last executing test programs: 5m52.079597956s ago: executing program 3 (id=192): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) socket(0x2, 0x80805, 0x0) pipe2(&(0x7f0000000000), 0x800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000001980)=[{{&(0x7f0000001200)=@rc, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000840)=""/70, 0x46}, {&(0x7f00000008c0)=""/150, 0x96}, {&(0x7f0000000980)=""/68, 0x44}, {&(0x7f0000000a00)=""/111, 0x6f}, {&(0x7f0000000a80)=""/139, 0x8b}, {&(0x7f0000000280)=""/53, 0x35}, {&(0x7f0000000b40)=""/16, 0x10}, {&(0x7f0000000b80)=""/56, 0x38}], 0x8, &(0x7f0000000c00)=""/122, 0x7a}, 0x8}, {{&(0x7f0000000c80)=@pppol2tpv3in6, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000d00)=""/242, 0xf2}, {&(0x7f0000000e00)=""/104, 0x68}, {&(0x7f0000000e80)=""/183, 0xb7}, {&(0x7f0000000f40)=""/124, 0x7c}, {&(0x7f0000000fc0)=""/69, 0x45}, {&(0x7f0000001040)=""/32, 0x20}, {&(0x7f0000001080)=""/60, 0x3c}], 0x7, &(0x7f0000001100)=""/146, 0x92}, 0x9}, {{&(0x7f00000003c0)=@generic, 0x80, &(0x7f0000001400)=[{&(0x7f0000001280)=""/36, 0x24}, {&(0x7f00000012c0)=""/27, 0x1b}, {&(0x7f0000001300)=""/148, 0x94}, {&(0x7f00000013c0)=""/46, 0x2e}], 0x4, &(0x7f0000001440)=""/254, 0xfe}, 0x2}, {{&(0x7f0000001540)=@nfc, 0x80, &(0x7f0000001880)=[{&(0x7f00000015c0)=""/80, 0x50}, {&(0x7f0000001640)=""/143, 0x8f}, {&(0x7f0000001700)=""/175, 0xaf}, {&(0x7f00000017c0)=""/180, 0xb4}], 0x4, &(0x7f00000018c0)=""/184, 0xb8}, 0x5}], 0x4, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x226d, 0x0, &(0x7f00000000c0), &(0x7f0000000240)) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x600) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000001800090000000000000000001c140000fe00080100000000140012001a00cfeacfbd6c9555bb5fb2f81c4d070f43c1604fed6ae871773b193b83d870f1d6d2e21c6835b829575393186e1e2ed5a710cd2d12bf7698653bcf0bd8366998d5f4f1b7fc63b0abba8244f2f0922ab2d87a7f0232ff6e75b5b4ff7ac10f5b170bf530c7afab71db3c529ca13bd85e4284d7e7e6deec361e077a86663122220b5f59499b87f3147289712b0a9bea90818d1ecef8f7f39b9525de83ffa1258c2f"], 0x30}}, 0x4) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000200)={0x1fd, 0x1, 0xfec00000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r7, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r7, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 5m49.470578567s ago: executing program 3 (id=198): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x400, 0x0) pread64(r2, &(0x7f0000000000)=""/76, 0x4c, 0x3) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$cec(0x0, 0x0, 0x416400) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x271b, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x3, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) timerfd_create(0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) chdir(&(0x7f0000000540)='./cgroup\x00') fchmodat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/file0\x00', 0xfffffe92) rename(&(0x7f0000000140)='./cgroup/file0\x00', &(0x7f00000001c0)='./cgroup/file0\x00') mkdir(&(0x7f00000003c0)='./file0\x00', 0xffe9) pread64(0xffffffffffffffff, &(0x7f0000000340)=""/251, 0xfb, 0xacab) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'wg1\x00', 0x4000}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x1, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000) socket(0x10, 0x803, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 5m48.143598723s ago: executing program 3 (id=205): socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x8927, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r0, &(0x7f0000000000)={'full', 0x20, 0x1}, 0x2f) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x81}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040844) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000) syz_usb_control_io$printer(r1, 0x0, 0x0) 5m44.82271917s ago: executing program 3 (id=211): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240)="23591363adf94c4a3525c373b8be3e8d2672540e4fff5fe7", 0x0, 0x18}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000348000/0x1000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000100)={{0x6000, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x8, 0x6, 0x40}, {0xffff1000, 0x10000, 0xc, 0x0, 0x2, 0x4, 0x0, 0x0, 0x7, 0xff}, {0xeeee0000, 0x1000, 0xc, 0x0, 0x7, 0xc4, 0x0, 0x0, 0x40, 0x3, 0x0, 0xfc}, {0x1, 0xeeee8000, 0x9, 0x0, 0x1, 0x0, 0x9, 0x0, 0x8, 0x0, 0x4}, {0x6000, 0xffff1000, 0xc, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x3c}, {0x100000, 0x0, 0x0, 0x78, 0x5, 0x0, 0x2, 0x0, 0x0, 0xff, 0x5}, {0x0, 0xeeee8000, 0xa, 0x4, 0x0, 0x0, 0xa1, 0x20}, {0x0, 0x6000, 0xc, 0x0, 0x0, 0x7, 0x81, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x3}, {0xdddd1000}, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xf801, 0x8000000, [0x79327378, 0x0, 0x1, 0x400000]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_SWBIT(r6, 0x4004556d, 0x0) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r2, 0x4002f516, &(0x7f00000000c0)={0x4, 0x81}) r7 = dup(r6) ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x205) ioctl$UI_DEV_CREATE(r7, 0x5501) splice(0xffffffffffffffff, 0x0, r7, &(0x7f00000002c0)=0x8, 0x4, 0x3) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @empty, 0x8000, 0x8000, 'none\x00', 0x3b, 0x2}, 0x2c) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) 5m43.550798667s ago: executing program 3 (id=220): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0x1c4}]}) 5m43.374890422s ago: executing program 3 (id=221): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x502, 0x0) r1 = syz_io_uring_setup(0x644d, &(0x7f0000000140)={0x0, 0x20005865, 0x10, 0x2, 0x24d}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)=0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x100847c0, 0x0, 0x1, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000100)=0x7) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffff9c, &(0x7f0000000000), 0x412400, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001d80)=ANY=[@ANYBLOB="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"], 0x1c74}}, 0x0) 5m28.088048361s ago: executing program 32 (id=221): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x502, 0x0) r1 = syz_io_uring_setup(0x644d, &(0x7f0000000140)={0x0, 0x20005865, 0x10, 0x2, 0x24d}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)=0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x100847c0, 0x0, 0x1, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000100)=0x7) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffff9c, &(0x7f0000000000), 0x412400, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001d80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000020900010073797a30000000002c000000030a010200000000000000000100fffe0900010073797a30000000000900030073797a3000000000001c0000060a010400000000000000000100000008000b4000000000d81b0480541701800e000100696d6d65646961746500000040170280080001400000001318020280da000100eacc8759c940812b39f267d0d50d0499c80ced83ec4e58ded054b8c4a69ce3e9988eede7727e27e3dbff7e874cb1b05d587c253d495a053c719492db971f200e5bcf9a3bc095a26b61c9223f919be897ec511a8f508c6a5c8b12302d7734616c27da2316dd53a73312d3b378520796a6e349b06f99806394ad060919c8e6ec0702663f3c0ab0d9ed5f5944b8c19374ca21c2d2af8a899321e4549923584914221e95e35a16e33def4b5fbd5a78387388356f070ebdf992da0d227e98833e7d1ac7b846b257489164571ad67de3a54982f48f6538870e00002800028008000180fffffffb080003400000001f08000340000000800900020073797a32000000005400028008000180ffffffff0900020073797a31000000000900020073797a31000000000800034000000004080003400000000208000340000003160900020073797a30000000000900020073797a3200000000260001008d8fbb0bd19126e91fa6bb081a555f4f093b22335ea65b5e6443a42bc7772c627563000094000100a601cb73261b6882237a065ff363762d4e1f15598e444ff364754c34b4528543748c9b79c430aa603175a7e3b5b9d190a2c2c4188b7c26120148c094d265a74365a97767ab9cbb31397039ab3f063f96a0d751f68f1af1a4f74a3f5d1cd4c3f29834815f07d702f399b124dfd3b860402c6998b9ad7d6cab6628759fc92df931a9e7e7bb6acbcb7ef909c15a79d6479a0800014000000000bc1102806000010065fe9bb27826716fe37215876f3fdda74da914f0fe731980c3a4996a301da00f85e6a0d1e57217beef5c385d81f53cda9f47f7a3be67cf71ac8f58d16c169cfd9eba864d0d4d18181c1553667bc0f38b5d57f6db4617cf5aaee197826b000100f04fae3424364745390144ae9195c1d849951647176fbdd72c494fc2c8de4c3944c44516d2102eb25df75495a12cc963f6a65ea08d592069903d9ee593f218fb2d283c99fd01863a445de39926371b52a915a28c9fb94599947edf821d946b401a8b5693727aad002400028008000340000000060900020073797a32000000000900020073797a32000000000400028024000100a1d1361784bb6ca44fd5d07d33e06b7c0400466cd48ee5496c948e573baa0d077c0001007cec8b0057578ebd97c694cb01a31ef11e6f6f569023457553731f08213dcee163ae01b55a7a5fd908b8b74bfb5976c6b37dc1869e7383660478b5ff689033897f8792462855aef9e6222e794a93f8e9e1f6908c646c7b0bc78eb6bfa6fd829658a286d8b211229ec22252f93aa88bb87d05a35cf8e88d2c100002800900020073797a3200000000040002800c000280080003400080100004100100a50dccc20bdba1839e7e75a6bd58dac9063761500001c99a5a3edac0be788c5e3a0bd46472e7f5b6e49c7d9a9bec4b199c37e72b6e37497d9a7ff6911f9e588b3f5973c3bb9d22d90fede8ff634ed65fd5e4c0aa24a8f81e7ffc690221569c425c0e98c4c76a0b2fcc283328eee6e7fbb9348622add94e22229754b31f66b336bf5fa31b7d628a9024383408755f9d90e9050cb637524ca1b83f22b2009944656cec2b6696b528571e10fd82b0526b9dd7c128953863376e0bb9931b085db2572561e67b227763010f1f41dd5eb52b076900354c6c39279e0ee4d9d42f002b923518d13a0e5c092ce532d9f4b74fa8039549eaee57f6db389b0fa08604caa4edadef0cc3825133d26a4db36770cc2384822cb67efcb1fda960bb9b30b43f0f480bb38f9695d244153d411d407180c42f0b7edbc2a67dc0127442be628e5923eb9ede3579666fe9054afae87fc70928a7f65acf020628ef352f0e536a73d0cad686607d8958ffa02caa38305c0d6c5757569479c7d24f2f77828d029c6caf99bd9ebe723187521c9a90860a71bcb2756eda673f05138112c46cf01452d493ca5c7169fdd9b072f249f465e06e98c4e14fe87eebe28712ef7ff84c6501cb708ad2a8a256a2a6996bd449a62e6f08ec4338be46d84c129fb555ffb8857a9662098cb0123f82cb348dff614cb0d5fd9bd88b0052981dae9375edc65939f6a372dd26b9fd6da8e7aa60d2b77870a388477575683e4b071f8df923b38dadafff09eae68dbad4932d70a9a76cff3bb7c2deb3efe1c311ab212380cc51986cd9eacad9ef77b0e3d7212fdacc25707ac72518ee9b9ac136fb3297fb3197ef04e489aef2cdb5c21ddadea7ac8eb4a5b411c24e9ad00de7b07e8b2299fa6b85f8eed59aca91622bf9ebafc8051413ff279e88b8c835f486e9e169d0d0b71a86182a0f153db5c74e2bfba3355b21b155ef77a1aaf39f4031132281a99171455d6801c435073d5d8143b24d9241bba82b7553e7b36c44062fc4047