717726][ T29] audit: type=1326 audit(1770881905.154:2913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28466 comm="syz.2.6443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6184f9bf79 code=0x7ffc0000 [ 1541.782674][ T29] audit: type=1326 audit(1770881905.154:2914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28466 comm="syz.2.6443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6184f9bf79 code=0x7ffc0000 [ 1541.904537][ T29] audit: type=1326 audit(1770881905.154:2915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28466 comm="syz.2.6443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f6184f9bf79 code=0x7ffc0000 [ 1542.015513][ T29] audit: type=1326 audit(1770881905.154:2916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28466 comm="syz.2.6443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6184f9bf79 code=0x7ffc0000 [ 1542.128820][ T29] audit: type=1326 audit(1770881905.154:2917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28466 comm="syz.2.6443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f6184f9bf79 code=0x7ffc0000 [ 1542.274887][ T29] audit: type=1326 audit(1770881905.154:2918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28466 comm="syz.2.6443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6184f9bf79 code=0x7ffc0000 [ 1542.435863][T23049] usb 5-1: USB disconnect, device number 25 [ 1542.589565][T28495] syz_tun: entered allmulticast mode [ 1543.240781][T28516] cifs: Unknown parameter 'f,ËøyªÜ' [ 1543.307740][T28519] FAULT_INJECTION: forcing a failure. [ 1543.307740][T28519] name failslab, interval 1, probability 0, space 0, times 0 [ 1543.320441][T28519] CPU: 0 UID: 0 PID: 28519 Comm: syz.4.6453 Tainted: G L syzkaller #0 PREEMPT(full) [ 1543.320463][T28519] Tainted: [L]=SOFTLOCKUP [ 1543.320468][T28519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1543.320477][T28519] Call Trace: [ 1543.320482][T28519] [ 1543.320488][T28519] dump_stack_lvl+0xe8/0x150 [ 1543.320510][T28519] should_fail_ex+0x412/0x560 [ 1543.320530][T28519] should_failslab+0xa8/0x100 [ 1543.320549][T28519] ? skb_clone+0x212/0x3a0 [ 1543.320564][T28519] kmem_cache_alloc_noprof+0x87/0x650 [ 1543.320578][T28519] ? run_filter+0x23/0x270 [ 1543.320595][T28519] skb_clone+0x212/0x3a0 [ 1543.320609][T28519] ? packet_rcv_spkt+0x117/0x5c0 [ 1543.320622][T28519] packet_rcv_spkt+0x139/0x5c0 [ 1543.320637][T28519] dev_queue_xmit_nit+0x5d5/0xad0 [ 1543.320651][T28519] ? dev_queue_xmit_nit+0x2d/0xad0 [ 1543.320668][T28519] dev_hard_start_xmit+0x1c1/0x7f0 [ 1543.320691][T28519] __dev_queue_xmit+0x168f/0x3850 [ 1543.320706][T28519] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1543.320724][T28519] ? __dev_queue_xmit+0x274/0x3850 [ 1543.320744][T28519] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1543.320764][T28519] ? __copy_skb_header+0xa3/0x4a0 [ 1543.320779][T28519] ? __asan_memcpy+0x40/0x70 [ 1543.320801][T28519] ? skb_clone+0x246/0x3a0 [ 1543.320817][T28519] __netlink_deliver_tap+0x5ad/0x850 [ 1543.320842][T28519] ? netlink_deliver_tap+0x2e/0x1b0 [ 1543.320860][T28519] netlink_deliver_tap+0x19c/0x1b0 [ 1543.320885][T28519] netlink_unicast+0x7e3/0x9b0 [ 1543.320906][T28519] ? __pfx_netlink_unicast+0x10/0x10 [ 1543.320921][T28519] ? __alloc_skb+0x193/0x390 [ 1543.320933][T28519] ? netlink_sendmsg+0x650/0xb40 [ 1543.320949][T28519] ? skb_put+0x11b/0x210 [ 1543.320963][T28519] netlink_sendmsg+0x813/0xb40 [ 1543.320986][T28519] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1543.321006][T28519] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1543.321024][T28519] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1543.321042][T28519] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1543.321059][T28519] ____sys_sendmsg+0xa68/0xad0 [ 1543.321073][T28519] ? __might_fault+0xaf/0x130 [ 1543.321091][T28519] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1543.321109][T28519] ? import_iovec+0x73/0xa0 [ 1543.321124][T28519] ___sys_sendmsg+0x2a5/0x360 [ 1543.321137][T28519] ? __lock_acquire+0x6b5/0x2cf0 [ 1543.321153][T28519] ? __pfx____sys_sendmsg+0x10/0x10 [ 1543.321184][T28519] ? __fget_files+0x2a/0x420 [ 1543.321196][T28519] ? __fget_files+0x3a0/0x420 [ 1543.321212][T28519] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1543.321228][T28519] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1543.321247][T28519] ? __pfx_ksys_write+0x10/0x10 [ 1543.321268][T28519] do_syscall_64+0x14d/0xf80 [ 1543.321287][T28519] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1543.321298][T28519] ? trace_irq_disable+0x37/0x100 [ 1543.321313][T28519] ? clear_bhb_loop+0x40/0x90 [ 1543.321327][T28519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1543.321339][T28519] RIP: 0033:0x7f6396d9bf79 [ 1543.321352][T28519] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1543.321363][T28519] RSP: 002b:00007f6397cde028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1543.321378][T28519] RAX: ffffffffffffffda RBX: 00007f6397016090 RCX: 00007f6396d9bf79 [ 1543.321388][T28519] RDX: 0000000024040084 RSI: 0000200000000700 RDI: 0000000000000003 [ 1543.321396][T28519] RBP: 00007f6397cde090 R08: 0000000000000000 R09: 0000000000000000 [ 1543.321404][T28519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1543.321411][T28519] R13: 00007f6397016128 R14: 00007f6397016090 R15: 00007f639713fa48 [ 1543.321429][T28519] [ 1544.088495][ T6218] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1544.262011][ T6218] usb 3-1: Using ep0 maxpacket: 8 [ 1544.275944][ T6218] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 1544.285201][ T6218] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 1544.309915][ T6218] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1544.359997][ T6218] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1544.425380][ T6218] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1544.481109][ T6218] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 1544.494024][ T6218] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1544.502849][ T6218] usb 3-1: Product: syz [ 1544.510682][ T6218] usb 3-1: Manufacturer: syz [ 1544.539958][ T6218] usb 3-1: SerialNumber: syz [ 1544.588127][ T6218] usb 3-1: config 0 descriptor?? [ 1544.613055][ T6218] hub 3-1:0.0: bad descriptor, ignoring hub [ 1544.636250][ T6218] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1544.692994][ T6218] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input142 [ 1544.865667][T23049] usb 3-1: USB disconnect, device number 27 [ 1545.228739][T28559] netlink: 'syz.1.6468': attribute type 1 has an invalid length. [ 1545.588818][T28502] syz_tun: left allmulticast mode [ 1546.148386][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.157873][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1547.047966][T28601] program syz.0.6479 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1547.992627][T28617] RDS: rds_bind could not find a transport for ae0c:91e3:ccfb:11d2:0:5efe:150.125.240.108, load rds_tcp or rds_rdma? [ 1548.326834][ T6218] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1548.398811][T28627] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1548.506510][ T6218] usb 2-1: Using ep0 maxpacket: 32 [ 1548.520309][ T6218] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 1548.536536][ T6218] usb 2-1: config 0 has no interface number 0 [ 1548.554447][ T6218] usb 2-1: config 0 interface 12 has no altsetting 0 [ 1548.572796][ T6218] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1548.590182][ T6218] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1548.601528][ T6218] usb 2-1: Product: syz [ 1548.610046][ T6218] usb 2-1: Manufacturer: syz [ 1548.614759][ T6218] usb 2-1: SerialNumber: syz [ 1548.635488][ T6218] usb 2-1: config 0 descriptor?? [ 1549.048787][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 1549.048807][ T29] audit: type=1326 audit(1770881912.674:2924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28633 comm="syz.2.6490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6184f9bf79 code=0x7ffc0000 [ 1549.129165][ T29] audit: type=1326 audit(1770881912.674:2925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28633 comm="syz.2.6490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f6184f9bf79 code=0x7ffc0000 [ 1549.224857][ T29] audit: type=1326 audit(1770881912.674:2926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28633 comm="syz.2.6490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6184f9bf79 code=0x7ffc0000 [ 1549.296739][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1549.323727][ T29] audit: type=1326 audit(1770881912.674:2927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28633 comm="syz.2.6490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6184f9bf79 code=0x7ffc0000 [ 1549.403778][ T29] audit: type=1326 audit(1770881912.674:2928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28633 comm="syz.2.6490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6184f9bf79 code=0x7ffc0000 [ 1549.477149][T28617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1549.512330][ T29] audit: type=1326 audit(1770881912.674:2929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28633 comm="syz.2.6490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f6184f9bf79 code=0x7ffc0000 [ 1549.538720][T28617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1549.611617][ T29] audit: type=1326 audit(1770881912.674:2930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28633 comm="syz.2.6490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6184f9bf79 code=0x7ffc0000 [ 1549.701509][ T29] audit: type=1326 audit(1770881912.674:2931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28633 comm="syz.2.6490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f6184f9bf79 code=0x7ffc0000 [ 1549.828932][ T29] audit: type=1326 audit(1770881912.674:2932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28633 comm="syz.2.6490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6184f9bf79 code=0x7ffc0000 [ 1549.945955][T28644] FAULT_INJECTION: forcing a failure. [ 1549.945955][T28644] name failslab, interval 1, probability 0, space 0, times 0 [ 1549.986546][ T29] audit: type=1326 audit(1770881912.674:2933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28633 comm="syz.2.6490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6184f9bf79 code=0x7ffc0000 [ 1550.036557][T28644] CPU: 1 UID: 0 PID: 28644 Comm: syz.0.6493 Tainted: G L syzkaller #0 PREEMPT(full) [ 1550.036593][T28644] Tainted: [L]=SOFTLOCKUP [ 1550.036607][T28644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1550.036619][T28644] Call Trace: [ 1550.036629][T28644] [ 1550.036638][T28644] dump_stack_lvl+0xe8/0x150 [ 1550.036674][T28644] should_fail_ex+0x412/0x560 [ 1550.036709][T28644] should_failslab+0xa8/0x100 [ 1550.036754][T28644] __kvmalloc_node_noprof+0x178/0x8a0 [ 1550.036782][T28644] ? __nf_register_net_hook+0x232/0x930 [ 