last executing test programs: 10m8.923183814s ago: executing program 4 (id=154): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000b80000/0x3000)=nil, 0x0, 0x0, r0}, 0x68) r1 = syz_open_dev$vim2m(&(0x7f0000000280), 0x4eb36, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000007c0)={0x1, 0x2, 0x1, 0x0, 0x8}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0xc0205647, &(0x7f0000000180)=0x2) 10m8.25403537s ago: executing program 4 (id=155): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000000)=0x7) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='children\x00') socket$l2tp(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0xc000400) r3 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') ppoll(&(0x7f0000000000)=[{r3, 0x4040}], 0x1, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, 0x0) read$FUSE(r4, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x4, &(0x7f0000000300)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x25, r3}, 0x94) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4014001}, 0x0) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, 0x0) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001200b7a339f2d30afddbdf4d200f070700000000000025862f00000001ffffffc3000000060000000087c32be695bfd3ead0084f", @ANYRES32=0x0, @ANYBLOB="de00fbffa611195cc93f034708000000080003"], 0x54}, 0x1, 0x0, 0x0, 0x4008001}, 0x40000) r7 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xe539, 0x800, 0x400001, 0x40000333}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd_index=0x2, 0x6, &(0x7f0000000580)=[{&(0x7f00000003c0)=""/104, 0x68}, {&(0x7f0000000340)=""/42, 0x2a}, {0x0}, {&(0x7f00000006c0)=""/198, 0xc6}, {&(0x7f00000007c0)=""/225, 0xe1}, {&(0x7f0000000440)=""/21, 0x15}], 0x6, 0x19, 0x1}) io_uring_enter(r7, 0x847ba, 0x0, 0xe, 0x0, 0x0) 10m5.696009531s ago: executing program 4 (id=165): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x197, 0x7, 0x9}}}}]}, 0x44}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xd, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048081}, 0xc0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e21, @loopback}, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffa2}}], 0x2, 0x20004086) r11 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0x140, 0x80000) ioctl$SNDRV_PCM_IOCTL_DRAIN(r11, 0x4144, 0x0) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000480)=[{&(0x7f00000002c0)='\x00@', 0x5dc}], 0x1}, 0x4) syz_open_dev$video(&(0x7f0000000000), 0x9, 0x40840) 10m5.034773539s ago: executing program 4 (id=170): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) close(0xffffffffffffffff) r1 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000081) io_setup(0x400e, &(0x7f0000000600)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x1da) syz_clone3(&(0x7f0000000080)={0xa1800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x5}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_usb_connect$cdc_ecm(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902"], 0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r3, 0x0}]) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040004}, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x1, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x9, @loopback, 0xfffffffd}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) close(0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002200)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) unshare(0x2c020400) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) 10m1.323903585s ago: executing program 4 (id=178): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card1/oss_mixer\x00', 0x40600, 0x0) lseek(r0, 0xff, 0x700) 10m0.951588578s ago: executing program 4 (id=180): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x15, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x15, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$FBIOPAN_DISPLAY(r1, 0x4606, &(0x7f0000000400)={0x800, 0x10, 0x800, 0xf0, 0x50558012, 0x6, 0x0, 0x2, {0x6, 0x6, 0x1}, {0x1, 0xfffffff5}, {0x81, 0x9, 0x1}, {0x7e7, 0xf}, 0x4, 0x100, 0x0, 0x6, 0x1, 0xaf, 0x303, 0x37, 0x2, 0x5, 0x1, 0x101, 0x6, 0x2, 0x2, 0xc}) 10m0.062181846s ago: executing program 32 (id=180): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x15, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x15, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$FBIOPAN_DISPLAY(r1, 0x4606, &(0x7f0000000400)={0x800, 0x10, 0x800, 0xf0, 0x50558012, 0x6, 0x0, 0x2, {0x6, 0x6, 0x1}, {0x1, 0xfffffff5}, {0x81, 0x9, 0x1}, {0x7e7, 0xf}, 0x4, 0x100, 0x0, 0x6, 0x1, 0xaf, 0x303, 0x37, 0x2, 0x5, 0x1, 0x101, 0x6, 0x2, 0x2, 0xc}) 7m34.312392753s ago: executing program 5 (id=755): inotify_init() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) ioctl$RFKILL_IOC_MAX_SIZE(0xffffffffffffffff, 0x2, &(0x7f0000000340)=0xb42) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000080), 0x4a) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00000000c0)=0x2009, 0x4) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4004) socket$inet(0x2, 0x1, 0xffffff80) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 7m33.067402391s ago: executing program 5 (id=759): ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240)="23591363adf94c4a3525c373b8be3e8d2672540e4fff5fe7", 0x0, 0x18}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2f) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x204800, 0x1af2462106fa183b) socket$kcm(0x10, 0x2, 0x0) add_key$user(&(0x7f0000002300), 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)}, 0x80) getdents(r2, &(0x7f0000000480)=""/4096, 0x1000) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x40000}, 0x1c) sendto$inet6(r4, &(0x7f0000000480)="14", 0x1, 0x8000, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000340)=0x20000000, 0x4) pselect6(0x40, &(0x7f0000000100)={0x2, 0x1ea3, 0x3, 0x0, 0xfffffffffffffffc, 0x2, 0x7fff, 0x8000000000000004}, &(0x7f0000000340)={0x1f, 0x0, 0x0, 0x0, 0x10001, 0x1, 0x0, 0x6b95}, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_SET_SREGS2(r2, 0x4140aecd, &(0x7f0000001540)={{0x25000, 0x60000, 0x9, 0x5, 0x9, 0x1, 0x5, 0x0, 0x80, 0xf5, 0x49}, {0x6000, 0xfec00000, 0x10, 0xfe, 0x5, 0x6, 0x6, 0x7, 0x7, 0x9, 0x4, 0xd}, {0xe000, 0x8080000, 0xb, 0x5, 0xd, 0x5, 0x9, 0x2, 0x6, 0x96, 0x9c, 0xff}, {0xdddd0000, 0x6000, 0x10, 0xde, 0x3, 0x9e, 0x6, 0xfa, 0xc, 0x4, 0xf9, 0x6}, {0xffffffff, 0xe000, 0xd, 0x7f, 0x0, 0x5, 0x8, 0xd, 0x8, 0x1, 0x0, 0xef}, {0xffff1000, 0x0, 0x4, 0x40, 0x3, 0x80, 0x9, 0x2, 0x5, 0x9, 0x4, 0xe}, {0x80a0000, 0x2000, 0x3, 0x7, 0xa7, 0x8, 0x5, 0x60, 0xab, 0x9, 0x3, 0xb}, {0x80a0000, 0x1000, 0x4, 0x3, 0x8, 0x6, 0xf6, 0x4f, 0xe, 0x6}, {0x10000, 0x1}, {0xa000, 0x5}, 0x0, 0x0, 0xdddd0000, 0x4010, 0xb, 0x9000, 0xffffffff, 0x0, [0x3, 0xcf7, 0x55, 0xffffffffffff8001]}) write(r5, &(0x7f0000001480)="262af92cbd7407eb09d30ac0fbc31f219882937ab177e3f62cb84b4cbc22269a4b87e6152fc16bd3d19ad7f8bcbf14150346cf791ba008c682c0f191106eb26534cf15ce298fd615d2cb7258d23b877ce19536866f25a2037e5867b441bd04b83b3758f93f8a01887938eaff8d6fa487f81754db2e0a633c18cb7260d80677a6180c3262cbc05652fd0548544e7ade182a75161ae0d29b3b4e71b3ba90d4667ebe71c818d7f4ce63df8354a05123111b38f81f07c0008ad8694c49", 0xbb) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x60000000005, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cc, 0x0, 0xa1b, 0x8, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000100)={{0xfec00000, 0x0, 0x0, 0x2, 0x5, 0x14, 0x3, 0x7, 0x0, 0x8, 0x9, 0x20}, {0x8080000, 0x10000, 0xc, 0x0, 0x2, 0x0, 0xfd, 0x0, 0x7, 0xfc, 0x4}, {0xb000, 0x8080000, 0xc, 0x0, 0x27, 0x6, 0x0, 0x0, 0x8, 0x3, 0x40, 0x3}, {0xeeef0000, 0x33331000, 0x18592cbc7c573fc6, 0x9, 0x5, 0x9, 0x9, 0x7, 0x8, 0xf, 0x4}, {0x80a0000, 0xeeee8000, 0xb, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3f, 0x6}, {0xb000, 0x0, 0x0, 0x76, 0x2, 0x1, 0x2, 0x80, 0x0, 0xff, 0x6}, {0x2, 0xeeee0000, 0x1e, 0x4, 0x3, 0x0, 0xa1, 0x20, 0x9d, 0x0, 0x4}, {0x2, 0x50000, 0xa, 0x3, 0x0, 0x7, 0x9, 0x40, 0x26, 0x0, 0x0, 0x2}, {0xeeef0000, 0x8cf}, {0xdddd1000}, 0x10, 0x0, 0x0, 0x110, 0xf, 0xf801, 0xeeee0000, [0x80000004, 0xfffffffffffffffd, 0x10000, 0xfffffffffffdffff]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 7m32.794984716s ago: executing program 5 (id=760): socket$unix(0x1, 0x1, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x2, 0x0) eventfd(0x0) syz_clone3(&(0x7f0000001e80)={0x166002400, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_open_dev$usbmon(&(0x7f0000000000), 0x3, 0x240) connect$pppoe(0xffffffffffffffff, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'dvmrp1\x00'}}) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f00000004c0)={{}, {0x1, 0x5}, [{0x2, 0x6}], {0x4, 0x3}, [{0x8, 0x5, 0xffffffffffffffff}, {0x8, 0x4, r2}], {0x10, 0x4}, {0x20, 0x1}}, 0x3c, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x578, 0x0, 0x43c, 0x0, 0x0, 0x16c, 0x504, 0x504, 0x504, 0x504, 0x504, 0x6, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x3b}, @private1, [0xff, 0x0, 0xffffffff, 0xffffff00], [], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x6, 0x0, 0x0, 0x4}, 0x0, 0xa8, 0xf0, 0x0, {0x7a00000010000000}}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'bond_slave_1\x00', {0x1}}}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @dev, [], [], 'veth1_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x0, 0x22}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0xff}, {}, 0x300}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x0, 0xff000000], 'dummy0\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0x118, 0x48000000}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1ff, 0x8, 0x4, 0x1, 0x0, "52146ee9ae44b62f269737ed481b837e8196a5702a25a4409e992b2c65fd4ce47d5510261c8694c511bcdcbca881691621e9e9f5a9ccf9eb8fc186f0fdb6fdc2"}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback, 0x1c}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d8) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x4) getsockopt$inet_mreqn(r1, 0x0, 0x20, 0x0, &(0x7f0000000200)) r3 = socket(0x10, 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "0000000000020400"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) 7m32.544932439s ago: executing program 5 (id=763): timer_create(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls}, 0x94) timer_create(0x0, 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, 0x0, 0x6c}) r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000001c0)={0x0, &(0x7f00000002c0)=[@code={0x1, 0x4a, {"2e450f1c80c800000066bad004b875a90000ef0fc73bd9e1438074180db50f2106f2440f2d300f00960a000000c4817a2cd82ef3410f2b41b7"}}], 0x4a}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000003c0)='./file0/file0\x00', 0x8) dup(r3) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0x1000000000, 0x0, 0x40, 0x2000001, 0x0, 0x2004cb, 0x0, 0x0, 0x68ff, 0x5, 0x0, 0x3], 0x1, 0x202}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r0, 0x4018aee2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000300)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) 7m31.613259801s ago: executing program 5 (id=769): r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x1, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e23}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2f}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}]}, 0x50}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000180)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x80, 0x0}, 0x4044015) 7m31.237238364s ago: executing program 5 (id=772): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffe, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x801, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x21514}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x20004080) 7m30.900825383s ago: executing program 33 (id=772): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffe, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x801, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x21514}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x20004080) 2m57.299587419s ago: executing program 1 (id=1941): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$video(0x0, 0x1d24, 0x0) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, 0x0) r3 = syz_open_procfs$pagemap(0x0, 0x0) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f00001cd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x9, &(0x7f00000021c0)=[{0x2000000000000009, 0xffffffff, 0x1}], 0x1, 0xc2ff, 0x40, 0x0, 0x0, 0x76}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r4, &(0x7f0000000280)=ANY=[], 0xff2e) ioctl$TCFLSH(r4, 0x540b, 0x2) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, &(0x7f0000000400)=ANY=[]) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000200)={0x203, 0xa, 0x2}) ioctl$VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000000500)=@overlay={0x8, 0x5, 0x4, 0x2, 0x0, {}, {0x3, 0x8, 0x6, 0x7, 0xe, 0x0, "8b5fa8fd"}, 0x34668933, 0x3, {}, 0x65}) syz_emit_ethernet(0xa6, &(0x7f0000000600)=ANY=[], 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x18, 0x0, &(0x7f0000000000)=[@increfs, @increfs, @decrefs], 0x0, 0x0, 0x0}) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) 2m55.56757429s ago: executing program 1 (id=1948): r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) writev(r0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000240)}], 0x2) 2m55.450314474s ago: executing program 1 (id=1949): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0xfffffffb) syz_emit_ethernet(0x56, &(0x7f0000000040)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0xff, @local, @local, {[], {{0xb00, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x8, 0xc2, 0xffff, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0x3c, 0xb, 0x1, 0x4, 0x0, 0x8000}]}}}}}}}}, 0x0) 2m55.035607382s ago: executing program 1 (id=1950): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r5, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="28000000011401"], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x80) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r7, 0x7, &(0x7f00000000c0)={0x0, 0x2, 0x1000}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r8, 0x26, &(0x7f0000000000)={0x1}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r9, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r8, 0x25, &(0x7f00000000c0)={0x0, 0x2, 0x8, 0x7}) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 2m53.915695066s ago: executing program 1 (id=1957): syz_open_procfs$namespace(0x0, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000002c0)={0x9, 0x7, 0x9, 0x7ff, 0xc5ab, 0xffffffff, 0x3, 0x6, 0x0}, &(0x7f0000000300)=0x20) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000340)={r6, 0xffff, 0x200, 0x8}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x88002, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = dup(r8) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) getsockopt$TIPC_SRC_DROPPABLE(r9, 0x10f, 0x80, &(0x7f0000000000), &(0x7f0000000280)=0x4) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x71) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x8, 0x4, 0x4, 0x10002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value=0x180}, 0x50) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000300000004000000ff"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000300), 0xce4, r10}, 0x38) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x5c, r11, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xfffffffc}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @multicast1}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x100008c5}, 0x20000810) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="20000000bbbc", @ANYRES32=r12, @ANYBLOB="08001b0000000000"], 0x34}}, 0x24048180) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, 0x5, 0x1, 0x301, 0x0, 0x0, {0x3, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0xc840}, 0x4000840) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="3400000040000100f8ff0700040000000100000004004880100001800c00108008000b00f91e0b63282ee8d34a1870cfb4e1a050e27d2bb91c9bd645c5f983549548d286d0f135b8d8cb06ece058ed00f37a8a6f18efd8d79284f8f0a8f1f926da3f5d4d644f92a0c9f5827e240d45c6f77e69a2d7e08f514a0661ad1c6cff344b63c43ccb4385e2b0269908d97eefe3", @ANYRES32=r0, @ANYBLOB="0c0002000000000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 2m53.778822541s ago: executing program 1 (id=1958): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d8, &(0x7f0000000040)={0x0, 0xb273, 0x0, 0x3, 0x25a}, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000000) r2 = socket(0x840000000002, 0x3, 0xfa) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x7c}}, 0x4004850) sendmsg$NFT_BATCH(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a1400000011"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockname$inet(r2, 0x0, &(0x7f0000002280)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001f500000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0004000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000003080002400000000014000000020a69eff1640000000000000000000114000000110001"], 0xa4}}, 0x0) getresuid(&(0x7f0000000100), 0x0, 0x0) lstat(&(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r0, &(0x7f00000000c0)='./file0\x00', 0x0, r6, 0x100) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x12, 0x6, &(0x7f0000000700)=ANY=[@ANYRESHEX=r5], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000900000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000000000030000000084010500ac1414aa000000000000000000000000000000003200000000000000ffffffff0000000000000000000000000000000002000000000000000000000000000000ac1e0101000000000000000000000000000000002b000000000000"], 0x23c}}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYRES16=0x0, @ANYBLOB="000425ecada9ff851c95a00eacd4d9b7fa82e4bd7000fddbdf25"], 0x20}}, 0x480c5) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) 2m53.407935573s ago: executing program 34 (id=1958): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d8, &(0x7f0000000040)={0x0, 0xb273, 0x0, 0x3, 0x25a}, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000000) r2 = socket(0x840000000002, 0x3, 0xfa) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x7c}}, 0x4004850) sendmsg$NFT_BATCH(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a1400000011"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockname$inet(r2, 0x0, &(0x7f0000002280)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001f500000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0004000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000003080002400000000014000000020a69eff1640000000000000000000114000000110001"], 0xa4}}, 0x0) getresuid(&(0x7f0000000100), 0x0, 0x0) lstat(&(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r0, &(0x7f00000000c0)='./file0\x00', 0x0, r6, 0x100) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x12, 0x6, &(0x7f0000000700)=ANY=[@ANYRESHEX=r5], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000900000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000000000030000000084010500ac1414aa000000000000000000000000000000003200000000000000ffffffff0000000000000000000000000000000002000000000000000000000000000000ac1e0101000000000000000000000000000000002b000000000000"], 0x23c}}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYRES16=0x0, @ANYBLOB="000425ecada9ff851c95a00eacd4d9b7fa82e4bd7000fddbdf25"], 0x20}}, 0x480c5) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) 11.996265358s ago: executing program 7 (id=2583): r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs(0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000004340), 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000440)=ANY=[@ANYBLOB], 0xa8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x80) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x10000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000380)) r6 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r6, 0xc0d05640, &(0x7f0000000280)={0x6, @pix={0x4, 0x9, 0xa0363159, 0x5, 0x5, 0x9, 0x5, 0x7, 0x1, 0x8, 0x0, 0x7}}) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="d80000001e0081054e81f782dbe8abd22d267e8e1c007c09e8fe08a104000e800a00142603600e1208000fc01e000402a80016c008000e400400027c035c0461c1d67f6f94007134cff6d26efb8000a0ffa290457f0189c129f509c1c9d8c87017eeadc9c809b316277ce06bba0000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccce9500360db7e5167fda40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x40400) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r7, 0xc0045006, &(0x7f0000000080)=0x4) 11.749838434s ago: executing program 3 (id=2586): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x1c0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x48, &(0x7f00000002c0)=ANY=[@ANYBLOB='\b\v'], 0x68) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x100, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000082, 0x0, 0x8002}]}) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x700) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a30000000002c000000030a01010000000000000000020000000900010073797a30000000000900030073797a32000000003a000000030a03000000000000000000020000000900010073797a3000000000090003"], 0xa0}}, 0x8040) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000100)=0x10cd, 0x4) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000180)='&)#.,)}\x00', 0x0, r2) 11.010505851s ago: executing program 0 (id=2589): gettid() r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x1, 0x2}) ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f0000000bc0)=""/230) 9.344178321s ago: executing program 7 (id=2591): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)='./file0\x00') recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x27159a6a, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xea11, 0xffffffff}, 0x0) r2 = openat$vimc1(0xffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r2, 0xc0cc5640, &(0x7f00000000c0)={0x2, @sdr={0x32314d54, 0x400ffff}}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@gettaction={0x60, 0x32, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x22, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb}}]}]}, 0x60}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2f, 0x4}) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x80800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/81, 0xfff3}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 9.19759208s ago: executing program 3 (id=2592): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) (async) setitimer(0x2, 0x0, 0x0) 9.016134946s ago: executing program 3 (id=2594): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0xffff}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x7}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x1000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004000}, 0x20040800) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x12e, &(0x7f0000000340)={0x0, 0x5cb1, 0x2, 0x3, 0xfdfffffd}, &(0x7f0000000140)=0x0, 0x0) syz_emit_ethernet(0x6c, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @broadcast}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x3b, 0x200, 0x822c]}, {}, {0x8, 0x88be, 0x81000004}}}}}}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r5, 0xc4c85513, &(0x7f0000000b80)={0x7, 0x0, 0x2008, 0x7, 'syz1\x00', 0x900005}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) io_uring_enter(r3, 0x1e76, 0xf728, 0x5, 0x0, 0x0) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffa000/0x1000)=nil) io_uring_register$IORING_REGISTER_IOWQ_AFF(r3, 0x11, &(0x7f0000000040)="732fbfdb019d7da37edad2e06a44164ecdaa2c0071e55d0f2412f7561e683df8bf8bec", 0x23) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000007, 0x40032, 0xffffffffffffffff, 0x40000000) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r7, 0x4004743d, 0x110e22ffe6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES8=r7], 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000180)={"1b4f1a59a9be35e8c11ef87e413d94cf520833949160593561e114fb09b8a485"}) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000700)=@sg0, 0x0, &(0x7f0000000780)='./file0\x00') ioprio_set$pid(0x2, 0x0, 0x0) 8.789677651s ago: executing program 0 (id=2595): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0xc, 0x43}]}, 0x10) listen(r0, 0x5) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x1411, 0x10, 0x70bd2b, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0xa810}, 0x200480d4) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0xc001102c}]}) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)=ANY=[@ANYBLOB="12015002b8005108101407a0683e010203010902ea01030e00300309040309027f54cc00090502040004040403800109661bede31b6d40ffd5a6457d3483a7c64a2cf09c6b30e3afe9caf13ed9a2924ed053d2b4b24aedb4035d4212c8a5f7df3b67916187c245f81035efe9b53a8d79988d4b00a8aa5926f8b9103fd0e543cebd14ca5d0825146c7ff12ef0b8fe612538542d6f5c9fdc7894374795b8ccb6bdb303b42aa86746d3370ad7a31c090504104000050209072501830200040725018101070009045b060c317135060905051008000600d30725018002000009050610200080ff0407250101060200090500100004090401090504104000ab0005090505022000060d0d48007672bf7524ef90e0a086de3562bf356642bc0201de8fa807c3b757b1c182c0f4c59af7c59293e1bc41956912be0eafd96bdf03aa6117bc3e50fbee59a6e5dfc7206516e091fce94c0c778a134b5368d1af31d240535b0725018002010009050b08000401a9050725010332f60b0725010206ac15090502140000c7070e0905010400020805800905051000020802ae07250103fbff0009050010400008000309050c040002030d07410f8c1ea652c620acd24cbf2bfeb921dfc3f2c147f7c05a53e4f7db6742a64c76fe8d2f319387c80165b1ad6b9054e93ae7385d785e1c040f2c4e5c2388ef8791090509002000010802"], 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800020010"], 0x44}}, 0x0) socket(0x10, 0x3, 0x0) recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0x20) sendto$inet6(r5, &(0x7f0000000340)='G', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000004c0)='illinois', 0x8) shutdown(r5, 0x1) 8.478072987s ago: executing program 2 (id=2596): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r2, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000001480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x400c404) exit(0xfe) sendmmsg$inet6(r2, &(0x7f0000004740)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10001}, 0x1c, 0x0}}, {{&(0x7f0000000800)={0xa, 0x4e21, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c, &(0x7f0000000c40)=[{&(0x7f0000000840)="11b1bfad69c9e86215472a62a9773cd45edddf1fe28799b805943daeac8c4c3a22b571b37c290e338dd4b545648fb3ee6693b661eb024687", 0x38}, {&(0x7f00000024c0)="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", 0x628}, {0x0}, {&(0x7f0000000a40)}, {0x0}, {&(0x7f0000000440)="0981c3ac5aa5ccb8d3e063024ce7f9bca363c2ed1b621faf02fa8681fd6addfb74da3111543d40dd22939e2005253d184119ad77fa13889378c26977366e804ffc90e7d1ef81e1e3c4aeab6b454eea63f8e53197104dd8313403f0d15300901282dba97abdd3f1bf8155f0538700bc32e47939d3f44cd53d35b79d19b72f94c185530bfe8800560c96225dcac343d208e21b13978dca44428be7e629e456b901040000000000004f0f1f810363bd4081a18d14edc11cb1c5266d4688c1b81ea59178d37591cdfc0f559a62249d", 0xcd}], 0x6}}, {{0x0, 0x0, &(0x7f00000045c0)=[{&(0x7f00000005c0)="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", 0x176}, {0x0}, {0x0}, {0x0}, {&(0x7f00000044c0)}], 0x5, &(0x7f00000048c0)=ANY=[@ANYBLOB="40000000000000002900000037000000ff0400000000000007180000000304ff00800400000000000000000000000000000000010005020c5f040100280000000000000029000000040000000001000000000000000100050200ff04"], 0x80}}, {{&(0x7f0000004680)={0xa, 0x4e22, 0x3, @local, 0x7}, 0x1c, &(0x7f0000004700)}}], 0x4, 0x48c0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8001, 0x0, 0x9, 0xfffffffffffffffe, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r3 = syz_clone(0x10000, &(0x7f00000000c0)="ded81d0d899752148047c8a7e59920f51d5efcfa19b6cd28fc", 0x19, &(0x7f0000000100), 0x0, &(0x7f00000001c0)="b9441f7d484779900edf5dee78ed2fe371ace86d8b8ff45d2f7eab2eb82c97898a5c27f403568d3e794bcb834b7be56d5be2ac9ef75c6a1004e83b") r4 = syz_open_procfs(r3, &(0x7f0000002340)='fdinfo\x00') getdents(r4, &(0x7f0000000000)=""/43, 0x2b) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000000)={@remote, @broadcast, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000003, 0x7ffff, &(0x7f0000006680)) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff}, 0x80800) fcntl$setpipe(r6, 0x407, 0x176) setsockopt$MRT_ADD_MFC(r5, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0xfffffffd, 0x4, 0xfffffffe}, 0x3c) setsockopt$MRT_ADD_MFC(r5, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x1, 0x4, 0x3}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe000031f, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0xb, 0x6, 0x6}, 0x3c) setsockopt$MRT_FLUSH(r5, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) madvise(&(0x7f00002a3000/0x2000)=nil, 0x2000, 0xc) 8.105067652s ago: executing program 3 (id=2597): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x1ff, 0x3, 0x0, 0x2000, &(0x7f0000fe7000/0x2000)=nil}) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r7, 0x29, 0x6, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x4e, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000000)="0f080fae04a200400f01c426660f3a15e6160fc76bdbf08666350f2170260fed9c000066b9230b00000f32", 0x2b}], 0x1, 0x0, 0x0, 0x0) ioctl$VIDIOC_DECODER_CMD(r1, 0xc0485660, &(0x7f00000002c0)={0x2, 0x0, @start={0xd, 0x1}}) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'hsr0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendto$packet(r8, &(0x7f0000000000)="dbe104b35716e67da422221d3286", 0xe, 0x20008894, &(0x7f0000000100)={0x11, 0x7, r9, 0x1, 0x5, 0x6, @local}, 0x14) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x6c, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0xc, 0xd}, {0xfff3, 0x10}, {0xb, 0x6}}, [{0x8, 0xb, 0x3}, {0x8, 0xb, 0x80000003}, {0x8, 0xb, 0xf6}, {0x8, 0xb, 0x43}, {0x8, 0xb, 0x1000}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x9}]}, 0x6c}}, 0x20040000) r11 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) 7.810386158s ago: executing program 0 (id=2599): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2) r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xc, "00000000050000400000003200"}}}]}, 0x48}}, 0x4004010) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000000080), 0x2) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 6.799122968s ago: executing program 7 (id=2600): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, &(0x7f0000000040)={0x0, 0xe472, 0x2, 0x0, 0x25a}, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000000) r6 = socket(0x840000000002, 0x3, 0xfa) getsockname$inet(r6, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f00000001c0)) lstat(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000003c0)) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000200)={0xfffffffe, 0x3, 0x4}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) ioctl$VIDIOC_S_SELECTION(r6, 0xc040565f, &(0x7f00000000c0)={0xc, 0x0, 0x5, {0x3, 0xf, 0x2, 0x6}}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x100, 0x2003, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0x9}, {0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8}]}}]}, 0x40}}, 0x4000010) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) 4.629113167s ago: executing program 0 (id=2601): r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs(0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000004340), 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000440)=ANY=[@ANYBLOB], 0xa8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x80) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x10000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000380)) r6 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r6, 0xc0d05640, &(0x7f0000000280)={0x6, @pix={0x4, 0x9, 0xa0363159, 0x5, 0x5, 0x9, 0x5, 0x7, 0x1, 0x8, 0x0, 0x7}}) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="d80000001e0081054e81f782dbe8abd22d267e8e1c007c09e8fe08a104000e800a00142603600e1208000fc01e000402a80016c008000e400400027c035c0461c1d67f6f94007134cff6d26efb8000a0ffa290457f0189c129f509c1c9d8c87017eeadc9c809b316277ce06bba0000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccce9500360db7e5167fda40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x40400) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r7, 0xc0045006, &(0x7f0000000080)=0x4) 4.558781695s ago: executing program 2 (id=2602): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x800) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a000000000000d74619edc70000000000", @ANYRESDEC=r1], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x3ef, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x4}, {}, {0x6, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc858}, 0x80) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r4, {0xc, 0xc}, {0x0, 0xfff1}, {0x6, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0xbc8bf32f374582ba) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r5, r5, r5, 0x1) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r7 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)={0x10000004}) 4.522628718s ago: executing program 6 (id=2603): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x500, &(0x7f0000000200)={&(0x7f00000036c0)=@newlink={0x54, 0x10, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4f26c}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x20, 0x16, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x7fd, 0x1, {0x1, 0x4b1, 0x5, 0x8100}}]}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x40) 4.385713017s ago: executing program 6 (id=2604): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x6, &(0x7f0000000240)={0x16, {{0x29, 0x0, 0xb000000, @empty}}}, 0x88) 4.314358311s ago: executing program 2 (id=2605): gettid() r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x1, 0x2}) ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f0000000bc0)=""/230) 4.195817171s ago: executing program 6 (id=2606): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00"/12], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000ff00000000000000fbffffff18110000", @ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000001502010076000000bf9800000000000056080000020000008500000007000000b70000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000ee7000/0x4000)=nil, 0x4000, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f0000000300)=[{0x0}], 0x1) r6 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r6, &(0x7f0000000180)={0x2a, 0x1, 0x4000}, 0xc) r7 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x4660, 0x400, 0x3, 0x28a}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r6, 0x0, 0x0}) io_uring_enter(r7, 0x40f9, 0x34bb, 0xa5, 0x0, 0xfffffffffffffdf8) socket$inet(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000007910a8000000000006ffffe8000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) 3.59696787s ago: executing program 2 (id=2607): openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x10) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) r1 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x2f7}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) io_uring_register$IORING_REGISTER_NAPI(r1, 0x1b, &(0x7f0000000040)={0x3, 0xde}, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000280)={{0x2, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x2, 0x40000000000, 0xfffffffffffffffe, 0xffffffeffffffffe, 0x0, 0x4, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0xfffffeffbfffffff, 0x1ff, 0x0, 0x2, 0x3, 0x80000000, 0x3, 0x0, 0x0, 0x4000004, 0x0, 0x6, 0x0, 0x100040, 0x0, 0xfffffffffffffffd, 0x100200000, 0xe, 0x6, 0x0, 0xfffffffffffffffe, 0x0, 0x9, 0x0, 0x10000, 0x1000, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x7, 0x10000, 0x7785, 0x0, 0x4, 0x4, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x6, 0x3, 0x0, 0x80000002000, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xb, 0x0, 0x80000000000000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10000000000, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x0, 0x20000000000000, 0xffffffffffffffff, 0x100, 0x81, 0xfffffffffffffffc, 0x0, 0x3, 0x0, 0x2, 0x100000000000, 0xffffffffffffffff, 0x3, 0x7, 0x0, 0x7, 0xc0c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0xffffffffffeffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x80]}) readahead(0xffffffffffffffff, 0x100, 0x96) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x40, 0xffc, 0x0, 0xd968d5b908ac0cde, 0x2, {0x0, 0x8}, {0x350, 0x0, 0x1}, {0xf4ef}, {0x0, 0x4, 0xffe}, 0x1, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x2, 0x1, 0xb}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCGSTAMP(r3, 0x8906, 0x0) syz_emit_ethernet(0x1ad, &(0x7f0000000a40)={@local, @empty, @void, {@ipv4={0x800, @generic={{0x12, 0x4, 0x1, 0x11, 0x19f, 0x64, 0x0, 0x2, 0x88, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @dev={0xac, 0x14, 0x14, 0x2c}, {[@end, @timestamp_prespec={0x44, 0x2c, 0x16, 0x3, 0x3, [{@multicast2, 0x80}, {@local, 0x8}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x8}, {@remote, 0x1000}, {@loopback, 0x80000001}]}, @ra={0x94, 0x4, 0x1}, @end]}}, "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"}}}}, 0x0) recvmmsg(r3, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x10001, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 3.595520219s ago: executing program 7 (id=2608): r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) r1 = socket$inet_sctp(0x2, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000000)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000340)={r2, @in={{0x2, 0x4e24, @private=0xa010101}}, 0x198e, 0x7ca3, 0xffffff36, 0xca86, 0xbf, 0x80, 0x7}, &(0x7f0000000400)=0x9c) prctl$PR_SCHED_CORE(0x3e, 0x2, 0xffffffffffffffff, 0x3, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r3, &(0x7f00000002c0)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x16}}}, 0x1e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r6) read$FUSE(0xffffffffffffffff, &(0x7f0000002900)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r6, &(0x7f0000000080)={0x10, 0xfffffffffffffff5, r7}, 0x10) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newsa={0x160, 0x10, 0x413, 0x70bd28, 0x0, {{@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x20, 0x20}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x32}, @in=@private=0xa010100, {0x4, 0x7, 0x0, 0x40000000000004, 0xffffffffffffffff, 0x401, 0x7f}, {0x0, 0x8, 0xcc}, {0xf6}, 0x0, 0xfffffffd, 0xa, 0x1, 0xfe, 0x5c}, [@algo_aead={0x70, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x120, 0x80, "6fc3070b4f8f7330202b93875f2d67a6a77871d3deea63c88762c678ad93d881e7a57e95"}}]}, 0x160}}, 0x804) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000028c0)={'wlan0\x00', &(0x7f0000000300)=@ethtool_ringparam={0x11, 0xfffffff8, 0xffff52f5, 0xffff, 0x5, 0x9994, 0xc2, 0x5a, 0x4}}) ioctl$DVB_DEMUX_DMX_STOP(r0, 0x6f2a) 3.002149892s ago: executing program 3 (id=2609): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0xfffc, @local}, 0x10) listen(0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0x9}, 0x0) syz_usb_connect(0x4, 0x0, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e24, 0xfffffbf8, @remote, 0x7}, 0x1c) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) syz_emit_ethernet(0x62, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c200000effffffffffff080045000054000100000067907800000000ffffffff21019078120061c432b200240000000000000000e000000ae000000083005882850b44424f70bc2b5d119ad9f90a017aa08daf1c0e6fd2"], 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x9, 0x2) unshare(0x22020600) unshare(0x2a020400) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000080)=""/43) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRES8=r0, @ANYRESOCT=r0, @ANYRES8=r0], 0x7c}}, 0x50) close(r0) 2.580344626s ago: executing program 7 (id=2610): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)='./file0\x00') recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x27159a6a, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xea11, 0xffffffff}, 0x0) r2 = openat$vimc1(0xffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r2, 0xc0cc5640, &(0x7f00000000c0)={0x2, @sdr={0x32314d54, 0x400ffff}}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@gettaction={0x60, 0x32, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x22, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb}}]}]}, 0x60}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2f, 0x4}) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x80800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/81, 0xfff3}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 2.535020313s ago: executing program 2 (id=2611): socket$inet6(0xa, 0x80002, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0x15}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = gettid() sched_setattr(r3, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7ffd, 0x0, 0xb, 0x0, 0xfffffe0000000000, 0xfa11, 0x7fffffff}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(0xffffffffffffffff, 0xaea2, 0x800000080000000) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(r4, 0xaea2, 0x8) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, &(0x7f0000000180)={0x0, "836d11f8a2f7337496bff2b4d43d400ebf870e7cf92542da0cbdf188dede83ee", 0x2, 0x20, 0x7fffffff, 0x7, 0x10, 0x1, 0x0, 0x3}) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2711, &(0x7f0000032580)=""/102396, &(0x7f0000000000)=0x18ffc) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmmsg$inet(r1, &(0x7f0000000a80)=[{{&(0x7f00000000c0)={0x2, 0x4e1c, @rand_addr=0x64010102}, 0x10, &(0x7f0000000840)=[{&(0x7f0000000300)="68c8c93db5b301aebaa186356ea6417ed8897b1eed42c34ed2b09582f70dc4d267742411bbda2e925c699ffbe1bf8b3c814e7e0908b9665b6352c1ff1c6b3b5dbe862ae8326cd6d3c27e9100a4d4950ca4f696f3942c0b5ecc1dbddb74573a4d856c253cc3753c5d873428c35e30b77415f2bf274a56549c183c2582eb60d22a4678cfe1844db41061282a6f35c0b7ac3a760ad3e2e77b33704df0883e6425c7dce33807bf5618844969", 0xaa}, {&(0x7f00000003c0)="f0ce6b4c85a66d8cf056a51594e08cfa6b82e4fc44385c8ab28a2bfa60825e26e8fc220dc98c3726f8db1613fb9dab54d67d38acf9333df720d2e9ff86706be2a6e90b2b054abdbc068110009a594e3b32e9ba12f7fcbc8d6b1d5ed5b127669648929aaf882f2b4358f34321f8b1d39b766fd499b16937ddb272c64e958d274e707214bd796e8d38b6e1333c07204849f364fbaaba067dc3cb40288117f362e7891242031977a20e5aea827959897d208f769cb1ea62b9fdbc429088037639560c44296e9387909e7445b046", 0xcc}, {&(0x7f00000004c0)="79f6743b646df12c853feaaf928cf39d5f519e7908e8c75bc95eaf017b2ebba752d57777cb2c40af3e1227e75c76defb348977061994200cc5a5a34e9d49a3f7b223c130a9ac6cb92e6ac6ffd1af82281f72d1a731dd11023d72e4f78963dc11e3dd6bb43bcd6b9b08a1d51b5ae3017bfdee1e5e8ab2cd43e3af8beeaf5e", 0x7e}, {&(0x7f0000000540)}, {&(0x7f00000005c0)="c00a14401d866e471bdeab9d92a4426acd07a219e6439b3e0433f589e277fae5eb9a4e02538c10089aae5c0032d1fac89f32717f0c2e5f7ce7e21c6d6220d4dc4a71f4051a5252526fd6fd733ed1e38101022b83c60c01276998d72369d3b70f8207de3cf6326d89f29d172001bf96", 0x6f}, {&(0x7f00000006c0)="998549522a9cd5d32b6e9336a7018f64e6036e8759aace44d5deb92f9b250b1fdcf94b0144a93a2e8d8ea300ddb090603bc526141c66f5b6749a1bddb27677d4df54b222abcb088a4feff3839306cf1b1d911fdaf9f87c53a85f97984490facf6f57c6b149733c4585f79ba4fc44149559f6fa329a6b2f9491bf286ba500e75d88f5fef2fe75dc5b25e7481156d26bf5df60ab6c31bb4745a1c95729cf8f61cf7f313d4ad11efb886cdbc9756430d98cfb69dcb997a2995e06a69f015ce33e797cd5b008fc0de539ada38c770e169b045ecba00c0c7ad7f4ac53392321b444d0da35ede245f0a9c972e9df4f6b5273dbbf9b7cbea0307720", 0xf8}, {&(0x7f00000007c0)="7aa6782ba9796450de4ddf029303e044f48101070c0e3509242d2fad191a8ac21190618fd1859296a5c7ea61cfc208a6b59a39e4a3da16cef0655c3a78d73912fd93143ec6788662d747f2feb6b17fce96e77fcda42bee5e5646ab5a00aeb1fd43aac00f2017dd9c341a177fea9bc43e4235d7353d393d5f69", 0x79}], 0x7}}, {{&(0x7f00000008c0)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000b00)=[{&(0x7f0000000900)="3f9d2c6e856cd7d1e225272770720ba43bd70dc9647fb8f240d229d19f724c0e9a9810a0559c0e604550803468cd972afdafd574a098cd04919b7e71bbf68ed407e8f943b6215da2d5c96e58f629b0e0f60a482d32a254b7e987e2a0e57557e717d4cf093465e46ed169d669c23ad5ab61d1b6a463bc3e1e72f1796170d5d616abed973c7fa71db88e758bd7f9e675a9c7b4c7b38d25ea5631d7ffe7a0faa6de1335e022c4881d5915327827286279e7fb772a489ab64f9460421561a42e24c305e869a1a84f23075967ad2fd539a12e2dbe3e24b1992178662a754188f31b7f866e41e7a5443925f6238564f5dee95b54c954f4d96841", 0xf7}, {&(0x7f0000000a00)="853ea312065d4466268a0841be3ff8d4a15aadaf2aa46cdab80a20fbe3acb137d74ad33b7a95f32bcb915d6b4fd40fd1f104cb98efa0", 0x36}], 0x2}}], 0x2, 0x2400c080) read$rfkill(0xffffffffffffffff, 0x0, 0x0) 2.454097219s ago: executing program 0 (id=2612): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r2, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000001480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x400c404) exit(0xfe) sendmmsg$inet6(r2, &(0x7f0000004740)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10001}, 0x1c, 0x0}}, {{&(0x7f0000000800)={0xa, 0x4e21, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c, &(0x7f0000000c40)=[{&(0x7f0000000840)="11b1bfad69c9e86215472a62a9773cd45edddf1fe28799b805943daeac8c4c3a22b571b37c290e338dd4b545648fb3ee6693b661eb024687", 0x38}, {&(0x7f00000024c0)="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", 0x628}, {0x0}, {&(0x7f0000000a40)}, {0x0}, {&(0x7f0000000440)="0981c3ac5aa5ccb8d3e063024ce7f9bca363c2ed1b621faf02fa8681fd6addfb74da3111543d40dd22939e2005253d184119ad77fa13889378c26977366e804ffc90e7d1ef81e1e3c4aeab6b454eea63f8e53197104dd8313403f0d15300901282dba97abdd3f1bf8155f0538700bc32e47939d3f44cd53d35b79d19b72f94c185530bfe8800560c96225dcac343d208e21b13978dca44428be7e629e456b901040000000000004f0f1f810363bd4081a18d14edc11cb1c5266d4688c1b81ea59178d37591cdfc0f559a62249d", 0xcd}], 0x6}}, {{0x0, 0x0, &(0x7f00000045c0)=[{&(0x7f00000005c0)="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", 0x176}, {0x0}, {0x0}, {0x0}, {&(0x7f00000044c0)}], 0x5, &(0x7f00000048c0)=ANY=[@ANYBLOB="40000000000000002900000037000000ff0400000000000007180000000304ff00800400000000000000000000000000000000010005020c5f040100280000000000000029000000040000000001000000000000000100050200ff04"], 0x80}}, {{&(0x7f0000004680)={0xa, 0x4e22, 0x3, @local, 0x7}, 0x1c, &(0x7f0000004700)}}], 0x4, 0x48c0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8001, 0x0, 0x9, 0xfffffffffffffffe, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r3 = syz_clone(0x10000, &(0x7f00000000c0)="ded81d0d899752148047c8a7e59920f51d5efcfa19b6cd28fc", 0x19, &(0x7f0000000100), 0x0, &(0x7f00000001c0)="b9441f7d484779900edf5dee78ed2fe371ace86d8b8ff45d2f7eab2eb82c97898a5c27f403568d3e794bcb834b7be56d5be2ac9ef75c6a1004e83b") r4 = syz_open_procfs(r3, &(0x7f0000002340)='fdinfo\x00') getdents(r4, &(0x7f0000000000)=""/43, 0x2b) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000000)={@remote, @broadcast, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000003, 0x7ffff, &(0x7f0000006680)) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff}, 0x80800) fcntl$setpipe(r6, 0x407, 0x176) setsockopt$MRT_ADD_MFC(r5, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0xfffffffd, 0x4, 0xfffffffe}, 0x3c) setsockopt$MRT_ADD_MFC(r5, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x1, 0x4, 0x3}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe000031f, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0xb, 0x6, 0x6}, 0x3c) setsockopt$MRT_FLUSH(r5, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) madvise(&(0x7f00002a3000/0x2000)=nil, 0x2000, 0xc) 1.855994695s ago: executing program 6 (id=2613): timer_create(0x2, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f00000001c0)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$ndb(&(0x7f0000003b80), 0x0, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0xa0000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0x1}}, 0x20) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x42) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x50483, 0x21401}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @local}, @IFLA_IPTUN_LINK={0x8, 0x1, r4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20048044}, 0x24000000) 639.809076ms ago: executing program 0 (id=2614): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000000)={0x3, 'ip6erspan0\x00', {0x10000}}) r1 = socket(0xb, 0x3, 0x3) read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmsg$nl_route(r1, &(0x7f0000002140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002100)={&(0x7f00000020c0)=@RTM_NEWNSID={0x1c, 0x58, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@NETNSA_PID={0x8, 0x2, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c004}, 0x10) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002180), 0x2, 0x0) write$FUSE_GETXATTR(r6, &(0x7f00000021c0)={0x18, 0xfffffffffffffff5, r2, {0x7}}, 0x18) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000002200)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) write$FUSE_DIRENT(r7, &(0x7f0000002240)={0x120, 0x0, r2, [{0x1, 0x7, 0xb, 0x7, 'ip6erspan0\x00'}, {0x2, 0x401, 0x0, 0x42}, {0x0, 0x2a8d, 0x16, 0x0, '{]$+][+{\b##\\*%{\\@\'$+\\\xe6'}, {0x5, 0x3, 0xa, 0x8, '/dev/cuse\x00'}, {0x2, 0x10, 0xa, 0xa9, '/dev/cuse\x00'}, {0x1, 0x2033e672, 0xa, 0x941, '/dev/cuse\x00'}, {0x4, 0xbc, 0xb, 0x6, 'ip6erspan0\x00'}]}, 0x120) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000002380)=[@in={0x2, 0x4e23, @broadcast}, @in6={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0xb}, @in6={0xa, 0x4e22, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0xa}], 0x48) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r7, 0x84, 0x21, &(0x7f0000002400), &(0x7f0000002440)=0x4) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002480), 0x2, 0x0) write$FUSE_POLL(r8, &(0x7f00000024c0)={0x18, 0x0, r2, {0x1000000}}, 0x18) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f00000049c0)={{0x1, 0x1, 0x18, r0, {r3, r4}}, './file0\x00'}) syz_fuse_handle_req(r8, &(0x7f0000002500)="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", 0x2000, &(0x7f0000004e40)={&(0x7f0000004500)={0x50, 0x0, 0x2, {0x7, 0x2d, 0x8001, 0x0, 0xcd, 0x2f9c, 0x8, 0x0, 0x0, 0x0, 0x20, 0xffff84d9}}, &(0x7f0000004580)={0x18, 0x0, 0x3, {0x10001}}, &(0x7f00000045c0)={0x18, 0xfffffffffffffffe, 0x3, {0x6}}, &(0x7f0000004600)={0x18, 0x0, 0xa, {0xef8}}, &(0x7f0000004640)={0x18, 0x0, 0x5, {0x5}}, &(0x7f0000004680)={0x28, 0xffffffffffffffda, 0x7fffffff, {{0x7fffffffffffffff, 0xb3, 0x2, r5}}}, &(0x7f00000046c0)={0x60, 0x0, 0xfffffffffffffffa, {{0x4, 0x0, 0x8000000000000000, 0x4, 0x10001, 0xfffffffb, 0xb, 0x8}}}, &(0x7f0000004740)={0x18, 0x0, 0x10000, {0x9}}, &(0x7f0000004780)={0x15, 0xfffffffffffffff5, 0x3a05, {'\'$.)\x00'}}, &(0x7f00000047c0)={0x20, 0xfffffffffffffffe, 0x1, {0x0, 0x3}}, &(0x7f0000004800)={0x78, 0x24, 0x3, {0xfffffffffffffff7, 0xe4ad, 0x0, {0x4, 0x5, 0x3, 0x9, 0x101, 0xfeeb, 0x3, 0x1000, 0xadf, 0x8000, 0x2, r3, r4, 0xdb, 0x1000}}}, &(0x7f0000004880)={0x90, 0x0, 0xff, {0x3, 0x2, 0x400000000000, 0xfff, 0x9, 0x1, {0x2, 0x6, 0xffffffffffffffff, 0x9, 0x40, 0xffffffffffffffff, 0x3a, 0x9, 0x7fffffff, 0x5000, 0x5, r3, r4, 0x9, 0x2}}}, &(0x7f0000004940)={0x58, 0x0, 0x6, [{0x6, 0x100000001, 0x2, 0xb16d, '\xff\xff'}, {0x6, 0xfffffffffffffffe, 0xa, 0x8, '\x15!\x9c(,**}/)'}]}, &(0x7f0000004a00)={0x1e8, 0x0, 0x8af, [{{0x6, 0x1, 0xba, 0x5, 0x3, 0x101, {0x4, 0x8, 0x6, 0x9, 0x500000000, 0x7, 0x6, 0x1, 0x4, 0x6000, 0x9f5d, 0xffffffffffffffff, r4, 0xfffffffe, 0x7}}, {0x1, 0x9, 0x3, 0x9d, '}.