bf4bc8d6c9d594dd6bb220297616256ae9d30d98d33c1fad934f2f392bcc977d417d6463f84feb16f410045772bb92ed2d7eb93fec3dbe9490f10b4e7e293a50c1e196b8c4b9479013b9f9ad74eb96d7e828e0843f56a0c652b1054e7c20740cd540eb78c45d46ab7ee71e908b2fe1f072b5066ff2b8c232992ce6e38629f3acdfc6876dbc6f67e91ca069b8aa785b94d6569667f4a5675b1ad3274f96c411a8cdb500c4a50d56951d196a5849d7d4651cf38d73b88c66a6e9ac9d6103ded9f686fda7a56d262b5f7aca3661329ff505152d61bb10306e03338bc331096513123926b8b3005bf63486b8179ffbeba6c2122d53caa76ba756e1b8c5dd2d64915017d0ac348aac7e20280700b0379604c57988f4d13760e16ff4c29fd6ad76775d8c1619cc9a286958ea390635c90957aeac760caab20f297765091e8c4620e4041c256e3e063c4a75ad4e1b8563e84393f77f36212baba9c6644735de1b09acc0c33d88ec1c86f016e6fb8c0662645d2755a5470043c1bd2059079723ca0d0acb27c1916bf3821309606b8876ca60b87e52dce1fee4c697fc606406ed9d5aea44646891df32dfa567e9b93c02fcdff6e8a3583bd0c8507974805c0786895489f69d19c8970a762b03448894187f3150fcf433b00ead09987cee6473e28492532e74c846d0ab6e7908e260571f62e712fd8d0212030e41681b1e23c8f60af3c458eba1d41c1a365901039adee88ccc1f8dd06911ec37048509acbb56491ed5bc91d274faad42ca11e2b3d02f14c95d20aab34e313f1b91928408142d19570b217237b39a6281322b7cc7d8dee6a07145cd3827dff0e55b7ac5ac618e8e81b42002efb045fff6c08915888470bbe430749693c0d65c182c3483561624b7c309e19e94ba194f403ee8a1406d5f09df5cfa3839e1017d99b226b40a6baa06aff4b17a6fe995a6a83c56bba65a118bd93432d27d44fcc125e395f818fef7b82360eccc399ed0f03e1f0be86baeec92b67b54fcab9389bb5fdcb8b4303b6c2a4262ee30b37b917c6e14f2b52d481d2e5ad02739851b203b8602b983dc19bffdd3748fd0b29dc6b70054e68534888c02cdef58d15c79258c9880dd32ad90fbd2c766b2a68b880e7f0262640fc3e32c88e913dac1cf34201adda0cd457e87013889dc6f69d17bf1318b11c6293c1fb429050dcd33af8b7e31ce38990d358da60c5b31d16dadd46c6aad637b92ccad11b6249679998be4918d50e8208dd8286b1e325b8e00bcbd9d707481752ecc6c5bfdb12aa88e14a154db4e79a64daa5ee9a53ac351065da81f07a9e427c3f215f11deef388b8f9960ac15251f2bb02ec282c858605061006211958260a8ce394f55a1c70883271709f24c1eb3f64eff2c2b69fb1368cce3d0f8d3d62e6192fc8b2368b0ae1311da57a8633060153293435ba8945249b9226ea630b2b6aa33d181cacddda6d3338fe6e9f1779d966d14c1f156757d5f5fb15102002c39421cb41b97b142853b6da4b86bb88aadf526447c5a12b4c324f9a1604cb7956b9afb5c596641f9cd9fc6be37eff82f32ce45d0515bf1cc966b8e57397986817399c98047622c87acfb1c6bfb0a37f326d285e22f6308bd1384c1e8681d44762dae45e073d246b52f6414eedecb90217057d42f985a2f8e2acd041af03e61d69e67e1689459a267090993e3d98f45314b9d43570a482c21ef678793f85f181eb677b4f73981c5d0a1ca8c6e65249359ca95093185cc8640e1f1cec8abfef53ba9c7fc24f0ca20389e9606dcfbaa93f5426e084d9cf522b3c75411aa34c22b289b1a7bd3ab01efebc27a1e09ee81056a113839234c0400dba9696c219eeacae13623505cdded580bc54819974c06ffcbb87c45d377c0bedf25907327bb7f4d07b600c9a816620815275c75aca418ade32ea85c965b379e8af6d8c8a32aa7f546978617cd907d39e75aab3221af030194559e73d93e74d897b114b39d53ec305d332310b7abbef44569307703e916f7514b8497b6f3fb6f0daccd7bd301f67cad840419cf7128aa0b6264c6bbfd0c21eb6771bfbcc8590cbf7de3e6d9aa83667deb776715736c9194bb8825d0abce6d9b2693f93aa81ca67eb0ac9566456d6dababb75ccef060df30c8c23be41560e58f9f846debbf43765649047187cc7549d6728190675e7be45b3f56ed71564ae74b544b493e567459503b237a811a84036512e0728879eecc085ed1807613eb097ed784237c8746e96b73912be98f20dd2e2d4a79d0f6df706cf2366acbd01eafad1de8930d04bef65a5ee17ee453d5cb648d6279dd602814445d2967af8c1b1e92dc049ad9bee6f3b746ba5d8323b02f3ad671538f71efb65dd31fb86c090b77de525a678c12be72b86a62d1d850a1ab62ec46e0f11d34f43dac738bb2c2f925af7cc9d46a2b63f54077f0bc0035848d948531f1071ef4e1b8ba9a4fe2e4e1778c4f715a97787c29a4187c718dedf0459a4a6c736d0cefd2d6e2c49b7332d68ede037fe6f4281fee0afeccdd2c22763783f681ed014461aa805fdce74a1712a79473b5d99ab08b9dd4c3c6eae5d16f689ec2084382bf1b44fb1ac891e0a5adddcefb1b11f755ff2eadfa2d992c740826b246d3a91346a87f8802796e269323151f9c359715c6199338c003e19f8dfc474bc898bc3f0ef4a9b8d47cea6c655840dc9cc685c6e16104beadca4b069957fd54b62c6077c717f1b8ff6052aa89237ce8b71c44ca4f2fcedcee464774eb56132ddf1c037def1ad39a14e00f76f1fe84d90b48dd3c28bbbfeb157416b659b740bc35949765e8644a50eca9116c043718e233f80a307cf78c93cd6e38a2cf143faaaf602806556dc293d4907f5aa4e541901ee12267697cfc7fa35d979d6aaf8312e21c4f571dd32b506fc488da3843629ff5b63db55a5021286346b691ce7d8f930cdbcb4d07411f585de89696b33e0a8f32bc42ec9f6699f4a8af2fd74d1359898558ea0158342ff7703611af8d5a98c537b3bf6856bdfec88c73013b9cdcf987a12c9df591aa75d28ead7537e975479b9712d713b36744e5dc4ffd05f168be52bd0f4ffeb4ae6a638f2e415ef1a2d5d4d9d9a9e8bdb08265492b49e2ca6651a93230ed3ba9c09bc112591117939b043016732a083be675327b92c4624cbc62113c85253e653d001c157d23a3d1784a1cc1cf6d564bdb1c910a492d351c3471ee5486887c1f32555fb286da41ae46f3910516ed3bc4c8262cf6a668d0fb4f472dd7ffd23f9c5dbaa9f22f0f5a97905effdcb7877aba1213a2412bc5bd5fc6d8e7d0e7be5baa3c09dcc2b2299a72450adf04667244c930e638d4ce768386f8d954fba62a4fdc723c7cb8432361addbf15c086b4c1321463f2ec34d623426c4de8f4724b403ca013d5ea473be184d44716c3d7bc74d802e7f3898799346a752130aa3db94962ef7625fad6d2fa3b3ce37ba6ece06a4fde35b6490285bb66718551ca883edef903d3885deb852dd05df86eedec946b3543cf85cc5f3f89f13dae6cdc9d3b238fce59f4aae66ff2aba8c99ffd7c14b07a069fbade76084bdfbcecc00492147356d3d931bf15cf4b759981c290b9951d7abee0e43a6f9fac598c174d2ae0894dc5697633a0d051c5ace7f295376b53cfbfb5b49d01d09e56912d74d9494741c6fde0562004c5397c9f477a80be0db173a5336cfd74afa55f8afb1f0b93f2d6cc8b18cc3bbc954291a69c889f8361d0d93ccd9f1e0d950e08e1030eed47957c369e64c97aef34c289a778863d34684d90f54ec29a1a45b058d96dcd77d4708c8ce8fa087dc212f0f4785b1e145c7e6c734fcc8ec0a0fdc457cb60c57bc1259d05ed92ddacc9ba2d8e810ffde8ccf67ec43ac8f05c5f9dff3efbafe67271a7cbfd85dc90f870a3a2be2145b767edfa0e666a041ca7b99ac6cf09379df560e27bf00b60acc8bdc28bf765fd1a3a6daf20905e5f0a2dd473b3fbe1eaa414e5af8d4fa9847af219db7118d609cf28a45d810cfc2cbc9dfcdd1676816309165d89cf3a138fb785f4e41adb7e15cf40e6401ca684bfb976d4a7989b4fe6666fd926857366da896815d243c033fa243f6d02c683091d8b9ba613225246ab1f661f8085da9f18682e410e9aa771e6f30cb8b00d17e0100efd9d9b80a8760506f34ba04e0844b5dc8ec53cdf578d2a0bbdbe3ba4c92ff75d85caa97b396405f06dcecf136a3a73944a44e333df258a86960285f6cf2a5185b9e1afdd6feadef8f25b0836ab644eaedaa39b7f840332b6ba4a2e2ca4007dc02a8009e81d23428651a597437155d03a177e9c8501fbfca334d2515cbbde3116e5db438de268eb4ed4c29c7e19a421e7581969919449ea4982018a0ab283790a3741495572568476abc5ef7110db461167846cdfb21f5af30692724a3930b34a95fbfd2fea886ae5c3d30ab3737a5df1689ca3e30e24c1a907196e34002247bec3c7b58ead4c5b374f2ff6408bfc8f513c6bf7e8cf3a493046c16340459053a569fedf652bd4f6b04c43fa770b084defa3b2d7182feff095c4f0fd23e33ba1a3513e7a9c6a42ac35afa085083fe1ec331a1b1d4b11c5fc9573cfaf984027c98191ef52ec14e23477ce2b8ebc8523f3dc74fea42984d8711c2d5a98a92bfa26e8b92053e448f1d0aa9b3ad6bb159e08eb923d710e50784166e2d0021a933de490eb0542e45072c178646a6f674a5eabdde0aff8c20ef266c41bcb3150a8e2948e46e618988d44305ccb39dd77909f24704000280b80002809c000100875ba50afb7c4103b226f60ec3155234e3877c38dfdddca157704e58f963af3fd3ab9cddf625c2c3b44632f25af3de897f9aef70806700bc24c712677751fe844e94e44aa78410a88d4d32cc8fc592535e47a2045b6b13fec2acff1c57ec2e44789220c6ad86cde3262c0e29767d0793beb652eaa9ef1c9befb0a0641870d88c46e54141d2d8882c844b51249f0528a3413711f0c9b13a3b170001004310bc2a4e2de1f78da171e70703a65b8066da0004000280c0010280490001003342d233e05edebf6453ad40ffb8fdc32e50e78270ec9bdf6e7643df95e8d153f0fc5e15f615da4801b0fdb192177422b143dbbe14ee95b9f90e9d8797ca929c8a7ca57574000000e40001006aa6eaac6f4b461864c9dbab56133eaaa9f50b6770a119a9d89fec6e4376b5b2c32f661be94a4fe7c0755fd642f4b8d4752b9660d5b61226062d8871599bbcfa7c8206e27495557f57bc4647d209c70145e88dfe8b23aab7743c420ca8d3bffa2d96d91374fa565ac88aba12fb8163ec8d485eda1ff86f398f947db05a51b74abee278e6add982c178c4e08fb5aa9ef689629f74947a06d3b2d653216aaba7124ab6cf2a2bb2662834fc66fa32961f2065450b967516aaa8bed092ee58639c4fa0afe229c4a5e5c6f0d899360b0a26467db5b4f43fb3228fab59ae84be114ba0880001005ad7e6e7290ad3eb30b6f62075fa7597f1fd84d9549fb819d48dc0632c14e96918cc653ec6718691516a727a180f8cd727f98394328b476bd4496f31fbdbecac89913ab041d49d9083286f1919c157b091587e87ec3ece2bfeb2c64400e7f8d1919215eb96d3f0919ae61554cf4911b5c2b6e23318869e337ab23d2de9544ec2b5304dc5040002804c00028048000280080003400000000008000180ffffffff0900020073797a3100000000080003400000000708000180000000000900020073797a30000000000900020073797a300000000048000280340002800900020073797a300000000008000340000000020900020073797a3000000000080003400000000808000180fffffffd100002800900020073797a3200000000440002804000028008000180fffffffc0800034000000006080003400000000208000180fffffffc080003400000000908000340000080011400020073797a30000000003c0401800c00010062697477697365002c040280080003400000000808000240000000140800064000000002080006400000000068020580bb0001001d92704a203d5ecc985c4e4280e5378a36a2856959ffa601c237cc270251cf18420d11613ec98e629c7d84c655efcb2b5ecd71666675bf512cadfe09e4d05a4f60f60e007ca1cf70a5185f973cec0f1ab052acf1acf6a2df83dd88facc62c6e94a1b6368d6bda68abcaed2ee48c3d589bf2a814b728efb93401dfa1d1063200c10e56294dba0e7b780ce0f6090bd0de9f5e000c98c4b97cd985c91284c2bca23e4757407bb41fd8de797502a72e122032d4ef3160f9f7b00fd000100854e3cb6d05d310db3d528811da7f7450ebb2d62cddc6981343570b9f4ab17d75de9411dea482f508c0dce42c25c4778ebc56bb303f9f51c489eedffcb1490560ab26ab7507ec029cca3ddfe7c4f4f6d91db07cbc008636bc7bea7f96954d31da9d8a9ca043df7b409ca2864d56fc6b2a70fcc2f1a3579737bf47542dae337d5203869caff9ab95a317c25521ebf848fad8ceb87f4655ace0701dbe961e9dcaeffa37bfa2e9d127d61b8d6edc1437b46f54c061e1c9d68120ac8300e91d19c708aa9589c37de59a9f8df5546855e934599a2f31b6cb847347fc02231fec395b906e60300340d60ebe7a3f23e1aa6eec9e0150a9d16b3c25e590000002800028008000340fffffff8080003400000000908000340684dbc580900020073797a30000000006200010091de8d9ca3503f5a0a8259007bc5088ccfe97cfebb5ebb90e05d4e8a63fcbee6f14ab7eff7469cf243a6ef6e528b811dfd72af1e7e08de8fbdd4849367ea82016412fab2ccc0fb94fa63fac7fd0c6ea48c0e9ac7d1a30ecf3e70e44ed5ff00001c0002800800034080000000080003400000000308000180fffffffc080001400000000d600004804000028008000180fffffffb36ff020073797a3000000000080001802b30a3bc08000180000000000900020073797a31000000000900020073797a31000000001c0002800900020073797a31000000000900020073797a3200000000080002400000000a30010480380002800900020073797a3200000000080003400000000908000180fffffffc0800018000000007080003408000000008000340000000050b0001000bca99f460f4b0002800028008000180fffffffb0900020073797a3000000000080003400000000308000340000001ff04000100bc000100e27404a10a99dbcc4575917adc29373e2cc46e5e8f99d7a36b7c42c92713cce62084d863a11eb9c2e19fde212924e527db981a9be0c2c15f6a04a67e9e20f86e4bebd07665e2d01da200712427a5525403c1c75468f31b91a60def25f7757c9921d08b9a5b0bc6f8953efbd0416091bf2b30d9a37e789198313dd07b7b70cebff25c562434b67e9a6b70708dd84c86135ab9b0ffda2c4b2fb4a139220c101f4c0a3d58eb124346005c82dea6f0f36444b28300758475eb3d34000180090001006d65746100000000240002800800024000000002080003400000000d08000340000000090800034000000001100001800a0001006c696d69740000000900010073797a3000000000140000001100010000000000000000000000000aa87cd32609c50a5d387d75add9a12a64b386c32185ac079decadb94be8b16d7401c4e0bbfe51425aa675354197d9d8cb5441e1271c2ee18b7aa9619482da4ecd4ae120468701c8beb43cbfcc3758593737e60e22be833295d8"], 