1550.036812][T28644] ? nf_hook_entries_grow+0x288/0x720 [ 1550.036851][T28644] nf_hook_entries_grow+0x288/0x720 [ 1550.036885][T28644] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1550.036927][T28644] __nf_register_net_hook+0x2c9/0x930 [ 1550.036964][T28644] ? nf_register_net_hook+0xc8/0x190 [ 1550.036997][T28644] nf_register_net_hook+0xb2/0x190 [ 1550.037030][T28644] nf_register_net_hooks+0x44/0x1b0 [ 1550.037065][T28644] nf_ct_netns_do_get+0x3bf/0x5c0 [ 1550.037090][T28644] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 1550.037113][T28644] ? nft_parse_register_load+0x31e/0x3b0 [ 1550.037149][T28644] ? nf_ct_netns_get+0xe9/0x320 [ 1550.037172][T28644] nf_tables_newrule+0x17ac/0x28b0 [ 1550.037212][T28644] ? __pfx_nf_tables_newrule+0x10/0x10 [ 1550.037232][T28644] ? nfnl_pernet+0x23/0x240 [ 1550.037258][T28644] ? nfnl_pernet+0x23/0x240 [ 1550.037295][T28644] ? __nla_parse+0x40/0x60 [ 1550.037321][T28644] nfnetlink_rcv+0x1240/0x27b0 [ 1550.037346][T28644] ? is_bpf_text_address+0x292/0x2b0 [ 1550.037411][T28644] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1550.037489][T28644] ? netlink_deliver_tap+0x2e/0x1b0 [ 1550.037520][T28644] ? netlink_deliver_tap+0x2e/0x1b0 [ 1550.037570][T28644] netlink_unicast+0x80f/0x9b0 [ 1550.037607][T28644] ? __pfx_netlink_unicast+0x10/0x10 [ 1550.037633][T28644] ? __alloc_skb+0x193/0x390 [ 1550.037654][T28644] ? netlink_sendmsg+0x650/0xb40 [ 1550.037681][T28644] ? skb_put+0x11b/0x210 [ 1550.037706][T28644] netlink_sendmsg+0x813/0xb40 [ 1550.037756][T28644] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1550.037790][T28644] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1550.037821][T28644] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1550.037853][T28644] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1550.037881][T28644] ____sys_sendmsg+0xa68/0xad0 [ 1550.037904][T28644] ? __might_fault+0xaf/0x130 [ 1550.037936][T28644] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1550.037977][T28644] ? import_iovec+0x73/0xa0 [ 1550.038003][T28644] ___sys_sendmsg+0x2a5/0x360 [ 1550.038024][T28644] ? __lock_acquire+0x6b5/0x2cf0 [ 1550.038050][T28644] ? __pfx____sys_sendmsg+0x10/0x10 [ 1550.038098][T28644] ? __fget_files+0x2a/0x420 [ 1550.038110][T28644] ? __fget_files+0x3a0/0x420 [ 1550.038128][T28644] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1550.038144][T28644] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1550.038164][T28644] ? __pfx_ksys_write+0x10/0x10 [ 1550.038186][T28644] do_syscall_64+0x14d/0xf80 [ 1550.038205][T28644] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1550.038217][T28644] ? trace_irq_disable+0x37/0x100 [ 1550.038232][T28644] ? clear_bhb_loop+0x40/0x90 [ 1550.038247][T28644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1550.038259][T28644] RIP: 0033:0x7f049d59bf79 [ 1550.038272][T28644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1550.038283][T28644] RSP: 002b:00007f049e522028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1550.038298][T28644] RAX: ffffffffffffffda RBX: 00007f049d815fa0 RCX: 00007f049d59bf79 [ 1550.038315][T28644] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1550.038324][T28644] RBP: 00007f049e522090 R08: 0000000000000000 R09: 0000000000000000 [ 1550.038331][T28644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1550.038339][T28644] R13: 00007f049d816038 R14: 00007f049d815fa0 R15: 00007f049d93fa48 [ 1550.038359][T28644] [ 1550.732182][ T6218] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1550.739814][ T6218] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 1550.747175][ T6218] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1550.754802][ T6218] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 1550.772831][ T6218] usb 2-1: USB disconnect, device number 63 [ 1550.941528][T23057] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1551.135896][T28656] netlink: zone id is out of range [ 1551.156759][T23057] usb 1-1: Using ep0 maxpacket: 16 [ 1551.162007][T28656] netlink: zone id is out of range [ 1551.178166][T28656] netlink: zone id is out of range [ 1551.206037][T28656] netlink: zone id is out of range [ 1551.225388][T28656] netlink: zone id is out of range [ 1551.227353][T23057] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1551.286628][T28656] netlink: zone id is out of range [ 1551.294750][T28656] netlink: zone id is out of range [ 1551.328981][T28656] netlink: zone id is out of range [ 1551.340849][T23057] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1551.363568][T28656] netlink: zone id is out of range [ 1551.389727][T23057] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1551.424355][T23057] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1551.505485][T23057] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1551.554904][T23057] usb 1-1: config 0 descriptor?? [ 1551.701702][T28647] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.6492'. [ 1552.053930][T23057] shield 0003:0955:7214.0058: unknown main item tag 0x0 [ 1552.096505][T23057] shield 0003:0955:7214.0058: unknown main item tag 0x0 [ 1552.119223][T23057] shield 0003:0955:7214.0058: unknown main item tag 0x0 [ 1552.146450][T23057] shield 0003:0955:7214.0058: unknown main item tag 0x0 [ 1552.205113][T23057] shield 0003:0955:7214.0058: unknown main item tag 0x0 [ 1552.277471][T23057] input: HID 0955:7214 Haptics as /devices/virtual/input/input143 [ 1552.469906][T28678] fuse: Bad value for 'user_id' [ 1552.476168][T28678] fuse: Bad value for 'user_id' [ 1552.525864][T23057] shield 0003:0955:7214.0058: Registered Thunderstrike controller [ 1552.557917][T23057] shield 0003:0955:7214.0058: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 1552.652169][ T9] shield 0003:0955:7214.0058: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1552.707712][T23057] usb 1-1: USB disconnect, device number 79 [ 1552.719039][ T9] shield 0003:0955:7214.0058: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1552.794159][ T9] shield 0003:0955:7214.0058: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1552.879187][ T9] shield 0003:0955:7214.0058: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1553.082125][T28683] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6505'. [ 1553.131748][T28683] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6505'. [ 1553.939514][T28701] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1554.656221][T28710] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6517'. [ 1555.545069][T28721] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6522'. [ 1555.766990][ T6218] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1555.921679][T28732] input: syz0 as /devices/virtual/input/input144 [ 1555.936699][T28732] input: failed to attach handler leds to device input144, error: -6 [ 1555.956621][T23047] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1555.968034][ T6218] usb 5-1: Using ep0 maxpacket: 8 [ 1555.979969][ T6218] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1556.018498][ T6218] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1556.074184][ T6218] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1556.112401][ T6218] pvrusb2: ********** [ 1556.116584][T23047] usb 1-1: Using ep0 maxpacket: 8 [ 1556.123100][ T6218] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1556.123768][T23047] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1556.168668][ T6218] pvrusb2: Important functionality might not be entirely working. [ 1556.193662][T23047] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1556.196401][ T6218] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1556.235807][ T6218] pvrusb2: ********** [ 1556.259157][T23047] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1556.281208][T28745] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6531'. [ 1556.286682][T23047] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1556.313501][ T2343] pvrusb2: Invalid write control endpoint [ 1556.333447][T23047] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1556.354505][T23047] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1556.356590][T28745] netlink: 'syz.1.6531': attribute type 1 has an invalid length. [ 1556.433234][T28745] netlink: 'syz.1.6531': attribute type 2 has an invalid length. [ 1556.534976][T28718] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6519'. [ 1556.555711][ T2343] pvrusb2: Invalid write control endpoint [ 1556.575091][ T2343] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1556.600191][ T2343] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1556.610134][T23047] usb 1-1: GET_CAPABILITIES returned 0 [ 1556.630626][T23047] usbtmc 1-1:16.0: can't read capabilities [ 1556.640353][ T2343] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1556.658187][T23057] usb 5-1: USB disconnect, device number 26 [ 1556.686444][ T2343] pvrusb2: Device being rendered inoperable [ 1556.716440][ T2343] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1556.745737][ T2343] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1556.810381][ T2343] pvrusb2: Attached sub-driver cx25840 [ 1556.815932][ T2343] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1556.859723][ T2343] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1557.339434][T28782] FAULT_INJECTION: forcing a failure. [ 1557.339434][T28782] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1557.372995][T28782] CPU: 1 UID: 0 PID: 28782 Comm: syz.4.6544 Tainted: G L syzkaller #0 PREEMPT(full) [ 1557.373029][T28782] Tainted: [L]=SOFTLOCKUP [ 1557.373037][T28782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1557.373049][T28782] Call Trace: [ 1557.373058][T28782] [ 1557.373067][T28782] dump_stack_lvl+0xe8/0x150 [ 1557.373098][T28782] should_fail_ex+0x412/0x560 [ 1557.373129][T28782] strncpy_from_user+0x36/0x2b0 [ 1557.373156][T28782] getname_long+0x88/0x130 [ 1557.373177][T28782] do_getname+0x181/0x250 [ 1557.373206][T28782] __se_sys_renameat+0x40/0x2c0 [ 1557.373226][T28782] do_syscall_64+0x14d/0xf80 [ 1557.373253][T28782] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1557.373271][T28782] ? trace_irq_disable+0x37/0x100 [ 1557.373294][T28782] ? clear_bhb_loop+0x40/0x90 [ 1557.373316][T28782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1557.373334][T28782] RIP: 0033:0x7f6396d9bf79 [ 1557.373352][T28782] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1557.373368][T28782] RSP: 002b:00007f6397cff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000108 [ 1557.373391][T28782] RAX: ffffffffffffffda RBX: 00007f6397015fa0 RCX: 00007f6396d9bf79 [ 1557.373405][T28782] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: ffffffffffffffff [ 1557.373419][T28782] RBP: 00007f6397cff090 R08: 0000000000000000 R09: 0000000000000000 [ 1557.373432][T28782] R10: 0000200000001440 R11: 0000000000000246 R12: 0000000000000001 [ 1557.373445][T28782] R13: 00007f6397016038 R14: 00007f6397015fa0 R15: 00007f639713fa48 [ 1557.373477][T28782] [ 1557.387415][T23047] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1557.556978][T28784] FAULT_INJECTION: forcing a failure. [ 1557.556978][T28784] name failslab, interval 1, probability 0, space 0, times 0 [ 1557.610355][T28784] CPU: 1 UID: 0 PID: 28784 Comm: syz.6.6545 Tainted: G L syzkaller #0 PREEMPT(full) [ 1557.610390][T28784] Tainted: [L]=SOFTLOCKUP [ 1557.610398][T28784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1557.610411][T28784] Call Trace: [ 1557.610420][T28784] [ 1557.610429][T28784] dump_stack_lvl+0xe8/0x150 [ 1557.610461][T28784] should_fail_ex+0x412/0x560 [ 1557.610494][T28784] should_failslab+0xa8/0x100 [ 1557.610525][T28784] __kmalloc_cache_noprof+0x88/0x660 [ 1557.610553][T28784] ? ipv6_flowlabel_opt+0x1bc8/0x28e0 [ 1557.610583][T28784] ipv6_flowlabel_opt+0x1bc8/0x28e0 [ 1557.610614][T28784] ? __lock_acquire+0x6b5/0x2cf0 [ 1557.610644][T28784] ? __pfx_ipv6_flowlabel_opt+0x10/0x10 [ 1557.610670][T28784] ? aa_file_perm+0x12d/0x1630 [ 1557.610717][T28784] ? do_raw_spin_lock+0x12b/0x2f0 [ 1557.610744][T28784] ? lock_sock_nested+0x6a/0x100 [ 1557.610774][T28784] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1557.610811][T28784] ? __local_bh_enable_ip+0xd0/0x130 [ 1557.610839][T28784] do_ipv6_setsockopt+0xda7/0x31c0 [ 1557.610860][T28784] ? get_pid_task+0x20/0x1f0 [ 1557.610895][T28784] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 1557.610916][T28784] ? get_pid_task+0x20/0x1f0 [ 1557.610949][T28784] ? get_pid_task+0x20/0x1f0 [ 1557.610972][T28784] ? get_pid_task+0x20/0x1f0 [ 1557.611008][T28784] ? __lock_acquire+0x6b5/0x2cf0 [ 1557.611044][T28784] ? aa_sk_perm+0x15a/0x960 [ 1557.611070][T28784] ? aa_sk_perm+0x82d/0x960 [ 1557.611096][T28784] ? __fget_files+0x2a/0x420 [ 1557.611121][T28784] ? __pfx_aa_sk_perm+0x10/0x10 [ 1557.611149][T28784] ? __fget_files+0x2a/0x420 [ 1557.611166][T28784] ? aa_sock_opt_perm+0xff/0x1a0 [ 1557.611196][T28784] ipv6_setsockopt+0x59/0x170 [ 1557.611216][T28784] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1557.611246][T28784] do_sock_setsockopt+0x17c/0x1b0 [ 1557.611274][T28784] __x64_sys_setsockopt+0x13d/0x1b0 [ 1557.611301][T28784] do_syscall_64+0x14d/0xf80 [ 1557.611331][T28784] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1557.611349][T28784] ? trace_irq_disable+0x37/0x100 [ 1557.611372][T28784] ? clear_bhb_loop+0x40/0x90 [ 1557.611396][T28784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1557.611414][T28784] RIP: 0033:0x7ff2e5d9bf79 [ 1557.611433][T28784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1557.611452][T28784] RSP: 002b:00007ff2e6d2c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1557.611474][T28784] RAX: ffffffffffffffda RBX: 00007ff2e6015fa0 RCX: 00007ff2e5d9bf79 [ 1557.611489][T28784] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000003 [ 1557.611501][T28784] RBP: 00007ff2e6d2c090 R08: 0000000000000020 R09: 0000000000000000 [ 1557.611514][T28784] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 1557.611527][T28784] R13: 00007ff2e6016038 R14: 00007ff2e6015fa0 R15: 00007ff2e613fa48 [ 1557.611559][T28784] [ 1557.998099][T23047] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1558.010774][T23047] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1558.019370][T23047] usb 2-1: Product: syz [ 1558.024175][T23047] usb 2-1: Manufacturer: syz [ 1558.029052][T23047] usb 2-1: SerialNumber: syz [ 1558.081818][T23047] usb 2-1: config 0 descriptor?? [ 1558.135059][T28791] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6547'. [ 1558.230149][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 1558.230172][ T29] audit: type=1800 audit(1770881921.844:2943): pid=28793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.6548" name="SYSV00000000" dev="tmpfs" ino=4 res=0 errno=0 [ 1558.576199][T23047] usb 2-1: Firmware: major: 71, minor: 243, hardware type: UNKNOWN (153) [ 1558.721347][T13667] usb 1-1: USB disconnect, device number 80 [ 1558.791172][T23047] usb 2-1: Firmware: build [ 1558.791180][T28808] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6552'. [ 1558.941379][T28810] xt_hashlimit: size too large, truncated to 1048576 [ 1559.935857][T23047] usb 2-1: failed to fetch extended address, random address set [ 1559.972438][T23047] usb 2-1: atusb_probe: initialization failed, error = -524 [ 1559.992968][T23047] atusb 2-1:0.0: probe with driver atusb failed with error -524 [ 1560.304503][T28820] FAULT_INJECTION: forcing a failure. [ 1560.304503][T28820] name failslab, interval 1, probability 0, space 0, times 0 [ 1560.354108][T28820] CPU: 0 UID: 0 PID: 28820 Comm: syz.6.6554 Tainted: G L syzkaller #0 PREEMPT(full) [ 1560.354138][T28820] Tainted: [L]=SOFTLOCKUP [ 1560.354143][T28820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1560.354151][T28820] Call Trace: [ 1560.354157][T28820] [ 1560.354164][T28820] dump_stack_lvl+0xe8/0x150 [ 1560.354186][T28820] should_fail_ex+0x412/0x560 [ 1560.354208][T28820] should_failslab+0xa8/0x100 [ 1560.354227][T28820] __kmalloc_cache_noprof+0x88/0x660 [ 1560.354245][T28820] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1560.354262][T28820] ? sctp_add_bind_addr+0x8c/0x370 [ 1560.354282][T28820] sctp_add_bind_addr+0x8c/0x370 [ 1560.354302][T28820] sctp_copy_local_addr_list+0x314/0x4f0 [ 1560.354322][T28820] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1560.354340][T28820] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1560.354359][T28820] ? sctp_v6_is_any+0x64/0x80 [ 1560.354384][T28820] ? sctp_copy_one_addr+0x93/0x360 [ 1560.354404][T28820] sctp_bind_addr_copy+0xb3/0x3c0 [ 1560.354422][T28820] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1560.354440][T28820] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1560.354455][T28820] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1560.354472][T28820] ? __local_bh_enable_ip+0xd0/0x130 [ 1560.354486][T28820] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1560.354504][T28820] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1560.354521][T28820] sctp_sendmsg+0x1528/0x2c10 [ 1560.354543][T28820] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1560.354554][T28820] ? aa_sk_perm+0x15a/0x960 [ 1560.354571][T28820] ? aa_sk_perm+0x82d/0x960 [ 1560.354586][T28820] ? __might_fault+0xaf/0x130 [ 1560.354605][T28820] ? __pfx_aa_sk_perm+0x10/0x10 [ 1560.354622][T28820] ? sock_rps_record_flow+0x19/0x400 [ 1560.354639][T28820] ? inet_sendmsg+0x2f4/0x370 [ 1560.354676][T28820] __sys_sendto+0x627/0x7a0 [ 1560.354691][T28820] ? __pfx___sys_sendto+0x10/0x10 [ 1560.354702][T28820] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1560.354727][T28820] ? __fget_files+0x3a0/0x420 [ 1560.354747][T28820] ? ksys_write+0x242/0x270 [ 1560.354763][T28820] ? __pfx_ksys_write+0x10/0x10 [ 1560.354781][T28820] __x64_sys_sendto+0xde/0x100 [ 1560.354795][T28820] do_syscall_64+0x14d/0xf80 [ 1560.354813][T28820] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1560.354825][T28820] ? trace_irq_disable+0x37/0x100 [ 1560.354840][T28820] ? clear_bhb_loop+0x40/0x90 [ 1560.354854][T28820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1560.354867][T28820] RIP: 0033:0x7ff2e5d9bf79 [ 1560.354879][T28820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1560.354890][T28820] RSP: 002b:00007ff2e6d2c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1560.354906][T28820] RAX: ffffffffffffffda RBX: 00007ff2e6015fa0 RCX: 00007ff2e5d9bf79 [ 1560.354918][T28820] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003 [ 1560.354926][T28820] RBP: 00007ff2e6d2c090 R08: 0000200000000080 R09: 000000000000003f [ 1560.354934][T28820] R10: 0000000000000051 R11: 0000000000000246 R12: 0000000000000002 [ 1560.354942][T28820] R13: 00007ff2e6016038 R14: 00007ff2e6015fa0 R15: 00007ff2e613fa48 [ 1560.354961][T28820] [ 1560.739161][ T6218] usb 2-1: USB disconnect, device number 64 [ 1561.305998][T28834] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6559'. [ 1561.315367][T28845] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6559'. [ 1561.605553][T28860] netlink: 108 bytes leftover after parsing attributes in process `syz.0.6570'. [ 1561.617038][T13667] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1561.656825][T28861] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6569'. [ 1561.718510][T28861] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6569'. [ 1561.800300][T13667] usb 3-1: config 195 has an invalid interface number: 1 but max is 0 [ 1561.818906][T13667] usb 3-1: config 195 has no interface number 0 [ 1561.845450][T13667] usb 3-1: config 195 interface 1 has no altsetting 0 [ 1561.900655][T13667] usb 3-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=60.f9 [ 1561.924388][T13667] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1561.962694][T13667] usb 3-1: Product: syz [ 1561.972390][T13667] usb 3-1: Manufacturer: syz [ 1561.988421][T13667] usb 3-1: SerialNumber: syz [ 1562.357838][T28877] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1562.427376][T28877] libceph: resolve '4' (ret=-3): failed [ 1564.546522][T23057] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1564.756561][T23057] usb 5-1: Using ep0 maxpacket: 16 [ 1564.775654][T23057] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 1564.793735][T23057] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 1564.820003][T23057] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 1564.824381][T13667] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1564.868094][T23057] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 1564.896517][T23057] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1564.919364][T28903] geneve3: entered promiscuous mode [ 1564.934986][T28903] geneve3: entered allmulticast mode [ 1564.943740][T23057] usb 5-1: config 0 has no interface number 0 [ 1564.962017][T13667] snd-usb-audio 3-1:195.1: probe with driver snd-usb-audio failed with error -2 [ 1564.978233][T23057] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1565.026821][T23057] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1565.039353][T13667] usb 3-1: USB disconnect, device number 28 [ 1565.073953][T23057] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1565.119166][T23057] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1565.126000][ T6316] udevd[6316]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:195.