\''}}, {{0x4, 0x0, 0x6, 0x7f, 0x5, 0x0, {0x0, 0x6, 0x8, 0x6, 0x2, 0x8000000000000001, 0x5, 0x80, 0xf, 0x2000, 0x2, r10, r4, 0x6, 0x6}}, {0x6, 0x400, 0x0, 0x8}}, {{0x5, 0x1, 0xfffffffffffffff1, 0x0, 0x3, 0xfffffffc, {0x3, 0x7, 0x7, 0x7fc9, 0x9, 0x0, 0x2, 0x3, 0x8730, 0xa000, 0x3, 0xffffffffffffffff, r4, 0x3, 0x1}}, {0x6, 0x8c, 0x5, 0x2085, '&\xf2*\\-'}}]}, &(0x7f0000004c00)={0xa0, 0x0, 0x5, {{0x2, 0x3, 0xf3, 0x6a, 0x1, 0x1, {0x5, 0xa46, 0x9, 0x60000000000000, 0x6, 0x7ff, 0x1db40b35, 0x9, 0x40, 0x6000, 0x9, r3, 0xee00, 0x9, 0x4}}, {0x0, 0x11}}}, &(0x7f0000004cc0)={0x20, 0xfffffffffffffffe, 0x7ff, {0x4, 0x4, 0x1, 0x3839}}, &(0x7f0000004d00)={0x130, 0xfffffffffffffff5, 0x6, {0x3, 0xfffffff8, 0x0, '\x00', {0x20, 0xffffffff, 0xfff, 0x100, r3, r4, 0x6000, '\x00', 0x8, 0x3, 0x0, 0x7, {0x388, 0x96f}, {0x9}, {0x2, 0x1}, {0x3, 0x2}, 0xfffff000, 0x61f, 0x8, 0x9}}}}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000004f40)={0x4, &(0x7f0000004f00)=[{0x4d18, 0x6, 0x8}, {0x3b3, 0xb7, 0xc, 0x2}, {0x2, 0xfe, 0x1, 0x7}, {0x4, 0xf1, 0x58, 0x80000001}]}, 0x10) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r9, 0x6, 0x21, &(0x7f0000004f80)="db9529818bf4de1db252aa0a038efed1", 0x10) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000004fc0)={0x0, 0x67, "3db0257d3b452a47cea44f1abfd034a88428c6ea4d96164f38fb9c0fbee9a4d5dfd2e73386ca3f2035d175b2eee4d5028e7de16c6779a66db4f7580d693ab12b32ea9ff24225ea3e18201c75b0c0c17e3799dc76214934a1a8d01be63fa52c4f8256f4964e204f"}, &(0x7f0000005040)=0x6f) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r7, 0x84, 0x78, &(0x7f0000005080)=r11, 0x4) r12 = add_key$user(&(0x7f00000050c0), &(0x7f0000005100)={'syz', 0x3}, &(0x7f0000005140)="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", 0x1000, 0xfffffffffffffffc) r13 = add_key$keyring(&(0x7f0000006140), &(0x7f0000006180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$link(0x8, r12, r13) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f00000061c0)={'veth0_to_team\x00'}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000006200)={r11, @in6={{0xa, 0x1ff, 0x5, @rand_addr=' \x01\x00', 0x7ff}}, 0x7fff, 0x4c9b}, &(0x7f00000062c0)=0x90) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000006300)={r14, @in={{0x2, 0x4e22, @empty}}}, 0x84) ioctl$KVM_CREATE_DEVICE(r9, 0xc00caee0, &(0x7f00000063c0)={0x8, 0xffffffffffffffff, 0x1}) close(r15) r16 = syz_usb_connect$cdc_ncm(0x6, 0x8c, &(0x7f0000006400)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0xfe8da6545d9e2701, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7a, 0x2, 0x1, 0xac, 0x80, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "4b67befe250a"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x895, 0x1ff, 0x6, 0x5}, {0x6, 0x24, 0x1a, 0x2, 0x8}, [@network_terminal={0x7, 0x24, 0xa, 0x2, 0x1, 0x1, 0x8}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x3}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x9}, @dmm={0x7, 0x24, 0x14, 0x7, 0x58c}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0xb, 0x6, 0xf8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0xe7, 0x5, 0x80}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0xa1, 0x6, 0xcb}}}}}}}]}}, &(0x7f00000067c0)={0xa, &(0x7f00000064c0)={0xa, 0x6, 0x110, 0x0, 0xff, 0x0, 0x10, 0x2}, 0x112, &(0x7f0000006500)={0x5, 0xf, 0x112, 0x5, [@generic={0xc8, 0x10, 0xa, "dabd58c2c778de7c0b66c8d1b69d5ab45db85c1f59e4836cd609678d812df586987d0e8cb96e235828b192dded7778e2da3a33c26cf382d4364619dbb38212c4f775b1de90921d99db0354a44fb6944d790e68b0086f716641dbec8457cfe5eae480579a04901b24d1aa9d112965a98fc5adf42a35729d2f180fead9e9513577775ae50a771eb05f3b8be8308a1744a8d399cbc3e09c87e5ae4c493c74e85d82d14723373b774c03d2cd93e830ec77f334b8088d9883968d616cfc421d5468f8966ed515eb"}, @ssp_cap={0x24, 0x10, 0xa, 0xc, 0x6, 0xa, 0xf00, 0x6, [0xc000, 0xc00f, 0xff0000, 0x3f00, 0xff3f00, 0xff3fc0]}, @ssp_cap={0x14, 0x10, 0xa, 0x4, 0x2, 0x7, 0x0, 0x2, [0xc000, 0x3fcf]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8, 0x10, 0x7}]}, 0x4, [{0x4, &(0x7f0000006640)=@lang_id={0x4, 0x3, 0x426}}, {0x3e, &(0x7f0000006680)=@string={0x3e, 0x3, "1c33eef8763b48ee0e1ea42ffd709ba39d9e7681d95c2d3e1a568b6de4d3f6ef8a54a7b0c280f0c47b883fb204ddd4d7f25117c00ab8aac0c401096c"}}, {0x4, &(0x7f00000066c0)=@lang_id={0x4, 0x3, 0x40e}}, {0xa4, &(0x7f0000006700)=@string={0xa4, 0x3, "f5d31b1a66f5654a2c6090acc2f823539546bd1cd269de526a8788ce7ba769507db453ddc0fb899c90a7ca7b51738f303f9b23dfbb143e4fc394b421b94e649754dabf50c57bdbc4d2e74863fd1efa8bff5cae71600f0f7d3253bbcb07b898e231f49a58c13e179de6ce4138ea24186b22d56d2dad85c80174db2320a3b456775e764cb6307785101a1622eefdfc1f09f319ed1481cbbdd17d450b040f904749a3cf"}}]}) syz_usb_disconnect(r16) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000006840)={0x2, [0x0, 0x0]}) 573.549201ms ago: executing program 6 (id=2615): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x0038', @ANYRES16=r2, @ANYBLOB="010025bd7000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="04007d80"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x22000000) 484.92923ms ago: executing program 2 (id=2616): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000012"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000040), 0x0, 0x2) preadv(r3, &(0x7f0000000740)=[{&(0x7f00000002c0)=""/195, 0xc3}], 0x1, 0x345c9763, 0xfaaf) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000002c0)=""/195, 0xc3}], 0x1, 0x3, 0xfaaf) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0xef, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="680000000206010100000000000000000000000005000100070000000900020073797a30000000001c00078005001500100000000800124000000000080008400000202113000300686173683a6e65742c696661636500000500050002000000050004"], 0x68}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000840)={{0x0, 0x2, 0xfffffffe, 0x3, 'syz1\x00', 0x2}, 0x3, 0x3, 0x10055, 0x0, 0x3, 0x65a2, 'syz1\x00', &(0x7f0000000200)=['%\x00', '1![\xb0\xfd\x00', 'l^\x00'], 0xb}) semtimedop(0x0, &(0x7f0000000240), 0x0, &(0x7f0000000780)={0x77359400}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r5, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x2, 0x40000000000, 0xfffffffffffffffe, 0xffffffefffffffff, 0x0, 0x4, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0xfffffeffbfffffff, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x3, 0x0, 0x0, 0x4000004, 0x0, 0x6, 0x0, 0x40, 0x0, 0xfffffffffffffffd, 0x100200000, 0xe, 0x6, 0x0, 0xfffffffffffffffe, 0x0, 0x9, 0x0, 0x10000, 0x1000, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x7, 0x10000, 0x7785, 0x0, 0x4, 0x4, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x0, 0x80000002000, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xb, 0x0, 0x80000000000000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10000000000, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x100, 0x81, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x2, 0x100000000000, 0xffffffffffffffff, 0x3, 0x7, 0x0, 0x7, 0xc0c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffeffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x80]}) readahead(0xffffffffffffffff, 0x100, 0x96) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) 319.014626ms ago: executing program 6 (id=2617): gettid() r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x1, 0x2}) ioctl$HIDIOCGDEVINFO(r1, 0x801c4803, &(0x7f0000000bc0)=""/230) 100.715677ms ago: executing program 7 (id=2618): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000000)={0x2e, &(0x7f0000000140)=[{0x1a, '\x00', @st={0x4, [{0x3, @uvalue=0x3}, {0x3, @uvalue=0x9}, {0x1, @uvalue=0xffffffbfffffffff}, {0x2, @svalue=0x5}]}, 0x80}]}) r1 = memfd_create(&(0x7f0000000040)='{\x00', 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f00000000c0)={0x1, 0x87}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000100), &(0x7f00000001c0)}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000600), 0x15c, 0x0, 0x1, 0xfffffffd}, 0x28) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000700)={0xffffffffffffffff, 0x7}, 0xc) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x406, r2) readv(r3, &(0x7f0000000540)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{0x1}, &(0x7f0000000740), &(0x7f0000000780)='%pI4 \x00'}, 0x20) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions'], 0x0, 0x0, 0x0) syz_fuse_handle_req(r4, &(0x7f000000a100)="58785f58471eb4b5b3ff3946acaad41068511507291e72541d949ffc8a54ff637ccef1fe8511899ea7f3c82cbc6539763a34f6760c1608c911801ca672e62708ba4fc023749076ff6a0daba0caa57000acbd9ecf5e97201f7f14e715bc8c089c3d65e92fd65dedb76d61715067ccf6dfec2b56a48f2b274b564d90c3d868f2bdc07b7e636ad78904bca826fa69b7783e7be2b8e7c997b99225467747875695f6d500cb82b479fe9486bb94e06f796f89906bbfccc964830f86986760ade90c3f7a9dde3172a5124c1889075ad30b5ee2a5f257a6ac790a8e89b247ccbc8d241b7b95f8fc649deffc1bc37d51a8c3dfae38ac968eb48695de38df941f9632ef9ad6779e41ccea8a3ff1cac4fa4b47a152a8f9a1bb0094f41580bbf60fa11cfaf2c535a12c866e9414ee9b58226fbdb0d221e1bdc50e3fa300351364f6350030383856f1f809aee19f337f3d3435ae6754916be1eec24643cec1bd1007ffa38418735988cc901603895f66bd6450d54f99e1246ded898499d2a447f899c00368ce1dd4a4f4cf9cdf7d4f8b38d7b98a598ac490f1086ec712b0cb94610abfdb25b0f6947b46e1dd628897ab68445568578049fa6140250a5d821d70f102fadc2fa273a6e486f250712ec847de3b02a121e19775311e8629045f3404bdfa3207aecdac43c3571b86a9423bd716aa67cb688f9ee4f2b14ea42c89f2766c78fd4ec41ab34eebb4256e885bd7e3abe4348772993bb630aa3397084bbc66cdad664d6a9d33767cc375a44dbc0b08931053a6780a796fd31e1d7c512599f9e010883a52c07ec0938ce1acb3fe3baac6af9fb7e9d7942662e41bd3626d240d5ed34ebcbcc0ccf1c3280c76fbf6cdfb04bdb2d3b4ec6a8961b1eb036b211eff6247b95039cc67d222f2ff122340c56d74b4fffa79a202144bb10ad766f1fd6b3276342baf2fdbd26e9563dadd01fce19d7ec025d05d0494e53229379d13c1cae48ec058cff0bc1ccdc94a74b11a9bc87c580bb6a3f45fe15d15d89bf6102dc1085bfe27b2ab462aaf642b8ceed519cf88b31e9e00fdc23e8f6967a72b4c38b2458656dbf26dd75586731bb519a97d0ff43f4358cd40c7ed371ae8a24f46e320d4c4c0a1b8c42f10908a1c283d8032d76f52d4509d78c2f3a0716c37bc0c786ce9174a88d468e88a6d154e4712778aecded0ca5de28e52c04e33672ecea5135438e908aa1bf00e65ba6dacc4bd018b7bb1c30aa5d9acc679220cb5e7207f1759bd7722d10469225aae24973031a21358532a63aab42f33b1f8f40d545fec7799703ba067592b34247fbc7375acdcb3883ace7d34cf33484f2cf662f3f0e18b5c475ae311fb20f6e6b85320b2bc37e56512dc27815b37bfd9f172be1a119197eb53b535c440f97f24724e1d466309c0f8556965bd02d75c3dbe2baa0c6a515db07af1f77306577d0b38f0aa8cb188cf5523368951b8210f4bfc6afa0d058ad84656d27a46faef225e6268396ecb54a5182591bff3a86792db5454e238afe7c26eae85fd3c1c060760d89223bbdbe8966ae2558f47d799839cd959c974b69ad262cf8ab4fee554288e767ede9bc5d7f0cfba05966ef7858e41db363122680abe978345d45e4b52b73fe9f52ad26371a5b0539d88aa0c572aa01a41b079dde5a14e031ad903629d06c8d85ad82828c25a9ba7ce0fef2316eb011643e47feca7d280833f8b3008841fb2d88ea84df65b03aa5baaa29d6234ed5db8db461fc5df77aad38690277cd5dac1ed3c23c9f2778295578561f9a4d31159a826b4b62b2a867e6e8a9514edddaacad22106880e6633fb2f3b17c8d10bec633d6128489f7253b3e3e38e5942743ddd1547dfab27a152549f61891e3a5ad17f733b042f7ef915ad7423b9719fee9142407fe1d10ec8b64a21cd24fd39de4496ca3f394f07149bdbf1393181b5afee090ff40ee31d34a9c6a113e3823fac425fa85e212de1a9f7c4937ba64f3327961fccf85e6fa29be12de9589671d60d4658b1562ce7dedcde8ec79d265c13f5e197b66989c3f067d2801fcd78bb92b45e55fb4089a7cd3b179284af782ae0327ba56fc307a281772384448ee465dccefe41be8d75c8cd0eb5c0217d7ca706848f9b82500b77c2d838cbd536304556af87d3b6fb9183b5dc9cf2d0f7ecbb24d9f790151b9c6092dfb2c14decbe6448362cd7c13515f66a99c37b56134d12e8c7f1a5b75e14e47f84d8658f0b65ea91014e2e4fd361f03dbf8ca509d426ca1bba7e43ce918268393ff16b17d9e1bb49fb2b4f6eeb8b4b226c79303b19412a55b7ea7c8774ccebd8d66abe117a8be9a3c4faea730902136df57aff991b59dd71610ba4c8e1cded8287c21c56526f4fb6c502ea73ae310d56640990b3e695b278de6e1eebd51108cf7547c0e457e5fdf59691baf080dd3f5dc3c9a10bd4cc5e10ba42d4d3d9dc4f7ebe0bd2981a1d6fb06f7457dca1e56fac3f0fa7ca19ec2fb7940ee837e960d93a73bf085eaa2888fe3025aadd33cae85d63273be6ae3a92e35d78602d8e23b9460f04b7c0e0e710d10fdb0dd3fa9b880865603500d81dc7e968e8046569830b526e441f25f8b0af47d524aa80fd7dd9c3f72facec2032e2c06bc33c6b739c5368bf54e32b6acdca9d2d14276a8348ae92bfbd60f6aceecf98f3c6fe70747499b25667a96c52e21236421b27deafbc6b5e2b8a4ea2a0d3cd5ee1a10f3153b529b5c04a1961223a943842e17ee0cd114ce6983536400fc40f3d4708436954803fd60caf2b5ed7e4ce90bc75385e2424191c6a5038fa15d99aade49fa1affe63fb73078a6bb4ee560b0b521aeb33f507bdf876829f4d3f695197468e41503a10870a8e6df800608ac33dfdecc03f64d03fb6180287a684063c7edfc8db1366f6bb502fe446085f6acc4741b273a0b736f0f55da28967390bc7434db54ad0da9d1d002ceaa5c3e53efa95e7aaa792db32501a072e669da29fb734d771a6fa8c753fb2fcc204e31d668992473e7937fcf751bc79b125db1725f2a495bd2a4207e4db8d44810a4db5113705c5cb8733866ade3375d1bdbcb965cbd927e7d285f2933bf037911959088b64cfac0ff1e39244f2e9416653ed87ec564eb686af1062354a8bd7034c1022cb0d0b6996762ef4a0a3ab4f3deb459f023a867a38fcad2a10fcf0872862b386ff7c5ea7ce13abb112d1f0ed0723870eccc76d16f7e3cc00e28945bb93d9f2bd8e2017993102f0824867ec141f20df951202a2ab1cd796516ca0b4fdd9e6de8b82fcd30f9ab85cf0a5547e1ad1ef1ad5be7a878a16864d7c06b4ae002f3ba485a9bb36b8a591ecb64a4a5c0fd3b4beb015f58ea4cfe190f3b46cc4d9108d10c52a9de859814edac575d2a3d937a9b31db049e70aa76c085ab63d61c1317205c228f7027fa39125de8fec40ed7982e36a7cfa9fedca30f0b692bd4c7794f6b56d69ada1fed168cf03cc57321fe37e3a8cea4bd093e87b657fe5acb13d2591bebb526301d16707eaa38e52f913f8aa3e27b2387ca1a217ac69966e287ad5cb0286535d5d00b7006661dbc7923a066945c1a2040a4e95d7b0de4dc8217bf1d4e9b6cccc671fdd9a5770c21e749b407df8c463a3bf17e47bfcba6a890a0435d3fbb7252fe072b149b7bfeb185b088686dd70e0c9cda275497b553aff2b319f7d7b0ed64002c5f9f6ccfc3d55d8c908d314487452f37a650f4561326a84c660b6111702a87db03595b5d080c60288203f091de9f78b997e47233f4bab9b044a98ab118a6c45b7ca746cc2fb90182a923d67216412e24a955c0c2307acc47bdd319955249d8412a5ccf444437f53f524c69ba0167c920f0c1f775cd1a225636200a9e4adf61f418d20f717339d0c8c5386af0936f628cc589a8d5581c1c8cad0b564a3f38b606473280a3fa586a5ba932fd38eeb23096df29a92ab54c409f88ef4f03217f0bb90fea539e629d8a025c802f6b5c3d735fe950c8ff7136e6db287851dfbffea1ef81491a50cb75a103367e85afa3484d6af865dfbca91dc05632b0d94aa384ee0c585424a5ddf80babe0b913b0a2eedda34c7ea7814642a69f8eae868274b16fe0f52fb60b201e6685dad3f419413d5b8186992855a25ffe0d4773a14c7977181a120cbc42af4f9acca3fee1d54ccc125ea49b62ab60c58a0ecdf50ee7c16f3b6b12b254fc08fcc85d409eef7c3f30cf705617f926a17e6588a9fd7e34be9fd863a7b157a2d9a336356d568c2d2dbaf76c2d2b2ff8703748b860e36f02b04d6e4f2fd49511f12ce395dc18622cd51948a32cc432cd797d8a68838cebbbdd9bcb6f2e85719785706012e894cb043bb9a53998131fd4aae3321d81fc001e718c4a99c0580af1d4a0c81665cc5adcf337c8bc00fc0fb3c7be0d5e5ff6a6fae5891858eafedbed69223170ccc71ce36ae439d769c3520972601fbab93f54808d6950cb7cf1e5a3b32d8c6a975e3adccca0b2ee28a4eb5ca3b0ceb9d31a8f767c3f4486a62215171738007675a55abf5916513f7eb9b21ff291f2b4b48bbfcf394cf861fe016b3680be422a8bff49963ce096d1bc17186822b1392e68b1a05fa6c70bd2d9a164f12301a6e78caa8f4cd437497320d383e752dd224aeef80794d3f206741363e74fa181c9f1dc47557553de620794f096c59ccd74a178f5adb466ad5a62fffc1886f56ebceca4ed46ed2396bcbc31160b4eb1b7d69642e33315e3adbdbe1b9794931e7babf745ecfca37dd4190013793d530df12d6521bc069a05a94e0ffe91900a0c2209a6914d2f85bd161ff77284198129a9b1ba600bda3e52769d39c1bd61c4a70c627c3ad89aa0bdf0c93a2c35e166da9a08b4d2f92deacb6e9034274305b6d254c4052868ba32bec9aa3cec75debe24e78e43374efffe444722a983935f9007fe3de37dd83c52be16e034d09592a179275dd0c91281be579cd19c0162123886893713f25cdae19cf258926bf2070741111eee6b3df708c3fc416b7d046c948bf8500779c0cd5460e640bb1f860f58052b8087e6eb2f16e48f4984c9f9fc9fb2652ac5305861ece5362db08ae912ba055af766da1322057d0bfa647d98b8d4f1e7ed43ecdf1050c0eb19dae93b8014da57241cdab4ffacf0ec1348d4a89b3e8ff187098d83d8eba34e5c7ad4215f1977968a9d337d08fd1188754e7cf41baf0189ccaa5f3b1005f807b0255ce1920ca7d919e4684af70c3d089a99922727c607a2b06e713dd61122842a913036f6cd64dfb313fbdf639fcbd712852bb85337d056685b0a54225ae27e1e8c7ce5acd1f017b8f712c268b9cc0ee26d26c63f0a8b0a40fccec5f945431a2e81c35720d178feb481092e4f51978493c5fd502f252bc0152f145f268ead14932990069169483ecc7abc901657460c8730715c078b61059bd2621f50fb838376e0b808a3f118f761efea45bbac4274016960063cc67c428e72e516685552dc3bf473e442d76f2d3ed07b319694490054302a538b52e3b8496b7e37fbf4a2ffff2b484f98fdb14c66ecb8447834733f8a7a5a3c83de34b6647842dd56d8201f9d9240f3b3a5b5cbccf174a08853d06fd164fe74e04608ae12df8a35b73517d22a87c7ebca60942932d03102ff7e8644611b5520b5ebce950945498ce19210c866e48284d18fb7e049deaa43ee5283e3dfad7316ba85490e93182d13efe7ba64ee5ceeaabcff3eb24d46a3a129dd5a6b82e8c48210cb1e6564833f3e15dda4dec383b4319741cebf6374cf2c5d64722afccf7c4e2d81ae28d45f2c35b764281f1f08fec8f8e9277277ae1ae8a8981f85e041d2450afc9374e978f73b66da9aadb2087223f28e21e946eb07710ec86cdcad0948d4ca93827ea34e28806d172c3feb83471ed2d4d7ada2360b209d16b9d35861082d85b6be3c3589a6bdaf6f9b5d52ac8fd7388e32b24f1d5d34b5442c1ceebde311decd709f075d064f07bc60ab14c101ef51039eed56ae1e0a374e3e956603737b3a16db684a81e9b8998a0bb9b17a0876a92b2a3b9924f44b16ae4c7ff376ea8a8c91b504c1dbeb522cf846fc3ec6b9a01f452eeb35cade34c6a0463b92c46e013ee7906ee934141870ddd1464ae688805933504a2dc7cb1f947e28bf22f5eea6afb5de3b950056bf44065b84fd5589385d0feec4ef1db4fb4b595957130e575dc383e3686f4674143debb23e17b398f32683fb4805f297369d0e5f2e63af6891491e4e37186b4a3dffbbdcfff63d1fea4e12d24ef96fde3ed7a323a3605cdf5eaa43da738004556c2c20aa30c40079bc2e9ebe102c1fcf5259f1e3acc6b2a2bc9da4d0b1252433c58a1810581152a235e93deabf7f728eace350bcc4db4f249d4234bbd858c4e61a0eda4e3db0ae530c78eb63425502d651fd0cb986341ba69c44ede18eb3ebf25b2336cdda02447a9e20426d8206368c63b5fd6828612d3b99f627e331bab0009579de8270c36aa03861c300d34f2a3703870712325190073e6c17d8699f6744acb1b5468f93b57ab0366796181a4f543511d7ea2b32606c33cda61e81ed1c2194d305be47a3f1a9145d023620af12e79ec188573526ec35b9ce44e95fdb3530bd0431dd12a227d0ffe317cda1bbd787979261d6c9cf728b3d6bec3ba6ae15a595a30fc242bc5f25d837c1c642219afcfe043bb68a82965574b8b2139789235b262cf4af95a538e6954acf8e27ac3c95328df6e4bd615a376cd96bbc9e0d9802fbb40f80a848225e076219e26e0e63f57330b8bda69ec8dbd8b3272798cbfbb085b1885a1c22b3e2df2a879020ac1110b7af4f53ac97f556596ba0e164df0c85842026a87cf9631c9c9d851549efd8ca37e3b863e88436d5da5f4d3b5b5528e2d08d92b0d3ac6a06a0699653718e93a25b5afe254a068e300751eb6c67e3f5a1813d58d428f1ec108b88ec81444ccb50e8452941510c11f2e80bfd712f64b32b686c92ce922baf6c8eed1e9f0717a654d53b3ce1001880de80b5b15362b20286db9dfdf6c41f48aae84d5ab12ac45310f0eefc56e54113bcf95c1b2a259895af2ae9c679de4e2b898bf8a40a199a2059f8248c1303351dca3fb38906a682f66a94ee660debd6eaaee7b2f1051781084b3c9d626263d011a3daf971b708750a77614753b89b5e1a77a52510ced5708083fb48c554dfd6aacfcf97650f3a3b3f97566050e76da968d4eceb83bc1e005ed1596d6e0ec5e2c90231e62496d7435ec5b28f805e3b7aefdd3718e4ff53065b8e4b15175d80eec59218d8278e711c6049bf6d62ae7069578e957135463d7616b37c1e4bf44d60dac6c7aa04cbbc4a64bb0cc0b059abb6b26f8ed5203232ddd8a6c5882e6e6c53068a71bc84c5834104e85bc96db2163798a3881929248b8c788e5bdc9e46e5f7f3f6ad43fad6fa381a0b924bd938702470b330fb90ba73d557c0d203d55edaed6e3a01aeb53b061dad57713ab27e1a9e0d06b534a65d85beb061bb5258bbb38179ea612a6f402affb8ca018ebf0d6f61d44d5a657c080c7d2dbc9b08c07713b17b0f173ada59b57abb401212f4f1fa026491b48d08cf46a704ab43e46de8ea596d68658523b61a156278b3b77bd1f4491381bfd874ed72b00675fd5b4b7c0ec13c6837434ba8e22230d32e7bb1287e488e14f5c5602cd4ca88012b244c7f23f4897e27027aa862ca139bc8b5fe14be7554832ab02e4ba19699a1e66825d94c7c44451062819a38d3376f0a3716b210c7adf4bfbbc303058aa2e054b3bd53539764f177b11b05451705550f90196997de3d1d480e500cd9d234078cb1a09c63d8911381d327402702c2765fe92b8ba3a0189b2b11b7460996c36eaae3ecb4f4e63bfafd7953ff086dfc0b12e616bbdca4707631467b830d244bd3f4371744bc8a4baac728a397818875d1b6a4a2f0d10be607122a6fe813f52e4456b8a5eb6c9ee0cf889f777a03cc26a055f9f259cfc4f8552b568a4b371260af062619dfb215ecfe7b318f8d627d2777bd5103d6ca2948d19d5812112962b63c2bf3d090ff19185dbc5ad49a580451de717c0baa288cd96669babe88a8b1ab6d0936c4c407878786695f46f59ef06c5c2166b661542c598b6e0551d490946182841184a7a0e669c6ccd73a342f65c4525dc7522dccab15fa72bd07588b5bca71635b9466ca72a504c74cca1c573e8d40d83d1b5c5326481ff8a2055a2e0fb997fe8e4787deaa2a8a57afe74a971e7f1f280895f2fc9d99c41416adef7b70ec47e7a12d0ca3c0ab1dba3c2d65bb172fde1fcd7f97692d3d8c9657e3277ce95947d59bf37dde3f35f7a5d76575f5c14caf7f0926c0896995a5f42efd0d38c42de202bea5b5db39bf697f9a96b54aefec723db523893186634763e7399bfa8029c2708dc817984528601c77a1d78bd4b2c85f10f5ca9363badcdab51a1b315cafa5c2ef64f60395f53efb9d60d89e1b2a5f147508c90d2b09476eee3cb9b5957669a77cd2c522909480dea9be3406d1779ffe4539f2e03efb5f8c2d040f0ea776ff869a36862246294d0ced556a129ef78327617052dc1ef5cfb4e5986ba2f0e063b90e1657d8977b58827a3c4e3d556eb3cf0540685f7c9eda461aa2ecc539fec3d2d56be99a518f11752f2be2f670c5fbe8010ac4eae0ede31c1a48f747ff2eac9fc069d3700a40bf5fcda80a3a4f5fa920f117a72de6da51195d2d7f0cc92ff7835bce2ba6b564832f582df56b24cf30c8297a826a4bbfe0afeb1da3e986b3d0a95509e0037d212a70178ecb246061e067238ea9238e4c4a9a7c6fc5dcba290970f50c52598423336c523f2de7580d059fb53934cb0beb208585e897fafeba30853e54badefa197478fe6b9f26ed0d33babb53acee7b7221d8e0cad7a6bd0d9383ced6391bf88ca7aa50c75c136075e87b92445f02fbbc92f7cb65fe2bbe0bf0c9fc2577da63a56f1efbeb276c1f4d01da6f6f7a842212d96dd45edcd2aee7f2c553ace15eb9336bb1804ec252998c5c8b25033894b05c01ce7c77b73ec0e239478c67d5378fe5a53fe6269025d54006e9bb1cbd09b81a39615517c609f3d74e377888f641587121f0f097b48d8be85800295ebab9407978a9cd379966577cb6e1f5261e4305696a2cdd50d8cb1964d3ae18ec730d40f9c782533efba47db8378c6aa15ce85985e211fff2659729599802a7b585cbef3a2762595f67e2054a0fb4457b146e7a656abb2c4b2387d760f7e5b8b7864132317d5ba29a662f50af8dc182d2fbe216db8e997ac856bc59855ca48999699cd6c5576cc47bf8a8c30638c7e08847e5083aa82068940409461d1065c2b53292d3ab145d5bb590bcd278e48ebd34920b18a2e1731c1855ae5a3ed637ff568d205a08cf98c58f5d79c99912e6c1ab257ece0d68ef13d69a56364419aac7df43f43d5faa9ad851c9810648f9050012e55475109ca3ada3452b78a7964377e0d862e022c73ca3ed6cee8c5fbb2d7c12f91c4851fea7c5b02e0a3c5364b7fcca110f20f8858465c498d7e9c6049417fc5c7d4e0059852a6d794af426e938a401cf43b2ba9f4f3f6f0f2eb710ecf3c0c36c4b3072597f805eca9cb14602292ec7d5601e6b1555c8d024aa4bb81a4cff98cb03725cb184ea7dbed6814106a1402bf68a2e51660af930a500d5530651a0dbf2fdc01a31a99be25350b5c8a5fe01155343d028c03e09009ef2c386a24eba8d842cac581402c8faec7dca1623afe25a230d8d4a8bd23df3cf12abedc2a50e387285acf1b3105011a2bdefb204a53b20be213b50f5244511f25852271e05c03fb9a799ac7ea675ffbde8de181368748a9707674e7e70f28a75e4036b6cf9e0693f91a65be4478b6630067ad8dae030a4b7b9784a206b2f7cfeeefc65aae11fc20190f4d6387bab05fa6de640bfbfb0c4f604878771aeace0676d12325e61b19a5317c4d4bb9fe6f3fc8b171f1116528b7cbcc4a91c26a729b512196828075f4d0aeac98887e2a6a19b4e1f1f66233962961c0d49df14c3e6123c9ec8dd7152ad045000107365fd5ed7ce6a6d65ae0736a7e227f77c9b0903d4589ac58ceb691583cdb93ae3fc792c886663cb7c5b0640deb66e29b3c69d2f1a3d1d47d7b672ee3c49e90bd406aa84a0189808924c4e67c5495b045e779c58ca65b42889f52d7315c66be3716dc8592b4875629cd0cb02c29d42bdf9ca5c16bc9051c2a6c09d0695bfba58c19a995838c022e9936c407d8999aa65e4a9d6d8eff99f8dcfac9b561375b6d1293441b9d32533161062c053c63ef09f6100cd748700a710f5bfc2a6297b15242b1f41e21bd004b885d6429a0d334a8c115f7d53d278dad24c9d295b97c50eb340d1e6d523f1757e2014c1605c3bd35f0cfdb74f79850423a37e2f95dfe41c56df09724d21065377f1818311f0c70aaf6fb2d4fc8d9eef576136617371d85481770ce9c390859eacfebba34e75a238ce80bcccadd6c42e8e186be3c15451131fbe9e345c05ab8e23f917d269686a9b5f06dd474f95757b9e5a3328416595539cbdfa69efa9702e5a268b1a70c6e5ff2c118a6e574bfecf17b1576e4f2f7ee566b0b2b5388476a68562991ac01412fa463b0f9e586ad4bde59e91a4b303268b5d8644cb7996cfbba422facd59875ed6ac057e563412255c412be0928a0b6fdb6f35d7008b5d5528ca796a4a69bd90b993a52da9c7d62f4b71a2763f822bb39f3ed39cc5ad5a4d51b5c27d31d105000f3f1e705ed5c42067106f3fe6d30151021bcab7f3a1ad9175b3d3644325aa676b9e057bf9d9aa3348b1d9b31bd639c59bb63f46a6c18794ae006db3b1ee20368160a82e26aee5a9fdc6b44df8be294f3ac0a1275e57ebf5e384b141ce89dd51aaf2248274468894645ba54bc4e6b9788b1eb5043c1f0dffe2e13c6179d0238d8cd037b6fe3e484445ab458fa09e4e8010d3288aa6e6cdbfba4b62c7984d058da8993d5de1df75a1ce8e3bd5875709fd2ede4cd5843e7102ed4031ed096a0c6e3ae9d522ad95ef4af83599507dd32fe3325819cdd7718c9797e921e6e365175e1dd53991edcd2baf27df8b1670d01967e97b3e3e75d297f908deedf2e3b91bd61973e8aa75a5a6f9db11525dd35556bbd13873602a320af74677832f93bd01f1e0631c882c8ab254a26b73a60a6c90cf9b96bd576e05b9befbce882c5d29198451bd15acaa894a5276ea9d870f49a33ee9d2429ef35a905b281deb75be54fa0c9e47be5876d7dce01986f2d0e7ae6df9b87a0ba6cfa55cec0c65dd386db5adc427eac18a00c9aded475417add4ebb8880ef3dd218a9ec3e6e13456f8de1630774e918fe5288dbaec3dd2a74698ec9e28ad573761b9e78af3d5c7a61e3eefc1a54c25bb841529b3fc9137836a2e7eff5ffae8e44f0257160da51ec0b3d144b92f1f43d2782513705baf5930903602d40cb4de87feca7243d2248a78a5d684e303ae147acc96e0b755eea77092b5f6efa723afc6c9a44c575738725815a9af1ced500", 0x2000, &(0x7f0000000200)={&(0x7f0000000400)={0x50, 0x0, 0x100000001, {0x7, 0x28, 0x7a, 0x2143040, 0x4, 0x9, 0x2, 0xfffffffc, 0x0, 0x0, 0x190, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f0000004080)="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", 0x2000, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x78, 0x0, 0x7, {0xfffffffffffffffe, 0x1, 0x0, {0x1, 0x2000000069ec2dea, 0x2, 0x40000006, 0x6dc9, 0x3ff, 0x9, 0x3, 0xe000, 0x601d824b499141fb, 0xcd35, 0xee01, 0xffffffffffffffff, 0x5, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2000) read$FUSE(r4, &(0x7f0000006080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r4, &(0x7f0000000040)={0x10, 0x0, r5}, 0x10) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r7 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r7, 0xffff) fcntl$addseals(r7, 0x409, 0x7) r8 = ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000000)={r7, 0x0, 0x0, 0x8000}) lseek(r8, 0x19, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000800)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0d000000ba00000008bb2fe8000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/18], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f00000001c0)={'veth1_macvtap\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x4b, 0x2f, "67856f081d9fc303c68bf9098547cc93f2810444f3dd504caa9e071d33306b55cfcf22c90300"/47}}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000840)={0xffffffffffffffff, 0x4, 0x8}, 0xc) 0s ago: executing program 3 (id=2619): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xe26, 0x101400) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r2, 0xc0045520, &(0x7f00000000c0)=""/92) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22003, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0xa, 0x401, 0xf, 0xff, 0x92, 0x8000000800000001, 0x50, 0x10001, 0xb1d, 0x4000000000000008, 0xffff, 0x1081, 0x3, 0x986, 0xe5, 0x9], 0x10000, 0x3837c2}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f00000001c0)={&(0x7f0000ffe000/0x2000)=nil}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r7) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWCHAIN={0x68, 