0x1c74}}, 0x0) 4m3.378406657s ago: executing program 1 (id=574): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000080)=0x1, r2, 0x0, 0x2, 0x4}}, 0x20) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffff3}, 0x1c) listen(r3, 0x0) unshare(0x22020600) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000480)={0x3, 0xe, 0x4, 0x0, 0x5}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r5, 0x400000000000003a, 0x1, 0x0, &(0x7f00000000c0)=0xffffff7f) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/slabinfo\x00', 0x0, 0x0) preadv2(r6, &(0x7f0000000200)=[{&(0x7f00000006c0)=""/177, 0xb1}], 0x1, 0x800ee, 0x3, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000540)=ANY=[@ANYBLOB="aa8aaaaaaaaa00000000000086dd6008843500140600fe80000000000000723b7ea700002000000000bbfe8000000000000000000000000000aa00004e2239c16aa29782a20a9a6bdd6177af4abaf6ea487706ad874a8dc9bf88c289d2931e4b02f383f6f9e761963d703fc8bf7a3fe270c9569e89ae04384103664ffdb38cb7ee68079f1b9deb", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaab5aaaaaaaaaaaaaaaa2b86dd6056040000180600fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e2243c16d8e8aa5a639e05a26361596c0f1cd6e40293e6a", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="60c2000090780004020422ec"], 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r1) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, 0x3}, r2, 0x4}}, 0x48) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r7, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r8, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) openat$6lowpan_enable(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4m3.286788599s ago: executing program 1 (id=575): setxattr$incfs_metadata(&(0x7f0000000080)='./cgroup\x00', &(0x7f0000000140), 0x0, 0x0, 0x3) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x480340, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x8, 0x2, 0x0, 0xcc}, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000780)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xca, 0x3, 0x1, 0x10, 0x80, 0x39, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x4}, [@mixer_unit={0x8, 0x24, 0x4, 0x1, 0x1, "7f2c35"}, @extension_unit={0x9, 0x24, 0x8, 0x6, 0x100, 0x6, 'l!'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x5, 0x7, 0x4}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x5, 0x3, 0x81, '#'}, @as_header={0x7, 0x24, 0x1, 0x6, 0x1, 0x1001}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x1, 0x3, 0x3c, 0xf, "f6cd", '>u'}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x1, 0x4, 0x4, 0x6, "0d5bcc72e811"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x8, 0x9, 0x0, "eae4"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0xc7, 0x3, 0xb, {0x7, 0x25, 0x1, 0x82, 0x40, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x4, 0x4, 0x4}, @as_header={0x7, 0x24, 0x1, 0x6, 0x1, 0x4}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x1, 0x4, 0x1, "f4b134ddd7af"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x3, 0x3, 0xc9, {0x7, 0x25, 0x1, 0x1, 0x7, 0x401}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x110, 0x2, 0x0, 0x5, 0xcf, 0xd9}, 0x52, &(0x7f0000000880)=ANY=[@ANYBLOB="050f5200061410044176da0c73e24697861eac8f7606f3786703100b18100a0d238000000fff1aff003f0000f0c0ff0000000710020217010014100402edcc9b71887521edb2cce783bfd4f73103100b"]}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000200)=@file={0x1, './file1\x00'}, 0x6e) fcntl$dupfd(r3, 0x0, r4) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x20004000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a5c000000060ad5040000000000000000f6477e4ab1a20200fffe0900020073797a32000000000951cbbbaa791b9be39a8d8c480904802c000180090001006d657461000000001c000280080003400000000f0800014000000010080001401c0000001400b22d0000000000000000000000000000000a"], 0x84}, 0x1, 0x0, 0x0, 0x24040800}, 0x48080) r8 = socket$tipc(0x1e, 0x2, 0x0) r9 = syz_io_uring_setup(0x810, &(0x7f0000000480)={0x0, 0x5c2d, 0x80, 0x2, 0x12c}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000200)={0x1, {{0xa, 0x4e22, 0x0, @mcast1={0xff, 0x7}, 0xac3}}, {{0xa, 0x4e22, 0x0, @private2}}}, 0x108) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x28, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(0x0, r11, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0xda1a0b6210925d15, 0x0, @fd=r5, 0x0, 0x0, 0x1, 0x1, 0x1, {0x0, 0x0, r6}}) io_uring_enter(r9, 0x22d0, 0x20, 0x0, 0x0, 0x0) connect$tipc(r8, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x5}}, 0x10) sendmmsg$inet(r8, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f00000056c0)=[{&(0x7f0000001240)="80349c0d9e8fcc9f44658138dc4a3c4ad42f918348474a5bc38ff0e0571fc22c8eb5cb22fdf30ced1a4c1ccb5e5b35fed7db48c1a8a7132adc5623d146ddfe2254dd2579b4284b53d1cea6206864473d31bdb00c9d1462458b678827e80c94d88099e7471a58b1463086f9cdd1ccc19fa2fc4a9dd5a56fe782d15e66648c7630f1aaa7e9820460c46e292dbb8fa6f6701048ff17f46097b1ee0750ed038f18b81b2ba014bf866062c9a6f88b5d07e13b7eddd968ba9c7a53609c7b61471a51fd85bceebc0a92b2cd7c45a7f4571e693abebc3c5ff16c8128d92476", 0xdb}, {&(0x7f0000000280)="5b4ea50f20d7212327afde5e7a457cde2dff791c69fbc3", 0x17}, {&(0x7f00000002c0)="851d8a90d516f218f839a7c48edfe734b2490c90a2fbf5be3383f1c9f5be8e55148723ac0258ef4f8af1f5e0b0a86885f018523d60072c7d9c1568700b3abe208fbd5dad2daf18b5150a530d816bf4cc6e43da4f2793611b38009e8c0970268cf5836926fd1223f4f8bec6a4a68b2aaff7af151a661793a04cd9b936da8f53eae22356781c580df817f3168269eaeeae014fa9b1878bd89e2acb4853ffd7b9a06d7f5ff090c605f5d343e6d93c80d747365d21acea325c44fbb87f6271a2d9333e9b9dd1d36dfea61641d34fd54cd2970ac14acdadd04357bdd44bc926d0adef887b2e25c2f435ce79bac1d1f473c3a49a12aa5c5cfa4bfa4fd2470308ed259e62c218aee67006a3ca187c9aa13a806d99b2275341fd6022940537b1cb1fd2389f417ea92c6e77a09a9d09a98c4e2f0912d36b47588ff991aa98c3c650055bacb669aaf68dd4f8a7b43569c9af62e7cee6ba05278fe8642feafa5c436cb13fa45b3cdf750f8956c493acf7c561b12259331a363c74fb5f2947652ced415b0986b673680e8ad7bad823ff84c30681cbe45114510d9aa6f423f212bcdf1c244178ae31474d9f176707e9c481057f72d489372f7daeba51e3ea86895c8eed109566ad19f3957d0df21a671fce2d674c207d8643c85a018834f4e8e3992e6991d815", 0xeb}, {&(0x7f0000001440)="f0e266805aba28ca0c0d67b3479e1c7cb90d64b8ba8093c11696a92981d4fdd1f40043ce52efdea3f8d7b9ba23840df17c5a35207d6fc677263be310a063adb7b1528b8a04ec5b50d2cfa0df73c57f16a94941e8fb22f429a1f34b5b01514fefc4bd79a2cb936cf2eae82bd7b628431ae2d7b61059b35abc6ee24fd40e3c1bd6106af177bc4670395df7238a420fecf1e6ed3fe8906c3a2843215618fcb72ae77c6d36feefb4d45157e5d35fb4bf297d15ca042520f08e85ad2d7c5045fc7c4a2a8b6e149fc755d70437b3835083ee9fc662afbf840ab97f0adcdde20099bb22e909b937696e9d950ca0a361dfa8f5453454696927ae5a2401340264bdcdcd86941c18b536bdccb964461679d1b62855dadee9b66e5d494183283808c706247cdf83b45c44178775fc957483923b717724549dbe2f9a092fa07e93a7772d16bfbff9a0dd14d48d30b1e4f8206f92cf2fe08a7702f73404b79e77dec1b694e8a7c588a7bb2d770122291b10b456c4419dda49da0433a0aa5f0be221d29b45082b4f9521c2a1fbae507aa2652123619b78f340f01523bf9e6089e8e8186af2b85476d7059226f07467a6e036bf8808f2e9070b2a94ac1c64ec066def276c362a1d4a830edf754783f0a1e52e1adc4f6ca2d7200fd73b9cda79ccfcf57a27f60e184ebe12c4daeb214c2057b69719db280e0dcc2d10b085c7ab8e2394bae44893e3f335a3121bae3a33c32b004ab7bca48726029b77a6c784d2af3789fd520e37009d103c0a63598fa5857ee1b86a38a9feaf1d1f512d1884861c13d647d26888430e2f15e78cdd6a4c875e52de709dfdc4af4775ce03d7c8c3ff2b9fbae82dbabf11460bd1bc1ffe10c5062a265fd211a2b52a41613cc03917b8d34591885396369d1d172df31244a236c49d4457a936848684b59e326872d58c5db20684d1194ccb7ecbf5017f0f702f29c75cdeea09619db8bf00b41b1a165af13b3810d7f7b6a681aef628190f4fd53244a650b0500df500946792d003f2d2f0ba3c57f8257c0cc897cb1dabd63870ef86378a14e7f5068ea6a2311414656d766fb24e43c2a57b44cb1dc584d71e91628348790dc6a9adf85bc403a934e7603f7b45473407cf1395163b3efc9e880963bbd98140adfd624ccfc1141cd899826261e152265b9307695488c0cbad9027bf74b6f0c7adbc9878983d96e6026c818ac30fac3e2392e1c8fdab8ccf902d0915a471701083949efafc7a2e05608139fd0ef22d834ff02569878579c43635ad2d56d7cdfacaba8a3adc47c7fd42e521ca6b14726e68f67e2662c972bf9824ba847e22985400fad74280c22a0636aee80eeb7ef0c691cee94573ec78b53d43316ba691fd5274d1ff8085e297d2781a31f704dfeb58db9fa216c3356341207e953712de9ef27018bdfdddba8abc0c5f205908f12a42685ecc0c20cd92a57bba45a435f7bb412ccab1a6d877392971de8b808af07ea32b102dbcd7d00c869ad5cd8f5a5895b3d6dfef226d51d819756a85ffdde3d08f59fbbb7510a9ac3568f8f039fa7abc7b34685f3579050e88773cb4bb7958ff83aba1f23c8ab4ecd019c59781d47bcc50c64a957c3fa37311a240649313f77fa81020a5da0560d3bdabe6001ab6792ad782fe0e44bbb59efd4a524984742940563dd9e9a0226925324ac94373a9dcb16f32183ef3f465a13b83974f593e664f53131241e2133ce22917fbb412354a51026847f92aa7afadb1cdf51677fc2fe5938812ef17ae79f4db75afdfce3c5b8822dd612457b5f59dd616acdc473e97afb83f3c9789f3df399a2c3c89e8b5e6db33a306168b0cd4e8acbbd6ac81dd46cfb2f7d24b609d009049784611d027daa0cfb12111c1236aa010796cc687cbb151ba30e3a786ee8bfdae51e65a0c3667f7b8856089621742bdc19ad66f60eb48bd7f20b0ac2a523e89e6a7089e3704f266c52c58994e018e5d20b77a0413c71cafd420d9e0abb77e9f1199aca31f6d94372ca5736c749c197cac572e4962fc089f866a896763cd7b804c8e7211bd3a64f1ed12d65182deb850279ecb530683551bd50214e03b9f813431688dadf4caaf77d2e8b20d3e5c424243ab50f9c20462cea0f38eb080b02074e3e77a236d4ec929b04d134dcc5f767736c096794be3aec9f1195b87862128b436fbd0305a6ad6ebb0b2167e184c1de57048144b7567a6ad6c028c4b8a78858925f0ed415313da984484f753d14234d30964aa3d15af13337b6e5338d4f787abc18e0ea4d9656aa3c1d3eee0854078470a0e724062fd61a95f17516ca92faae8397ce07ba558a689ea49d25685a28c68fbc533892827829692d65a15711f0d14f7f685095f6c5dd085b30ffc4dfd9097157c1fab80023d24912861e87d1e484fe5a4476743dcb983d3eecabfe168db03f888432d8b1639e89c8f0513dc36ca8969ec364d28814fa6e21f979020df1292d772cd20c0eb4a5888f38d8d129e30