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1565.157598][T23057] usb 5-1: config 0 interface 125 has no altsetting 0 [ 1565.178463][T23057] usb 5-1: config 0 interface 125 has no altsetting 2 [ 1565.220567][T23057] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1565.266863][T23057] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1565.275027][T23057] usb 5-1: Product: syz [ 1565.320676][T23057] usb 5-1: Manufacturer: syz [ 1565.325372][T23057] usb 5-1: SerialNumber: syz [ 1565.377934][T23057] usb 5-1: config 0 descriptor?? [ 1565.437680][T23057] usb 5-1: selecting invalid altsetting 2 [ 1565.586680][T23047] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1565.746992][T23047] usb 2-1: device descriptor read/64, error -71 [ 1565.909888][T28940] netlink: 'syz.0.6594': attribute type 10 has an invalid length. [ 1565.924226][T28940] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1565.973892][T28940] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1565.989857][T23047] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1566.046553][T28940] bond2: peer notification delay (7) is not a multiple of miimon (100), value rounded to 0 ms [ 1566.057398][T28940] bond2: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 1566.071356][T28940] bond2 (unregistering): Released all slaves [ 1566.141834][T23047] usb 2-1: device descriptor read/64, error -71 [ 1566.256867][T23047] usb usb2-port1: attempt power cycle [ 1566.366306][T28947] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1566.398519][T28947] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1566.486533][T23057] get_1284_register timeout [ 1566.491485][ C0] usb 5-1: async_complete: urb error -104 [ 1566.497360][ C0] usb 5-1: async_complete: urb error -104 [ 1566.503294][ C0] usb 5-1: async_complete: urb error -104 [ 1566.509117][ C0] usb 5-1: async_complete: urb error -104 [ 1566.550228][T23057] uss720 5-1:0.125: probe with driver uss720 failed with error -5 [ 1566.606893][T23047] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1566.644593][T23047] usb 2-1: device descriptor read/8, error -71 [ 1566.676473][T13667] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1566.871462][T13667] usb 1-1: config 1 has an invalid interface number: 188 but max is 0 [ 1566.887232][T13667] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1566.896553][T23047] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1566.919843][T13667] usb 1-1: config 1 has no interface number 0 [ 1566.932951][T13667] usb 1-1: config 1 interface 188 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1566.951953][T23047] usb 2-1: device descriptor read/8, error -71 [ 1566.960075][T13667] usb 1-1: config 1 interface 188 has no altsetting 0 [ 1566.987463][T13667] usb 1-1: New USB device found, idVendor=2040, idProduct=7210, bcdDevice=5b.6b [ 1567.010187][T13667] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1567.027709][T13667] usb 1-1: Product: syz [ 1567.037067][T13667] usb 1-1: Manufacturer: syz [ 1567.047450][T13667] usb 1-1: SerialNumber: syz [ 1567.067655][T23047] usb usb2-port1: unable to enumerate USB device [ 1567.400399][T23047] usb 5-1: USB disconnect, device number 27 [ 1567.699267][T28958] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1567.706562][T28958] IPv6: NLM_F_CREATE should be set when creating new route [ 1567.784501][T28958] bridge0: port 2(bridge_slave_1) entered disabled state [ 1567.792308][T28958] bridge0: port 1(bridge_slave_0) entered disabled state [ 1567.813241][T13667] usb 1-1: unknown interface protocol 0xc1, assuming v1 [ 1567.829935][T13667] usb 1-1: 188:0 : does not exist [ 1567.867204][T13670] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 1567.961179][T13667] usb 1-1: USB disconnect, device number 81 [ 1568.000386][ T6000] udevd[6000]: setting mode of /dev/mixer3 to 020660 failed: No such file or directory [ 1568.042398][ T6000] udevd[6000]: setting owner of /dev/mixer3 to uid=0, gid=29 failed: No such file or directory [ 1568.050348][T13670] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1568.083038][T28958] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1568.091990][T13670] usb 5-1: not running at top speed; connect to a high speed hub [ 1568.105889][T28958] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1568.120407][T13670] usb 5-1: config 7 has an invalid interface number: 207 but max is 0 [ 1568.149130][T13670] usb 5-1: config 7 has an invalid descriptor of length 3, skipping remainder of the config [ 1568.178376][T13670] usb 5-1: config 7 has 2 interfaces, different from the descriptor's value: 1 [ 1568.197821][T13670] usb 5-1: config 7 has no interface number 1 [ 1568.204003][T13670] usb 5-1: config 7 interface 207 altsetting 129 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1568.246436][T13670] usb 5-1: config 7 interface 0 altsetting 143 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1568.272588][T13670] usb 5-1: config 7 interface 207 has no altsetting 0 [ 1568.297094][T13670] usb 5-1: config 7 interface 0 has no altsetting 0 [ 1568.320074][T13670] usb 5-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice=75.fd [ 1568.336513][T13670] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1568.345610][T13670] usb 5-1: Product: syz [ 1568.356660][T13670] usb 5-1: Manufacturer: syz [ 1568.361331][ T63] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1568.376542][T13670] usb 5-1: SerialNumber: syz [ 1568.383341][ T63] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1568.407688][ T63] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1568.428041][ T63] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1568.526660][T23047] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1568.609706][T28974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1568.635576][T28974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1568.661324][T13670] ftdi_sio 5-1:7.207: FTDI USB Serial Device converter detected [ 1568.690893][T13670] ftdi_sio ttyUSB0: unknown device type: 0x75fd [ 1568.706633][T23047] usb 1-1: Using ep0 maxpacket: 8 [ 1568.714754][T23047] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1568.736569][T13670] usb 5-1: USB disconnect, device number 28 [ 1568.755016][T13670] ftdi_sio 5-1:7.207: device disconnected [ 1568.765390][T23047] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1568.801256][T23047] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1568.811709][ T9] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1568.838898][T23047] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1568.868985][T23047] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1568.889878][T23047] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1568.976669][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 1568.988082][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1569.009022][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1569.036456][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1569.046271][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1569.084272][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1569.120183][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1569.130620][ T9] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1569.139249][T23047] usb 1-1: GET_CAPABILITIES returned 0 [ 1569.144819][T23047] usbtmc 1-1:16.0: can't read capabilities [ 1569.151030][ T9] usb 2-1: Manufacturer: syz [ 1569.172568][ T9] usb 2-1: config 0 descriptor?? [ 1569.256562][T23049] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1569.367871][T23047] usb 1-1: USB disconnect, device number 82 [ 1569.466082][T23049] usb 3-1: config 195 has an invalid interface number: 1 but max is 0 [ 1569.478946][T23049] usb 3-1: config 195 has no interface number 0 [ 1569.486014][T23049] usb 3-1: config 195 interface 1 has no altsetting 0 [ 1569.515900][T23049] usb 3-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=60.f9 [ 1569.535872][T23049] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1569.544579][T23049] usb 3-1: Product: syz [ 1569.549199][ T9] rc_core: IR keymap rc-hauppauge not found [ 1569.556431][ T9] Registered IR keymap rc-empty [ 1569.565662][T23049] usb 3-1: Manufacturer: syz [ 1569.570881][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1569.581936][T23049] usb 3-1: SerialNumber: syz [ 1569.607497][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1569.638608][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1569.654633][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input145 [ 1569.675577][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1569.685818][ C0] mceusb 2-1:0.0: long-range (0x81) receiver active [ 1569.707150][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1569.737202][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1569.766657][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1569.796661][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1569.816713][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1569.837111][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1569.876647][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1569.907090][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1569.926568][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1569.990320][ T9] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1570.021529][ T9] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x81 active) [ 1570.083384][ T9] usb 2-1: USB disconnect, device number 69 [ 1570.183567][T28995] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6609'. [ 1570.356245][T28999] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6610'. [ 1570.682698][T29004] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6612'. [ 1571.142380][T29015] loop2: detected capacity change from 0 to 7 [ 1571.168769][ T5926] Dev loop2: unable to read RDB block 7 [ 1571.174545][ T5926] loop2: AHDI p2 p3 [ 1571.181388][ T5926] loop2: partition table partially beyond EOD, truncated [ 1571.194004][ T5926] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1571.238603][T29015] Dev loop2: unable to read RDB block 7 [ 1571.249149][T29015] loop2: AHDI p2 p3 [ 1571.256024][T29015] loop2: partition table partially beyond EOD, truncated [ 1571.268239][T29015] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1571.972267][ T5195] Dev loop2: unable to read RDB block 7 [ 1571.978218][ T5195] loop2: AHDI p2 p3 [ 1571.989912][ T5195] loop2: partition table partially beyond EOD, truncated [ 1572.011677][ T5195] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1572.692535][T29029] QAT: failed to copy from user cfg_data. [ 1572.695297][T29030] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6621'. [ 1572.714233][T29030] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6621'. [ 1572.774613][T29030] netlink: 'syz.4.6621': attribute type 12 has an invalid length. [ 1572.804882][T23049] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1572.897501][T29036] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1573.072912][T23049] snd-usb-audio 3-1:195.1: probe with driver snd-usb-audio failed with error -2 [ 1573.161884][T23049] usb 3-1: USB disconnect, device number 29 [ 1573.226049][ T6316] udevd[6316]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:195.