0x3, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x80}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET_ID={0x8}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}, @NFTA_LOOKUP_SREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x10c}}, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) kernel console output (not intermixed with test programs): x3a0/0x420 [ 573.520280][T13402] ? __fget_files+0x2a/0x420 [ 573.520302][T13402] security_file_ioctl+0xc3/0x2a0 [ 573.520323][T13402] __se_sys_ioctl+0x47/0x170 [ 573.520349][T13402] do_syscall_64+0xe2/0xf80 [ 573.520366][T13402] ? rcu_is_watching+0x15/0xb0 [ 573.520382][T13402] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.520400][T13402] ? clear_bhb_loop+0x60/0xb0 [ 573.520421][T13402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.520445][T13402] RIP: 0033:0x7f609cf9aeb9 [ 573.520462][T13402] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 573.520478][T13402] RSP: 002b:00007f609ddcf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 573.520497][T13402] RAX: ffffffffffffffda RBX: 00007f609d215fa0 RCX: 00007f609cf9aeb9 [ 573.520510][T13402] RDX: 0000000000000000 RSI: 0000000040044581 RDI: 0000000000000007 [ 573.520522][T13402] RBP: 00007f609ddcf090 R08: 0000000000000000 R09: 0000000000000000 [ 573.520534][T13402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 573.520545][T13402] R13: 00007f609d216038 R14: 00007f609d215fa0 R15: 00007f609d33fa48 [ 573.520575][T13402] [ 573.520610][T13402] ERROR: Out of memory at tomoyo_realpath_from_path. [ 575.075619][T13425] netlink: 'syz.0.2062': attribute type 3 has an invalid length. [ 575.212211][T13429] netlink: 38 bytes leftover after parsing attributes in process `syz.2.2065'. [ 575.647488][T13442] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2067'. [ 575.788902][T13446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 575.801888][T13446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.357630][T13450] netlink: 'syz.6.2069': attribute type 4 has an invalid length. [ 577.545463][T13466] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2073'. [ 578.909711][T13477] netlink: 38 bytes leftover after parsing attributes in process `syz.2.2078'. [ 578.949470][ T5907] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 579.131084][ T5907] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 579.154207][ T5907] usb 8-1: New USB device found, idVendor=045e, idProduct=02bf, bcdDevice=9e.06 [ 579.296168][T13484] loop5: detected capacity change from 0 to 7 [ 579.339901][ T5907] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.359749][T13484] Dev loop5: unable to read RDB block 7 [ 579.405591][ T5907] usb 8-1: config 0 descriptor?? [ 579.415455][T13484] loop5: unable to read partition table [ 579.426557][ T5907] gspca_main: kinect-2.14.0 probing 045e:02bf [ 579.459221][T13484] loop5: partition table beyond EOD, truncated [ 579.470736][T13484] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 579.629803][T13471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 579.638461][T13471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 579.647943][ T5917] usb 8-1: USB disconnect, device number 5 [ 580.502089][T13498] loop5: detected capacity change from 0 to 7 [ 580.541911][T13498] Dev loop5: unable to read RDB block 7 [ 580.558903][T13498] loop5: unable to read partition table [ 580.588453][T13498] loop5: partition table beyond EOD, truncated [ 580.609842][T13498] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 580.746848][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 580.746866][ T30] audit: type=1326 audit(1770398928.554:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13497 comm="syz.7.2083" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1e16d9aeb9 code=0x0 [ 580.840933][T13501] 8021q: adding VLAN 0 to HW filter on device bond3 [ 580.853433][T13501] bond0: (slave bond3): Enslaving as an active interface with an up link [ 580.855021][T13507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 580.899709][T13507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.349645][ T5907] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 581.542729][ T5907] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 581.553507][ T5907] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 581.613996][ T5907] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 581.634638][ T5907] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.657091][ T5907] usb 7-1: Product: syz [ 581.661763][ T5907] usb 7-1: Manufacturer: syz [ 581.673316][T13527] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 581.681572][ T5907] usb 7-1: SerialNumber: syz [ 581.695704][ T5907] usb 7-1: config 0 descriptor?? [ 581.836362][ T5907] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 582.247100][T12611] udevd[12611]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 583.706220][T13546] FAULT_INJECTION: forcing a failure. [ 583.706220][T13546] name failslab, interval 1, probability 0, space 0, times 0 [ 583.743973][T13546] CPU: 0 UID: 0 PID: 13546 Comm: syz.2.2097 Tainted: G L syzkaller #0 PREEMPT(full) [ 583.743998][T13546] Tainted: [L]=SOFTLOCKUP [ 583.744002][T13546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 583.744009][T13546] Call Trace: [ 583.744014][T13546] [ 583.744019][T13546] dump_stack_lvl+0xe8/0x150 [ 583.744037][T13546] should_fail_ex+0x412/0x560 [ 583.744054][T13546] should_failslab+0xa8/0x100 [ 583.744066][T13546] kmem_cache_alloc_noprof+0x87/0x6e0 [ 583.744082][T13546] ? skb_clone+0x212/0x3a0 [ 583.744100][T13546] skb_clone+0x212/0x3a0 [ 583.744115][T13546] __netlink_deliver_tap+0x404/0x850 [ 583.744133][T13546] ? netlink_deliver_tap+0x2e/0x1b0 [ 583.744144][T13546] netlink_deliver_tap+0x19c/0x1b0 [ 583.744155][T13546] __netlink_sendskb+0x47/0x90 [ 583.744171][T13546] netlink_dump+0xa6f/0xe80 [ 583.744187][T13546] ? __pfx_netlink_dump+0x10/0x10 [ 583.744196][T13546] ? __netlink_lookup+0x7e4/0x8b0 [ 583.744215][T13546] ? netlink_lookup+0x30/0x200 [ 583.744227][T13546] ? netlink_lookup+0x30/0x200 [ 583.744241][T13546] ? netlink_lookup+0x30/0x200 [ 583.744261][T13546] __netlink_dump_start+0x5cb/0x7e0 [ 583.744284][T13546] rtnetlink_rcv_msg+0xa3a/0xbe0 [ 583.744305][T13546] ? __pfx_tc_dump_chain+0x10/0x10 [ 583.744324][T13546] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 583.744338][T13546] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 583.744348][T13546] ? ref_tracker_free+0x693/0x840 [ 583.744360][T13546] ? __pfx_rtnl_dumpit+0x10/0x10 [ 583.744371][T13546] ? __pfx_tc_dump_chain+0x10/0x10 [ 583.744383][T13546] ? __skb_clone+0x63/0x7a0 [ 583.744400][T13546] netlink_rcv_skb+0x232/0x4b0 [ 583.744412][T13546] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 583.744424][T13546] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 583.744439][T13546] ? netlink_deliver_tap+0x2e/0x1b0 [ 583.744453][T13546] netlink_unicast+0x80f/0x9b0 [ 583.744473][T13546] ? __pfx_netlink_unicast+0x10/0x10 [ 583.744486][T13546] ? __alloc_skb+0x193/0x390 [ 583.744498][T13546] ? netlink_sendmsg+0x650/0xb40 [ 583.744507][T13546] ? skb_put+0x11b/0x210 [ 583.744521][T13546] netlink_sendmsg+0x813/0xb40 [ 583.744536][T13546] ? __pfx_netlink_sendmsg+0x10/0x10 [ 583.744548][T13546] ? aa_sock_msg_perm+0xf1/0x1b0 [ 583.744561][T13546] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 583.744574][T13546] ? __pfx_netlink_sendmsg+0x10/0x10 [ 583.744591][T13546] ____sys_sendmsg+0xa68/0xad0 [ 583.744605][T13546] ? __might_fault+0xaf/0x130 [ 583.744622][T13546] ? __pfx_____sys_sendmsg+0x10/0x10 [ 583.744639][T13546] ? import_iovec+0x73/0xa0 [ 583.744656][T13546] ___sys_sendmsg+0x2a5/0x360 [ 583.744669][T13546] ? __lock_acquire+0x6b5/0x2cf0 [ 583.744685][T13546] ? __pfx____sys_sendmsg+0x10/0x10 [ 583.744715][T13546] ? __fget_files+0x2a/0x420 [ 583.744725][T13546] ? __fget_files+0x3a0/0x420 [ 583.744741][T13546] __x64_sys_sendmsg+0x1bd/0x2a0 [ 583.744756][T13546] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 583.744773][T13546] ? __pfx_ksys_write+0x10/0x10 [ 583.744794][T13546] do_syscall_64+0xe2/0xf80 [ 583.744805][T13546] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.744814][T13546] ? trace_irq_disable+0x37/0x100 [ 583.744824][T13546] ? clear_bhb_loop+0x60/0xb0 [ 583.744836][T13546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.744846][T13546] RIP: 0033:0x7fe67099aeb9 [ 583.744856][T13546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 583.744865][T13546] RSP: 002b:00007fe671905028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 583.744877][T13546] RAX: ffffffffffffffda RBX: 00007fe670c15fa0 RCX: 00007fe67099aeb9 [ 583.744885][T13546] RDX: 0000000020004800 RSI: 0000200000006040 RDI: 0000000000000008 [ 583.744891][T13546] RBP: 00007fe671905090 R08: 0000000000000000 R09: 0000000000000000 [ 583.744897][T13546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 583.744903][T13546] R13: 00007fe670c16038 R14: 00007fe670c15fa0 R15: 00007fe670d3fa48 [ 583.744919][T13546] [ 584.375366][ T9] usb 7-1: USB disconnect, device number 46 [ 584.534676][T13555] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2098'. [ 584.733239][T13559] syzkaller0: entered promiscuous mode [ 584.744620][T13559] syzkaller0: entered allmulticast mode [ 585.530612][ T9] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 585.862839][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 585.953432][ T9] usb 7-1: config 0 has no interfaces? [ 585.969750][ T9] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 585.981971][ T9] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 585.994877][ T9] usb 7-1: Manufacturer: syz [ 586.011516][ T9] usb 7-1: config 0 descriptor?? [ 586.888548][T13595] netlink: 26 bytes leftover after parsing attributes in process `syz.3.2112'. [ 587.910929][ T5907] usb 7-1: USB disconnect, device number 47 [ 588.042573][ T9] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 588.226600][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 588.246157][ T9] usb 1-1: config 0 has no interfaces? [ 588.328994][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 588.378322][ T9] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 588.398885][ T9] usb 1-1: Manufacturer: syz [ 588.437968][ T9] usb 1-1: config 0 descriptor?? [ 589.174613][T13619] loop6: detected capacity change from 0 to 2640 [ 589.182146][T13619] buffer_io_error: 10 callbacks suppressed [ 589.182161][T13619] Buffer I/O error on dev loop6, logical block 0, async page read [ 589.206057][T13619] Buffer I/O error on dev loop6, logical block 0, async page read [ 589.224135][T13619] Buffer I/O error on dev loop6, logical block 0, async page read [ 589.245676][T13619] Buffer I/O error on dev loop6, logical block 0, async page read [ 589.259916][T13619] Buffer I/O error on dev loop6, logical block 0, async page read [ 589.369771][T13619] Buffer I/O error on dev loop6, logical block 0, async page read [ 589.400790][T13619] Buffer I/O error on dev loop6, logical block 0, async page read [ 589.411999][T13619] Buffer I/O error on dev loop6, logical block 0, async page read [ 589.422859][T13619] ldm_validate_partition_table(): Disk read failed. [ 589.449908][T13619] Buffer I/O error on dev loop6, logical block 0, async page read [ 589.466054][T13619] Buffer I/O error on dev loop6, logical block 0, async page read [ 589.489570][T13619] Dev loop6: unable to read RDB block 0 [ 589.495302][T13619] loop6: unable to read partition table [ 589.518484][T13625] dlm: non-version read from control device 8224 [ 589.591841][T13619] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 589.878333][ T5904] IPVS: starting estimator thread 0... [ 589.886909][T13631] loop5: detected capacity change from 0 to 7 [ 589.918283][T13631] Dev loop5: unable to read RDB block 7 [ 589.996388][T13632] IPVS: using max 55 ests per chain, 132000 per kthread [ 590.023059][ T5904] usb 1-1: USB disconnect, device number 69 [ 590.089037][T13631] loop5: unable to read partition table [ 590.129794][T13631] loop5: partition table beyond EOD, truncated [ 590.146499][T13631] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 590.225190][T13636] fuse: Unknown parameter 'g6ª£%àFÃÇœ0x0000000000000003' [ 590.317490][ T30] audit: type=1326 audit(1770398938.124:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13638 comm="syz.2.2124" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe67099aeb9 code=0x0 [ 590.729485][ T9] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 591.289982][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 591.297463][ T9] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 591.307188][ T9] usb 1-1: can't read configurations, error -61 [ 591.476684][ T9] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 591.659816][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 591.684457][ T9] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 591.694173][ T9] usb 1-1: can't read configurations, error -61 [ 591.709963][ T9] usb usb1-port1: attempt power cycle [ 592.081033][ T9] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 592.141246][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 592.149287][ T9] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 592.163248][ T9] usb 1-1: can't read configurations, error -61 [ 592.281189][T13669] Cannot find add_set index 0 as target [ 592.294552][T13669] netdevsim netdevsim7: Direct firmware load for / [ 592.294552][T13669] failed with error -2 [ 592.305950][T13669] netdevsim netdevsim7: Falling back to sysfs fallback for: / [ 592.305950][T13669] [ 592.355128][ T9] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 592.400541][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 592.410407][ T9] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 592.418316][ T9] usb 1-1: can't read configurations, error -61 [ 592.425537][ T9] usb usb1-port1: unable to enumerate USB device [ 592.700845][T13674] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 592.989601][ T5907] usb 7-1: new full-speed USB device number 48 using dummy_hcd [ 593.129498][ T5907] usb 7-1: device descriptor read/64, error -71 [ 593.228762][T13681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 593.334818][T13681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 593.393658][ T5907] usb 7-1: new full-speed USB device number 49 using dummy_hcd [ 593.402232][T13681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 593.426859][T13682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 593.427001][T13681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 593.491718][T13682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 593.559557][ T5907] usb 7-1: device descriptor read/64, error -71 [ 593.694849][ T5907] usb usb7-port1: attempt power cycle [ 594.098161][ T5907] usb 7-1: new full-speed USB device number 50 using dummy_hcd [ 594.130236][ T5907] usb 7-1: device descriptor read/8, error -71 [ 594.449520][ T5907] usb 7-1: new full-speed USB device number 51 using dummy_hcd [ 594.470288][ T5907] usb 7-1: device descriptor read/8, error -71 [ 594.591664][ T5907] usb usb7-port1: unable to enumerate USB device [ 595.350236][T13725] FAULT_INJECTION: forcing a failure. [ 595.350236][T13725] name failslab, interval 1, probability 0, space 0, times 0 [ 595.363037][T13725] CPU: 0 UID: 0 PID: 13725 Comm: syz.0.2149 Tainted: G L syzkaller #0 PREEMPT(full) [ 595.363065][T13725] Tainted: [L]=SOFTLOCKUP [ 595.363072][T13725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 595.363084][T13725] Call Trace: [ 595.363092][T13725] [ 595.363101][T13725] dump_stack_lvl+0xe8/0x150 [ 595.363128][T13725] should_fail_ex+0x412/0x560 [ 595.363155][T13725] should_failslab+0xa8/0x100 [ 595.363176][T13725] kmem_cache_alloc_noprof+0x87/0x6e0 [ 595.363201][T13725] ? dst_alloc+0x105/0x170 [ 595.363229][T13725] dst_alloc+0x105/0x170 [ 595.363255][T13725] ip_route_input_rcu+0x23e5/0x3130 [ 595.363289][T13725] ? __pfx_ip_route_input_rcu+0x10/0x10 [ 595.363310][T13725] ? inet_ehashfn+0x8d/0x220 [ 595.363359][T13725] ? ip_route_input_noref+0xad/0x270 [ 595.363381][T13725] ip_route_input_noref+0x17c/0x270 [ 595.363404][T13725] ? __pfx_ip_route_input_noref+0x10/0x10 [ 595.363430][T13725] ? tcp_v4_early_demux+0x4b3/0x9a0 [ 595.363453][T13725] ? tcp_v4_early_demux+0x5c1/0x9a0 [ 595.363477][T13725] ip_rcv_finish_core+0x5af/0x1c00 [ 595.363507][T13725] ip_rcv_finish+0x14c/0x2f0 [ 595.363527][T13725] NF_HOOK+0x336/0x3c0 [ 595.363546][T13725] ? __pfx_ip_rcv_finish+0x10/0x10 [ 595.363561][T13725] ? NF_HOOK+0x9e/0x3c0 [ 595.363577][T13725] ? __pfx_NF_HOOK+0x10/0x10 [ 595.363595][T13725] ? __pfx_ip_rcv_finish+0x10/0x10 [ 595.363619][T13725] ? netif_receive_skb+0x102/0xbb0 [ 595.363636][T13725] ? __pfx_ip_rcv+0x10/0x10 [ 595.363652][T13725] netif_receive_skb+0x45b/0xbb0 [ 595.363676][T13725] ? __pfx_netif_receive_skb+0x10/0x10 [ 595.363700][T13725] ? tun_rx_batched+0x185/0x790 [ 595.363721][T13725] tun_rx_batched+0x1de/0x790 [ 595.363746][T13725] ? __pfx_tun_rx_batched+0x10/0x10 [ 595.363764][T13725] ? tun_get_user+0x2669/0x3dd0 [ 595.363783][T13725] ? tun_get_user+0x2669/0x3dd0 [ 595.363805][T13725] ? tun_get_user+0x2354/0x3dd0 [ 595.363823][T13725] ? __local_bh_enable_ip+0xd0/0x130 [ 595.363844][T13725] ? tun_get_user+0x2669/0x3dd0 [ 595.363860][T13725] tun_get_user+0x2a78/0x3dd0 [ 595.363898][T13725] ? aa_file_perm+0x440/0x1630 [ 595.363919][T13725] ? __pfx_tun_get_user+0x10/0x10 [ 595.363940][T13725] ? __lock_acquire+0x6b5/0x2cf0 [ 595.363977][T13725] ? ref_tracker_alloc+0x363/0x4d0 [ 595.364002][T13725] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 595.364025][T13725] ? tun_get+0x1c/0x2f0 [ 595.364043][T13725] ? tun_get+0x1c/0x2f0 [ 595.364066][T13725] ? tun_get+0x1c/0x2f0 [ 595.364083][T13725] ? tun_get+0x1c/0x2f0 [ 595.364106][T13725] tun_chr_write_iter+0x113/0x200 [ 595.364127][T13725] vfs_write+0x61d/0xb90 [ 595.364160][T13725] ? __pfx_vfs_write+0x10/0x10 [ 595.364192][T13725] ? __fget_files+0x2a/0x420 [ 595.364220][T13725] ksys_write+0x150/0x270 [ 595.364246][T13725] ? __pfx_ksys_write+0x10/0x10 [ 595.364280][T13725] do_syscall_64+0xe2/0xf80 [ 595.364299][T13725] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.364316][T13725] ? trace_irq_disable+0x37/0x100 [ 595.364333][T13725] ? clear_bhb_loop+0x60/0xb0 [ 595.364354][T13725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.364373][T13725] RIP: 0033:0x7f0dbf75b78e [ 595.364390][T13725] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 595.364406][T13725] RSP: 002b:00007f0dc05c6fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 595.364425][T13725] RAX: ffffffffffffffda RBX: 00007f0dc05c76c0 RCX: 00007f0dbf75b78e [ 595.364444][T13725] RDX: 0000000000000042 RSI: 0000200000000100 RDI: 00000000000000c8 [ 595.364455][T13725] RBP: 00007f0dc05c7090 R08: 0000000000000000 R09: 0000000000000000 [ 595.364467][T13725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 595.364478][T13725] R13: 00007f0dbfa16038 R14: 00007f0dbfa15fa0 R15: 00007f0dbfb3fa48 [ 595.364509][T13725] [ 596.256059][T13742] FAULT_INJECTION: forcing a failure. [ 596.256059][T13742] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 596.288509][T13742] CPU: 0 UID: 0 PID: 13742 Comm: syz.3.2155 Tainted: G L syzkaller #0 PREEMPT(full) [ 596.288539][T13742] Tainted: [L]=SOFTLOCKUP [ 596.288546][T13742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 596.288556][T13742] Call Trace: [ 596.288565][T13742] [ 596.288572][T13742] dump_stack_lvl+0xe8/0x150 [ 596.288599][T13742] should_fail_ex+0x412/0x560 [ 596.288624][T13742] _copy_to_user+0x31/0xb0 [ 596.288649][T13742] simple_read_from_buffer+0xe1/0x170 [ 596.288672][T13742] proc_fail_nth_read+0x1bb/0x230 [ 596.288697][T13742] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 596.288722][T13742] ? rw_verify_area+0x2a6/0x4d0 [ 596.288745][T13742] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 596.288768][T13742] vfs_read+0x20c/0xa70 [ 596.288789][T13742] ? fdget_pos+0x246/0x320 [ 596.288813][T13742] ? __pfx___mutex_lock+0x10/0x10 [ 596.288833][T13742] ? __pfx_vfs_read+0x10/0x10 [ 596.288855][T13742] ? __fget_files+0x2a/0x420 [ 596.288877][T13742] ? __fget_files+0x3a0/0x420 [ 596.288894][T13742] ? __fget_files+0x2a/0x420 [ 596.288920][T13742] ksys_read+0x150/0x270 [ 596.288950][T13742] ? __pfx_ksys_read+0x10/0x10 [ 596.288982][T13742] do_syscall_64+0xe2/0xf80 [ 596.289008][T13742] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.289025][T13742] ? trace_irq_disable+0x37/0x100 [ 596.289042][T13742] ? clear_bhb_loop+0x60/0xb0 [ 596.289062][T13742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.289080][T13742] RIP: 0033:0x7f609cf5b78e [ 596.289096][T13742] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 596.289111][T13742] RSP: 002b:00007f609ddcefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 596.289131][T13742] RAX: ffffffffffffffda RBX: 00007f609ddcf6c0 RCX: 00007f609cf5b78e [ 596.289145][T13742] RDX: 000000000000000f RSI: 00007f609ddcf0a0 RDI: 0000000000000005 [ 596.289155][T13742] RBP: 00007f609ddcf090 R08: 0000000000000000 R09: 0000000000000000 [ 596.289166][T13742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 596.289177][T13742] R13: 00007f609d216038 R14: 00007f609d215fa0 R15: 00007f609d33fa48 [ 596.289207][T13742] [ 596.809869][T13749] xt_connbytes: Forcing CT accounting to be enabled [ 596.816697][T13749] Cannot find del_set index 1 as target [ 596.914562][T13754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 596.943999][T13754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.408193][ T5907] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 599.264571][T13771] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2161'. [ 599.877769][T13775] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2162'. [ 600.156466][T13780] netlink: 'syz.3.2163': attribute type 1 has an invalid length. [ 600.257245][T13780] 8021q: adding VLAN 0 to HW filter on device bond2 [ 600.405341][T13780] bond2: (slave gretap1): making interface the new active one [ 600.447677][T13780] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 601.004274][ T30] audit: type=1326 audit(1770398948.814:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13790 comm="syz.7.2167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e16d9aeb9 code=0x7ffc0000 [ 601.061796][ T30] audit: type=1326 audit(1770398948.814:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13790 comm="syz.7.2167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e16d9aeb9 code=0x7ffc0000 [ 601.129950][ T30] audit: type=1326 audit(1770398948.814:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13790 comm="syz.7.2167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1e16d9aeb9 code=0x7ffc0000 [ 601.199776][T13797] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 601.230195][ T30] audit: type=1326 audit(1770398948.814:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13790 comm="syz.7.2167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e16d9aeb9 code=0x7ffc0000 [ 601.304440][ T30] audit: type=1326 audit(1770398948.814:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13790 comm="syz.7.2167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1e16d9aeb9 code=0x7ffc0000 [ 601.359470][ T30] audit: type=1326 audit(1770398948.814:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13790 comm="syz.7.2167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e16d9aeb9 code=0x7ffc0000 [ 601.393420][ T30] audit: type=1326 audit(1770398948.814:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13790 comm="syz.7.2167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1e16d9c747 code=0x7ffc0000 [ 601.466776][ T30] audit: type=1326 audit(1770398948.814:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13790 comm="syz.7.2167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f1e16d5b78e code=0x7ffc0000 [ 601.490300][T13803] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 601.694483][ T30] audit: type=1326 audit(1770398948.814:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13790 comm="syz.7.2167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f1e16d5b78e code=0x7ffc0000 [ 601.747010][T13808] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2171'. [ 601.788764][ T30] audit: type=1326 audit(1770398948.814:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13790 comm="syz.7.2167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f1e16d5b78e code=0x7ffc0000 [ 602.834956][T13823] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2174'. [ 603.975428][T13835] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2176'. [ 604.281615][T13838] loop2: detected capacity change from 0 to 7 [ 604.323664][T13838] Dev loop2: unable to read RDB block 7 [ 604.356769][T13838] loop2: unable to read partition table [ 604.375224][T13838] loop2: partition table beyond EOD, truncated [ 604.409433][T13838] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 606.432176][T13859] kvm: vcpu 0: requested 6784 ns lapic timer period limited to 200000 ns [ 606.448352][T13859] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 607.005780][T13878] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 608.749819][T13899] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2189'. [ 608.899087][T13901] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2190'. [ 609.479741][ T5824] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 609.686322][ T5904] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 610.171644][ T5824] usb 7-1: Using ep0 maxpacket: 16 [ 610.219068][ T5904] usb 1-1: Using ep0 maxpacket: 16 [ 610.256855][ T5824] usb 7-1: config 0 has no interfaces? [ 610.312666][ T5904] usb 1-1: config 0 has no interfaces? [ 610.338989][ T5824] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 610.479706][ T5824] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 610.506802][ T5824] usb 7-1: Manufacturer: syz [ 610.592824][ T5824] usb 7-1: config 0 descriptor?? [ 610.609569][ T5904] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 610.639107][ T5904] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 