ffee29ab6baf3b2f3a509e02d26b354f1ebe3531fe97968f1f678937b36f3684a8c100030a2328941dfc09574f7cebc26337cd4b2a6fc0b92affc3f3f892542e46fd6cfc2780c0b8a916b3fbb7f33a2537571b06643d82f86e2156740e024b360f48b844797971383610dc93abedc9945ec26d6a56e2701522e3fd6b77d4647a137346985af549d8944c652ddd797e1856a30f296258eb275981bc9432f38532d6e141d603b002c75247b3e71b39dbc01e8e64bc0cd510bd1700685a95ead8fb3fe8fbd72be2e8f9f5a9f1b2c400bfdc0aeabb14a7538c9a38a4839bf41120f2c2aa00277a327d7dff15f52854146a94ea41e4f14a15443124c6bcff43489e7e242c8315ed8d542377fefb6002292c1adc571c730d67b8dab5a4da06659fe7b69bac3147ef39fc877c323edbb9912886ab468c530a8d7844692010ea93effd20f4ccc47b3ff51f378c12b1d03155d49772f14d65bf2ce38f589ca4647b6713ae081fd13e74b307aba8bc34a4406d78c26ccfdf328f5c273b294f6c6419cc157eca59939ec4c0b95cc6d5f97c83c3f14aeb5b88910ec29cf64496d9b1b855fe073d4791507c7533846cdd7810667427583b3a8b7febb2c43643c09bebbb12c08781ac9d0995723fb47febef49e0d6631f054e5b3b3a284391590cfb5d5cf4aaa71586cb37b9fffa15848176da20969e88ed87dd8a4fa2b5140fd56f0a9973217f8ce0c6ee50b67214b6d7d6b84d41d83694a14b2e96f0cb79b49f5fe4dd21727c00819e83b6ea203bada46e9ae8ce7bebaf24f05fd20672e4230b3851b8f05bb2f0977dda7c8cdd1f2689b7a10a72018ff76699e53b2a3f77bf7fa03fe3cf85d4859c9db915fa5c1ddff79e77d0b1b6316d3e50d0d60a42271332f3e81376f120836cd3ea55b7f1453833a7bce0058f79b698a4bd0e857ae35b8ac8f20ed8f238475757af11ce7b450cf89191a4f27a365f594ef68efe6ea1a5c3518712b1aa37a1f47e05f85debfa461f5346d985a71e49ef17f4eb068862977d56671d445176934be6b5318300d7debf3ad8d7da0c014b25af2d8fa52753974116a8cea6c974692f5de03b526a075cc3bc8a4375333f0ef09dd3c361738a151f326ba3253c171f8f7876107eeac122a65124e59dfe7c66bb9546d6428559df314063ac08c03d96b04b6a91508371fa18348c65238546f3d489c7efc1bd01e6e389fbeaa8f125bc7b7c8673904eb676bbdfa3680fea612ba20fab20cdd411c2bafe0417b76852de9e863f09d291bf59510ead793cfd9d6710c0de77cefb5b65481d3aabde2683457b13e3b32ebc06f60d5afa47e36f652a95bd16dcf55dd3e1b05d0df9b8a183553097c2aa95aa175eda6792f58a74170781260e6120981549b3836d13ef037178dd8ddcb5a5624f3790f9d92b0f8f3cd11bddf478cd79456db871f32dd6e24948dd762ba2c22a94300f527c1df5ff05aef5ae4893ff88adc8f7af779d03fcb4ecabfa32460315f27505681242064541657acbb29f531043ce1d04ad189045140232f24f46d0580ada560c61fa4a90aec4743a9a0d466493476923cdff87a21127bac3da7d61d674d8bc9bd63cc3df85c707a912773e090256d5a0bdc5da8ceae2ca25c596410982b63055e6d292a31776cefe58457cb6b5cb92a2c69ed5eeed35e4ea3d6b54ee22e41dea28adac6e1eeadf604f0ef3a67c86974c3ecacdb7f502c74ed31138123dcb80282dbfb0ea0fc2a6016dccecbcbe4952c27b09e7abf784db6b7cc55366d048f16f6473a268b90a1c9b9c612f88bed9008308b11e47d79329cbefc3f313863eff4a16e6a70c41a296d3042a1164d0578297642ec82da1f92dfaa6a67ff9cfcd1b3e88fc442246a303a0e539ce65ad6fcb6d8657937cd88d4c30fd369f2bef0308f5db8824919139b25f82f56e24ef4cf1feda07c3bef9dd215575ed774dc05603f4664332c7b002c48d873bf1ebec930a273efc78dafe153f7eba9161002ca9a8fa855bc357f3a67810fc081b9ae9b4f69401ef93d039c7c1398fa8c9eeb1ce001e08e9231ce2c2beacdafe2955d4056e18d4d09ed22a996666d4df5ca91c37663bb54eb42fe39712736fa0e64ad4f8ca843fe52702c9ae48e60a3f5eac160f58ff3cb80684120845b9e34bc1aecb19662b1a429926ae351d004eca1d367fcb34facbeb2184716c5140a7e420c7f4379b0c43ce872b62723a587d9ad528c2aabf158cefa2df3422203b5cc73e9443825089527700b69a2331e0558a9b1e9d3e69a59896e6cf4df46b41a8cbb0e598a874fc23b16a6eda6eafde02451f0255ff9e6d1bd007c86dee8b6ae875752415b8057b916a3fe7b35cfcf7d38a50e461f1fc1d6a4541ba4079e1f21d0ea2a5ce4aad561215a1d75a2599c757cd6025753fc0578e4b7f4195ad025c46d50c5c351af1ce1e8f8c35439c8598293cd59d2e90a1445497b0249a314379dd13e95f00f2d8240190da9e12adbdd809b1a96900054db156d2893f7998aca02c86f61478a9b21e9e11a6f4b9f7f382243739e492e9048ed9c7b0b8118d966c0f41709abd171873c498a3168639bb2451e0f65e93755fc9cbf3b996ed0873a8256a579372146c3a1e749a9a640f8e9c01af2d0fdd34f2b5fcf4e0bac0b7becd41851359f89dc17156b6ddbd6377c05a059cde362397f28ae2cbbdac107142b40913aaf059d897039ce3fda8c29ae93210676e44f131f78e78d68d858bb7fde230a2f0fd542c5e8374fdc11a488da9de28bc3992a8d74089de36a732110c841bbdc5f24f71663d9a5f5209791fb7027749be23cdb3380f581151563d3707290cd31b28c13139b8e041cd72af3ad9b0fd0b3f131608a8ec5d80c4e7cd458abebae0244c921ef69a4ea0e9a2c2073bd13b49f574a7e278c7ba08c22d89b678a3cd814e8d0dea0101d95f789ada5178f46a4c6beb8dd12352cec179c886ae98ac2bc4382acb565df99eaff3f6824536ef7de884176ea3ca14a9f225f8ada2aac871e7c35df92943600cf7961b8eefdeb70d985fbc93252c978c5c773b4f2ab4b7683e2563d36ebfa4355969f6201e4bcac04ede3c6c9a18ed23f23ec331cbe2d645fa4ffcb2c742ba4905788c27a9bc97536dcbc08d3cbdd2f7195acc0f0eb3cf52aad9a1d23a1dd3633a49a482a1c1eb8761dcc7474f0fd4596a661b7668ab22ebecbfe33886b9b4a0c250380a9a34fefd9724ff89b32e5622258287b3281bcccd0bade4e260b6fefe73219c41f2de521587404ac1d2de4e2999202b3870099718115552aac2d446e649", 0xb47}, {&(0x7f0000002440)="253c10cd0a56ebbb9e8b465670109c340c95f1d27d36cbeb7fa948545e9b18da346b70b5dc6ea12ad1a30e4f7038336f1af1d61b04de988f1755e9b3ba9919b2a4952ceda920a7f0e22dd239d4a74f2d1c854bc64f09f979aa3e9f5c25ff8ec189e5d809483583f648cd8870291200e428", 0x71}, {&(0x7f00000024c0)="2ba671ae8107530b978dd82841597ed8f4275ed9e6b9f7b73ee6324ddf688ad9d88125b82afd2e28aef7183086ce0dd4ee880fc56a2ca8b52ef8f5b5f3e475f49b0bcd201fe612703d680fdd1151dd32535b04d4697d472c7750d6c4c197162e9f872253b611b1ca20e79dcf40d1faf58a453f8db9a03fdd351b54ad4e77fa0fda7990bb281079ae7ba3994aef7380e1d6342305e2d12c57379fd12e784f48e4e832171df4576c8724e3bfd70ebc92fc11914cd4", 0xb4}, {&(0x7f00000025c0)="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", 0xa9b}], 0x7}}], 0x300, 0x0) connect$tipc(r8, &(0x7f00000004c0)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x3, 0x3}}, 0x10) 4m1.401014959s ago: executing program 1 (id=583): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x11, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@map_fd={0x18, 0xb, 0x1, 0x0, r0}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8, 0x0, 0xa00}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000000c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4m1.159389731s ago: executing program 1 (id=584): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0) ftruncate(r1, 0xc17a) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000100)={"b46474f815e8d5535f0887c44335cc824dc6121bc72a77f532ff5dad4d643a9cab29d2310e04be14eb26c0af4985fe45e3b3b0680b3ec92725d74b9716e0f7c3119a2c9a0ae65ff4772e2e12733cb013c4308fe40863480747c0a7ddb9361b1578015ca1bb2c1677ebae096f08345476f567443842946ed946434c75916d1db83fe305920de65bfaf9bd940672216846cb16b8ae67cd3affc61375381f91b3b9f1cc5e38cafe5239aee71dcd481fbe1ecd2547ffbaad4469a74697c28fb9beefa6a5d736712a55eb9110c2cf7964062ba8cbc1c038e84f0f5db7fc7053118bf5221e3efa6fc3edb5d0ca3cde7054dd0751a332520aa8478b1775d552c5cc24d3c2df9eb333e5ca3aa06c1c2cf8526714f5caff2f55b41976fc20b64f1fc61d5b44f50953582a1825d32130a31abfeafd1987317879e29ac51b93c9659e023fff3ddb5e39dd19cc3ef1d883c78b9e073d08a9197fb3717df238b9831831214b186693be9dd2568bb77272e80df5dfed03e8c467627bedfbd93359a9f79a3aa37e873dc1357b37b43d813ea85267b0dc8b1c4cc51bd985328833beb2679b7fb762555bbea2da936b36f8f1673fd5f606b2b6eb23b72bf947206e8dbfeb40ca6f265a3485c8446e0f0da652860b88328073d2282c14b48a7774e62754a968b60e92205e8fafcdd70a55c3c4d1a4821ff44e6e3681f15ae091262e3a3290a24d8ceae30ebbf9d24287bb8a5d73c608d47d287f9e716cf02b4796a83fb0c05e45b89de9ef8bce834e6d7a0be6e30d2c66cb6e640cb01898454ad361bc0701d8fe56113335ae6adec59300db04691cc4a689034272a8e086a32ce7061b4f79fa8afbb48a6ce4b62bdc44af013d78980457e1fa61eb9204818606f4c3b03c0f33cd2a841ac9bc2b73151a96e31ab99e6ec969b5f2c3edd5f9abc69845e487af992758ba445368da93dae1d44360d52a534a88276b8aaf349841d8a4788c60408618437c442308dbf70efeda2e54e9b9e4fe5f76997c9dcb945a26bd75748c85d19ca8b99264dce50580e8d4dbda401dad7df31e9a7a6a3a83bfbdfb5394abd581ac0824fbcd75d2f5205c0b7c9188e6f26bfd97734d9a20433f6cdba9d14a5f32a4d97a57f4603b21146fd1aebf082e863d463c224ad623c17d8043d3bf083f0322408dd6ead6915ac6a4222ab51480eb6e11a8913348219515170d9df90d72d7363bbda3e327d19f98c0a856f98076380e788e602e8a2ae0a1930786874dc21a2e99abda15f35457cf1dcb440c4b41350d0eda352aad7f57a0adc8a6914da06460635ed21c4c11cd1a8ec778064c9f62efba2927828b23f94b16619a5520731c2c40ab8583c9f2e73233d74b84f4877ce6b35bb1180300"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r5, 0x6628) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) setsockopt$inet_mreqsrc(r7, 0x0, 0x26, &(0x7f0000000080)={@dev={0xac, 0x14, 0x14, 0x3a}, @local, @private=0xa010102}, 0xc) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffe}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x7e, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x4, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x4005, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0x10e, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x6, 0x6, 0x0, 0x6, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x1000205, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x0, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x9, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x10005, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x40, 0x800006, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x8000042, 0x3], [0x7, 0x408, 0x3ff, 0x5, 0xfffffffd, 0x103, 0x20000004, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x9, 0x86, 0x3, 0x0, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x1003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x200, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0xf9a, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x3, 0x120000, 0x7ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x7, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x27a6, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x6, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x225, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x7ff, 0x40040d7, 0x200, 0xb, 0xfffffff8]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) move_mount(r7, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) 4m0.139735199s ago: executing program 1 (id=588): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x32cc2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) r0 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001c80), 0x26, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/104, 0xce}], 0x1, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000e5876e4040200516940a0000000109022400010000000009040000025883b2000905850140000000000905f3"], 0x0) 3m59.57569868s ago: executing