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1573.602037][T23049] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1573.807377][T23049] usb 3-1: Using ep0 maxpacket: 8 [ 1573.838833][T23049] usb 3-1: config 162 has an invalid interface number: 3 but max is 2 [ 1573.879526][T23049] usb 3-1: config 162 has an invalid descriptor of length 49, skipping remainder of the config [ 1573.916495][T23049] usb 3-1: config 162 has 1 interface, different from the descriptor's value: 3 [ 1573.941673][T23049] usb 3-1: config 162 has no interface number 0 [ 1573.972114][T23049] usb 3-1: config 162 interface 3 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1574.014572][T23049] usb 3-1: config 162 interface 3 has no altsetting 0 [ 1574.044516][T23049] usb 3-1: New USB device found, idVendor=05c6, idProduct=9064, bcdDevice=ce.94 [ 1574.075881][T29045] netlink: 108 bytes leftover after parsing attributes in process `syz.0.6627'. [ 1574.085979][T23049] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1574.114733][T23049] usb 3-1: Product: syz [ 1574.119479][T23049] usb 3-1: Manufacturer: syz [ 1574.124167][T23049] usb 3-1: SerialNumber: syz [ 1574.242822][T29049] FAULT_INJECTION: forcing a failure. [ 1574.242822][T29049] name failslab, interval 1, probability 0, space 0, times 0 [ 1574.295739][T29049] CPU: 1 UID: 0 PID: 29049 Comm: syz.0.6629 Tainted: G L syzkaller #0 PREEMPT(full) [ 1574.295774][T29049] Tainted: [L]=SOFTLOCKUP [ 1574.295782][T29049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1574.295794][T29049] Call Trace: [ 1574.295803][T29049] [ 1574.295811][T29049] dump_stack_lvl+0xe8/0x150 [ 1574.295843][T29049] should_fail_ex+0x412/0x560 [ 1574.295877][T29049] should_failslab+0xa8/0x100 [ 1574.295906][T29049] __kmalloc_cache_noprof+0x88/0x660 [ 1574.295927][T29049] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1574.295946][T29049] ? sctp_add_bind_addr+0x8c/0x370 [ 1574.295967][T29049] sctp_add_bind_addr+0x8c/0x370 [ 1574.295995][T29049] sctp_copy_local_addr_list+0x314/0x4f0 [ 1574.296026][T29049] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1574.296053][T29049] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1574.296079][T29049] ? sctp_v6_is_any+0x64/0x80 [ 1574.296099][T29049] ? sctp_copy_one_addr+0x93/0x360 [ 1574.296118][T29049] sctp_bind_addr_copy+0xb3/0x3c0 [ 1574.296140][T29049] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1574.296169][T29049] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1574.296194][T29049] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1574.296222][T29049] ? __local_bh_enable_ip+0xd0/0x130 [ 1574.296242][T29049] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1574.296259][T29049] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1574.296276][T29049] sctp_sendmsg+0x1528/0x2c10 [ 1574.296289][T29049] ? unwind_next_frame+0xa5/0x23c0 [ 1574.296330][T29049] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1574.296348][T29049] ? aa_sk_perm+0x15a/0x960 [ 1574.296376][T29049] ? aa_sk_perm+0x82d/0x960 [ 1574.296409][T29049] ? __pfx_aa_sk_perm+0x10/0x10 [ 1574.296438][T29049] ? sock_rps_record_flow+0x19/0x400 [ 1574.296463][T29049] ? inet_sendmsg+0x2f4/0x370 [ 1574.296491][T29049] ____sys_sendmsg+0x894/0xad0 [ 1574.296524][T29049] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1574.296566][T29049] ? import_iovec+0x73/0xa0 [ 1574.296596][T29049] ___sys_sendmsg+0x2a5/0x360 [ 1574.296618][T29049] ? __lock_acquire+0x6b5/0x2cf0 [ 1574.296642][T29049] ? __pfx____sys_sendmsg+0x10/0x10 [ 1574.296704][T29049] ? __fget_files+0x2a/0x420 [ 1574.296724][T29049] ? __fget_files+0x3a0/0x420 [ 1574.296754][T29049] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1574.296781][T29049] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1574.296813][T29049] ? __pfx_ksys_write+0x10/0x10 [ 1574.296849][T29049] do_syscall_64+0x14d/0xf80 [ 1574.296880][T29049] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1574.296899][T29049] ? trace_irq_disable+0x37/0x100 [ 1574.296923][T29049] ? clear_bhb_loop+0x40/0x90 [ 1574.296948][T29049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1574.296967][T29049] RIP: 0033:0x7f049d59bf79 [ 1574.296987][T29049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1574.297005][T29049] RSP: 002b:00007f049e522028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1574.297030][T29049] RAX: ffffffffffffffda RBX: 00007f049d815fa0 RCX: 00007f049d59bf79 [ 1574.297046][T29049] RDX: 0000000000040054 RSI: 0000200000000540 RDI: 0000000000000004 [ 1574.297068][T29049] RBP: 00007f049e522090 R08: 0000000000000000 R09: 0000000000000000 [ 1574.297081][T29049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1574.297092][T29049] R13: 00007f049d816038 R14: 00007f049d815fa0 R15: 00007f049d93fa48 [ 1574.297125][T29049] [ 1574.802162][T23049] usb 3-1: USB disconnect, device number 30 [ 1575.596626][T23049] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1575.735700][T29085] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.6642'. [ 1575.784059][T23049] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1575.810263][T23049] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1575.845294][T29086] net_ratelimit: 381 callbacks suppressed [ 1575.845313][T29086] ipvlan0: mtu less than device minimum [ 1575.868756][T23049] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1575.887355][T23049] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1575.896677][T23049] usb 5-1: Manufacturer: syz [ 1575.919140][T23049] usb 5-1: config 0 descriptor?? [ 1576.754494][T29102] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6646'. [ 1576.887841][T29104] syzkaller1: entered promiscuous mode [ 1576.904975][T29104] syzkaller1: entered allmulticast mode [ 1577.446899][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1577.563620][T29116] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6650'. [ 1577.574115][T29116] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6650'. [ 1577.594226][T29116] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6650'. [ 1577.643109][T29116] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6650'. [ 1577.652818][T29116] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6650'. [ 1577.675718][T29116] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6650'. [ 1577.686025][T29116] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6650'. [ 1577.705725][T29116] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6650'. [ 1577.730259][T29116] ip6gre1: left allmulticast mode [ 1577.740804][T29116] bond2: left allmulticast mode [ 1577.956454][ T6218] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1578.106478][ T6218] usb 2-1: Using ep0 maxpacket: 32 [ 1578.164894][ T6218] usb 2-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=b8.a2 [ 1578.215345][ T6218] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1578.298691][ T6218] usb 2-1: Product: syz [ 1578.318750][ T6218] usb 2-1: Manufacturer: syz [ 1578.346117][ T6218] usb 2-1: SerialNumber: syz [ 1578.452912][ T6218] usb 2-1: interface 1 not found [ 1578.489461][T23049] usbhid 5-1:0.0: can't add hid device: -71 [ 1578.518044][T23049] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1578.572207][T23049] usb 5-1: USB disconnect, device number 29 [ 1578.673789][T23047] usb 2-1: USB disconnect, device number 70 [ 1579.534744][T29141] sctp: [Deprecated]: syz.6.6659 (pid 29141) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1579.534744][T29141] Use struct sctp_sack_info instead [ 1579.838339][T29145] netlink: 'syz.4.6661': attribute type 10 has an invalid length. [ 1579.904015][T29144] bridge_slave_0: left allmulticast mode [ 1579.923936][T29144] bridge_slave_0: left promiscuous mode [ 1579.951948][T29144] bridge0: port 1(bridge_slave_0) entered disabled state [ 1580.084287][T29144] bridge_slave_1: left allmulticast mode [ 1580.126581][T29144] bridge_slave_1: left promiscuous mode [ 1580.132426][T29144] bridge0: port 2(bridge_slave_1) entered disabled state [ 1580.195538][T29144] bond0: (slave bond_slave_0): Releasing backup interface [ 1580.271365][T29144] bond0: (slave bond_slave_1): Releasing backup interface [ 1580.363187][T29144] team_slave_0: left promiscuous mode [ 1580.431650][T29144] team0: Port device team_slave_0 removed [ 1580.460301][T29144] team_slave_1: left promiscuous mode [ 1580.497503][T29144] team0: Port device team_slave_1 removed [ 1580.533869][T29144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1580.567408][T29144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1580.599706][T29144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1580.628893][T29144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1580.669830][T29144] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1582.539738][T29214] program syz.2.6685 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1582.626244][T29216] futex_wake_op: syz.4.6684 tries to shift op by 32; fix this program [ 1582.654151][T29216] __nla_validate_parse: 140 callbacks suppressed [ 1582.654170][T29216] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6684'. [ 1582.816692][T13667] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1583.004033][T13667] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1583.021203][T13667] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 1583.044455][T13667] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1583.056587][T13667] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1583.064954][T13667] usb 3-1: Product: syz [ 1583.076025][T13667] usb 3-1: Manufacturer: syz [ 1583.081151][T13667] usb 3-1: SerialNumber: syz [ 1583.305311][T29214] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1583.971135][T29228] program syz.2.6685 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1584.076299][T13667] cdc_ncm 3-1:1.0: SET_CRC_MODE failed [ 1584.161135][T13667] cdc_ncm 3-1:1.0: bind() failure [ 1584.193838][T13667] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 1584.202444][T29234] openvswitch: netlink: Flow actions attr not present in new flow. [ 1584.210773][T13667] cdc_ncm 3-1:1.1: bind() failure [ 1584.237805][T13667] usb 3-1: USB disconnect, device number 31 [ 1584.616522][T13667] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1584.706636][ T6218] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1584.810119][T13667] usb 3-1: Using ep0 maxpacket: 8 [ 1584.821720][T13667] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 1584.834241][T13667] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 1584.844389][T13667] usb 3-1: config 0 has no interface number 0 [ 1584.851082][T13667] usb 3-1: config 0 interface 21 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1584.868512][T13667] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1584.879211][T13667] usb 3-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 1584.888042][ T6218] usb 5-1: Using ep0 maxpacket: 32 [ 1584.893642][T13667] usb 3-1: Product: syz [ 1584.894405][T29248] FAULT_INJECTION: forcing a failure. [ 1584.894405][T29248] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1584.899963][ T6218] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1584.912374][T29248] CPU: 0 UID: 0 PID: 29248 Comm: syz.6.6696 Tainted: G L syzkaller #0 PREEMPT(full) [ 1584.912406][T29248] Tainted: [L]=SOFTLOCKUP [ 1584.912414][T29248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1584.912425][T29248] Call Trace: [ 1584.912433][T29248] [ 1584.912442][T29248] dump_stack_lvl+0xe8/0x150 [ 1584.912472][T29248] should_fail_ex+0x412/0x560 [ 1584.912503][T29248] _copy_from_user+0x2d/0xb0 [ 1584.912524][T29248] do_sys_poll+0x2a9/0x1120 [ 1584.912554][T29248] ? __lock_acquire+0x6b5/0x2cf0 [ 1584.912574][T29248] ? __pfx_do_sys_poll+0x10/0x10 [ 1584.912596][T29248] ? aa_file_perm+0x12d/0x1630 [ 1584.912710][T29248] ? set_user_sigmask+0xcd/0x1c0 [ 1584.912739][T29248] ? __pfx_set_user_sigmask+0x10/0x10 [ 1584.912769][T29248] __se_sys_ppoll+0x209/0x2b0 [ 1584.912796][T29248] ? fput+0xa0/0xd0 [ 1584.912817][T29248] ? __pfx___se_sys_ppoll+0x10/0x10 [ 1584.912843][T29248] ? __pfx_ksys_write+0x10/0x10 [ 1584.912879][T29248] ? __x64_sys_ppoll+0x20/0xc0 [ 1584.912913][T29248] do_syscall_64+0x14d/0xf80 [ 1584.912941][T29248] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1584.912958][T29248] ? trace_irq_disable+0x37/0x100 [ 1584.912979][T29248] ? clear_bhb_loop+0x40/0x90 [ 1584.913001][T29248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1584.913019][T29248] RIP: 0033:0x7ff2e5d9bf79 [ 1584.913037][T29248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1584.913053][T29248] RSP: 002b:00007ff2e6d2c028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 1584.913075][T29248] RAX: ffffffffffffffda RBX: 00007ff2e6015fa0 RCX: 00007ff2e5d9bf79 [ 1584.913089][T29248] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0 [ 1584.913102][T29248] RBP: 00007ff2e6d2c090 R08: 0000000000000000 R09: 0000000000000000 [ 1584.913114][T29248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1584.913126][T29248] R13: 00007ff2e6016038 R14: 00007ff2e6015fa0 R15: 00007ff2e613fa48 [ 1584.913156][T29248] [ 1585.132050][T13667] usb 3-1: config 0 descriptor?? [ 1585.137860][ T6218] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1585.203669][ T6218] usb 5-1: config 0 descriptor?? [ 1585.220552][ T6218] as10x_usb: device has been detected [ 1585.221343][T29250] netlink: 'syz.1.6697': attribute type 10 has an invalid length. [ 1585.233621][ T6218] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1585.249485][T29250] netlink: 55 bytes leftover after parsing attributes in process `syz.1.6697'. [ 1585.263860][ T6218] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1585.289155][T29251] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6697'. [ 1585.354922][ T6218] as10x_usb: error during firmware upload part1 [ 1585.362777][ T6218] Registered device nBox DVB-T Dongle [ 1585.519585][T23047] usb 5-1: USB disconnect, device number 30 [ 1585.610156][T23047] Unregistered device nBox DVB-T Dongle [ 1585.613448][T23047] as10x_usb: device has been disconnected [ 1586.222374][T29276] fuse: Bad value for 'fd' [ 1586.242512][T29277] netlink: 'syz.0.6704': attribute type 5 has an invalid length. [ 1586.263083][T29277] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6704'. [ 1586.516461][ T6218] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1586.696454][ T6218] usb 1-1: Using ep0 maxpacket: 16 [ 1586.711707][ T6218] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 1586.740592][ T6218] usb 1-1: config 1 has no interface number 0 [ 1586.759816][ T6218] usb 1-1: config 1 interface 7 has no altsetting 0 [ 1586.777917][T29281] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6706'. [ 1586.799363][ T6218] usb 1-1: New USB device found, idVendor=eb1a, idProduct=2885, bcdDevice=cf.00 [ 1586.834246][ T6218] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1586.874894][ T6218] usb 1-1: Product: syz [ 1586.903750][ T6218] usb 1-1: Manufacturer: syz [ 1586.931105][ T6218] usb 1-1: SerialNumber: syz [ 1587.259535][ T6218] usb 3-1: USB disconnect, device number 32 [ 1587.411304][T29290] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6709'. [ 1589.210598][ T6218] usb 1-1: USB disconnect, device number 83 [ 1589.579230][T29332] netlink: 'syz.6.6721': attribute type 4 has an invalid length. [ 1589.770718][T29338] netlink: 'syz.6.6721': attribute type 4 has an invalid length. [ 1590.356557][ T6218] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1590.536550][ T6218] usb 2-1: Using ep0 maxpacket: 32 [ 1590.548622][ T6218] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 1590.566557][ T6218] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1590.596158][ T6218] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1590.630987][ T6218] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1590.677630][ T6218] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1590.712911][ T6218] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1590.757719][ T6218] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1590.788846][ T6218] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1590.829643][ T6218] usb 2-1: config 0 descriptor?? [ 1591.082814][ T6218] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 71 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1591.134972][ T6218] usb 2-1: USB disconnect, device number 71 [ 1591.176912][ T6218] usblp0: removed [ 1591.593723][ T6218] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1591.776888][ T6218] usb 2-1: Using ep0 maxpacket: 32 [ 1591.808466][ T6218] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 1591.844434][ T6218] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1591.892955][ T6218] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1591.942933][ T6218] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1592.023950][ T6218] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1592.052145][ T6218] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1592.103915][ T6218] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1592.141223][ T6218] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1592.192245][ T6218] usb 2-1: config 0 descriptor?? [ 1592.295778][T29391] netlink: 'syz.0.6732': attribute type 23 has an invalid length. [ 1592.313495][T29391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6732'. [ 1592.764654][ T6218] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 72 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1593.196907][T29358] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 1593.452010][T23047] usb 2-1: USB disconnect, device number 72 [ 1593.514987][T23047] usblp0: removed [ 1593.684509][T29420] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6741'. [ 1593.711989][T29420] tc_dump_action: action bad kind [ 1593.876502][ T6218] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1593.938225][T29423] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6739'. [ 1594.041444][ T6218] usb 1-1: config 0 has an invalid interface number: 232 but max is 0 [ 1594.093321][ T6218] usb 1-1: config 0 has no interface number 0 [ 1594.151594][ T6218] usb 1-1: config 0 interface 232 altsetting 0 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 1594.209534][ T6218] usb 1-1: config 0 interface 232 altsetting 0 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 1594.282553][ T6218] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=67.3e [ 1594.339538][ T6218] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1594.385688][ T6218] usb 1-1: Product: syz [ 1594.410079][ T6218] usb 1-1: Manufacturer: syz [ 1594.436632][ T6218] usb 1-1: SerialNumber: syz [ 1594.477219][ T6218] usb 1-1: config 0 descriptor?? [ 1594.723752][ T6218] port100 1-1:0.232: NFC: Could not find bulk-in or bulk-out endpoint [ 1594.808763][T29433] netlink: 'syz.1.6744': attribute type 12 has an invalid length. [ 1594.843622][ T6218] usb 1-1: USB disconnect, device number 84 [ 1594.881624][T29431] bond3: option primary_reselect: invalid value (13) [ 1594.940602][T29431] bond3 (unregistering): Released all slaves [ 1595.222438][T29441] netlink: 'syz.2.6745': attribute type 10 has an invalid length. [ 1595.976792][ T6218] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1596.051799][T29457] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6751'. [ 1596.166672][ T6218] usb 1-1: Using ep0 maxpacket: 8 [ 1596.180856][ T6218] usb 1-1: config index 0 descriptor too short (expected 30482, got 18) [ 1596.216020][ T6218] usb 1-1: config 0 has too many interfaces: 101, using maximum allowed: 32 [ 1596.256277][ T6218] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 101 [ 1596.296155][ T6218] usb 1-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 5.00 [ 1596.316415][ T9] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1596.341620][ T6218] usb 1-1: New USB device strings: Mfr=253, Product=255, SerialNumber=0 [ 1596.366679][ T6218] usb 1-1: Product: syz [ 1596.376749][ T6218] usb 1-1: Manufacturer: syz [ 1596.397487][ T6218] usb 1-1: config 0 descriptor?? [ 1596.425042][ T6218] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 1596.454075][ T6218] usb 1-1: Detected FT2232C/D [ 1596.508554][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1596.543190][ T9] usb 3-1: config 0 has no interfaces? [ 1596.573929][ T9] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1596.603314][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1596.645245][ T9] usb 3-1: config 0 descriptor?? [ 1596.664600][ T29] audit: type=1326 audit(1770881960.284:2944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29449 comm="syz.0.6749" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f049d59bf79 code=0x0 [ 1596.987520][T13667] usb 3-1: USB disconnect, device number 33 [ 1597.813935][T29472] fuse: Bad value for 'fd' [ 1598.416607][T13667] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1598.586497][T13667] usb 5-1: Using ep0 maxpacket: 32 [ 1598.598990][T13667] usb 5-1: config 0 has an invalid interface number: 239 but max is 0 [ 1598.626806][T13667] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1598.673950][T13667] usb 5-1: config 0 has no interface number 0 [ 1598.703254][T13667] usb 5-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 1598.751798][T13667] usb 5-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 1598.794781][T13667] usb 5-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xA9, changing to 0x89 [ 1598.836048][T13667] usb 5-1: config 0 interface 239 altsetting 4 endpoint 0x89 has invalid maxpacket 28648, setting to 1024 [ 1598.858643][T13667] usb 5-1: config 0 interface 239 altsetting 4 bulk endpoint 0x89 has invalid maxpacket 1024 [ 1598.876468][T13667] usb 5-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xD5, changing to 0x85 [ 1598.891455][T13667] usb 5-1: config 0 interface 239 altsetting 4 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1598.905169][T13667] usb 5-1: config 0 interface 239 altsetting 4 