610.662011][ T5904] usb 1-1: Manufacturer: syz [ 610.688053][ T5904] usb 1-1: config 0 descriptor?? [ 612.129807][ T5826] usb 7-1: USB disconnect, device number 53 [ 612.507467][T13941] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2201'. [ 613.915501][ T9] usb 1-1: USB disconnect, device number 74 [ 614.667485][T13980] FAULT_INJECTION: forcing a failure. [ 614.667485][T13980] name failslab, interval 1, probability 0, space 0, times 0 [ 614.714365][T13980] CPU: 1 UID: 0 PID: 13980 Comm: syz.2.2209 Tainted: G L syzkaller #0 PREEMPT(full) [ 614.714398][T13980] Tainted: [L]=SOFTLOCKUP [ 614.714404][T13980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 614.714413][T13980] Call Trace: [ 614.714419][T13980] [ 614.714424][T13980] dump_stack_lvl+0xe8/0x150 [ 614.714443][T13980] should_fail_ex+0x412/0x560 [ 614.714460][T13980] should_failslab+0xa8/0x100 [ 614.714481][T13980] kmem_cache_alloc_noprof+0x87/0x6e0 [ 614.714496][T13980] ? skb_clone+0x212/0x3a0 [ 614.714513][T13980] skb_clone+0x212/0x3a0 [ 614.714529][T13980] __netlink_deliver_tap+0x404/0x850 [ 614.714549][T13980] ? netlink_deliver_tap+0x2e/0x1b0 [ 614.714561][T13980] netlink_deliver_tap+0x19c/0x1b0 [ 614.714572][T13980] netlink_sendskb+0x68/0x140 [ 614.714588][T13980] netlink_unicast+0x3a3/0x9b0 [ 614.714607][T13980] ? __pfx_netlink_unicast+0x10/0x10 [ 614.714626][T13980] netlink_rcv_skb+0x2b6/0x4b0 [ 614.714637][T13980] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 614.714654][T13980] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 614.714669][T13980] ? bpf_lsm_capable+0x9/0x20 [ 614.714683][T13980] ? security_capable+0x7e/0x2c0 [ 614.714698][T13980] nfnetlink_rcv+0x2c0/0x27b0 [ 614.714717][T13980] ? __local_bh_enable_ip+0xd0/0x130 [ 614.714727][T13980] ? lockdep_hardirqs_on+0x7a/0x110 [ 614.714738][T13980] ? __dev_queue_xmit+0x274/0x3850 [ 614.714752][T13980] ? __local_bh_enable_ip+0xd0/0x130 [ 614.714760][T13980] ? __dev_queue_xmit+0x274/0x3850 [ 614.714773][T13980] ? __dev_queue_xmit+0x1e6c/0x3850 [ 614.714787][T13980] ? __sys_sendmmsg+0x27c/0x4e0 [ 614.714805][T13980] ? __dev_queue_xmit+0x274/0x3850 [ 614.714820][T13980] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 614.714837][T13980] ? __pfx___dev_queue_xmit+0x10/0x10 [ 614.714856][T13980] ? ref_tracker_free+0x693/0x840 [ 614.714868][T13980] ? __copy_skb_header+0xa3/0x4a0 [ 614.714882][T13980] ? __pfx_ref_tracker_free+0x10/0x10 [ 614.714894][T13980] ? __skb_clone+0x63/0x7a0 [ 614.714909][T13980] ? __skb_clone+0x483/0x7a0 [ 614.714925][T13980] ? skb_clone+0x246/0x3a0 [ 614.714940][T13980] ? __netlink_deliver_tap+0x807/0x850 [ 614.714950][T13980] ? netlink_deliver_tap+0x2e/0x1b0 [ 614.714963][T13980] ? netlink_deliver_tap+0x2e/0x1b0 [ 614.714977][T13980] netlink_unicast+0x80f/0x9b0 [ 614.714996][T13980] ? __pfx_netlink_unicast+0x10/0x10 [ 614.715009][T13980] ? __alloc_skb+0x193/0x390 [ 614.715021][T13980] ? netlink_sendmsg+0x650/0xb40 [ 614.715030][T13980] ? skb_put+0x11b/0x210 [ 614.715044][T13980] netlink_sendmsg+0x813/0xb40 [ 614.715059][T13980] ? __pfx_netlink_sendmsg+0x10/0x10 [ 614.715071][T13980] ? aa_sock_msg_perm+0xf1/0x1b0 [ 614.715085][T13980] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 614.715096][T13980] ? __pfx_netlink_sendmsg+0x10/0x10 [ 614.715106][T13980] ____sys_sendmsg+0xa68/0xad0 [ 614.715123][T13980] ? __might_fault+0xaf/0x130 [ 614.715140][T13980] ? __pfx_____sys_sendmsg+0x10/0x10 [ 614.715157][T13980] ? import_iovec+0x73/0xa0 [ 614.715174][T13980] ___sys_sendmsg+0x2a5/0x360 [ 614.715187][T13980] ? __lock_acquire+0x6b5/0x2cf0 [ 614.715203][T13980] ? __pfx____sys_sendmsg+0x10/0x10 [ 614.715219][T13980] ? kstrtouint+0x6e/0xe0 [ 614.715243][T13980] ? __fget_files+0x2a/0x420 [ 614.715253][T13980] ? __fget_files+0x3a0/0x420 [ 614.715269][T13980] __sys_sendmmsg+0x27c/0x4e0 [ 614.715285][T13980] ? __pfx___sys_sendmmsg+0x10/0x10 [ 614.715304][T13980] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 614.715327][T13980] ? ksys_write+0x242/0x270 [ 614.715342][T13980] ? __pfx_ksys_write+0x10/0x10 [ 614.715360][T13980] __x64_sys_sendmmsg+0xa0/0xc0 [ 614.715374][T13980] do_syscall_64+0xe2/0xf80 [ 614.715385][T13980] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.715394][T13980] ? trace_irq_disable+0x37/0x100 [ 614.715404][T13980] ? clear_bhb_loop+0x60/0xb0 [ 614.715415][T13980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.715425][T13980] RIP: 0033:0x7fe67099aeb9 [ 614.715436][T13980] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 614.715444][T13980] RSP: 002b:00007fe671905028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 614.715457][T13980] RAX: ffffffffffffffda RBX: 00007fe670c15fa0 RCX: 00007fe67099aeb9 [ 614.715464][T13980] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 614.715471][T13980] RBP: 00007fe671905090 R08: 0000000000000000 R09: 0000000000000000 [ 614.715477][T13980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 614.715483][T13980] R13: 00007fe670c16038 R14: 00007fe670c15fa0 R15: 00007fe670d3fa48 [ 614.715498][T13980] [ 615.777666][T13984] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2211'. [ 615.959514][ T821] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 616.129436][ T821] usb 7-1: Using ep0 maxpacket: 8 [ 616.144135][ T821] usb 7-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 616.153419][ T821] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.162543][ T821] usb 7-1: Product: syz [ 616.304122][ T821] usb 7-1: Manufacturer: syz [ 616.311799][ T821] usb 7-1: SerialNumber: syz [ 616.340471][ T821] usb 7-1: config 0 descriptor?? [ 616.362365][ T821] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 616.712821][T13993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2213'. [ 616.987312][T13995] bond0: Caught tx_queue_len zero misconfig [ 617.108826][T13999] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2216'. [ 617.265237][T14005] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2219'. [ 617.619817][ T5826] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 617.671104][ T821] gspca_sonixj: reg_w1 err -110 [ 617.789774][ T821] sonixj 7-1:0.0: probe with driver sonixj failed with error -110 [ 617.795800][T14017] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2221'. [ 617.807491][ T5826] usb 1-1: no configurations [ 617.812258][ T5826] usb 1-1: can't read configurations, error -22 [ 617.867310][T14017] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2221'. [ 617.877441][T14017] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2221'. [ 617.949540][ T5826] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 618.100534][ T5826] usb 1-1: no configurations [ 618.105234][ T5826] usb 1-1: can't read configurations, error -22 [ 618.112358][ T5826] usb usb1-port1: attempt power cycle [ 618.492786][ T5826] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 618.540778][ T5826] usb 1-1: no configurations [ 618.545584][ T5826] usb 1-1: can't read configurations, error -22 [ 618.696366][ T5826] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 618.715237][T14037] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2225'. [ 618.734762][ T5826] usb 1-1: no configurations [ 618.743180][ T5826] usb 1-1: can't read configurations, error -22 [ 618.815253][ T5826] usb usb1-port1: unable to enumerate USB device [ 618.836025][ T821] usb 7-1: USB disconnect, device number 54 [ 618.921992][T14039] fuse: Bad value for 'group_id' [ 618.926979][T14039] fuse: Bad value for 'group_id' [ 619.076253][T14042] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2229'. [ 619.573842][T14058] loop5: detected capacity change from 0 to 7 [ 619.763799][T14060] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2234'. [ 619.776640][T12611] Dev loop5: unable to read RDB block 7 [ 619.789297][T12611] loop5: unable to read partition table [ 619.800435][T12611] loop5: partition table beyond EOD, truncated [ 619.807585][T14058] Dev loop5: unable to read RDB block 7 [ 619.813596][T14058] loop5: unable to read partition table [ 619.819934][T14058] loop5: partition table beyond EOD, truncated [ 619.832611][T14058] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 620.918047][T14083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 620.931455][T14083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 621.163642][T14085] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2242'. [ 621.583935][T14099] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2246'. [ 621.802748][ T5826] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 621.959752][ T5891] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 621.981242][ T5826] usb 1-1: Using ep0 maxpacket: 16 [ 621.987940][ T5826] usb 1-1: config 0 has an invalid descriptor of length 34, skipping remainder of the config [ 622.001186][ T5826] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 622.010987][ T5826] usb 1-1: New USB device found, idVendor=056a, idProduct=006b, bcdDevice= 0.00 [ 622.020606][ T5826] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.034030][ T5826] usb 1-1: config 0 descriptor?? [ 622.089481][ T5891] usb 4-1: device descriptor read/64, error -71 [ 622.225131][T14110] loop5: detected capacity change from 0 to 7 [ 622.232115][T14110] Dev loop5: unable to read RDB block 7 [ 622.237685][T14110] loop5: unable to read partition table [ 622.251175][T14110] loop5: partition table beyond EOD, truncated [ 622.259918][T14110] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 622.339495][ T5891] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 622.469701][ T5891] usb 4-1: device descriptor read/64, error -71 [ 622.591271][ T5891] usb usb4-port1: attempt power cycle [ 622.688376][T14120] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2253'. [ 623.100353][ T5891] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 623.129462][ T821] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 623.137881][ T5891] usb 4-1: device descriptor read/8, error -71 [ 623.453778][ T821] usb 7-1: Using ep0 maxpacket: 16 [ 623.462815][ T821] usb 7-1: config 0 has no interfaces? [ 623.471350][ T821] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 623.480703][ T821] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 623.488726][ T821] usb 7-1: Manufacturer: syz [ 623.496766][ T821] usb 7-1: config 0 descriptor?? [ 623.520575][ T5891] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 623.530404][T14130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 623.542624][T14130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 623.572191][ T5891] usb 4-1: device descriptor read/8, error -71 [ 623.690613][ T5891] usb usb4-port1: unable to enumerate USB device [ 624.193495][T14133] binder_alloc: 14132: pid 14132 spamming oneway? 1 buffers allocated for a total size of 4096 [ 624.385960][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.392541][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.455522][ T9] usb 1-1: USB disconnect, device number 79 [ 624.477819][T14137] fuse: Bad value for 'fd' [ 624.899233][T14148] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2260'. [ 624.946426][T14150] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2262'. [ 624.973556][T14150] bond_slave_0: entered promiscuous mode [ 624.979537][T14150] bond_slave_1: entered promiscuous mode [ 625.049464][T14150] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 625.155181][T14155] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2261'. [ 625.200004][T14150] bond_slave_0: left promiscuous mode [ 625.205497][T14150] bond_slave_1: left promiscuous mode [ 625.728371][ T5826] usb 7-1: USB disconnect, device number 55 [ 625.867337][T14167] loop5: detected capacity change from 0 to 7 [ 625.875907][T14167] Dev loop5: unable to read RDB block 7 [ 625.882013][T14167] loop5: unable to read partition table [ 625.887973][T14167] loop5: partition table beyond EOD, truncated [ 625.894551][T14167] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 626.685667][T14169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 626.727541][T14169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 627.159493][ T5891] usb 7-1: new full-speed USB device number 56 using dummy_hcd [ 627.174302][T14182] netlink: 'syz.3.2268': attribute type 4 has an invalid length. [ 627.350209][ T5891] usb 7-1: config 3 has no interfaces? [ 627.392827][ T5891] usb 7-1: New USB device found, idVendor=045e, idProduct=044c, bcdDevice=6f.54 [ 627.499684][ T5891] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.528742][ T5891] usb 7-1: Product: syz [ 627.541602][ T5891] usb 7-1: Manufacturer: syz [ 627.558920][ T5891] usb 7-1: SerialNumber: syz [ 627.785063][ T5891] usb 7-1: USB disconnect, device number 56 [ 628.500762][T14195] binder_alloc: 14194: pid 14194 spamming oneway? 1 buffers allocated for a total size of 4096 [ 628.669182][T14197] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2273'. [ 628.704195][T14197] bond_slave_0: entered promiscuous mode [ 628.710348][T14197] vxlan0: entered promiscuous mode [ 628.715906][T14197] team_slave_0: entered promiscuous mode [ 628.721867][T14197] team_slave_1: entered promiscuous mode [ 628.787435][T14197] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 628.813272][T14197] bond_slave_0: left promiscuous mode [ 628.818867][T14197] vxlan0: left promiscuous mode [ 628.824029][T14197] team_slave_0: left promiscuous mode [ 628.829509][T14197] team_slave_1: left promiscuous mode [ 629.355666][T14211] loop5: detected capacity change from 0 to 7 [ 629.390678][T14211] Dev loop5: unable to read RDB block 7 [ 629.398578][T14211] loop5: unable to read partition table [ 629.416733][T14211] loop5: partition table beyond EOD, truncated [ 629.426562][T14211] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 631.208273][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 631.208287][ T30] audit: type=1804 audit(1770398979.014:581): pid=14238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.2284" name="/newroot/474/file1" dev="fuse" ino=1 res=1 errno=0 [ 631.280683][T14239] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2283'. [ 631.354386][T14241] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2285'. [ 631.368329][T14241] bond_slave_0: entered promiscuous mode [ 631.374061][T14241] bond_slave_1: entered promiscuous mode [ 631.405028][T14241] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 631.467540][T14241] bond_slave_0: left promiscuous mode [ 631.473044][T14241] bond_slave_1: left promiscuous mode [ 631.957944][T14246] FAULT_INJECTION: forcing a failure. [ 631.957944][T14246] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 632.016508][T14248] netlink: 'syz.2.2287': attribute type 10 has an invalid length. [ 632.024975][T14246] CPU: 0 UID: 0 PID: 14246 Comm: syz.6.2286 Tainted: G L syzkaller #0 PREEMPT(full) [ 632.025026][T14246] Tainted: [L]=SOFTLOCKUP [ 632.025042][T14246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 632.025066][T14246] Call Trace: [ 632.025082][T14246] [ 632.025092][T14246] dump_stack_lvl+0xe8/0x150 [ 632.025119][T14246] should_fail_ex+0x412/0x560 [ 632.025145][T14246] _copy_to_user+0x31/0xb0 [ 632.025171][T14246] simple_read_from_buffer+0xe1/0x170 [ 632.025195][T14246] proc_fail_nth_read+0x1bb/0x230 [ 632.025222][T14246] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 632.025249][T14246] ? rw_verify_area+0x2a6/0x4d0 [ 632.025272][T14246] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 632.025296][T14246] vfs_read+0x20c/0xa70 [ 632.025317][T14246] ? fdget_pos+0x246/0x320 [ 632.025341][T14246] ? __pfx___mutex_lock+0x10/0x10 [ 632.025362][T14246] ? __pfx_vfs_read+0x10/0x10 [ 632.025386][T14246] ? __fget_files+0x2a/0x420 [ 632.025409][T14246] ? __fget_files+0x3a0/0x420 [ 632.025427][T14246] ? __fget_files+0x2a/0x420 [ 632.025453][T14246] ksys_read+0x150/0x270 [ 632.025478][T14246] ? __pfx_ksys_read+0x10/0x10 [ 632.025512][T14246] do_syscall_64+0xe2/0xf80 [ 632.025530][T14246] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.025548][T14246] ? trace_irq_disable+0x37/0x100 [ 632.025565][T14246] ? clear_bhb_loop+0x60/0xb0 [ 632.025593][T14246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.025610][T14246] RIP: 0033:0x7f062a15b78e [ 632.025626][T14246] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 632.025642][T14246] RSP: 002b:00007f062b011fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 632.025662][T14246] RAX: ffffffffffffffda RBX: 00007f062b0126c0 RCX: 00007f062a15b78e [ 632.025676][T14246] RDX: 000000000000000f RSI: 00007f062b0120a0 RDI: 0000000000000004 [ 632.025688][T14246] RBP: 00007f062b012090 R08: 0000000000000000 R09: 0000000000000000 [ 632.025699][T14246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 632.025710][T14246] R13: 00007f062a416038 R14: 00007f062a415fa0 R15: 00007f062a53fa48 [ 632.025741][T14246] [ 632.703140][T14254] binder_alloc: 14251: pid 14251 spamming oneway? 1 buffers allocated for a total size of 4096 [ 632.735407][T14257] loop5: detected capacity change from 0 to 7 [ 632.748071][T14257] Dev loop5: unable to read RDB block 7 [ 632.790706][T14257] loop5: unable to read partition table [ 632.839717][T14257] loop5: partition table beyond EOD, truncated [ 632.848308][T14257] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 633.822394][T14274] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2294'. [ 633.853913][T14274] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2294'. [ 633.945774][ T30] audit: type=1326 audit(1770398981.744:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14270 comm="syz.6.2293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062a19aeb9 code=0x7fc00000 [ 634.142623][T14281] FAULT_INJECTION: forcing a failure. [ 634.142623][T14281] name failslab, interval 1, probability 0, space 0, times 0 [ 634.187147][T14281] CPU: 0 UID: 0 PID: 14281 Comm: syz.2.2295 Tainted: G L syzkaller #0 PREEMPT(full) [ 634.187171][T14281] Tainted: [L]=SOFTLOCKUP [ 634.187175][T14281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 634.187181][T14281] Call Trace: [ 634.187186][T14281] [ 634.187191][T14281] dump_stack_lvl+0xe8/0x150 [ 634.187209][T14281] should_fail_ex+0x412/0x560 [ 634.187225][T14281] should_failslab+0xa8/0x100 [ 634.187244][T14281] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 634.187261][T14281] ? __alloc_skb+0x1d7/0x390 [ 634.187273][T14281] ? __local_bh_enable_ip+0xd0/0x130 [ 634.187284][T14281] ? __alloc_skb+0x193/0x390 [ 634.187295][T14281] __alloc_skb+0x1d7/0x390 [ 634.187309][T14281] nl80211_send_scan_start+0x2f/0x170 [ 634.187323][T14281] nl80211_trigger_scan+0x1aee/0x1f50 [ 634.187341][T14281] genl_family_rcv_msg_doit+0x22a/0x330 [ 634.187360][T14281] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 634.187380][T14281] ? bpf_lsm_capable+0x9/0x20 [ 634.187395][T14281] ? security_capable+0x7e/0x2c0 [ 634.187410][T14281] genl_rcv_msg+0x61c/0x7a0 [ 634.187427][T14281] ? __pfx_genl_rcv_msg+0x10/0x10 [ 634.187439][T14281] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 634.187452][T14281] ? __pfx_nl80211_trigger_scan+0x10/0x10 [ 634.187461][T14281] ? __pfx_nl80211_post_doit+0x10/0x10 [ 634.187476][T14281] ? __pfx_ref_tracker_free+0x10/0x10 [ 634.187488][T14281] ? __skb_clone+0x63/0x7a0 [ 634.187504][T14281] netlink_rcv_skb+0x232/0x4b0 [ 634.187515][T14281] ? __pfx_genl_rcv_msg+0x10/0x10 [ 634.187529][T14281] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 634.187538][T14281] ? genl_rcv+0x19/0x40 [ 634.187559][T14281] ? down_read+0x272/0x2e0 [ 634.187570][T14281] ? genl_rcv+0xd/0x40 [ 634.187583][T14281] genl_rcv+0x28/0x40 [ 634.187596][T14281] netlink_unicast+0x80f/0x9b0 [ 634.187627][T14281] ? __pfx_netlink_unicast+0x10/0x10 [ 634.187655][T14281] ? __alloc_skb+0x193/0x390 [ 634.187673][T14281] ? netlink_sendmsg+0x650/0xb40 [ 634.187682][T14281] ? skb_put+0x11b/0x210 [ 634.187696][T14281] netlink_sendmsg+0x813/0xb40 [ 634.187712][T14281] ? __pfx_netlink_sendmsg+0x10/0x10 [ 634.187724][T14281] ? aa_sock_msg_perm+0xf1/0x1b0 [ 634.187738][T14281] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 634.187750][T14281] ? __pfx_netlink_sendmsg+0x10/0x10 [ 634.187760][T14281] ____sys_sendmsg+0xa68/0xad0 [ 634.187774][T14281] ? __might_fault+0xaf/0x130 [ 634.187792][T14281] ? __pfx_____sys_sendmsg+0x10/0x10 [ 634.187809][T14281] ? import_iovec+0x73/0xa0 [ 634.187827][T14281] ___sys_sendmsg+0x2a5/0x360 [ 634.187839][T14281] ? __lock_acquire+0x6b5/0x2cf0 [ 634.187856][T14281] ? __pfx____sys_sendmsg+0x10/0x10 [ 634.187887][T14281] ? __fget_files+0x2a/0x420 [ 634.187897][T14281] ? __fget_files+0x3a0/0x420 [ 634.187913][T14281] __x64_sys_sendmsg+0x1bd/0x2a0 [ 634.187928][T14281] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 634.187947][T14281] ? __pfx_ksys_write+0x10/0x10 [ 634.187968][T14281] do_syscall_64+0xe2/0xf80 [ 634.187979][T14281] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.187988][T14281] ? trace_irq_disable+0x37/0x100 [ 634.187998][T14281] ? clear_bhb_loop+0x60/0xb0 [ 634.188011][T14281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.188020][T14281] RIP: 0033:0x7fe67099aeb9 [ 634.188031][T14281] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 634.188040][T14281] RSP: 002b:00007fe671905028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 634.188052][T14281] RAX: ffffffffffffffda RBX: 00007fe670c15fa0 RCX: 00007fe67099aeb9 [ 634.188060][T14281] RDX: 0000000000008084 RSI: 0000200000001540 RDI: 0000000000000003 [ 634.188066][T14281] RBP: 00007fe671905090 R08: 0000000000000000 R09: 0000000000000000 [ 634.188073][T14281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 634.188079][T14281] R13: 00007fe670c16038 R14: 00007fe670c15fa0 R15: 00007fe670d3fa48 [ 634.188095][T14281] [ 634.657778][ T30] audit: type=1326 audit(1770398982.384:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14270 comm="syz.6.2293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f062a13c2d9 code=0x7fc00000 [ 634.882006][ T30] audit: type=1326 audit(1770398982.384:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14270 comm="syz.6.2293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f062a13c39d code=0x7fc00000 [ 634.995458][ T30] audit: type=1326 audit(1770398982.384:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14270 comm="syz.6.2293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f062a19aeb9 code=0x7fc00000 [ 635.200225][T14290] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2298'. [ 635.278203][T14290] bond_slave_0: entered promiscuous mode [ 635.283985][T14290] bond_slave_1: entered promiscuous mode [ 635.289720][T14290] vxlan0: entered promiscuous mode [ 635.327029][T14290] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 635.391482][T14290] bond_slave_0: left promiscuous mode [ 635.396966][T14290] bond_slave_1: left promiscuous mode [ 635.402627][T14290] vxlan0: left promiscuous mode [ 635.640885][T14296] FAULT_INJECTION: forcing a failure. [ 635.640885][T14296] name failslab, interval 1, probability 0, space 0, times 0 [ 635.671978][T14296] CPU: 0 UID: 0 PID: 14296 Comm: syz.2.2299 Tainted: G L syzkaller #0 PREEMPT(full) [ 635.672008][T14296] Tainted: [L]=SOFTLOCKUP [ 635.672014][T14296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 635.672025][T14296] Call Trace: [ 635.672033][T14296] [ 635.672041][T14296] dump_stack_lvl+0xe8/0x150 [ 635.672067][T14296] should_fail_ex+0x412/0x560 [ 635.672087][T14296] should_failslab+0xa8/0x100 [ 635.672104][T14296] kmem_cache_alloc_noprof+0x87/0x6e0 [ 635.672124][T14296] ? skb_clone+0x212/0x3a0 [ 635.672145][T14296] skb_clone+0x212/0x3a0 [ 635.672161][T14296] ? pfkey_broadcast_one+0x7d/0x360 [ 635.672177][T14296] pfkey_broadcast_one+0x9b/0x360 [ 635.672188][T14296] ? pfkey_broadcast+0x39c/0x3e0 [ 635.672208][T14296] pfkey_broadcast+0x3a9/0x3e0 [ 635.672227][T14296] ? pfkey_broadcast+0x48/0x3e0 [ 635.672246][T14296] pfkey_sendmsg+0xe75/0x1120 [ 635.672259][T14296] ? unwind_next_frame+0xa5/0x23c0 [ 635.672289][T14296] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 635.672318][T14296] ? aa_sock_msg_perm+0xf1/0x1b0 [ 635.672336][T14296] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 635.672352][T14296] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 635.672365][T14296] ____sys_sendmsg+0xa68/0xad0 [ 635.672382][T14296] ? __might_fault+0xaf/0x130 [ 635.672405][T14296] ? __pfx_____sys_sendmsg+0x10/0x10 [ 635.672428][T14296] ? import_iovec+0x73/0xa0 [ 635.672449][T14296] ___sys_sendmsg+0x2a5/0x360 [ 635.672465][T14296] ? __lock_acquire+0x6b5/0x2cf0 [ 635.672486][T14296] ? __pfx____sys_sendmsg+0x10/0x10 [ 635.672527][T14296] ? __fget_files+0x2a/0x420 [ 635.672542][T14296] ? __fget_files+0x3a0/0x420 [ 635.672563][T14296] __x64_sys_sendmsg+0x1bd/0x2a0 [ 635.672583][T14296] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 635.672606][T14296] ? __pfx_ksys_write+0x10/0x10 [ 635.672632][T14296] do_syscall_64+0xe2/0xf80 [ 635.672648][T14296] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.672661][T14296] ? trace_irq_disable+0x37/0x100 [ 635.672674][T14296] ? clear_bhb_loop+0x60/0xb0 [ 635.672690][T14296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.672704][T14296] RIP: 0033:0x7fe67099aeb9 [ 635.672718][T14296] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 635.672731][T14296] RSP: 002b:00007fe671905028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 635.672747][T14296] RAX: ffffffffffffffda RBX: 00007fe670c15fa0 RCX: 00007fe67099aeb9 [ 635.672757][T14296] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 635.672766][T14296] RBP: 00007fe671905090 R08: 0000000000000000 R09: 0000000000000000 [ 635.672775][T14296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 635.672784][T14296] R13: 00007fe670c16038 R14: 00007fe670c15fa0 R15: 00007fe670d3fa48 [ 635.672806][T14296] [ 636.350791][T14298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 636.367740][T14298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 636.428696][T14298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 636.459241][T14298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 636.715088][T14300] binder_alloc: 14299: pid 14299 spamming oneway? 