program 1 (id=590): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x19}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x98, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x6c, 0x3, 0x0, 0x1, [{0x68, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x5c, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x10000}]}}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000000}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}]}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xfc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sigaltstack(0x0, 0x0) close(0x3) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x80}, 0x1, 0x0, 0x0, 0x840}, 0x0) 3m59.001430597s ago: executing program 33 (id=590): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x19}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x98, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x6c, 0x3, 0x0, 0x1, [{0x68, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x5c, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x10000}]}}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000000}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}]}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xfc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sigaltstack(0x0, 0x0) close(0x3) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x80}, 0x1, 0x0, 0x0, 0x840}, 0x0) 10.970964494s ago: executing program 6 (id=1808): socket$nl_netfilter(0x10, 0x3, 0xc) socket$tipc(0x1e, 0x5, 0x0) r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_setup(0x10a, &(0x7f0000000680)={0x0, 0x80334c, 0x10, 0x3, 0x3d3}, &(0x7f0000000200)=0x0, &(0x7f0000000300)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r4, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100, 0x23456}) io_uring_enter(r0, 0x627, 0xc1040000, 0x43, 0x0, 0x0) 10.858757801s ago: executing program 6 (id=1809): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000180)={0x1000200001ee0000, 0x3}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket(0x1e, 0x2, 0x0) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1000000000, 0x7, 0xfa11, 0xffffffff}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000480)=[@mss={0x2, 0x3}, @mss={0x2, 0xaf0}, @timestamp, @mss={0x2, 0x8}, @window={0x3, 0x8000, 0x81}, @timestamp], 0x6) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8) mknodat$loop(r5, &(0x7f0000000000)='./file0\x00', 0x4, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000100)) ioctl$DRM_IOCTL_GEM_OPEN(r5, 0xc010640b, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000002e00090027bd70020000000004000000f9e05e2f826cfc31dc2af824704f63dac994ce05dc7224e5479795b50d901574000000"], 0x3c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x7}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000300)="06", 0x1}], 0x1}}], 0x1, 0x3404c8d4) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES16=r0, @ANYRES16=r7], 0x1000f) r8 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x4, 0x40080) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r8, 0x800c4151, 0x0) 8.350132847s ago: executing program 6 (id=1815): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000500014003001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r1, &(0x7f00000001c0)={&(0x7f0000000180)={0xa, 0x4e20, 0x4080000, @mcast1}, 0x1c, 0x0}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') getdents(r2, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f0000000080)='bridge0\x00') 8.347924681s ago: executing program 0 (id=1816): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c0006"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d30303030301030303030303030303030303032303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x400, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 8.341274264s ago: executing program 6 (id=1818): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc084}, 0x20000090) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000180)=0xfffffffa, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) 7.614751829s ago: executing program 0 (id=1820): socket$nl_netfilter(0x10, 0x3, 0xc) socket$tipc(0x1e, 0x5, 0x0) r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_setup(0x10a, &(0x7f0000000680)={0x0, 0x80334c, 0x10, 0x3, 0x3d3}, &(0x7f0000000200)=0x0, &(0x7f0000000300)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r4, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100, 0x23456}) io_uring_enter(r0, 0x627, 0xc1040000, 0x43, 0x0, 0x0) 7.413033246s ago: executing program 0 (id=1831): sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37fe", 0x2, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2404c041}, 0x4040) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2, 0x0, 0x3}}, 0x2e) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000"], 0x44}}, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x4000, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 7.053332003s ago: executing program 0 (id=1825): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) syz_usb_connect$printer(0x1, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4e, 0x80, 0x5, [{{0x9, 0x4, 0x0, 0xee, 0x1, 0x7, 0x1, 0x2, 0x81, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x1, 0x5, 0xfe}}, [{{0x9, 0x5, 0x82, 0x2, 0x10, 0x1, 0x7, 0x4}}]}}}]}}]}}, &(0x7f0000000a00)={0xa, &(0x7f0000000600)={0xa, 0x6, 0x310, 0x3, 0x1, 0x6, 0x8, 0x5}, 0x3c, &(0x7f0000000640)={0x5, 0xf, 0x3c, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x4, 0x6, 0x8}, @ssp_cap={0x18, 0x10, 0xa, 0xc, 0x3, 0x4, 0xf000, 0xffff, [0xc0, 0xf, 0xff0000]}, @ssp_cap={0x18, 0x10, 0xa, 0x6, 0x3, 0x7, 0xf00, 0x873, [0x3f00, 0xffff60, 0xc00f]}]}, 0x7, [{0xc8, &(0x7f0000000680)=@string={0xc8, 0x3, "4dfd0be8a8fb487b951a1b7dbb21986dcfc3e6826ae5759e39982bf5de86e4626cd4a9ef12a86418f87cf157f21b489bb81a4b33e2a52e463651a155ae7e4ff54576ce3efe6560965a0bdd426a649526afb42cecd6baf5f566890e0103e7bf985fb21700d8521b0ff5a677f4d480feb73fbd0de8119937b92e57f4cbb5c8ff9c60e85ad73e3da6e7e700a74924301ff7095e17a525fc2361475bd7816819090edb250d2a01263038799d8078fae11e28ae6e183540f4f18b7aee15dec02ebbb54ba31ba429ca"}}, {0xbe, &(0x7f0000000a80)=@string={0xbe, 0x3, "7f9a5a1345eee62e9ba2711d42fa7a5e9b1f3e30c1874407fbee2f67fd2f95f9b649cf671a50facdcb26c8f87cbb4cfc7563795196976429be5e1641b19016aa027e4f92b8ae9c646979bcd009767a47ca85a0fb4e7c276c12490b10dd2d9b9772efbf82b9e0398d636c30188b9b47836d20226add1255957c0a21b89ab9c2ac19d45a643331baeac9e1c3be39a1c9103014ac6bbb22d61946404c87cc857918d856fe89bb4a8bccf4b49862546da179825957bb458d1a14b65baee6"}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0xf101}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x2c45}}, {0x3, &(0x7f0000000880)=@string={0x3, 0x3, "19"}}, {0xf8, &(0x7f00000008c0)=@string={0xf8, 0x3, "d68043391f85a3f3e0a631fe3bd91c83af4de07064769bd3f95c87a44fd7f1ed0256c5bce2b57b97c839a725508445922b23da349728345213d17287fa153a1996f0a9d0fb40cdb922cb97c41e26c2df22b2ee76a743ed9ec4bcd242d4c249c7b4c41888ab843044e75fb6f626be4bc50fd2997070426bb73f62f8ad9927051f56952d8be665346981806ac8f1574256b63a1972f5672fb06d49618f1f71b2a040b5a3c8636254bb7e1811ce9c1586f76519403e9e711510e66708ab29a8abf82efb745a4e581b18829f9d1c44204d214f0f62dfae3ab931232e2740953fcc40574460af4652e0286957e514c7faaac426b57529cd6c"}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0xf8ff}}]}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000007c0)={0x2c, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, &(0x7f00000001c0)={0xc, &(0x7f0000000000)={0x40, 0xd, 0xc9, {0xc9, 0xd, "f917d3b782382eb10495d8e9eb005be8f9264bc6de9967d8a259f2037839fac1f9c40db14e6873b4e82f777e1c6c1838ea3cf7f56e73608a812397adabf6f48f678b6c9ee82ed394e08c7663474314274be3d67f9ab9bdde99ae560aa9786caf6a7f7cee8f712ed7f3ba67182383b351fde81c9f40d69251edfccb218f4dd88a2beb618a65bc5d90ca41996d1d378cccb29a23712c041f586ffe2a89e03f6d524d33ccac6aaa64f90e021ab61f1e38750ddc36eab7b47201edd26c3eb0e81df96471740b912f4c"}}, &(0x7f0000000100)={0x0, 0x3, 0xba, @string={0xba, 0x3, "19836d070d8f61e9126d8941f40fc7086ad0e3642525375ad3507c21b54936e1688a2cbbd8d7da9f04d53639246e34e221793fdda52a749fb2ec3c709b3bca433f11d3789ff2fb4cdd83771ee6520e74c20106087fc78f2a606b096dde7a2f54e0360ddded1bf4bc0616ea91586d0789b6f0c3493afcb19ebea608ce337c2a50f4aedfdfc2eaa0e5a24833f9acde722730f29b1fd8039aaa2954ca1fb464cd4e436d680257e0087cbfd92d34e340910936b80ef0f02f4df0"}}}, &(0x7f0000000580)={0x18, &(0x7f0000000400)={0x0, 0x1, 0xbf, "0669554d0975e3079a0b571da1072ffda506c1993b4182c1137f799cd6f7e16ce7bd105271b88a48a619d4e5ccd4cdda7b6d975b054f1e6551e0a20724c27fc826480d7c7583c3a9abfaef9a2a7314e3f43419464154c0998030afb1e8143353211ba66fd5ef090d8774545487f81e4bc352d795a7eb4e16ea63cdffbeed405f9621fb5ea12aacfec346836b2bddfcb38b628958402fea535895e7a96981789da3df04ce59caffe2647cce9f8b7dc76c88d21cd055948702d65f4a962129ff"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0xfa}, &(0x7f0000000500)={0xc0, 0x5, 0x3, "f695a2"}, &(0x7f0000000540)={0x40, 0x5, 0x4, "378f85c7"}}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000240)={0x44, &(0x7f0000000300)=ANY=[@ANYBLOB="20000300000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x10, &(0x7f0000000180)=ANY=[], 0x0, 0x0}) 7.038473414s ago: executing program 6 (id=1826): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_emit_ethernet(0x52, &(0x7f00000006c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @local, {[@end, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@private, 0x1000004}]}]}}}}}}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a30000000004c00048024000180090001006d65746100000000140002800800014000000001080002400000001724000180090001006d6173710000000014000280080002400000000808"], 0xa0}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x95, 0x5a, 0x4f, 0x40, 0xcf3, 0xe019, 0xfb4f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x80, 0x0, 0x0, 0x2, [{{0x9, 0x4, 0x94, 0x9, 0x2, 0x74, 0x83, 0x31, 0x80, [], [{{0x9, 0x5, 0x7, 0x0, 0x0, 0x6, 0x8, 0x0, [@generic={0x9, 0x11, "62b367e12306af"}]}}, {{0x9, 0x5, 0x5, 0x3, 0x10, 0x81, 0x5, 0x9}}]}}]}}]}}, 0x0) syz_usb_disconnect(r6) r7 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000640)={{0x12, 0x1, 0x110, 0xd6, 0xe, 0x37, 0x8, 0x4c8, 0x720, 0xe369, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x8, 0x6, 0x80, 0x7, [{{0x9, 0x4, 0x80, 0x5, 0x0, 0x28, 0xb8, 0x6c, 0x8}}, {{0x9, 0x4, 0x8, 0x4e, 0x0, 