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1598.945663][T13667] usb 5-1: config 0 interface 239 has no altsetting 0 [ 1598.968934][T13667] usb 5-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 1598.978913][ T6218] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1598.987678][T13667] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1598.996096][ T6218] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1599.005068][ T6218] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1599.014648][T13667] usb 5-1: Product: syz [ 1599.034366][T13667] usb 5-1: Manufacturer: syz [ 1599.045259][T29483] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6758'. [ 1599.050912][ T6218] usb 1-1: USB disconnect, device number 85 [ 1599.061679][T13667] usb 5-1: SerialNumber: syz [ 1599.093909][T13667] usb 5-1: config 0 descriptor?? [ 1599.127673][T29477] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1599.140001][ T6218] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1599.151037][T29477] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1599.162035][ T6218] ftdi_sio 1-1:0.0: device disconnected [ 1599.172794][T29483] vlan2: entered promiscuous mode [ 1599.206788][T29483] dummy0: entered promiscuous mode [ 1599.317059][T25706] Bluetooth: hci3: urb ffff8880539f2800 submission failed (90) [ 1599.696775][T23049] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1599.860713][T23049] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1599.870070][T23049] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1599.878452][T23049] usb 1-1: Product: syz [ 1599.882670][T23049] usb 1-1: Manufacturer: syz [ 1599.887397][T23049] usb 1-1: SerialNumber: syz [ 1599.895262][T23049] usb 1-1: config 0 descriptor?? [ 1599.956700][ T9] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1600.105263][T23049] usb 1-1: USB disconnect, device number 86 [ 1600.121216][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 1600.136889][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1600.149859][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1600.163073][ T9] usb 3-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 1600.172836][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1600.184685][ T9] usb 3-1: config 0 descriptor?? [ 1600.601767][ T9] gt683r_led 0003:1770:FF00.0059: unbalanced delimiter at end of report description [ 1600.625684][ T9] gt683r_led 0003:1770:FF00.0059: hid parsing failed [ 1600.645423][ T9] gt683r_led 0003:1770:FF00.0059: probe with driver gt683r_led failed with error -22 [ 1600.684737][T29517] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 1600.835999][T29491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1600.862852][T29491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1600.898710][T29519] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6770'. [ 1600.915650][T29519] netlink: 112 bytes leftover after parsing attributes in process `syz.6.6770'. [ 1600.972961][T29524] netlink: 'syz.0.6771': attribute type 10 has an invalid length. [ 1600.995633][T29524] team0: Port device dummy0 added [ 1601.043410][T29488] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1601.051980][T29488] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1601.063424][T29488] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1601.069899][T29488] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1601.093810][T29488] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1601.103168][T29488] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1601.118521][T29488] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1601.125299][T29488] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1601.142279][T29488] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1601.149604][T29488] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1601.196188][ T9] usb 5-1: USB disconnect, device number 31 [ 1601.301326][ T29] audit: type=1800 audit(1770881964.924:2945): pid=29532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.6775" name="bus" dev="tmpfs" ino=1188 res=0 errno=0 [ 1601.303727][T29532] FAULT_INJECTION: forcing a failure. [ 1601.303727][T29532] name failslab, interval 1, probability 0, space 0, times 0 [ 1601.343016][T29532] CPU: 0 UID: 0 PID: 29532 Comm: syz.4.6775 Tainted: G L syzkaller #0 PREEMPT(full) [ 1601.343052][T29532] Tainted: [L]=SOFTLOCKUP [ 1601.343060][T29532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1601.343073][T29532] Call Trace: [ 1601.343082][T29532] [ 1601.343091][T29532] dump_stack_lvl+0xe8/0x150 [ 1601.343125][T29532] should_fail_ex+0x412/0x560 [ 1601.343160][T29532] should_failslab+0xa8/0x100 [ 1601.343192][T29532] __kmalloc_cache_noprof+0x88/0x660 [ 1601.343219][T29532] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1601.343248][T29532] ? sctp_add_bind_addr+0x8c/0x370 [ 1601.343281][T29532] sctp_add_bind_addr+0x8c/0x370 [ 1601.343315][T29532] sctp_copy_local_addr_list+0x314/0x4f0 [ 1601.343365][T29532] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1601.343395][T29532] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1601.343429][T29532] ? sctp_v4_is_any+0x35/0x60 [ 1601.343458][T29532] ? sctp_copy_one_addr+0x93/0x360 [ 1601.343490][T29532] sctp_bind_addr_copy+0xb3/0x3c0 [ 1601.343520][T29532] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1601.343551][T29532] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1601.343577][T29532] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1601.343606][T29532] ? __local_bh_enable_ip+0xd0/0x130 [ 1601.343628][T29532] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1601.343656][T29532] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1601.343684][T29532] sctp_sendmsg+0x1528/0x2c10 [ 1601.343722][T29532] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1601.343742][T29532] ? aa_sk_perm+0x15a/0x960 [ 1601.343780][T29532] ? aa_sk_perm+0x82d/0x960 [ 1601.343814][T29532] ? __pfx_aa_sk_perm+0x10/0x10 [ 1601.343845][T29532] ? sock_rps_record_flow+0x19/0x400 [ 1601.343873][T29532] ? inet_sendmsg+0x2f4/0x370 [ 1601.343901][T29532] ____sys_sendmsg+0x894/0xad0 [ 1601.343936][T29532] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1601.343970][T29532] ? import_iovec+0x73/0xa0 [ 1601.343996][T29532] ___sys_sendmsg+0x2a5/0x360 [ 1601.344018][T29532] ? __lock_acquire+0x6b5/0x2cf0 [ 1601.344044][T29532] ? __pfx____sys_sendmsg+0x10/0x10 [ 1601.344073][T29532] ? kstrtouint+0x6e/0xe0 [ 1601.344130][T29532] ? __fget_files+0x2a/0x420 [ 1601.344150][T29532] ? __fget_files+0x3a0/0x420 [ 1601.344182][T29532] __sys_sendmmsg+0x27c/0x4e0 [ 1601.344212][T29532] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1601.344233][T29532] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1601.344292][T29532] ? ksys_write+0x242/0x270 [ 1601.344319][T29532] ? __pfx_ksys_write+0x10/0x10 [ 1601.344359][T29532] __x64_sys_sendmmsg+0xa0/0xc0 [ 1601.344385][T29532] do_syscall_64+0x14d/0xf80 [ 1601.344415][T29532] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1601.344434][T29532] ? trace_irq_disable+0x37/0x100 [ 1601.344458][T29532] ? clear_bhb_loop+0x40/0x90 [ 1601.344481][T29532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1601.344499][T29532] RIP: 0033:0x7f6396d9bf79 [ 1601.344519][T29532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1601.344537][T29532] RSP: 002b:00007f6397cff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1601.344562][T29532] RAX: ffffffffffffffda RBX: 00007f6397015fa0 RCX: 00007f6396d9bf79 [ 1601.344578][T29532] RDX: 0000000000000002 RSI: 0000200000000880 RDI: 0000000000000004 [ 1601.344592][T29532] RBP: 00007f6397cff090 R08: 0000000000000000 R09: 0000000000000000 [ 1601.344604][T29532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1601.344618][T29532] R13: 00007f6397016038 R14: 00007f6397015fa0 R15: 00007f639713fa48 [ 1601.344653][T29532] [ 1601.985406][T29546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1602.044213][T29546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1602.117384][T29552] FAULT_INJECTION: forcing a failure. [ 1602.117384][T29552] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1602.132302][T29552] CPU: 0 UID: 0 PID: 29552 Comm: syz.6.6783 Tainted: G L syzkaller #0 PREEMPT(full) [ 1602.132335][T29552] Tainted: [L]=SOFTLOCKUP [ 1602.132343][T29552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1602.132355][T29552] Call Trace: [ 1602.132364][T29552] [ 1602.132373][T29552] dump_stack_lvl+0xe8/0x150 [ 1602.132405][T29552] should_fail_ex+0x412/0x560 [ 1602.132438][T29552] _copy_from_user+0x2d/0xb0 [ 1602.132461][T29552] kstrtouint_from_user+0xd6/0x180 [ 1602.132492][T29552] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1602.132537][T29552] proc_fail_nth_write+0x8e/0x210 [ 1602.132564][T29552] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1602.132596][T29552] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1602.132624][T29552] vfs_write+0x29a/0xb90 [ 1602.132657][T29552] ? __pfx_vfs_write+0x10/0x10 [ 1602.132691][T29552] ? __fget_files+0x2a/0x420 [ 1602.132716][T29552] ? __fget_files+0x3a0/0x420 [ 1602.132735][T29552] ? __fget_files+0x2a/0x420 [ 1602.132763][T29552] ksys_write+0x150/0x270 [ 1602.132789][T29552] ? __pfx_ksys_write+0x10/0x10 [ 1602.132824][T29552] do_syscall_64+0x14d/0xf80 [ 1602.132854][T29552] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1602.132872][T29552] ? trace_irq_disable+0x37/0x100 [ 1602.132896][T29552] ? clear_bhb_loop+0x40/0x90 [ 1602.132919][T29552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1602.132938][T29552] RIP: 0033:0x7ff2e5d5c84e [ 1602.132957][T29552] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1602.132974][T29552] RSP: 002b:00007ff2e6d2bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1602.132997][T29552] RAX: ffffffffffffffda RBX: 00007ff2e6d2c6c0 RCX: 00007ff2e5d5c84e [ 1602.133012][T29552] RDX: 0000000000000001 RSI: 00007ff2e6d2c0a0 RDI: 0000000000000005 [ 1602.133025][T29552] RBP: 00007ff2e6d2c090 R08: 0000000000000000 R09: 0000000000000000 [ 1602.133038][T29552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1602.133052][T29552] R13: 00007ff2e6016038 R14: 00007ff2e6015fa0 R15: 00007ff2e613fa48 [ 1602.133084][T29552] [ 1602.544782][T29561] FAULT_INJECTION: forcing a failure. [ 1602.544782][T29561] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1602.604437][T29561] CPU: 1 UID: 0 PID: 29561 Comm: syz.4.6787 Tainted: G L syzkaller #0 PREEMPT(full) [ 1602.604462][T29561] Tainted: [L]=SOFTLOCKUP [ 1602.604467][T29561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1602.604475][T29561] Call Trace: [ 1602.604481][T29561] [ 1602.604486][T29561] dump_stack_lvl+0xe8/0x150 [ 1602.604508][T29561] should_fail_ex+0x412/0x560 [ 1602.604529][T29561] _copy_to_user+0x31/0xb0 [ 1602.604544][T29561] simple_read_from_buffer+0xe1/0x170 [ 1602.604565][T29561] proc_fail_nth_read+0x1bb/0x230 [ 1602.604584][T29561] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1602.604602][T29561] ? rw_verify_area+0x2a6/0x4d0 [ 1602.604616][T29561] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1602.604641][T29561] vfs_read+0x20c/0xa70 [ 1602.604654][T29561] ? fdget_pos+0x246/0x320 [ 1602.604669][T29561] ? __pfx___mutex_lock+0x10/0x10 [ 1602.604682][T29561] ? __pfx_vfs_read+0x10/0x10 [ 1602.604697][T29561] ? __fget_files+0x2a/0x420 [ 1602.604712][T29561] ? __fget_files+0x3a0/0x420 [ 1602.604723][T29561] ? __fget_files+0x2a/0x420 [ 1602.604739][T29561] ksys_read+0x150/0x270 [ 1602.604755][T29561] ? __pfx_ksys_read+0x10/0x10 [ 1602.604776][T29561] do_syscall_64+0x14d/0xf80 [ 1602.604794][T29561] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1602.604806][T29561] ? trace_irq_disable+0x37/0x100 [ 1602.604821][T29561] ? clear_bhb_loop+0x40/0x90 [ 1602.604835][T29561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1602.604847][T29561] RIP: 0033:0x7f6396d5c84e [ 1602.604869][T29561] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1602.604886][T29561] RSP: 002b:00007f6397cfefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1602.604909][T29561] RAX: ffffffffffffffda RBX: 00007f6397cff6c0 RCX: 00007f6396d5c84e [ 1602.604923][T29561] RDX: 000000000000000f RSI: 00007f6397cff0a0 RDI: 0000000000000003 [ 1602.604937][T29561] RBP: 00007f6397cff090 R08: 0000000000000000 R09: 0000000000000000 [ 1602.604950][T29561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1602.604961][T29561] R13: 00007f6397016038 R14: 00007f6397015fa0 R15: 00007f639713fa48 [ 1602.604982][T29561] [ 1602.976794][ T6218] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1603.146515][ T6218] usb 1-1: Using ep0 maxpacket: 8 [ 1603.153705][ T6218] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1603.165507][ T6218] usb 1-1: config 11 has an invalid interface number: 244 but max is 0 [ 1603.175895][ T6218] usb 1-1: config 11 has no interface number 0 [ 1603.182494][ T6218] usb 1-1: config 11 interface 244 altsetting 5 endpoint 0xB has invalid wMaxPacketSize 0 [ 1603.193162][ T6218] usb 1-1: config 11 interface 244 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1603.207338][ T6218] usb 1-1: config 11 interface 244 has no altsetting 0 [ 1603.218074][ T6218] usb 1-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=57.8a [ 1603.235239][ T6218] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1603.243668][ T6218] usb 1-1: Product: syz [ 1603.248483][ T6218] usb 1-1: Manufacturer: syz [ 1603.253160][ T6218] usb 1-1: SerialNumber: syz [ 1603.410719][T29579] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1603.494652][ T6218] usb 1-1: USB disconnect, device number 87 [ 1603.676460][T13667] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1603.844184][T13667] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1603.874541][T13667] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1603.898848][T13667] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1603.918184][T13667] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1603.944988][T13667] usb 2-1: config 0 descriptor?? [ 1604.096502][ T9] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1604.256556][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 1604.288608][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1604.319782][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1604.360552][ T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1604.381306][T13667] cp2112 0003:10C4:EA90.005A: unknown main item tag 0x0 [ 1604.389091][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1604.413119][T13667] cp2112 0003:10C4:EA90.005A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 1604.418164][ T9] usb 5-1: Product: syz [ 1604.436512][ T9] usb 5-1: Manufacturer: syz [ 1604.445494][T29597] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6800'. [ 1604.471601][ T9] usb 5-1: SerialNumber: syz [ 1604.481666][T29597] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6800'. [ 1604.513646][T29599] [ 1604.516034][T29599] ============================================ [ 1604.522209][T29599] WARNING: possible recursive locking detected [ 1604.528382][T29599] syzkaller #0 Tainted: G L [ 1604.534387][T29599] -------------------------------------------- [ 1604.540549][T29599] syz.6.6800/29599 is trying to acquire lock: [ 1604.546630][T29599] ffff88805b3e4d38 (&dev_instance_lock_key#24){+.+.}-{4:4}, at: __netdev_update_features+0xcdc/0x1de0 [ 1604.557651][T29599] [ 1604.557651][T29599] but task is already holding lock: [ 1604.565036][T29599] ffff88805b3e4d38 (&dev_instance_lock_key#24){+.+.}-{4:4}, at: dev_ethtool+0x754/0x1ae0 [ 1604.575002][T29599] and the lock comparison function returns 0: [ 1604.581068][T29599] [ 1604.581068][T29599] other info that might help us debug this: [ 1604.589561][T29599] Possible unsafe locking scenario: [ 1604.589561][T29599] [ 1604.597030][T29599] CPU0 [ 1604.600395][T29599] ---- [ 1604.603674][T29599] lock(&dev_instance_lock_key#24); [ 1604.608973][T29599] lock(&dev_instance_lock_key#24); [ 1604.614267][T29599] [ 1604.614267][T29599] *** DEADLOCK *** [ 1604.614267][T29599] [ 1604.622508][T29599] May be due to missing lock nesting notation [ 1604.622508][T29599] [ 1604.630825][T29599] 2 locks held by syz.6.6800/29599: [ 1604.636021][T29599] #0: ffffffff8fbbdf08 (rtnl_mutex){+.+.}-{4:4}, at: dev_ethtool+0x1e1/0x1ae0 [ 1604.644995][T29599] #1: ffff88805b3e4d38 (&dev_instance_lock_key#24){+.+.}-{4:4}, at: dev_ethtool+0x754/0x1ae0 [ 1604.656319][T29599] [ 1604.656319][T29599] stack backtrace: [ 1604.662309][T29599] CPU: 0 UID: 0 PID: 29599 Comm: syz.6.6800 Tainted: G L syzkaller #0 PREEMPT(full) [ 1604.662341][T29599] Tainted: [L]=SOFTLOCKUP [ 1604.662347][T29599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1604.662358][T29599] Call Trace: [ 1604.662365][T29599] [ 1604.662373][T29599] dump_stack_lvl+0xe8/0x150 [ 1604.662396][T29599] print_deadlock_bug+0x279/0x290 [ 1604.662419][T29599] __lock_acquire+0x253f/0x2cf0 [ 1604.662476][T29599] ? is_bpf_text_address+0x292/0x2b0 [ 1604.662499][T29599] ? is_bpf_text_address+0x26/0x2b0 [ 1604.662521][T29599] ? kernel_text_address+0xa5/0xe0 [ 1604.662546][T29599] ? __kernel_text_address+0xd/0x30 [ 1604.662572][T29599] ? __netdev_update_features+0xcdc/0x1de0 [ 1604.662593][T29599] lock_acquire+0x106/0x330 [ 1604.662610][T29599] ? __netdev_update_features+0xcdc/0x1de0 [ 1604.662634][T29599] __mutex_lock+0x19f/0x1300 [ 1604.662650][T29599] ? __netdev_update_features+0xcdc/0x1de0 [ 1604.662669][T29599] ? stack_depot_save_flags+0x33/0x810 [ 1604.662693][T29599] ? kasan_save_track+0x3e/0x80 [ 1604.662712][T29599] ? kasan_save_free_info+0x46/0x50 [ 1604.662727][T29599] ? __kasan_slab_free+0x5c/0x80 [ 1604.662747][T29599] ? __netdev_update_features+0xcdc/0x1de0 [ 1604.662765][T29599] ? netlink_broadcast_filtered+0xee4/0x1020 [ 1604.662788][T29599] ? ethnl_default_notify+0x95a/0xbe0 [ 1604.662802][T29599] ? ethnl_netdev_event+0xe2/0x160 [ 1604.662818][T29599] ? __pfx___mutex_lock+0x10/0x10 [ 1604.662832][T29599] ? bond_fix_features+0x19b/0x1e0 [ 1604.662853][T29599] ? __pfx_bond_fix_features+0x10/0x10 [ 1604.662875][T29599] __netdev_update_features+0xcdc/0x1de0 [ 1604.662900][T29599] ? __pfx___netdev_update_features+0x10/0x10 [ 1604.662919][T29599] ? cfg80211_netdev_notifier_call+0xd59/0x13c0 [ 1604.662936][T29599] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1604.662958][T29599] ? lockdep_hardirqs_on+0x7a/0x110 [ 1604.662981][T29599] ? __pfx_cfg80211_netdev_notifier_call+0x10/0x10 [ 1604.662997][T29599] ? __wake_up_common_lock+0x190/0x1f0 [ 1604.663021][T29599] ? consume_skb+0x89/0xb0 [ 1604.663038][T29599] ? netlink_broadcast_filtered+0xf72/0x1020 [ 1604.663064][T29599] netdev_compute_master_upper_features+0x8eb/0xac0 [ 1604.663090][T29599] ? __pfx_netdev_compute_master_upper_features+0x10/0x10 [ 1604.663116][T29599] bond_netdev_event+0x770/0xfe0 [ 1604.663138][T29599] ? __pfx_bond_netdev_event+0x10/0x10 [ 1604.663158][T29599] ? inetdev_event+0x483/0x1610 [ 1604.663176][T29599] ? igmp_netdev_event+0x7c/0x750 [ 1604.663192][T29599] ? ipmr_device_event+0x1d0/0x200 [ 1604.663211][T29599] notifier_call_chain+0x19d/0x3a0 [ 1604.663234][T29599] netdev_features_change+0x8d/0xd0 [ 1604.663258][T29599] ? __pfx_netdev_features_change+0x10/0x10 [ 1604.663281][T29599] ? lockdep_hardirqs_on+0x7a/0x110 [ 1604.663304][T29599] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1604.663334][T29599] dev_ethtool+0x162c/0x1ae0 [ 1604.663354][T29599] ? __pfx_dev_ethtool+0x10/0x10 [ 1604.663369][T29599] ? dev_load+0x21/0x1f0 [ 1604.663396][T29599] ? dev_load+0x21/0x1f0 [ 1604.663419][T29599] dev_ioctl+0x392/0x1150 [ 1604.663435][T29599] sock_do_ioctl+0x23e/0x320 [ 1604.663457][T29599] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1604.663477][T29599] ? do_futex+0x333/0x420 [ 1604.663497][T29599] sock_ioctl+0x5c6/0x7f0 [ 1604.663518][T29599] ? __pfx_sock_ioctl+0x10/0x10 [ 1604.663538][T29599] ? __fget_files+0x2a/0x420 [ 1604.663554][T29599] ? __fget_files+0x3a0/0x420 [ 1604.663569][T29599] ? __fget_files+0x2a/0x420 [ 1604.663585][T29599] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1604.663599][T29599] ? __pfx_sock_ioctl+0x10/0x10 [ 1604.663619][T29599] __se_sys_ioctl+0xfc/0x170 [ 1604.663640][T29599] do_syscall_64+0x14d/0xf80 [ 1604.663663][T29599] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1604.663679][T29599] ? trace_irq_disable+0x37/0x100 [ 1604.663697][T29599] ? clear_bhb_loop+0x40/0x90 [ 1604.663714][T29599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1604.663729][T29599] RIP: 0033:0x7ff2e5d9bf79 [ 1604.663746][T29599] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1604.663761][T29599] RSP: 002b:00007ff2e6d0b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1604.663779][T29599] RAX: ffffffffffffffda RBX: 00007ff2e6016090 RCX: 00007ff2e5d9bf79 [ 1604.663791][T29599] RDX: 0000200000000000 RSI: 0000000000008946 RDI: 0000000000000004 [ 1604.663802][T29599] RBP: 00007ff2e5e327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1604.663813][T29599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1604.663823][T29599] R13: 00007ff2e6016128 R14: 00007ff2e6016090 R15: 00007ff2e613fa48 [ 1604.663840][T29599] [ 1604.697994][T13667] cp2112 0003:10C4:EA90.005A: Part Number: 0x82 Device Version: 0xFE [ 1604.798978][ T9] usb 5-1: 0:2 : does not exist [ 1605.135746][ T9] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1605.176116][ T9] usb 5-1: USB disconnect, device number 32 [ 1605.205693][ T6316] udevd[6316]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1605.331992][T29579] cp2112 0003:10C4:EA90.005A: Multi-message I2C transactions not supported [ 1605.369994][T13667] cp2112 0003:10C4:EA90.005A: error reading lock byte: -71 [ 1605.386790][T13667] usb 2-1: USB disconnect, device number 73 [ 1607.528426][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.535303][ T1296] ieee802154 phy1 wpan1: encryption failed: -22