1 buffers allocated for a total size of 4096 [ 636.819001][T14306] loop5: detected capacity change from 0 to 7 [ 636.826113][T14306] Dev loop5: unable to read RDB block 7 [ 636.839101][T14306] loop5: unable to read partition table [ 636.846212][T14306] loop5: partition table beyond EOD, truncated [ 636.853972][T14306] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 637.040588][T14311] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2305'. [ 637.391159][T14320] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2308'. [ 637.663952][T14322] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2306'. [ 637.689156][T14322] bond0: entered promiscuous mode [ 637.698796][T14322] bond_slave_0: entered promiscuous mode [ 637.709337][T14322] bond_slave_1: entered promiscuous mode [ 637.725390][T14322] vxlan0: entered promiscuous mode [ 637.735664][T14322] team0: entered promiscuous mode [ 637.742131][T14322] team_slave_0: entered promiscuous mode [ 637.750737][T14322] team_slave_1: entered promiscuous mode [ 637.773809][T14322] bond3: entered promiscuous mode [ 637.785956][T14322] geneve0: entered promiscuous mode [ 637.795622][T14322] hsr1: entered promiscuous mode [ 638.967604][T14341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 638.978340][T14341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 640.135526][T14354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 640.150695][T14354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 641.034934][T14373] loop5: detected capacity change from 0 to 7 [ 641.057283][T14373] Dev loop5: unable to read RDB block 7 [ 641.063468][T14373] loop5: unable to read partition table [ 641.069508][T14373] loop5: partition table beyond EOD, truncated [ 641.075959][T14373] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 641.573057][T14371] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 641.639719][T14371] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 641.675627][T14371] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 641.683125][T14371] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 641.720088][T14371] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 641.727795][T14371] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 641.742497][T14371] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 641.750379][T14371] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 641.793764][T14371] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 641.818623][T14371] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 641.837382][T14371] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 642.641695][T14380] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2321'. [ 642.922562][T14380] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 642.931692][T14380] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 642.988787][T14380] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 642.996959][T14380] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 643.325706][T14390] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2323'. [ 643.435365][T13038] Bluetooth: hci0: command 0x0406 tx timeout [ 643.506593][T14393] netlink: 'syz.2.2324': attribute type 1 has an invalid length. [ 643.770078][T13038] Bluetooth: hci2: command 0x0406 tx timeout [ 643.776362][ T5822] Bluetooth: hci1: command 0x0406 tx timeout [ 643.840808][ T5822] Bluetooth: hci3: command 0x0c1a tx timeout [ 643.844948][T13038] Bluetooth: hci4: command 0x0406 tx timeout [ 644.734584][T14408] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2328'. [ 644.752081][T14409] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2329'. [ 645.336713][T14412] FAULT_INJECTION: forcing a failure. [ 645.336713][T14412] name failslab, interval 1, probability 0, space 0, times 0 [ 645.349700][T14412] CPU: 1 UID: 0 PID: 14412 Comm: syz.0.2330 Tainted: G L syzkaller #0 PREEMPT(full) [ 645.349730][T14412] Tainted: [L]=SOFTLOCKUP [ 645.349738][T14412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 645.349749][T14412] Call Trace: [ 645.349757][T14412] [ 645.349766][T14412] dump_stack_lvl+0xe8/0x150 [ 645.349793][T14412] should_fail_ex+0x412/0x560 [ 645.349818][T14412] should_failslab+0xa8/0x100 [ 645.349840][T14412] __kmalloc_noprof+0xde/0x7e0 [ 645.349858][T14412] ? sk_prot_alloc+0xe7/0x210 [ 645.349884][T14412] sk_prot_alloc+0xe7/0x210 [ 645.349903][T14412] ? sk_alloc+0x27/0x390 [ 645.349925][T14412] sk_alloc+0x3a/0x390 [ 645.349948][T14412] packet_create+0xff/0x8a0 [ 645.349972][T14412] __sock_create+0x4b2/0x9d0 [ 645.349997][T14412] __sys_socketpair+0x239/0x560 [ 645.350020][T14412] __x64_sys_socketpair+0x9b/0xb0 [ 645.350042][T14412] do_syscall_64+0xe2/0xf80 [ 645.350060][T14412] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.350078][T14412] ? clear_bhb_loop+0x60/0xb0 [ 645.350099][T14412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.350116][T14412] RIP: 0033:0x7f0dbf79aeb9 [ 645.350132][T14412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 645.350146][T14412] RSP: 002b:00007f0dc05c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 645.350165][T14412] RAX: ffffffffffffffda RBX: 00007f0dbfa15fa0 RCX: 00007f0dbf79aeb9 [ 645.350178][T14412] RDX: 0000000000000080 RSI: 000000000000000a RDI: 0000000000000002 [ 645.350188][T14412] RBP: 00007f0dc05c7090 R08: 0000000000000000 R09: 0000000000000000 [ 645.350198][T14412] R10: 0000200000000e40 R11: 0000000000000246 R12: 0000000000000001 [ 645.350209][T14412] R13: 00007f0dbfa16038 R14: 00007f0dbfa15fa0 R15: 00007f0dbfb3fa48 [ 645.350237][T14412] [ 645.647826][T13038] Bluetooth: hci0: command 0x0406 tx timeout [ 645.823498][T13038] Bluetooth: hci1: command 0x0406 tx timeout [ 645.823523][ T5822] Bluetooth: hci2: command 0x0406 tx timeout [ 645.899908][ T5822] Bluetooth: hci4: command 0x0406 tx timeout [ 645.899933][T13038] Bluetooth: hci3: command 0x0c1a tx timeout [ 645.966475][T14416] loop5: detected capacity change from 0 to 7 [ 645.974444][T14416] Dev loop5: unable to read RDB block 7 [ 645.982897][T14416] loop5: unable to read partition table [ 646.019671][T14416] loop5: partition table beyond EOD, truncated [ 646.068415][T14416] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 646.111895][T14422] netlink: 'syz.6.2332': attribute type 4 has an invalid length. [ 646.250906][T14426] SET target dimension over the limit! [ 646.341602][T14428] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2335'. [ 646.422669][T14428] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 646.452338][T14428] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 646.474557][T14428] bond0 (unregistering): Released all slaves [ 646.639487][ T5891] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 646.783685][ T5891] usb 4-1: device descriptor read/64, error -71 [ 647.052299][ T5891] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 647.193680][ T5891] usb 4-1: device descriptor read/64, error -71 [ 647.281826][T14437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 647.297626][T14437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 647.309908][ T5891] usb usb4-port1: attempt power cycle [ 647.379466][ T9] usb 7-1: new full-speed USB device number 57 using dummy_hcd [ 647.485690][T14441] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2340'. [ 647.555426][ T9] usb 7-1: not running at top speed; connect to a high speed hub [ 647.564444][ T9] usb 7-1: config 11 has an invalid interface number: 217 but max is 0 [ 647.596296][ T9] usb 7-1: config 11 has no interface number 0 [ 647.613170][ T9] usb 7-1: config 11 interface 217 altsetting 237 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 647.632850][ T9] usb 7-1: config 11 interface 217 has no altsetting 0 [ 647.642473][ T9] usb 7-1: New USB device found, idVendor=06cd, idProduct=0103, bcdDevice= d.63 [ 647.661580][ T5891] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 647.666828][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.684060][ T9] usb 7-1: Product: syz [ 647.692938][ T9] usb 7-1: Manufacturer: syz [ 647.702086][ T9] usb 7-1: SerialNumber: syz [ 647.712716][ T5891] usb 4-1: device descriptor read/8, error -71 [ 647.980088][T13038] Bluetooth: hci3: command 0x0c1a tx timeout [ 647.986390][ T5891] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 648.008519][ T9] hub 7-1:11.217: bad descriptor, ignoring hub [ 648.021384][ T5891] usb 4-1: device descriptor read/8, error -71 [ 648.029306][ T9] hub 7-1:11.217: probe with driver hub failed with error -5 [ 648.055055][ T9] keyspan 7-1:11.217: Keyspan - (without firmware) converter detected [ 648.090751][ T9] usb 7-1: USB disconnect, device number 57 [ 648.107031][ T9] keyspan 7-1:11.217: device disconnected [ 648.129835][ T5891] usb usb4-port1: unable to enumerate USB device [ 649.142511][T14468] netlink: 'syz.2.2348': attribute type 4 has an invalid length. [ 649.208620][T14469] loop5: detected capacity change from 0 to 7 [ 649.215911][T14469] Dev loop5: unable to read RDB block 7 [ 649.231741][T14469] loop5: unable to read partition table [ 649.237898][T14469] loop5: partition table beyond EOD, truncated [ 649.244219][T14469] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 649.700932][T14473] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 650.202137][T14477] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2351'. [ 651.049643][ T9] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 651.200209][ T5891] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 651.422823][T14515] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2362'. [ 651.433443][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 651.516721][ T9] usb 1-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 651.527434][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.536593][ T9] usb 1-1: Product: syz [ 651.542449][ T9] usb 1-1: Manufacturer: syz [ 651.547382][ T9] usb 1-1: SerialNumber: syz [ 651.735371][ T5891] usb 4-1: Using ep0 maxpacket: 16 [ 651.761508][ T5891] usb 4-1: config 0 has no interfaces? [ 651.771703][ T5891] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 651.786743][ T5891] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 651.796312][ T9] usb 1-1: config 0 descriptor?? [ 651.919987][ T5891] usb 4-1: Manufacturer: syz [ 652.286314][ T9] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 652.355772][ T5891] usb 4-1: config 0 descriptor?? [ 652.886680][T14525] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2364'. [ 653.130829][T14533] fuse: Bad value for 'rootmode' [ 653.278772][T14542] netlink: 'syz.7.2368': attribute type 4 has an invalid length. [ 653.368412][T14541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 653.441273][T14541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 653.565536][T14545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 653.576831][T14545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 654.108069][ T821] usb 4-1: USB disconnect, device number 69 [ 654.478157][ T821] usb 1-1: USB disconnect, device number 80 [ 655.022549][T14571] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2378'. [ 655.227163][T14575] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2379'. [ 656.191231][T14588] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2382'. [ 657.004675][T14610] netlink: 'syz.0.2388': attribute type 4 has an invalid length. [ 658.124327][T14626] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2391'. [ 658.547821][T14638] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2395'. [ 658.566753][T14638] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2395'. [ 658.703550][T14640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 658.712925][T14640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 658.756303][T14642] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2397'. [ 659.127347][T14648] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2399'. [ 659.149700][ T5824] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 659.271335][T14651] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2401'. [ 659.300175][ T5824] usb 4-1: Using ep0 maxpacket: 16 [ 659.315203][ T5824] usb 4-1: config 0 has an invalid interface number: 200 but max is 0 [ 659.327245][ T5824] usb 4-1: config 0 has an invalid interface number: 66 but max is 0 [ 659.355149][ T5824] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 659.387749][ T5824] usb 4-1: config 0 has no interface number 0 [ 659.409132][ T5824] usb 4-1: config 0 has no interface number 1 [ 659.560411][ T5824] usb 4-1: config 0 interface 200 altsetting 4 endpoint 0x4 has invalid maxpacket 1560, setting to 64 [ 659.646312][T14658] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2402'. [ 659.657509][ T5824] usb 4-1: too many endpoints for config 0 interface 66 altsetting 153: 216, using maximum allowed: 30 [ 659.698566][ T5824] usb 4-1: config 0 interface 66 altsetting 153 has 0 endpoint descriptors, different from the interface descriptor's value: 216 [ 659.751674][T14658] bond_slave_0: entered promiscuous mode [ 659.757387][T14658] bond_slave_1: entered promiscuous mode [ 659.763204][T14658] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 659.777910][ T5824] usb 4-1: config 0 interface 200 has no altsetting 0 [ 659.792588][ T5824] usb 4-1: config 0 interface 66 has no altsetting 0 [ 659.824748][ T5824] usb 4-1: New USB device found, idVendor=05e3, idProduct=0503, bcdDevice=9b.7b [ 659.843712][ T5824] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.879683][T14658] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 659.888475][ T5824] usb 4-1: Product: syz [ 660.000338][ T5824] usb 4-1: Manufacturer: syz [ 660.019139][ T5824] usb 4-1: SerialNumber: syz [ 660.031580][T14658] bond_slave_0: left promiscuous mode [ 660.037159][T14658] bond_slave_1: left promiscuous mode [ 660.042797][T14658] mac80211_hwsim hwsim6 wlan1: left promiscuous mode [ 660.065481][ T5824] usb 4-1: config 0 descriptor?? [ 660.544825][T14665] netlink: 'syz.0.2403': attribute type 4 has an invalid length. [ 661.630571][T14668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 661.644981][T14668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 661.733353][ T5824] usb 4-1: USB disconnect, device number 70 [ 662.475589][T14680] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2408'. [ 662.561351][T14681] FAULT_INJECTION: forcing a failure. [ 662.561351][T14681] name failslab, interval 1, probability 0, space 0, times 0 [ 662.585499][T14681] CPU: 0 UID: 0 PID: 14681 Comm: syz.0.2410 Tainted: G L syzkaller #0 PREEMPT(full) [ 662.585531][T14681] Tainted: [L]=SOFTLOCKUP [ 662.585539][T14681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 662.585551][T14681] Call Trace: [ 662.585560][T14681] [ 662.585566][T14681] dump_stack_lvl+0xe8/0x150 [ 662.585585][T14681] should_fail_ex+0x412/0x560 [ 662.585601][T14681] should_failslab+0xa8/0x100 [ 662.585614][T14681] kmem_cache_alloc_noprof+0x87/0x6e0 [ 662.585630][T14681] ? getname_flags+0xb7/0x540 [ 662.585643][T14681] getname_flags+0xb7/0x540 [ 662.585665][T14681] path_removexattrat+0x1ad/0x750 [ 662.585681][T14681] ? __pfx_path_removexattrat+0x10/0x10 [ 662.585694][T14681] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 662.585720][T14681] ? __pfx_ksys_write+0x10/0x10 [ 662.585739][T14681] __x64_sys_removexattr+0x62/0x70 [ 662.585752][T14681] do_syscall_64+0xe2/0xf80 [ 662.585764][T14681] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.585773][T14681] ? trace_irq_disable+0x37/0x100 [ 662.585783][T14681] ? clear_bhb_loop+0x60/0xb0 [ 662.585795][T14681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.585805][T14681] RIP: 0033:0x7f0dbf79aeb9 [ 662.585816][T14681] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 662.585824][T14681] RSP: 002b:00007f0dc05c7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c5 [ 662.585835][T14681] RAX: ffffffffffffffda RBX: 00007f0dbfa15fa0 RCX: 00007f0dbf79aeb9 [ 662.585843][T14681] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 00002000000000c0 [ 662.585849][T14681] RBP: 00007f0dc05c7090 R08: 0000000000000000 R09: 0000000000000000 [ 662.585855][T14681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 662.585861][T14681] R13: 00007f0dbfa16038 R14: 00007f0dbfa15fa0 R15: 00007f0dbfb3fa48 [ 662.585876][T14681] [ 664.062521][T14712] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2420'. [ 664.187098][T14719] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2416'. [ 664.639914][ T5891] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 664.778806][T14725] loop5: detected capacity change from 0 to 7 [ 664.790832][T14725] Dev loop5: unable to read RDB block 7 [ 664.803257][ T5891] usb 1-1: Using ep0 maxpacket: 16 [ 664.849054][ T5891] usb 1-1: config 0 has no interfaces? [ 664.856660][ T5891] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 664.866304][ T5891] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 664.879664][ T5891] usb 1-1: Manufacturer: syz [ 664.919913][T14725] loop5: unable to read partition table [ 664.926297][ T5891] usb 1-1: config 0 descriptor?? [ 665.130061][T14725] loop5: partition table beyond EOD, truncated [ 665.339079][T14733] fuse: Unknown parameter 'use00000000000000000000' [ 665.361298][T14725] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 666.561899][ T30] audit: type=1326 audit(1770399014.374:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14741 comm="syz.6.2425" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f062a19aeb9 code=0x0 [ 666.595989][T13038] Bluetooth: hci4: Ignoring connect complete event for invalid link type [ 667.583995][ T5891] usb 1-1: USB disconnect, device number 81 [ 667.767158][T14745] syz.6.2425 (14745): drop_caches: 2 [ 667.913849][T14753] binder_alloc: 14752: pid 14752 spamming oneway? 1 buffers allocated for a total size of 4096 [ 668.303530][T14763] loop5: detected capacity change from 0 to 7 [ 668.312988][T14763] Dev loop5: unable to read RDB block 7 [ 668.333949][T14763] loop5: unable to read partition table [ 668.766347][T14763] loop5: partition table beyond EOD, truncated [ 668.806809][T14763] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 669.902971][T14783] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 670.536610][T14792] loop5: detected capacity change from 0 to 7 [ 670.546123][T14792] Dev loop5: unable to read RDB block 7 [ 670.552041][T14792] loop5: unable to read partition table [ 670.558568][T14792] loop5: partition table beyond EOD, truncated [ 670.565313][T14792] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 670.814951][T14798] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2441'. [ 671.038686][T14801] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2443'. [ 671.401703][T14804] binder_alloc: 14803: pid 14803 spamming oneway? 1 buffers allocated for a total size of 4096 [ 671.969573][ T5824] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 672.171191][ T5824] usb 4-1: Using ep0 maxpacket: 8 [ 672.187102][ T5824] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 672.196334][ T5824] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.205769][ T5824] usb 4-1: Product: syz [ 672.210162][ T5824] usb 4-1: Manufacturer: syz [ 672.215463][ T5824] usb 4-1: SerialNumber: syz [ 672.245023][ T5824] usb 4-1: config 0 descriptor?? [ 672.275500][ T5824] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 672.295156][T14826] FAULT_INJECTION: forcing a failure. [ 672.295156][T14826] name failslab, interval 1, probability 0, space 0, times 0 [ 672.318313][T14826] CPU: 0 UID: 0 PID: 14826 Comm: syz.7.2451 Tainted: G L syzkaller #0 PREEMPT(full) [ 672.318348][T14826] Tainted: [L]=SOFTLOCKUP [ 672.318355][T14826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 672.318367][T14826] Call Trace: [ 672.318375][T14826] [ 672.318383][T14826] dump_stack_lvl+0xe8/0x150 [ 672.318413][T14826] should_fail_ex+0x412/0x560 [ 672.318439][T14826] should_failslab+0xa8/0x100 [ 672.318462][T14826] __kmalloc_cache_noprof+0x83/0x6e0 [ 672.318481][T14826] ? ovs_flow_cmd_new+0x356/0xe80 [ 672.318505][T14826] ovs_flow_cmd_new+0x356/0xe80 [ 672.318521][T14826] ? stack_depot_save_flags+0x33/0x810 [ 672.318549][T14826] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 672.318609][T14826] ? rcu_is_watching+0x15/0xb0 [ 672.318631][T14826] ? __nla_parse+0x40/0x60 [ 672.318664][T14826] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 672.318694][T14826] genl_family_rcv_msg_doit+0x22a/0x330 [ 672.318719][T14826] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 672.318748][T14826] ? bpf_lsm_capable+0x9/0x20 [ 672.318767][T14826] ? security_capable+0x7e/0x2c0 [ 672.318792][T14826] genl_rcv_msg+0x61c/0x7a0 [ 672.318821][T14826] ? __pfx_genl_rcv_msg+0x10/0x10 [ 672.318840][T14826] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 672.318862][T14826] ? __pfx_ref_tracker_free+0x10/0x10 [ 672.318881][T14826] ? __skb_clone+0x63/0x7a0 [ 672.318908][T14826] netlink_rcv_skb+0x232/0x4b0 [ 672.318934][T14826] ? __pfx_genl_rcv_msg+0x10/0x10 [ 672.318956][T14826] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 672.318971][T14826] ? genl_rcv+0x19/0x40 [ 672.319007][T14826] ? down_read+0x272/0x2e0 [ 672.319025][T14826] ? genl_rcv+0xd/0x40 [ 672.319047][T14826] genl_rcv+0x28/0x40 [ 672.319066][T14826] netlink_unicast+0x80f/0x9b0 [ 672.319097][T14826] ? __pfx_netlink_unicast+0x10/0x10 [ 672.319117][T14826] ? __alloc_skb+0x193/0x390 [ 672.319135][T14826] ? netlink_sendmsg+0x650/0xb40 [ 672.319149][T14826] ? skb_put+0x11b/0x210 [ 672.319170][T14826] netlink_sendmsg+0x813/0xb40 [ 672.319196][T14826] ? __pfx_netlink_sendmsg+0x10/0x10 [ 672.319215][T14826] ? aa_sock_msg_perm+0xf1/0x1b0 [ 672.319234][T14826] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 672.319252][T14826] ? __pfx_netlink_sendmsg+0x10/0x10 [ 672.319268][T14826] ____sys_sendmsg+0xa68/0xad0 [ 672.319289][T14826] ? __might_fault+0xaf/0x130 [ 672.319317][T14826] ? __pfx_____sys_sendmsg+0x10/0x10 [ 672.319344][T14826] ? import_iovec+0x73/0xa0 [ 672.319368][T14826] ___sys_sendmsg+0x2a5/0x360 [ 672.319386][T14826] ? __lock_acquire+0x6b5/0x2cf0 [ 672.319410][T14826] ? __pfx____sys_sendmsg+0x10/0x10 [ 672.319462][T14826] ? __fget_files+0x2a/0x420 [ 672.319479][T14826] ? __fget_files+0x3a0/0x420 [ 672.319504][T14826] __x64_sys_sendmsg+0x1bd/0x2a0 [ 672.319527][T14826] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 672.319557][T14826] ? __pfx_ksys_write+0x10/0x10 [ 672.319587][T14826] do_syscall_64+0xe2/0xf80 [ 672.319602][T14826] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.319618][T14826] ? trace_irq_disable+0x37/0x100 [ 672.319634][T14826] ? clear_bhb_loop+0x60/0xb0 [ 672.319659][T14826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.319676][T14826] RIP: 0033:0x7f1e16d9aeb9 [ 672.319693][T14826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 672.319708][T14826] RSP: 002b:00007f1e17c2f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 672.319726][T14826] RAX: ffffffffffffffda RBX: 00007f1e17015fa0 RCX: 00007f1e16d9aeb9 [ 672.319737][T14826] RDX: 0000000004008094 RSI: 0000200000000100 RDI: 0000000000000003 [ 672.319747][T14826] RBP: 00007f1e17c2f090 R08: 0000000000000000 R09: 0000000000000000 [ 672.319757][T14826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 672.319767][T14826] R13: 00007f1e17016038 R14: 00007f1e17015fa0 R15: 00007f1e1713fa48 [ 672.319795][T14826] [ 672.760652][ T5826] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 672.831408][T14833] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2452'. [ 673.172278][T14837] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2454'. [ 673.209809][ T5826] usb 1-1: Using ep0 maxpacket: 32 [ 673.221715][ T5826] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 673.230356][ T5826] usb 1-1: config 0 has no interface number 0 [ 673.243554][ T5826] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 673.256114][ T5826] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.373697][T14841] netlink: 'syz.6.2456': attribute type 1 has an invalid length. [ 673.422894][ T5826] usb 1-1: Product: syz [ 673.427166][ T5826] usb 1-1: Manufacturer: syz [ 673.439790][ T5826] usb 1-1: SerialNumber: syz [ 673.687934][ T5826] usb 1-1: config 0 descriptor?? [ 673.762690][ T5826] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 673.878122][ T5824] gspca_sonixj: reg_w1 err -110 [ 673.981045][ T5824] sonixj 4-1:0.0: probe with driver sonixj failed with error -110 [ 674.006621][ T5826] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 674.032752][ T5826] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 674.386520][T14855] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2460'. [ 674.397283][T14855] FAULT_INJECTION: forcing a failure. [ 674.397283][T14855] name failslab, interval 1, probability 0, space 0, times 0 [ 674.416825][T14855] CPU: 0 UID: 0 PID: 14855 Comm: syz.6.2460 Tainted: G L syzkaller #0 PREEMPT(full) [ 674.416856][T14855] Tainted: [L]=SOFTLOCKUP [ 674.416862][T14855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 674.416871][T14855] Call Trace: [ 674.416878][T14855] [ 674.416885][T14855] dump_stack_lvl+0xe8/0x150 [ 674.416908][T14855] should_fail_ex+0x412/0x560 [ 674.416930][T14855] should_failslab+0xa8/0x100 [ 674.416947][T14855] __kvmalloc_node_noprof+0x166/0x8d0 [ 674.416962][T14855] ? rcu_is_watching+0x15/0xb0 [ 674.416978][T14855] ? nf_hook_entries_grow+0x288/0x720 [ 674.416995][T14855] ? __pfx___mutex_lock+0x10/0x10 [ 674.417013][T14855] nf_hook_entries_grow+0x288/0x720 [ 674.417039][T14855] __nf_register_net_hook+0x2c9/0x930 [ 674.417062][T14855] nf_register_net_hook+0xb2/0x190 [ 674.417079][T14855] nf_register_net_hooks+0x44/0x1b0 [ 674.417097][T14855] nf_defrag_ipv4_enable+0x87/0x120 [ 674.417119][T14855] nf_ct_netns_do_get+0x18c/0x5c0 [ 674.417138][T14855] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 674.417153][T14855] ? rcu_is_watching+0x15/0xb0 [ 674.417167][T14855] ? trace_kmalloc+0x1f/0xb0 [ 674.417178][T14855] ? __kmalloc_noprof+0x42d/0x7e0 [ 674.417192][T14855] ? nf_ct_netns_get+0xe9/0x320 [ 