0x9f, 0x78, 0xf9, 0xd}}]}}]}}, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$EVIOCGMASK(r8, 0x5b01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 5.598799731s ago: executing program 2 (id=1833): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) (async) ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464af, &(0x7f0000000480)) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) ioctl$KVM_SET_SREGS2(r5, 0x4140aecd, &(0x7f0000000380)={{0x80a0000, 0xf000, 0x3, 0x7, 0xcf, 0x6, 0x4, 0x0, 0x2, 0x5, 0x59, 0x2}, {0x5000, 0xd000, 0x3, 0x88, 0x6, 0xd, 0x7, 0x2, 0xe, 0x10, 0x4, 0x5}, {0xdddd0000, 0xdddd1000, 0xe, 0x2, 0x65, 0xff, 0xdd, 0x2, 0x4, 0x3, 0x80, 0x2}, {0x10000, 0x10000, 0xd, 0x7, 0x8, 0x6, 0x6, 0x0, 0x1, 0x8, 0x81, 0xc}, {0x80a0000, 0x8080000, 0xb, 0x7, 0x68, 0xac, 0x5, 0x79, 0x9, 0x5, 0x81, 0x3}, {0xdddd1000, 0x10000, 0xd, 0x5, 0x9, 0x7, 0x6, 0x0, 0x9, 0x8, 0xff, 0x9b}, {0x6000, 0x1000, 0x4, 0x0, 0x8, 0x4, 0x6, 0x6, 0xf0, 0xf0, 0x9, 0xff}, {0x4000, 0x0, 0xd, 0x2, 0xe, 0x81, 0x4, 0x7, 0x7, 0x6c, 0x6, 0x8}, {0xdddd1000, 0x2}, {0xd000, 0xfff7}, 0x10, 0x0, 0x80a0000, 0x420352, 0x9, 0x1001, 0xdddd0000, 0x1, [0x102, 0x7, 0x0, 0xb3e]}) (async) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0xb, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) (async) mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) (async) lsetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000200)=@known='user.incfs.id\x00', 0x0, 0x0, 0x0) (async) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x1) listxattr(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) (async) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010028bd700000000000010000001400020077673000000000000000000000dd9945daaeb862cb74fead0000000800050001000000fd822ed279df34fbe5ba40a1bcbd1cdfb6e645de432b"], 0x30}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000040)={0x6, 0x7, 0x9, 0x0, 0x1, "100056f200"}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000000)=0x8001) 4.371042454s ago: executing program 2 (id=1835): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070250000000000202020731a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08001a00", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYBLOB="08001b"], 0x18c0}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r1, 0x4, 0x42000) read$FUSE(r1, &(0x7f00000040c0)={0x2020}, 0x2020) r2 = syz_io_uring_setup(0x52a9, &(0x7f0000000200)={0x0, 0x8d33, 0x800, 0x800, 0x300}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2200}}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x10113}], 0x1) 4.017491502s ago: executing program 4 (id=1837): sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37fe", 0x2, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2404c041}, 0x4040) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2, 0x0, 0x3}}, 0x2e) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000"], 0x44}}, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x4000, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.803002945s ago: executing program 0 (id=1838): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc084}, 0x20000090) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000180)=0xfffffffa, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) 3.496545968s ago: executing program 5 (id=1839): ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', 0x0}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x44, 0x0, 0x1, 0x3, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}]}, 0x44}}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x3c}}, 0x20000040) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) io_setup(0x20000000001005, &(0x7f0000000200)=0x0) io_submit(r5, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x5000000, 0x0, 0xd, 0x0, 0x0, r4, 0x0}]) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000480)={0x64, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0xfe}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0xc040}, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000380), 0x1ff, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth1_vlan\x00', 0x0}) r11 = openat$vcsa(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) r12 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), r1) sendmsg$WG_CMD_SET_DEVICE(r11, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="020026bd7000fbdbcf2501000000060006004e230000080005000100000008000500000000000800070001000000140002007767300000000000000000000000000008000100", @ANYRES32=r10, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) ioctl$KVM_CAP_HYPERV_SYNIC(r9, 0x4068aea3, &(0x7f0000000040)) ioctl$KVM_RUN(r9, 0xae80, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) 3.385215658s ago: executing program 4 (id=1840): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1c8900, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x22, 0x0, @void}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0x20, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x58, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @sched_cls=0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond0\x00', 0x8000}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000440)='net/raw6\x00') setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3bc, 0x1e4, 0x9403, 0x0, 0x1e4, 0x2c0, 0x2f4, 0x3d8, 0x3d8, 0x2f4, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1bc, 0x1e4, 0x0, {}, [@common=@srh1={{0x8c}, {0x6, 0x8a, 0x1, 0xb, 0x3, @mcast2, @local, @local, [0x0, 0xffffffff, 0x0, 0xffffffff], [0xffffff00, 0xff000000, 0xffffff00, 0xff], [0xffffffff, 0xff000000, 0x0, 0x7550ccb710be24b3], 0x8, 0x2006}}, @common=@srh1={{0x8c}, {0x16, 0xb9, 0x50, 0x40, 0x3, @remote, @private2={0xfc, 0x2, '\x00', 0xfe}, @ipv4={'\x00', '\xff\xff', @remote}, [0xff, 0xffffff00, 0x0, 0xff000000], [0xffffff00, 0xff000000, 0xff000000], [0x0, 0xffffffff, 0x0, 0xff000000], 0x407, 0x1060}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x2, 0x1}, {0x2, 0x3}}}}, {{@uncond, 0x0, 0xc8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x418) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{r6, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)='%ps \x00'}, 0x1c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)=r6}, 0x1c) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000980)={r6, 0x20, &(0x7f0000000940)={&(0x7f0000000800)=""/170, 0xaa, 0x0, &(0x7f00000008c0)=""/85, 0x55}}, 0x10) r10 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1f8a9918bc4055eaaeb6db4ee9bcb25b1811dbf40b3a7da5a8a64db04ed6dd26eea2e37229c339b1f91201c2796173864", 0x3d}], 0x1}, 0x0) recvmsg(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) dup2(r12, r11) fcntl$setsig(r10, 0xa, 0x13) fcntl$setlease(r10, 0x400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x16, 0x28, &(0x7f0000000b40)=ANY=[@ANYBLOB="180000001694000000000000030000001849000000000000000000000000000018000000000000000000000002000000b7080000000000007b8af8ff00000000b708000038f500007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a5000000c8170000df355ac0080f0cba081237d5172cf1e088ab09db1e1e3ff9c1fb6b1dbf606d5bc7038a16cd04bf8e19a51ae1ddf977c380b9471ac6ddf7cd063f", @ANYRES32=r7, @ANYBLOB="0000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000700000085000000060000005d245000fcffffff18120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000740)='GPL\x00', 0x8, 0x2c, &(0x7f0000000780)=""/44, 0x41100, 0x20, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x6, 0x5}, 0x8, 0x10, 0x0, 0x0, r9, r10, 0x0, &(0x7f00000009c0)=[r6], 0x0, 0x10, 0x6}, 0x94) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000080)={'veth0_to_batadv\x00'}) 2.863103605s ago: executing program 2 (id=1841): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r0, 0x4, 0x42000) read$FUSE(r0, &(0x7f00000040c0)={0x2020}, 0x2020) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000200)={0x0, 0x8d33, 0x800, 0x0, 0x300}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2200}}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000cc0)}], 0x1) 2.718404792s ago: executing program 4 (id=1842): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1a, 0x4, 0x4, 0x10, 0x4, 0xffffffffffffffff, 0xfffffff8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x2}, 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r3, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) listen(r2, 0x3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r6) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000200)={{0x1, 0x1, 0x18, r4, {0xca}}, './file0\x00'}) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, 0x2, 0x3, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0x39}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x51) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0x5, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x0, 0x1, 0x406, 0x1, 0xffffffff, 0x9}, [@TCA_NETEM_REORDER={0xc, 0x3, {0x110e2b6a, 0x2}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r11 = socket(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000000)={@loopback={0x66}, 0x400, 0x0, 0x1, 0xb, 0x9, 0x4}, 0x24) 2.711688551s ago: executing program 0 (id=1852): r0 = syz_usb_connect(0x3, 0x4a, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x6d, 0xf5, 0x71, 0x8, 0x4e2, 0x1424, 0xc7eb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x38, 0x2, 0x96, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xcc, 0x7, 0x0, 0x2, 0x59, 0x61, 0x5, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x890, 0x0, 0x7, 0x8}, {0x6, 0x24, 0x1a, 0x5, 0x11}}]}}, {{0x9, 0x4, 0x1, 0xff, 0x0, 0x6e, 0xb8, 0xc1}}]}}]}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r1}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000011002901800000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a800800058004000500080000003e"], 0x44}}, 0x100) sendmsg$NFNL_MSG_ACCT_DEL(r5, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, 0x3, 0x7, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFACCT_FLAGS={0x8}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x480c1) readv(r2, &(0x7f0000000000)=[{&(0x7f0000000440)=""/244, 0xf4}], 0x1) r6 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000000204f045db600000000000109022d00010000600209040010050300010009210000360122050009058103e0000c0007"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xa, "492c5f1b"}]}}, 0x0}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000000)={0xc, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1d088d00830200f11ab644bd895d098287c93888e59caaebee2c8de7b14147aacaf9ff0b2d58621fa054f0b1553ee33c932bf5c2d7b53d95f5ccf51b2754b23240e50b0cea4c50c536d256d6eaea1d8b1f65d95837468b0f71dab2777939008e22e16d5b8f9f0203df77e6cbcfd9a1d1c3d63524cfc1a6bb5ce718fb7955f9404ba2ff88975d26cbdf54b9a6f73320e79cf89e20ea9b253fcbf9ee44342629a3073191915135614a61ecbed3d89ce08bdb1b3d143e46"]}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000100)={0xc, &(0x7f00000002c0)={0x20, 0x6, 0xec, {0xec, 0x8, "0d5bb6c9bcc374693606bdd66c5e9876d71fbb1ec6a9d010fb67cf7957414c2ccadaba365050bd52d0e05dbe01b87aa44a2820e4d0a1112db9eeb3333da7c648658f2611b127c323ad0b3baa4dabbdb3513a57ccbfb7191deedb18de7b5fcdc3eaca3fbf357714b52001a6e9fbe99fb1d2a4efd7765eb1f60847d60b2882868ca343f20a665eaf44e5f398e2d724ab4c043858e10ab2141898ef57aa38a589e4c728e9bfb42b5e6d15e3b42aa21848f0597fd848650ba1bcbeb1b7465936c7e57b9639dcbcb434fe99193303bbec0ba130ce3423e27cbd1edf88df7d2c02db0f9ae5f4fd3a4e02864d0c"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000700)={0x24, &(0x7f0000000540)={0x0, 0x1, 0xad, "d17b958b9fbf59f0dcecf16d05b7761ca85c6084b5cb1f96936567fc537143bdc29e0275bc96796f403aebbc01da450a36ac966e36b0f2acba00f70f64b1d154750a3fb3d5ad73ced7b947d27b76338df5f35feb9227e0e97e5d6ce092c85b8a945ff4ebc876e6b31f7d1ae24c0a15744bc4bcfcfa1912dbfed6fcf5facb47d94b55e68bd1c0addb8493732368d494a4c100cababe60b5f378ee055c88427ebadfb669f9bc49ffe95ce8889a81"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x89}, &(0x7f0000000400)={0x20, 0x80, 0x1c, {0xfffd, 0x5, 0xfffffff2, 0x9, 0x7fff, 0x0, 0x534, 0x6, 0x45be, 0xe, 0x200, 0xa}}, &(0x7f0000000600)={0x20, 0x85, 0x4, 0x9}, &(0x7f0000000640)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000680)={0x20, 0x87, 0x2, 0x1ff}, &(0x7f00000006c0)={0x20, 0x89, 0x2}}) 2.371967138s ago: executing program 4 (id=1843): socket$nl_netfilter(0x10, 0x3, 0xc) socket$tipc(0x1e, 0x5, 0x0) r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_setup(0x10a, &(0x7f0000000680)={0x0, 0x80334c, 0x10, 0x3, 0x3d3}, &(0x7f0000000200)=0x0, &(0x7f0000000300)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100, 0x23456}) io_uring_enter(r0, 0x627, 0xc1040000, 0x43, 0x0, 0x0) 2.251196119s ago: executing program 5 (id=1844): unshare(0x28040680) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x3c3003, 0x0) sendfile(r0, r0, 0x0, 0x200000) socket$nl_generic(0x10, 0x3, 0x10) 2.177644762s ago: executing program 6 (id=1845): r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x4e, 0x0, &(0x7f0000000040)) r1 = syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303", @ANYRESDEC, @ANYRESOCT=r0, @ANYRES64=0x0, @ANYRESOCT=r0, @ANYRESOCT=r0], 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) r2 = getpid() r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f00000006c0)={0x44, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000080)={&(0x7f00000000c0)=[{0x7fff, 0x5801, 0x0, 0x0}], 0x1}) syz_usb_control_io$sierra_net(r3, 0x0, 0x0) syz_usb_control_io$lan78xx(r3, &(0x7f0000000ec0)={0x14, &(0x7f0000000cc0)=ANY=[@ANYBLOB="4001d7cefff10210"], 0x0}, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x17, 0xd0, 0xf5, 0x20, 0x421, 0x6901, 0x2d1d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x6a, 0x2, 0x0, 0x2, 0xfe, 0x18}}]}}]}}, 0x0) sched_setaffinity(r2, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) sched_getparam(r5, &(0x7f0000000100)) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f00000000c0)=@ready={0x0, 0x0, 0x6, "7b4b04a0", {0x1, 0x802, 0x2, 0x5, 0x9}}) 2.07715658s ago: executing program 5 (id=1846): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r0, 0x4, 0x42000) read$FUSE(r0, &(0x7f00000040c0)={0x2020}, 0x2020) (fail_nth: 3) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000200)={0x0, 0x8d33, 0x800, 0x0, 0x300}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2200}}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x10113}], 0x1) 1.964536764s ago: executing program 4 (id=1847): r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) openat$vhost_vsock(0xffffff9c, &(0x7f0000000640), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x0, 0x4004080) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x10000008, 0x8001, 0x4, 0x9, 0x200, 0x100, 0xfa11, 0xffffffff}, 0x0) r3 = gettid() rt_sigqueueinfo(r3, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket(0x1e, 0xa, 0x5) getsockopt$packet_buf(r5, 0x107, 0x1, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000100)={0x20019, "566035853245ccc42317afad7d48ed51000000040000000100", 0xffffffffffffffff}) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f0000000080)={"3cda8e0041004000f0ff00000600", r6, 0xffffffffffffffff}) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) close_range(r1, r9, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) write$tun(0xffffffffffffffff, 0x0, 0x8b) socket$inet6_sctp(0xa, 0x801, 0x84) 1.186636625s ago: executing program 2 (id=1848): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbb4bd1f6883011bb080045dc003000010102ac1414aa04009078010000004500000000000000001100000000"], 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000080)={@void, @void, @x25={0x3, 0xcc, 0xf3, "5b80c0d6ccb294df5dd9496c2ede55df8adc8044ecd68cf299b37da62ef4ffcb5201f5fdd0bb0a08d239c0bd696c3fcaec1564e069392ca539eeaf532161366aa1b9b81877e0778c92934e2bc7c56ab73d149474f4539f1371f245d03e9cef0f425f363ed837bfea129ee70172d2467efd712afc862557254684c58c6ef9ea76e4ad60c44c68919f5aa4ea1dab9d113889b6c6d6400c22a833fdb504d4ec90c2c53c5892e1fbcdfa91fc2c75111b039f8439"}}, 0xb5) 1.119634741s ago: executing program 5 (id=1849): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="0f696cdf0f000057680020f790d4daa1e0b4f3ab763d2a6aa2418088367cd6fff4cf9330c0ddabb09718315bf95cedc07bd05aa6f1ad7b30666b81c2da1503f9b0ed67759c172939291d3f6e99f1c365fe4471e2f9b472cd6b767a7ac7f92a80bfb960b7b9d27b6d36d9fffd8e3e37f50aae3771836bd6eed97dd9a199b60a126ec969e3e82b6d6e94aded7c5d7c1adbed5d7132f93c05e378abd58762c1edbf520590603632f4ce8b5937babc88035940e217b1b6f94ab942333da0ab1ab6f4d3ad553533ee086284af1428e5f63a011390c70000000000", @ANYRES32=0x0, @ANYBLOB="03150000000000006000128009000100766c616e000000005000028004000480400004800c00010002000000060000000c00010009000000ffff00000c00010001000000000000480c000100fbffffff020000000c0001000400000008000000060001000200000008000500", @ANYRES32=r2, @ANYBLOB], 0x88}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 1.026987881s ago: executing program 2 (id=1850): sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37fe", 0x2, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2404c041}, 0x4040) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2, 0x0, 0x3}}, 0x2e) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000"], 0x44}}, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x4000, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 995.929958ms ago: executing program 4 (id=1851): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000340)={r5, @in6={{0xa, 0x4e21, 0x9, @empty, 0x5}}, 0x2, 0x3, 0xfff, 0x5a, 0x30, 0x7, 0x50}, 0x9c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={r5, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x7f, 0x0}}]}, &(0x7f0000000140)=0xc) getpid() openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) unshare(0x2c020400) r6 = socket$inet6(0xa, 0x3, 0x4) setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x16f}, 0x8) close(r6) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x60c00, 0xa0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @mcast2, 0x1}, 0x1c) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = openat$kvm(0xffffffffffffff9c, 0x0, 0x4e4c01, 0x0) ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0xc9) bind$inet(r8, 0x0, 0x0) 895.285399ms ago: executing program 5 (id=1853): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = syz_open_procfs(0x0, 0x0) openat$cgroup_procs(r0, 0x0, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x9, 0x3, 0x2c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x234, 0xffffffff, 0xffffffff, 0x234, 0xffffffff, 0x3, &(0x7f0000000140), {[{{@uncond, 0x0, 0xe4, 0x10c, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x5}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0x4, 0x2}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x3, 0x8fa8, 0x1}}}, {{@ip={@multicast2, @remote, 0xff, 0xffffff00, 'veth0_to_bridge\x00', 'veth1_to_hsr\x00', {0xff}, {0xff}, 0x4d, 0x3, 0xc}, 0x0, 0xc0, 0x128, 0x0, {}, [@common=@unspec=@mark={{0x2c}, {0xb5, 0x81}}, @inet=@rpfilter={{0x24}, {0x10}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xc, 0xfffc, 0x4, 0xd9d3, 'syz1\x00', 'syz0\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x324) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r1, 0x4, 0x42000) read$FUSE(r1, &(0x7f00000040c0)={0x2020}, 0x2020) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000700)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000640)={&(0x7f0000000800)={0x88, 0x2, 0x6, 0x305, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x81}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x855}, 0x40) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000200)={0x0, 0x8d33, 0x800, 0x0, 0x300}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2200}}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x10113}], 0x1) 711.927644ms ago: executing program 2 (id=1854): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') prctl$PR_SET_NAME(0x4, 0x0) fstat(r1, &(0x7f0000000200)) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x2c, 0x24, 0x200, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0x376a00d87f3a89db, 0xffff}, {0xa, 0xfff1}}, [@TCA_INGRESS_BLOCK={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4048084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r0, &(0x7f0000000000), 0xfffffecc) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f00000003c0)={0x55, 0xa, 0x3, "3205c546e8b41e04f4bf40070700", 0x38303553}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r8, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d05, 0x0, 0x2b34988d}]}) write$UHID_INPUT(r2, &(0x7f00000025c0)={0xfc, {"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", 0x1000}}, 0x1006) r9 = socket$inet6(0xa, 0x2, 0x0) r10 