674.417210][T14855] nf_tables_newrule+0x17ac/0x28b0 [ 674.417240][T14855] ? __pfx_nf_tables_newrule+0x10/0x10 [ 674.417255][T14855] ? nfnl_pernet+0x23/0x240 [ 674.417273][T14855] ? nfnl_pernet+0x23/0x240 [ 674.417299][T14855] ? __nla_parse+0x40/0x60 [ 674.417319][T14855] nfnetlink_rcv+0x1240/0x27b0 [ 674.417363][T14855] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 674.417394][T14855] ? ref_tracker_free+0x693/0x840 [ 674.417435][T14855] ? lockdep_hardirqs_on+0x7a/0x110 [ 674.417449][T14855] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 674.417463][T14855] ? rcu_preempt_deferred_qs_irqrestore+0x7b9/0xbc0 [ 674.417496][T14855] netlink_unicast+0x80f/0x9b0 [ 674.417522][T14855] ? __pfx_netlink_unicast+0x10/0x10 [ 674.417540][T14855] ? __alloc_skb+0x193/0x390 [ 674.417556][T14855] ? netlink_sendmsg+0x650/0xb40 [ 674.417569][T14855] ? skb_put+0x11b/0x210 [ 674.417587][T14855] netlink_sendmsg+0x813/0xb40 [ 674.417609][T14855] ? __pfx_netlink_sendmsg+0x10/0x10 [ 674.417626][T14855] ? aa_sock_msg_perm+0xf1/0x1b0 [ 674.417643][T14855] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 674.417661][T14855] ? __pfx_netlink_sendmsg+0x10/0x10 [ 674.417674][T14855] ____sys_sendmsg+0xa68/0xad0 [ 674.417693][T14855] ? __might_fault+0xaf/0x130 [ 674.417716][T14855] ? __pfx_____sys_sendmsg+0x10/0x10 [ 674.417740][T14855] ? import_iovec+0x73/0xa0 [ 674.417763][T14855] ___sys_sendmsg+0x2a5/0x360 [ 674.417779][T14855] ? __lock_acquire+0x6b5/0x2cf0 [ 674.417800][T14855] ? __pfx____sys_sendmsg+0x10/0x10 [ 674.417849][T14855] ? __fget_files+0x2a/0x420 [ 674.417864][T14855] ? __fget_files+0x3a0/0x420 [ 674.417886][T14855] __x64_sys_sendmsg+0x1bd/0x2a0 [ 674.417906][T14855] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 674.417930][T14855] ? __pfx_ksys_write+0x10/0x10 [ 674.417959][T14855] do_syscall_64+0xe2/0xf80 [ 674.417973][T14855] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.417987][T14855] ? trace_irq_disable+0x37/0x100 [ 674.417999][T14855] ? clear_bhb_loop+0x60/0xb0 [ 674.418016][T14855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.418029][T14855] RIP: 0033:0x7f062a19aeb9 [ 674.418043][T14855] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 674.418055][T14855] RSP: 002b:00007f062b012028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 674.418071][T14855] RAX: ffffffffffffffda RBX: 00007f062a415fa0 RCX: 00007f062a19aeb9 [ 674.418081][T14855] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 674.418090][T14855] RBP: 00007f062b012090 R08: 0000000000000000 R09: 0000000000000000 [ 674.418098][T14855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 674.418107][T14855] R13: 00007f062a416038 R14: 00007f062a415fa0 R15: 00007f062a53fa48 [ 674.418130][T14855] [ 674.965702][T14865] loop5: detected capacity change from 0 to 7 [ 674.972848][T14865] Dev loop5: unable to read RDB block 7 [ 675.000047][T14865] loop5: unable to read partition table [ 675.005884][T14865] loop5: partition table beyond EOD, truncated [ 675.017314][T14867] binder: BINDER_SET_CONTEXT_MGR already set [ 675.025285][T14867] binder: 14866:14867 ioctl 4018620d 200000000180 returned -16 [ 675.082410][T14865] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 675.410377][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 675.410917][ T821] usb 1-1: USB disconnect, device number 82 [ 675.429085][ T821] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 675.538555][ T821] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 675.576014][ T821] quatech2 1-1:0.51: device disconnected [ 675.868694][T14877] netlink: 'syz.2.2466': attribute type 4 has an invalid length. [ 676.094815][ T5917] usb 4-1: USB disconnect, device number 71 [ 676.356491][T14889] FAULT_INJECTION: forcing a failure. [ 676.356491][T14889] name failslab, interval 1, probability 0, space 0, times 0 [ 676.378250][T14889] CPU: 0 UID: 0 PID: 14889 Comm: syz.6.2469 Tainted: G L syzkaller #0 PREEMPT(full) [ 676.378281][T14889] Tainted: [L]=SOFTLOCKUP [ 676.378288][T14889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 676.378299][T14889] Call Trace: [ 676.378307][T14889] [ 676.378317][T14889] dump_stack_lvl+0xe8/0x150 [ 676.378344][T14889] should_fail_ex+0x412/0x560 [ 676.378371][T14889] should_failslab+0xa8/0x100 [ 676.378393][T14889] __kmalloc_cache_noprof+0x83/0x6e0 [ 676.378412][T14889] ? nfnetlink_rcv+0xfe1/0x27b0 [ 676.378441][T14889] nfnetlink_rcv+0xfe1/0x27b0 [ 676.378494][T14889] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 676.378531][T14889] ? ref_tracker_free+0x693/0x840 [ 676.378579][T14889] ? __netlink_deliver_tap+0x807/0x850 [ 676.378597][T14889] ? netlink_deliver_tap+0x2e/0x1b0 [ 676.378631][T14889] netlink_unicast+0x80f/0x9b0 [ 676.378663][T14889] ? __pfx_netlink_unicast+0x10/0x10 [ 676.378685][T14889] ? __alloc_skb+0x193/0x390 [ 676.378705][T14889] ? netlink_sendmsg+0x650/0xb40 [ 676.378722][T14889] ? skb_put+0x11b/0x210 [ 676.378745][T14889] netlink_sendmsg+0x813/0xb40 [ 676.378773][T14889] ? __pfx_netlink_sendmsg+0x10/0x10 [ 676.378795][T14889] ? aa_sock_msg_perm+0xf1/0x1b0 [ 676.378817][T14889] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 676.378838][T14889] ? __pfx_netlink_sendmsg+0x10/0x10 [ 676.378855][T14889] ____sys_sendmsg+0xa68/0xad0 [ 676.378877][T14889] ? __might_fault+0xaf/0x130 [ 676.378909][T14889] ? __pfx_____sys_sendmsg+0x10/0x10 [ 676.378939][T14889] ? import_iovec+0x73/0xa0 [ 676.378966][T14889] ___sys_sendmsg+0x2a5/0x360 [ 676.378986][T14889] ? __lock_acquire+0x6b5/0x2cf0 [ 676.379012][T14889] ? __pfx____sys_sendmsg+0x10/0x10 [ 676.379067][T14889] ? __fget_files+0x2a/0x420 [ 676.379084][T14889] ? __fget_files+0x3a0/0x420 [ 676.379113][T14889] __x64_sys_sendmsg+0x1bd/0x2a0 [ 676.379143][T14889] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 676.379174][T14889] ? __pfx_ksys_write+0x10/0x10 [ 676.379216][T14889] do_syscall_64+0xe2/0xf80 [ 676.379234][T14889] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.379251][T14889] ? trace_irq_disable+0x37/0x100 [ 676.379267][T14889] ? clear_bhb_loop+0x60/0xb0 [ 676.379288][T14889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.379305][T14889] RIP: 0033:0x7f062a19aeb9 [ 676.379321][T14889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 676.379336][T14889] RSP: 002b:00007f062b012028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 676.379355][T14889] RAX: ffffffffffffffda RBX: 00007f062a415fa0 RCX: 00007f062a19aeb9 [ 676.379365][T14889] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 676.379374][T14889] RBP: 00007f062b012090 R08: 0000000000000000 R09: 0000000000000000 [ 676.379384][T14889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 676.379393][T14889] R13: 00007f062a416038 R14: 00007f062a415fa0 R15: 00007f062a53fa48 [ 676.379419][T14889] [ 676.910609][T14891] fuse: Unknown parameter 'user_i00000000000000000000' [ 676.922199][ T5917] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 677.111751][ T5917] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 677.147140][ T5917] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 677.158942][ T5917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.229306][ T5917] usb 4-1: config 0 descriptor?? [ 677.269960][ T5917] pwc: Askey VC010 type 2 USB webcam detected. [ 677.553711][T14905] FAULT_INJECTION: forcing a failure. [ 677.553711][T14905] name failslab, interval 1, probability 0, space 0, times 0 [ 677.598283][T14905] CPU: 1 UID: 0 PID: 14905 Comm: syz.2.2473 Tainted: G L syzkaller #0 PREEMPT(full) [ 677.598315][T14905] Tainted: [L]=SOFTLOCKUP [ 677.598322][T14905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 677.598334][T14905] Call Trace: [ 677.598342][T14905] [ 677.598351][T14905] dump_stack_lvl+0xe8/0x150 [ 677.598379][T14905] should_fail_ex+0x412/0x560 [ 677.598404][T14905] should_failslab+0xa8/0x100 [ 677.598426][T14905] kmem_cache_alloc_noprof+0x87/0x6e0 [ 677.598451][T14905] ? security_file_alloc+0x34/0x310 [ 677.598473][T14905] security_file_alloc+0x34/0x310 [ 677.598493][T14905] init_file+0x93/0x2f0 [ 677.598515][T14905] alloc_empty_file+0x6e/0x1d0 [ 677.598533][T14905] alloc_file_pseudo+0x155/0x240 [ 677.598554][T14905] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 677.598573][T14905] ? alloc_fd+0x64b/0x6c0 [ 677.598597][T14905] anon_inode_getfd+0xc8/0x1f0 [ 677.598619][T14905] __se_sys_fsopen+0x232/0x2c0 [ 677.598641][T14905] do_syscall_64+0xe2/0xf80 [ 677.598655][T14905] ? rcu_is_watching+0x15/0xb0 [ 677.598669][T14905] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.598685][T14905] ? clear_bhb_loop+0x60/0xb0 [ 677.598703][T14905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.598716][T14905] RIP: 0033:0x7fe67099aeb9 [ 677.598729][T14905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 677.598740][T14905] RSP: 002b:00007fe6718c3028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 677.598757][T14905] RAX: ffffffffffffffda RBX: 00007fe670c16180 RCX: 00007fe67099aeb9 [ 677.598768][T14905] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000280 [ 677.598777][T14905] RBP: 00007fe6718c3090 R08: 0000000000000000 R09: 0000000000000000 [ 677.598786][T14905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 677.598795][T14905] R13: 00007fe670c16218 R14: 00007fe670c16180 R15: 00007fe670d3fa48 [ 677.598820][T14905] [ 677.803769][ T5917] pwc: recv_control_msg error -32 req 02 val 2b00 [ 677.912492][T14916] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2467'. [ 677.924831][T14916] tipc: Enabled bearer , priority 10 [ 677.971947][T14917] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2478'. [ 677.983108][T14919] binder: BINDER_SET_CONTEXT_MGR already set [ 677.989123][T14919] binder: 14918:14919 ioctl 4018620d 200000000180 returned -16 [ 678.054794][T14916] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 678.168508][T14923] FAULT_INJECTION: forcing a failure. [ 678.168508][T14923] name failslab, interval 1, probability 0, space 0, times 0 [ 678.205773][T14923] CPU: 0 UID: 0 PID: 14923 Comm: syz.0.2480 Tainted: G L syzkaller #0 PREEMPT(full) [ 678.205808][T14923] Tainted: [L]=SOFTLOCKUP [ 678.205814][T14923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 678.205825][T14923] Call Trace: [ 678.205833][T14923] [ 678.205842][T14923] dump_stack_lvl+0xe8/0x150 [ 678.205871][T14923] should_fail_ex+0x412/0x560 [ 678.205897][T14923] should_failslab+0xa8/0x100 [ 678.205919][T14923] __kmalloc_cache_noprof+0x83/0x6e0 [ 678.205940][T14923] ? sctp_add_bind_addr+0x8c/0x370 [ 678.205957][T14923] ? __pfx_sctp_get_port_local+0x10/0x10 [ 678.205982][T14923] sctp_add_bind_addr+0x8c/0x370 [ 678.206000][T14923] ? sctp_auto_asconf_init+0x15c/0x1e0 [ 678.206025][T14923] sctp_do_bind+0x5b2/0x9d0 [ 678.206057][T14923] sctp_connect_new_asoc+0x270/0x6b0 [ 678.206081][T14923] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 678.206114][T14923] ? sctp_get_af_specific+0x29/0x80 [ 678.206132][T14923] ? sctp_inet6_send_verify+0x80/0x300 [ 678.206149][T14923] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 678.206174][T14923] __sctp_connect+0x5cb/0xdc0 [ 678.206206][T14923] ? __pfx___sctp_connect+0x10/0x10 [ 678.206226][T14923] ? security_sctp_bind_connect+0x7e/0x2c0 [ 678.206249][T14923] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 678.206276][T14923] sctp_getsockopt_connectx3+0x227/0x360 [ 678.206294][T14923] ? lock_sock_nested+0x6a/0x100 [ 678.206315][T14923] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 678.206343][T14923] ? __local_bh_enable_ip+0xd0/0x130 [ 678.206364][T14923] sctp_getsockopt+0x984/0xb90 [ 678.206383][T14923] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 678.206404][T14923] do_sock_getsockopt+0x2d3/0x3f0 [ 678.206430][T14923] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 678.206455][T14923] ? ksys_write+0x1fc/0x270 [ 678.206484][T14923] __x64_sys_getsockopt+0x1a4/0x240 [ 678.206515][T14923] do_syscall_64+0xe2/0xf80 [ 678.206535][T14923] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.206552][T14923] ? trace_irq_disable+0x37/0x100 [ 678.206569][T14923] ? clear_bhb_loop+0x60/0xb0 [ 678.206591][T14923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.206609][T14923] RIP: 0033:0x7f0dbf79aeb9 [ 678.206626][T14923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 678.206641][T14923] RSP: 002b:00007f0dc05c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 678.206661][T14923] RAX: ffffffffffffffda RBX: 00007f0dbfa15fa0 RCX: 00007f0dbf79aeb9 [ 678.206674][T14923] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 678.206685][T14923] RBP: 00007f0dc05c7090 R08: 0000200000000180 R09: 0000000000000000 [ 678.206697][T14923] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 678.206708][T14923] R13: 00007f0dbfa16038 R14: 00007f0dbfa15fa0 R15: 00007f0dbfb3fa48 [ 678.206739][T14923] [ 678.736779][T14925] fuse: Unknown parameter 'user_i00000000000000000000' [ 678.936847][T14929] loop5: detected capacity change from 0 to 7 [ 678.963229][T14929] Dev loop5: unable to read RDB block 7 [ 678.968946][T14929] loop5: unable to read partition table [ 678.975412][T14929] loop5: partition table beyond EOD, truncated [ 678.982083][T14929] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 679.183017][T14934] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 679.214425][T14934] bond5 (unregistering): Released all slaves [ 679.734881][ T5824] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 680.028796][ T5824] usb 7-1: config 0 has no interfaces? [ 680.073696][ T5824] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 680.088977][ T5824] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.148206][ T5824] usb 7-1: Product: syz [ 680.158329][ T5824] usb 7-1: Manufacturer: syz [ 680.163787][ T5824] usb 7-1: SerialNumber: syz [ 680.217441][ T5824] usb 7-1: config 0 descriptor?? [ 680.256667][ T5917] pwc: recv_control_msg error -71 req 02 val 2700 [ 680.269175][ T5917] pwc: recv_control_msg error -71 req 02 val 2c00 [ 680.276543][ T5917] pwc: recv_control_msg error -71 req 04 val 1000 [ 680.285762][ T5917] pwc: recv_control_msg error -71 req 04 val 1300 [ 680.301166][ T5917] pwc: recv_control_msg error -71 req 04 val 1400 [ 680.456007][ T5917] pwc: recv_control_msg error -71 req 02 val 2000 [ 680.463069][ T5917] pwc: recv_control_msg error -71 req 02 val 2100 [ 680.470487][ T5917] pwc: recv_control_msg error -71 req 04 val 1500 [ 680.568983][T14954] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2487'. [ 680.697008][ T5917] pwc: recv_control_msg error -71 req 02 val 2500 [ 680.759602][ T5917] pwc: recv_control_msg error -71 req 02 val 2400 [ 680.766565][T14956] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2488'. [ 680.780605][T14932] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 680.806888][ T5917] pwc: recv_control_msg error -71 req 02 val 2600 [ 680.843082][ T5917] pwc: recv_control_msg error -71 req 02 val 2900 [ 680.868392][ T5917] pwc: recv_control_msg error -71 req 02 val 2800 [ 680.899551][ T5917] pwc: recv_control_msg error -71 req 04 val 1100 [ 680.920717][ T5917] pwc: recv_control_msg error -71 req 04 val 1200 [ 680.957370][ T5917] pwc: Registered as video103. [ 680.976233][ T5917] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input44 [ 681.057636][ T5917] usb 4-1: USB disconnect, device number 72 [ 681.184191][T14969] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2491'. [ 681.642693][T14977] binder_alloc: 14976: pid 14976 spamming oneway? 1 buffers allocated for a total size of 4096 [ 681.729509][ T821] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 681.896480][ T821] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 681.909269][ T821] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25786, setting to 1024 [ 681.948056][ T821] usb 1-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 681.984787][T14979] FAULT_INJECTION: forcing a failure. [ 681.984787][T14979] name failslab, interval 1, probability 0, space 0, times 0 [ 681.991037][ T5917] usb 7-1: USB disconnect, device number 58 [ 681.998782][ T821] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.069190][T14979] CPU: 0 UID: 0 PID: 14979 Comm: syz.3.2495 Tainted: G L syzkaller #0 PREEMPT(full) [ 682.069222][T14979] Tainted: [L]=SOFTLOCKUP [ 682.069229][T14979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 682.069240][T14979] Call Trace: [ 682.069249][T14979] [ 682.069258][T14979] dump_stack_lvl+0xe8/0x150 [ 682.069286][T14979] should_fail_ex+0x412/0x560 [ 682.069312][T14979] should_failslab+0xa8/0x100 [ 682.069335][T14979] kmem_cache_alloc_noprof+0x87/0x6e0 [ 682.069362][T14979] ? skb_clone+0x212/0x3a0 [ 682.069386][T14979] skb_clone+0x212/0x3a0 [ 682.069409][T14979] __netlink_deliver_tap+0x404/0x850 [ 682.069438][T14979] ? netlink_deliver_tap+0x2e/0x1b0 [ 682.069456][T14979] netlink_deliver_tap+0x19c/0x1b0 [ 682.069474][T14979] netlink_sendskb+0x68/0x140 [ 682.069498][T14979] netlink_unicast+0x3a3/0x9b0 [ 682.069527][T14979] ? __pfx_netlink_unicast+0x10/0x10 [ 682.069558][T14979] netlink_rcv_skb+0x2b6/0x4b0 [ 682.069578][T14979] ? __pfx_genl_rcv_msg+0x10/0x10 [ 682.069602][T14979] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 682.069618][T14979] ? genl_rcv+0x19/0x40 [ 682.069655][T14979] ? down_read+0x272/0x2e0 [ 682.069673][T14979] ? genl_rcv+0xd/0x40 [ 682.069704][T14979] genl_rcv+0x28/0x40 [ 682.069723][T14979] netlink_unicast+0x80f/0x9b0 [ 682.069755][T14979] ? __pfx_netlink_unicast+0x10/0x10 [ 682.069778][T14979] ? __alloc_skb+0x193/0x390 [ 682.069798][T14979] ? netlink_sendmsg+0x650/0xb40 [ 682.069815][T14979] ? skb_put+0x11b/0x210 [ 682.069838][T14979] netlink_sendmsg+0x813/0xb40 [ 682.069866][T14979] ? __pfx_netlink_sendmsg+0x10/0x10 [ 682.069889][T14979] ? aa_sock_msg_perm+0xf1/0x1b0 [ 682.069912][T14979] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 682.069932][T14979] ? __pfx_netlink_sendmsg+0x10/0x10 [ 682.069949][T14979] ____sys_sendmsg+0xa68/0xad0 [ 682.069971][T14979] ? __might_fault+0xaf/0x130 [ 682.070001][T14979] ? __pfx_____sys_sendmsg+0x10/0x10 [ 682.070032][T14979] ? import_iovec+0x73/0xa0 [ 682.070060][T14979] ___sys_sendmsg+0x2a5/0x360 [ 682.070080][T14979] ? __lock_acquire+0x6b5/0x2cf0 [ 682.070107][T14979] ? __pfx____sys_sendmsg+0x10/0x10 [ 682.070164][T14979] ? __fget_files+0x2a/0x420 [ 682.070183][T14979] ? __fget_files+0x3a0/0x420 [ 682.070212][T14979] __x64_sys_sendmsg+0x1bd/0x2a0 [ 682.070234][T14979] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 682.070266][T14979] ? __pfx_ksys_write+0x10/0x10 [ 682.070301][T14979] do_syscall_64+0xe2/0xf80 [ 682.070320][T14979] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.070337][T14979] ? trace_irq_disable+0x37/0x100 [ 682.070354][T14979] ? clear_bhb_loop+0x60/0xb0 [ 682.070376][T14979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.070393][T14979] RIP: 0033:0x7f609cf9aeb9 [ 682.070410][T14979] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 682.070426][T14979] RSP: 002b:00007f609ddcf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 682.070446][T14979] RAX: ffffffffffffffda RBX: 00007f609d215fa0 RCX: 00007f609cf9aeb9 [ 682.070460][T14979] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 682.070472][T14979] RBP: 00007f609ddcf090 R08: 0000000000000000 R09: 0000000000000000 [ 682.070483][T14979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 682.070494][T14979] R13: 00007f609d216038 R14: 00007f609d215fa0 R15: 00007f609d33fa48 [ 682.070525][T14979] [ 682.444178][ T821] usb 1-1: config 0 descriptor?? [ 682.468054][T14975] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 682.899626][ T821] petalynx 0003:18B1:0037.0019: unknown main item tag 0x0 [ 682.942878][ T821] petalynx 0003:18B1:0037.0019: unknown main item tag 0x0 [ 682.976780][ T821] petalynx 0003:18B1:0037.0019: unknown main item tag 0x0 [ 682.990835][ T821] petalynx 0003:18B1:0037.0019: unknown main item tag 0x0 [ 682.999861][ T821] petalynx 0003:18B1:0037.0019: hidraw0: USB HID v0.00 Device [HID 18b1:0037] on usb-dummy_hcd.0-1/input0 [ 683.215199][T14998] 0: reclassify loop, rule prio 0, protocol 800 [ 683.276326][ T5917] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 683.470530][ T5917] usb 4-1: Using ep0 maxpacket: 8 [ 683.480117][ T5917] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 683.489226][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.762760][ T5917] usb 4-1: Product: syz [ 683.838522][ T5917] usb 4-1: Manufacturer: syz [ 683.849523][ T5917] usb 4-1: SerialNumber: syz [ 683.865141][ T5917] usb 4-1: config 0 descriptor?? [ 683.882207][ T5917] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 684.494619][ T5824] usb 1-1: USB disconnect, device number 83 [ 684.931169][T15017] netlink: 'syz.0.2503': attribute type 4 has an invalid length. [ 685.229051][ T5917] gspca_sonixj: reg_w1 err -110 [ 685.571935][ T5917] sonixj 4-1:0.0: probe with driver sonixj failed with error -110 [ 685.826156][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.834429][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.759570][T15039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 686.778811][T15039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 686.995697][T15043] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2508'. [ 687.315611][ T5904] usb 4-1: USB disconnect, device number 73 [ 687.447214][T15048] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2509'. [ 687.490809][T15048] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2509'. [ 687.749793][ T5917] usb 4-1: new full-speed USB device number 74 using dummy_hcd [ 687.791629][T15059] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2511'. [ 687.987675][ T5917] usb 4-1: unable to get BOS descriptor or descriptor too short [ 687.998767][ T5917] usb 4-1: not running at top speed; connect to a high speed hub [ 688.015661][ T5917] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 688.028650][ T5917] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 688.054735][ T5917] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 688.099055][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.141460][ T5917] usb 4-1: Product: syz [ 688.151513][ T5917] usb 4-1: Manufacturer: syz [ 688.160315][ T5917] usb 4-1: SerialNumber: syz [ 689.166635][ T5917] usb 4-1: 0:2 : does not exist [ 689.172103][ T5917] usb 4-1: unit 4 not found! [ 689.207350][ T5917] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 689.228376][ T5917] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 689.299532][ T5917] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 689.344453][ T5917] usb 4-1: USB disconnect, device number 74 [ 689.384386][T12611] udevd[12611]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 690.377258][T15085] kAFS: unable to lookup cell 'ÿ' [ 690.397055][T15084] netlink: 'syz.7.2516': attribute type 4 has an invalid length. [ 690.642632][T15085] kAFS: unable to lookup cell '(,c¾Ì' [ 691.632126][T15096] binder: BINDER_SET_CONTEXT_MGR already set [ 691.638140][T15096] binder: 15095:15096 ioctl 4018620d 200000000180 returned -16 [ 692.178346][T15103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 692.191942][T15103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 692.236236][T15103] FAULT_INJECTION: forcing a failure. [ 692.236236][T15103] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 692.283901][T15103] CPU: 1 UID: 0 PID: 15103 Comm: syz.2.2522 Tainted: G L syzkaller #0 PREEMPT(full) [ 692.283932][T15103] Tainted: [L]=SOFTLOCKUP [ 692.283940][T15103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 692.283951][T15103] Call Trace: [ 692.283959][T15103] [ 692.283967][T15103] dump_stack_lvl+0xe8/0x150 [ 692.283993][T15103] should_fail_ex+0x412/0x560 [ 692.284016][T15103] _copy_to_user+0x31/0xb0 [ 692.284040][T15103] simple_read_from_buffer+0xe1/0x170 [ 692.284063][T15103] proc_fail_nth_read+0x1bb/0x230 [ 692.284088][T15103] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 692.284111][T15103] ? rw_verify_area+0x2a6/0x4d0 [ 692.284131][T15103] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 692.284151][T15103] vfs_read+0x20c/0xa70 [ 692.284172][T15103] ? fdget_pos+0x246/0x320 [ 692.284195][T15103] ? __pfx___mutex_lock+0x10/0x10 [ 692.284215][T15103] ? __pfx_vfs_read+0x10/0x10 [ 692.284240][T15103] ? __fget_files+0x2a/0x420 [ 692.284262][T15103] ? __fget_files+0x3a0/0x420 [ 692.284279][T15103] ? __fget_files+0x2a/0x420 [ 692.284306][T15103] ksys_read+0x150/0x270 [ 692.284331][T15103] ? __pfx_ksys_read+0x10/0x10 [ 692.284364][T15103] do_syscall_64+0xe2/0xf80 [ 692.284382][T15103] ? rcu_is_watching+0x15/0xb0 [ 692.284398][T15103] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.284415][T15103] ? clear_bhb_loop+0x60/0xb0 [ 692.284434][T15103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.284450][T15103] RIP: 0033:0x7fe67095b78e [ 692.284466][T15103] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 692.284480][T15103] RSP: 002b:00007fe671904fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 692.284500][T15103] RAX: ffffffffffffffda RBX: 00007fe6719056c0 RCX: 00007fe67095b78e [ 692.284513][T15103] RDX: 000000000000000f RSI: 00007fe6719050a0 RDI: 0000000000000004 [ 692.284525][T15103] RBP: 00007fe671905090 R08: 0000000000000000 R09: 0000000000000000 [ 692.284536][T15103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 692.284548][T15103] R13: 00007fe670c16038 R14: 00007fe670c15fa0 R15: 00007fe670d3fa48 [ 692.284578][T15103] [ 693.532940][T15123] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2527'. [ 693.542144][T15123] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2527'. [ 693.751405][T15127] fuse: Unknown parameter 'user_id00000000000000000000' [ 694.129518][ T5904] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 694.300171][ T5891] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 694.324777][ T5904] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 694.362926][ T5904] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 694.395221][ T5904] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 694.481470][ T5891] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 694.537518][ T5891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 694.556320][ T5904] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 694.567740][ T5904] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.576404][ T5891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 694.619988][ T5904] usb 4-1: Product: syz [ 694.624216][ T5891] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 694.637369][ T5904] usb 4-1: Manufacturer: syz [ 694.646757][ T5904] usb 4-1: SerialNumber: syz [ 694.657393][ T5904] usb 4-1: config 0 descriptor?? [ 694.663777][ T5891] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 694.675960][T15130] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 694.689418][ T5891] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 694.702802][ T5891] usb 1-1: Manufacturer: syz [ 694.723072][ T5891] usb 1-1: config 0 descriptor?? [ 694.970372][T15130] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2529'. [ 695.097952][T15143] syzkaller0: left promiscuous mode [ 695.104329][T15143] syzkaller0: left allmulticast mode [ 695.131943][T15141] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 695.210565][ T5891] usbhid 1-1:0.0: can't add hid device: -71 [ 695.216605][ T5891] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 695.272158][ T5891] usb 1-1: USB disconnect, device number 84 [ 695.336915][T15145] binder: BINDER_SET_CONTEXT_MGR already set [ 695.343662][T15145] binder: 15144:15145 ioctl 4018620d 200000000180 returned -16 [ 696.372482][ T5904] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 697.109568][ T5904] usb 1-1: Using ep0 maxpacket: 32 [ 697.133637][ T5904] usb 1-1: config 0 has an invalid interface number: 80 but max is 0 [ 697.239937][ T5904] usb 1-1: config 0 has no interface number 0 [ 697.282482][ T5904] usb 1-1: New USB device found, idVendor=04cb, idProduct=0109, bcdDevice=91.1b [ 697.314566][T15170] FAULT_INJECTION: forcing a failure. [ 697.314566][T15170] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 697.327821][ T5904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.345891][ T5904] usb 1-1: Product: syz [ 697.365090][ T5904] usb 1-1: Manufacturer: syz [ 697.390926][ T5904] usb 1-1: SerialNumber: syz [ 697.401232][T15170] CPU: 1 UID: 0 PID: 15170 Comm: syz.2.2541 Tainted: G L syzkaller #0 PREEMPT(full) [ 697.401257][T15170] Tainted: [L]=SOFTLOCKUP [ 697.401263][T15170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 697.401273][T15170] Call Trace: [ 697.401280][T15170] [ 697.401288][T15170] dump_stack_lvl+0xe8/0x150 [ 697.401313][T15170] should_fail_ex+0x412/0x560 [ 697.401337][T15170] _copy_from_user+0x2d/0xb0 [ 697.401359][T15170] kstrtouint_from_user+0xd6/0x180 [ 697.401380][T15170] ? _copy_to_user+0x42/0xb0 [ 697.401402][T15170] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 697.401435][T15170] proc_fail_nth_write+0x8e/0x210 [ 697.401456][T15170] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 697.401482][T15170] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 697.401506][T15170] vfs_write+0x29a/0xb90 [ 697.401538][T15170] ? __pfx_vfs_write+0x10/0x10 [ 697.401563][T15170] ? __fget_files+0x2a/0x420 [ 697.401584][T15170] ? __fget_files+0x3a0/0x420 [ 697.401600][T15170] ? __fget_files+0x2a/0x420 [ 697.401623][T15170] ksys_write+0x150/0x270 [ 697.401644][T15170] ? __pfx_ksys_write+0x10/0x10 [ 697.401670][T15170] do_syscall_64+0xe2/0xf80 [ 697.401685][T15170] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.401698][T15170] ? trace_irq_disable+0x37/0x100 [ 697.401712][T15170] ? clear_bhb_loop+0x60/0xb0 [ 697.401728][T15170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.401741][T15170] RIP: 0033:0x7fe67095b78e [ 697.401755][T15170] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 697.401767][T15170] RSP: 002b:00007fe6718c2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 697.401783][T15170] RAX: ffffffffffffffda RBX: 00007fe6718c36c0 RCX: 00007fe67095b78e [ 697.401793][T15170] RDX: 0000000000000001 RSI: 00007fe6718c30a0 RDI: 0000000000000006 [ 697.401802][T15170] RBP: 00007fe6718c3090 R08: 0000000000000000 R09: 0000000000000000 [ 697.401811][T15170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 697.401819][T15170] R13: 00007fe670c16218 R14: 00007fe670c16180 R15: 00007fe670d3fa48 [ 697.401842][T15170] [ 697.623957][ T5904] usb 1-1: config 0 descriptor?? [ 697.873819][ T5904] gspca_main: finepix-2.14.0 probing 04cb:0109 [ 698.028981][ T5907] usb 4-1: USB disconnect, device number 75 [ 698.100197][ T5917] usb 1-1: USB disconnect, device number 85 [ 698.122818][T15174] ALSA: mixer_oss: invalid OSS volume '½Ë' [ 698.441641][T15197] program syz.7.2546 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 699.522459][T15213] netlink: 'syz.2.2551': attribute type 4 has an invalid length. [ 700.079232][T15221] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2554'. [ 700.862295][T15227] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2555'. [ 701.118149][T15230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 701.179940][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 701.220565][T15231] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 701.270986][T15230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 701.394858][T15238] loop5: detected capacity change from 0 to 7 [ 701.404359][T15238] Dev loop5: unable to read RDB block 7 [ 701.410185][T15238] loop5: unable to read partition table [ 701.417097][T15238] loop5: partition table beyond EOD, truncated [ 701.439261][T15238] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 702.847129][T15250] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2561'. [ 705.256493][ T5904] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 705.499617][ T5904] usb 7-1: Using ep0 maxpacket: 8 [ 705.551842][ T5904] usb 7-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 705.740159][ T5904] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.762416][ T5904] usb 7-1: Product: syz [ 705.766745][ T5904] usb 7-1: Manufacturer: syz [ 705.805241][ T5904] usb 7-1: SerialNumber: syz [ 706.095168][ T5904] usb 7-1: config 0 descriptor?? [ 706.200600][ T5904] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 706.422819][ T999] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 706.594083][ T5904] gspca_sonixj: reg_r err -32 [ 706.598820][ T5904] sonixj 7-1:0.0: probe with driver sonixj failed with error -32 [ 706.681962][ T999] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 706.951633][ T999] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 707.180599][ T999] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 708.168160][ T999] bridge_slave_1: left allmulticast mode [ 708.178897][ T999] bridge_slave_1: left promiscuous mode [ 708.212024][ T999] bridge0: port 2(bridge_slave_1) entered disabled state [ 708.243286][ T999] bridge_slave_0: left allmulticast mode [ 708.265543][ T999] bridge_slave_0: left promiscuous mode [ 708.336070][ T999] bridge0: port 1(bridge_slave_0) entered disabled state [ 708.891012][ T5907] usb 7-1: USB disconnect, device number 59 [ 709.507654][T15355] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2586'. [ 710.125535][ T30] audit: type=1326 audit(1770399057.814:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15350 comm="syz.6.2587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062a19aeb9 code=0x7ffc0000 [ 710.236905][ T30] audit: type=1326 audit(1770399057.814:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15350 comm="syz.6.2587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062a19aeb9 code=0x7ffc0000 [ 710.359004][ T30] audit: type=1326 audit(1770399057.814:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15350 comm="syz.6.2587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f062a19aeb9 code=0x7ffc0000 [ 710.399485][ T5824] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 710.509481][ T30] audit: type=1326 audit(1770399057.814:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15350 comm="syz.6.2587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062a19aeb9 code=0x7ffc0000 [ 710.584851][ T5824] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 710.610008][ T5824] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 710.654185][ T30] audit: type=1326 audit(1770399057.814:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15350 comm="syz.6.2587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f062a19aeb9 code=0x7ffc0000 [ 710.709508][ T5824] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 710.752549][ T30] audit: type=1326 audit(1770399057.814:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15350 comm="syz.6.2587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062a19aeb9 code=0x7ffc0000 [ 710.752957][ T999] bond0 (unregistering): (slave vxlan0): Releasing backup interface [ 710.782584][ T30] audit: type=1326 audit(1770399057.814:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15350 comm="syz.6.2587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062a19aeb9 code=0x7ffc0000 [ 710.789902][ T5824] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 710.869604][ T30] audit: type=1326 audit(1770399057.814:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15350 comm="syz.6.2587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f062a19aeb9 code=0x7ffc0000 [ 710.895937][ T30] audit: type=1326 audit(1770399057.814:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15350 comm="syz.6.2587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f062a19aeb9 code=0x7ffc0000 [ 710.918705][ T30] audit: type=1326 audit(1770399057.814:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15350 comm="syz.6.2587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f062a19aeb9 code=0x7ffc0000 [ 710.957499][ T5824] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 710.976815][ T5824] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 711.018630][ T5824] usb 1-1: Manufacturer: syz [ 711.051941][ T5824] usb 1-1: config 0 descriptor?? [ 711.273013][ T999] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 711.299510][ T999] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 711.331217][ T999] bond0 (unregistering): Released all slaves [ 711.456285][ T999] : left promiscuous mode [ 711.480540][ T5824] usbhid 1-1:0.0: can't add hid device: -71 [ 711.509043][ T5824] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 711.586133][T15382] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2590'. [ 711.682604][ T5824] usb 1-1: USB disconnect, device number 86 [ 711.805192][T15387] syz.3.2592 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 711.815798][ T999] tipc: Disabling bearer [ 711.895133][ T999] tipc: Left network mode [ 713.010219][ T999] hsr_slave_0: left promiscuous mode [ 713.039821][ T5891] usb 4-1: new full-speed USB device number 76 using dummy_hcd [ 713.073353][ T999] hsr_slave_1: left promiscuous mode [ 713.103107][ T999] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 713.148520][ T999] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 713.171844][ T999] veth0_macvtap: left allmulticast mode [ 713.203054][ T5891] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 713.213660][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.257971][ T5891] usb 4-1: Product: syz [ 713.278803][ T5891] usb 4-1: Manufacturer: syz [ 713.293718][ T5891] usb 4-1: SerialNumber: syz [ 713.334802][ T5891] usb 4-1: config 0 descriptor?? [ 713.364440][ T5891] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 713.385055][ T999] team0 (unregistering): Port device batadv1 removed [ 714.443853][ T5891] gspca_stk1135: reg_w 0x3 err -110 [ 714.450294][ T5891] gspca_stk1135: serial bus timeout: status=0x00 [ 714.457031][ T5891] gspca_stk1135: Sensor write failed [ 714.476210][ T5891] gspca_stk1135: serial bus timeout: status=0x00 [ 714.507620][ T5891] gspca_stk1135: Sensor write failed [ 714.527450][ T5891] gspca_stk1135: serial bus timeout: status=0x00 [ 714.608959][ T5891] gspca_stk1135: Sensor read failed [ 714.640583][ T5891] gspca_stk1135: serial bus timeout: status=0x00 [ 714.657786][ T5891] gspca_stk1135: Sensor read failed [ 714.687396][ T5891] gspca_stk1135: Detected sensor type unknown (0x0) [ 714.715548][ T5891] gspca_stk1135: serial bus timeout: status=0x00 [ 714.727764][ T5891] gspca_stk1135: Sensor read failed [ 714.739085][ T5891] gspca_stk1135: serial bus timeout: status=0x00 [ 714.752502][ T5891] gspca_stk1135: Sensor read failed [ 714.779901][ T5891] gspca_stk1135: serial bus timeout: status=0x00 [ 714.794568][ T5891] gspca_stk1135: Sensor write failed [ 714.802746][ T5891] gspca_stk1135: serial bus timeout: status=0x00 [ 714.859907][ T5891] gspca_stk1135: Sensor write failed [ 714.868298][ T5891] stk1135 4-1:0.0: probe with driver stk1135 failed with error -110 [ 715.524870][ T999] team0 (unregistering): Port device team_slave_1 removed [ 715.583269][ T999] team0 (unregistering): Port device team_slave_0 removed [ 716.260962][T15440] hsr_slave_0: left promiscuous mode [ 716.268849][T15440] hsr_slave_1: left promiscuous mode [ 716.414666][T15453] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 716.598427][T15459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 716.631079][T15459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 717.072046][ T999] IPVS: stop unused estimator thread 0... [ 717.448894][ T5907] usb 4-1: USB disconnect, device number 76 [ 720.493313][T15536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 720.517492][T15536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 720.819545][ T5904] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 720.828952][T15546] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 720.995297][ T5904] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 721.008608][ T5904] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 721.020418][ T31] INFO: task kworker/0:2:797 blocked for more than 143 seconds. [ 721.028362][ T31] Tainted: G L syzkaller #0 [ 721.043578][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 721.053156][ T5904] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 721.064123][ T31] task:kworker/0:2 state:D stack:19736 pid:797 tgid:797 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 721.077424][ T5904] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 721.098485][ T31] Workqueue: usb_hub_wq hub_event [ 721.106753][ T31] Call Trace: [ 721.111871][ T5904] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 721.121398][ T5904] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 721.133035][ T31] [ 721.137434][ T31] __schedule+0x14ea/0x5050 [ 721.144463][ T5904] usb 7-1: Manufacturer: syz [ 721.149176][ T31] ? __device_attach_driver+0x279/0x430 [ 721.163932][ T5904] usb 7-1: config 0 descriptor?? [ 721.173531][ T31] ? device_initial_probe+0xa1/0xd0 [ 721.188940][ T31] ? __driver_probe_device+0x18c/0x320 [ 721.210283][ T31] ? bus_for_each_drv+0x258/0x2f0 [ 721.237445][ T31] ? look_up_lock_class+0x57/0x110 [ 721.305064][ T31] ? __pfx___schedule+0x10/0x10 [ 721.319494][ T31] ? schedule+0x90/0x360 [ 721.338719][ T31] schedule+0x164/0x360 [ 721.356567][ T31] schedule_timeout+0xc3/0x2c0 [ 721.409534][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 721.415087][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 721.446203][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 721.470769][ T31] ? wait_for_completion+0x274/0x5e0 [ 721.485224][ T31] wait_for_completion+0x2cc/0x5e0 [ 721.499061][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 721.518671][ T31] i2c_del_adapter+0x5c0/0x790 [ 721.531549][ T31] ? lockdep_hardirqs_on+0x7a/0x110 [ 721.545762][ T31] ? dvb_usbv2_exit+0x4d9/0xb60 [ 721.556688][ T31] ? kfree+0x1be/0x650 [ 721.569652][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 721.586941][ T31] ? dvb_usbv2_exit+0x935/0xb60 [ 721.601243][ T5904] usbhid 7-1:0.0: can't add hid device: -71 [ 721.607977][ T5904] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 721.616932][ T31] dvb_usbv2_probe+0x4c0/0x3c20 [ 721.628357][ T31] ? __pfx_dvb_usbv2_probe+0x10/0x10 [ 721.645863][ T5904] usb 7-1: USB disconnect, device number 60 [ 721.652157][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 721.684172][ T31] ? __pm_runtime_set_status+0x9d4/0xcd0 [ 721.702163][ T31] usb_probe_interface+0x668/0xc90 [ 721.716343][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 721.727431][ T31] really_probe+0x267/0xaf0 [ 721.734061][ T31] __driver_probe_device+0x18c/0x320 [ 721.742617][ T31] driver_probe_device+0x4f/0x240 [ 721.749954][ T31] __device_attach_driver+0x279/0x430 [ 721.763112][ T31] bus_for_each_drv+0x258/0x2f0 [ 721.770240][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 721.781938][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 721.790446][ T31] ? lockdep_hardirqs_on+0x7a/0x110 [ 721.797443][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 721.806257][ T31] __device_attach+0x2c5/0x450 [ 721.814070][ T31] ? __pfx___device_attach+0x10/0x10 [ 721.824427][ T31] ? _raw_spin_unlock+0x28/0x50 [ 721.861898][ T31] device_initial_probe+0xa1/0xd0 [ 721.869139][ T31] bus_probe_device+0x12a/0x220 [ 721.876685][ T31] ? device_add+0x726/0xb70 [ 721.883967][ T31] device_add+0x7b6/0xb70 [ 721.891522][ T31] usb_set_configuration+0x1a87/0x2110 [ 721.900669][ T31] usb_generic_driver_probe+0x8d/0x150 [ 721.908654][ T31] usb_probe_device+0x1c4/0x3b0 [ 721.916163][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 721.924250][ T31] really_probe+0x267/0xaf0 [ 721.932392][ T31] __driver_probe_device+0x18c/0x320 [ 721.943652][ T31] driver_probe_device+0x4f/0x240 [ 721.953044][ T31] __device_attach_driver+0x279/0x430 [ 721.963356][ T31] bus_for_each_drv+0x258/0x2f0 [ 721.971818][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 721.982059][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 721.990605][ T31] ? lockdep_hardirqs_on+0x7a/0x110 [ 721.998782][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 722.008327][ T31] __device_attach+0x2c5/0x450 [ 722.016350][ T31] ? __pfx___device_attach+0x10/0x10 [ 722.023783][ T31] ? _raw_spin_unlock+0x28/0x50 [ 722.032331][ T31] device_initial_probe+0xa1/0xd0 [ 722.040883][ T31] bus_probe_device+0x12a/0x220 [ 722.048582][ T31] ? device_add+0x726/0xb70 [ 722.058483][ T31] device_add+0x7b6/0xb70 [ 722.066951][ T31] usb_new_device+0xa08/0x16f0 [ 722.074889][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 722.083082][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 722.091065][ T31] hub_event+0x2a1c/0x4f30 [ 722.097875][ T31] ? __pfx_hub_event+0x10/0x10 [ 722.105719][ T31] ? process_scheduled_works+0xa0f/0x17a0 [ 722.114621][ T31] ? process_scheduled_works+0xa0f/0x17a0 [ 722.123550][ T31] ? process_scheduled_works+0xa0f/0x17a0 [ 722.142309][ T31] process_scheduled_works+0xaec/0x17a0 [ 722.151830][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 722.163201][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 722.168281][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 722.181553][ T31] ? schedule+0x90/0x360 [ 722.189026][ T31] worker_thread+0xda6/0x1360 [ 722.196805][ T31] kthread+0x726/0x8b0 [ 722.203216][ T31] ? __pfx_worker_thread+0x10/0x10 [ 722.211625][ T31] ? __pfx_kthread+0x10/0x10 [ 722.218757][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 722.227757][ T31] ? __pfx_kthread+0x10/0x10 [ 722.235074][ T31] ret_from_fork+0x51b/0xa40 [ 722.242676][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 722.250822][ T31] ? __switch_to+0xc82/0x1410 [ 722.258287][ T31] ? __pfx_kthread+0x10/0x10 [ 722.266033][ T31] ret_from_fork_asm+0x1a/0x30 [ 722.300638][ T31] [ 722.303910][ T31] [ 722.303910][ T31] Showing all locks held in the system: [ 722.322566][ T31] 1 lock held by khungtaskd/31: [ 722.327430][ T31] #0: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 722.338722][ T31] 5 locks held by kworker/0:2/797: [ 722.344691][ T31] #0: ffff88801eed5d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 722.357148][ T31] #1: ffffc90003227bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 722.369670][ T31] #2: ffff888143f9c198 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 722.378723][ T31] #3: ffff88807ccd3198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 722.393736][ T31] #4: ffff888046744160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 722.404704][ T31] 2 locks held by getty/5580: [ 722.410189][ T31] #0: ffff888030a5b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 722.420435][ T31] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 722.431125][ T31] 4 locks held by udevd/12596: [ 722.436069][ T31] #0: ffff888029df0540 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10 [ 722.445961][ T31] #1: ffff888033053088 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 722.456162][ T31] #2: ffff88807d3243c8 (kn->active#19){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 722.467023][ T31] #3: ffff88807ccd3198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 722.476840][ T31] 1 lock held by syz.2.2616/15542: [ 722.482713][ T31] 1 lock held by syz.3.2619/15550: [ 722.488068][ T31] #0: ffffffff8e560b40 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 722.502467][ T31] 2 locks held by dhcpcd/15561: [ 722.507354][ T31] #0: ffff88805715e260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe10 [ 722.518885][ T31] #1: ffffffff8e560c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 722.531206][ T31] 2 locks held by dhcpcd/15563: [ 722.536081][ T31] #0: ffff88805c29c260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe10 [ 722.546383][ T31] #1: ffffffff8e560c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 722.571477][ T31] [ 722.574253][ T31] ============================================= [ 722.574253][ T31] [ 722.584396][ T31] NMI backtrace for cpu 1 [ 722.584417][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 722.584441][ T31] Tainted: [L]=SOFTLOCKUP [ 722.584448][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 722.584459][ T31] Call Trace: [ 722.584466][ T31] [ 722.584475][ T31] dump_stack_lvl+0xe8/0x150 [ 722.584500][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 722.584525][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 722.584549][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 722.584573][ T31] sys_info+0x135/0x170 [ 722.584592][ T31] watchdog+0xf90/0xfe0 [ 722.584615][ T31] ? watchdog+0x209/0xfe0 [ 722.584655][ T31] kthread+0x726/0x8b0 [ 722.584677][ T31] ? __pfx_watchdog+0x10/0x10 [ 722.584699][ T31] ? __pfx_kthread+0x10/0x10 [ 722.584720][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 722.584736][ T31] ? __pfx_kthread+0x10/0x10 [ 722.584755][ T31] ret_from_fork+0x51b/0xa40 [ 722.584774][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 722.584795][ T31] ? __switch_to+0xc82/0x1410 [ 722.584820][ T31] ? __pfx_kthread+0x10/0x10 [ 722.584840][ T31] ret_from_fork_asm+0x1a/0x30 [ 722.584873][ T31] [ 722.584880][ T31] Sending NMI from CPU 1 to CPUs 0: [ 722.715820][ C0] NMI backtrace for cpu 0 [ 722.715842][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 722.715863][ C0] Tainted: [L]=SOFTLOCKUP [ 722.715869][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 722.715879][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 722.715901][ C0] Code: a8 60 02 e9 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 59 12 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 722.715914][ C0] RSP: 0018:ffffffff8e207dc0 EFLAGS: 00000246 [ 722.715935][ C0] RAX: 0000000000f0e7a3 RBX: ffffffff8199570d RCX: 0000000080000001 [ 722.715947][ C0] RDX: 0000000000000001 RSI: ffffffff8dcc97b7 RDI: ffffffff8c073a00 [ 722.715958][ C0] RBP: ffffffff8e207eb0 R08: ffff8880b86336db R09: 1ffff110170c66db [ 722.715969][ C0] R10: dffffc0000000000 R11: ffffed10170c66dc R12: ffffffff8fef1b70 [ 722.715980][ C0] R13: 1ffffffff1c52a78 R14: 0000000000000000 R15: 0000000000000000 [ 722.715991][ C0] FS: 0000000000000000(0000) GS:ffff8881256f5000(0000) knlGS:0000000000000000 [ 722.716003][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 722.716013][ C0] CR2: 00007ffcebdaeaf0 CR3: 0000000079430000 CR4: 00000000003526f0 [ 722.716027][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000001800 [ 722.716036][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 722.716046][ C0] Call Trace: [ 722.716054][ C0] [ 722.716060][ C0] default_idle+0x9/0x20 [ 722.716077][ C0] default_idle_call+0x72/0xb0 [ 722.716095][ C0] do_idle+0x1bd/0x500 [ 722.716109][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 722.716126][ C0] ? __pfx_do_idle+0x10/0x10 [ 722.716143][ C0] cpu_startup_entry+0x43/0x60 [ 722.716157][ C0] rest_init+0x2de/0x300 [ 722.716174][ C0] start_kernel+0x380/0x3d0 [ 722.716195][ C0] x86_64_start_reservations+0x24/0x30 [ 722.716212][ C0] x86_64_start_kernel+0x143/0x1c0 [ 722.716227][ C0] common_startup_64+0x13e/0x147 [ 722.716251][ C0] [ 722.936959][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 722.943856][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 722.954611][ T31] Tainted: [L]=SOFTLOCKUP [ 722.959018][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 722.969072][ T31] Call Trace: [ 722.972350][ T31] [ 722.975284][ T31] vpanic+0x1e0/0x670 [ 722.979260][ T31] panic+0xc5/0xd0 [ 722.982980][ T31] ? __pfx_panic+0x10/0x10 [ 722.987393][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 722.992765][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 722.998912][ T31] watchdog+0xfda/0xfe0 [ 723.003062][ T31] ? watchdog+0x209/0xfe0 [ 723.007475][ T31] kthread+0x726/0x8b0 [ 723.011541][ T31] ? __pfx_watchdog+0x10/0x10 [ 723.016214][ T31] ? __pfx_kthread+0x10/0x10 [ 723.020818][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 723.026054][ T31] ? __pfx_kthread+0x10/0x10 [ 723.030645][ T31] ret_from_fork+0x51b/0xa40 [ 723.035227][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 723.040329][ T31] ? __switch_to+0xc82/0x1410 [ 723.045180][ T31] ? __pfx_kthread+0x10/0x10 [ 723.049759][ T31] ret_from_fork_asm+0x1a/0x30 [ 723.054524][ T31] [ 723.058034][ T31] Kernel Offset: disabled [ 723.062364][ T31] Rebooting in 86400 seconds..