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$UFFDIO_REGISTER(r10, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x3}) bind$inet6(r9, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r11 = socket$key(0xf, 0x3, 0x2) ioctl$KVM_NMI(r10, 0xae9a) sendmsg$key(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="020d00000600000000000a00000000000000fc00000000000000000000000000000005000500000000000a000000000000000000000000000000000000000000000000000000000000000800120002000200000000000000000010002b00020300000000000000000000fe880000000000000000000000000001fc01000000000000000000000000000004000400"/178], 0xc0}}, 0x0) 0s ago: executing program 5 (id=1855): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3, &(0x7f0000000040)=0x5, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'macvlan1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ipvlan0\x00'}) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000100)=0x5, 0x4) syz_open_dev$usbfs(&(0x7f0000000340), 0x76, 0x101341) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f00000001c0), 0xed) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10010, r3, 0xcac23000) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r4) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r7, 0xc0d05604, &(0x7f0000000240)={0x8, @vbi}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmsg$key(r8, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x24000000) add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r9 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r9, &(0x7f0000000000)={0xa, 0x0, 0xffffffff, @empty, 0x0, 0x3}, 0x20) kernel console output (not intermixed with test programs): compat=1 ip=0xf700d539 code=0x7ffc0000 [ 410.650151][ T30] audit: type=1326 audit(1765803816.378:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11672 comm="syz.2.1522" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 410.652697][T11678] tap0: tun_chr_ioctl cmd 2147767506 [ 410.736999][ T30] audit: type=1326 audit(1765803816.378:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11672 comm="syz.2.1522" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 410.949465][ T30] audit: type=1326 audit(1765803816.378:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11672 comm="syz.2.1522" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 410.992545][T11680] netlink: 'syz.5.1525': attribute type 1 has an invalid length. [ 411.006780][ T30] audit: type=1326 audit(1765803816.378:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11672 comm="syz.2.1522" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 411.055643][T11680] 8021q: adding VLAN 0 to HW filter on device bond4 [ 411.065793][ T30] audit: type=1326 audit(1765803816.378:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11672 comm="syz.2.1522" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 411.073685][T11685] FAULT_INJECTION: forcing a failure. [ 411.073685][T11685] name failslab, interval 1, probability 0, space 0, times 0 [ 411.087879][ T30] audit: type=1326 audit(1765803816.378:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11672 comm="syz.2.1522" exe="/root/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 411.128087][T11685] CPU: 0 UID: 0 PID: 11685 Comm: syz.6.1524 Tainted: G L syzkaller #0 PREEMPT(full) [ 411.128119][T11685] Tainted: [L]=SOFTLOCKUP [ 411.128126][T11685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 411.128138][T11685] Call Trace: [ 411.128147][T11685] [ 411.128156][T11685] dump_stack_lvl+0x189/0x250 [ 411.128184][T11685] ? __pfx____ratelimit+0x10/0x10 [ 411.128215][T11685] ? __pfx_dump_stack_lvl+0x10/0x10 [ 411.128239][T11685] ? __pfx__printk+0x10/0x10 [ 411.128274][T11685] ? __pfx___might_resched+0x10/0x10 [ 411.128300][T11685] should_fail_ex+0x414/0x560 [ 411.128342][T11685] should_failslab+0xa8/0x100 [ 411.128368][T11685] __kmalloc_noprof+0xdf/0x800 [ 411.128386][T11685] ? kfree+0x4d/0x660 [ 411.128411][T11685] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 411.128444][T11685] tomoyo_realpath_from_path+0xe3/0x5d0 [ 411.128472][T11685] ? tomoyo_domain+0xd8/0x130 [ 411.128503][T11685] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 411.128525][T11685] tomoyo_path_number_perm+0x1e8/0x5a0 [ 411.128550][T11685] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 411.128570][T11685] ? __lock_acquire+0x6b6/0x2cf0 [ 411.128629][T11685] ? __fget_files+0x2a/0x420 [ 411.128658][T11685] ? __fget_files+0x3a0/0x420 [ 411.128680][T11685] ? __fget_files+0x2a/0x420 [ 411.128708][T11685] security_file_ioctl_compat+0xcb/0x2d0 [ 411.128732][T11685] __ia32_compat_sys_ioctl+0x128/0x840 [ 411.128755][T11685] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 411.128775][T11685] ? __fget_files+0x3a0/0x420 [ 411.128806][T11685] ? fput+0xa0/0xd0 [ 411.128832][T11685] ? ksys_write+0x22a/0x250 [ 411.128849][T11685] ? exc_page_fault+0x82/0x100 [ 411.128870][T11685] ? __pfx_ksys_write+0x10/0x10 [ 411.128893][T11685] ? __do_fast_syscall_32+0xbe/0x590 [ 411.128914][T11685] __do_fast_syscall_32+0x1f7/0x590 [ 411.128937][T11685] ? rcu_is_watching+0x15/0xb0 [ 411.128959][T11685] ? do_fast_syscall_32+0x34/0x80 [ 411.128986][T11685] do_fast_syscall_32+0x34/0x80 [ 411.129008][T11685] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 411.129036][T11685] RIP: 0023:0xf705d539 [ 411.129053][T11685] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 411.129070][T11685] RSP: 002b:00000000f544d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 411.129091][T11685] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800454d2 [ 411.129105][T11685] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 411.129118][T11685] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 411.129130][T11685] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 411.129142][T11685] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 411.129172][T11685] [ 411.409510][T11685] ERROR: Out of memory at tomoyo_realpath_from_path. [ 411.417465][T11685] tap1: tun_chr_ioctl cmd 2147767506 [ 411.948648][T11716] netlink: 'syz.2.1537': attribute type 1 has an invalid length. [ 411.996812][T11716] 8021q: adding VLAN 0 to HW filter on device bond4 [ 412.802392][T11731] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1548'. [ 413.391349][T11740] tap1: tun_chr_ioctl cmd 2147767506 [ 413.586336][T11745] vivid-002: disconnect [ 413.799610][ T5922] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 413.912970][T11753] tap1: tun_chr_ioctl cmd 2147767506 [ 413.976352][ T5922] usb 3-1: config 26 has an invalid interface number: 142 but max is 0 [ 413.994873][ T5922] usb 3-1: config 26 has no interface number 0 [ 414.003832][ T5922] usb 3-1: New USB device found, idVendor=0547, idProduct=6801, bcdDevice=a4.f4 [ 414.013760][ T5922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.053052][ T5922] gspca_main: touptek-2.14.0 probing 0547:6801 [ 414.079105][T11757] FAULT_INJECTION: forcing a failure. [ 414.079105][T11757] name failslab, interval 1, probability 0, space 0, times 0 [ 414.092787][T11757] CPU: 1 UID: 0 PID: 11757 Comm: syz.5.1547 Tainted: G L syzkaller #0 PREEMPT(full) [ 414.092817][T11757] Tainted: [L]=SOFTLOCKUP [ 414.092824][T11757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 414.092835][T11757] Call Trace: [ 414.092843][T11757] [ 414.092852][T11757] dump_stack_lvl+0x189/0x250 [ 414.092880][T11757] ? __pfx____ratelimit+0x10/0x10 [ 414.092909][T11757] ? __pfx_dump_stack_lvl+0x10/0x10 [ 414.092933][T11757] ? __pfx__printk+0x10/0x10 [ 414.092967][T11757] ? __pfx___might_resched+0x10/0x10 [ 414.092987][T11757] ? fs_reclaim_acquire+0x7d/0x100 [ 414.093014][T11757] should_fail_ex+0x414/0x560 [ 414.093048][T11757] should_failslab+0xa8/0x100 [ 414.093074][T11757] __kmalloc_noprof+0xdf/0x800 [ 414.093093][T11757] ? tomoyo_encode+0x28b/0x550 [ 414.093144][T11757] tomoyo_encode+0x28b/0x550 [ 414.093173][T11757] tomoyo_realpath_from_path+0x58d/0x5d0 [ 414.093209][T11757] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 414.093230][T11757] tomoyo_path_number_perm+0x1e8/0x5a0 [ 414.093254][T11757] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 414.093275][T11757] ? __lock_acquire+0x6b6/0x2cf0 [ 414.093324][T11757] ? __fget_files+0x2a/0x420 [ 414.093353][T11757] ? __fget_files+0x3a0/0x420 [ 414.093372][T11757] ? __fget_files+0x2a/0x420 [ 414.093398][T11757] security_file_ioctl_compat+0xcb/0x2d0 [ 414.093419][T11757] __ia32_compat_sys_ioctl+0x128/0x840 [ 414.093442][T11757] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 414.093462][T11757] ? __fget_files+0x3a0/0x420 [ 414.093493][T11757] ? fput+0xa0/0xd0 [ 414.093519][T11757] ? ksys_write+0x22a/0x250 [ 414.093536][T11757] ? exc_page_fault+0x82/0x100 [ 414.093555][T11757] ? __pfx_ksys_write+0x10/0x10 [ 414.093578][T11757] ? __do_fast_syscall_32+0xbe/0x590 [ 414.093604][T11757] __do_fast_syscall_32+0x1f7/0x590 [ 414.093626][T11757] ? rcu_is_watching+0x15/0xb0 [ 414.093646][T11757] ? do_fast_syscall_32+0x34/0x80 [ 414.093672][T11757] do_fast_syscall_32+0x34/0x80 [ 414.093692][T11757] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 414.093714][T11757] RIP: 0023:0xf7f95539 [ 414.093730][T11757] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 414.093745][T11757] RSP: 002b:00000000f548655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 414.093763][T11757] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800454d2 [ 414.093776][T11757] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 414.093787][T11757] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 414.093796][T11757] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 414.093807][T11757] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 414.093833][T11757] [ 414.093853][T11757] ERROR: Out of memory at tomoyo_realpath_from_path. [ 414.268986][ T5922] usb 3-1: USB disconnect, device number 68 [ 414.278383][T11742] vivid-002: reconnect [ 414.349619][T11757] tap1: tun_chr_ioctl cmd 2147767506 [ 414.677604][T11771] syzkaller0: entered promiscuous mode [ 414.683296][T11771] syzkaller0: entered allmulticast mode [ 414.932110][ T5920] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 415.024132][T11778] FAULT_INJECTION: forcing a failure. [ 415.024132][T11778] name failslab, interval 1, probability 0, space 0, times 0 [ 415.070163][T11778] CPU: 1 UID: 0 PID: 11778 Comm: syz.2.1553 Tainted: G L syzkaller #0 PREEMPT(full) [ 415.070189][T11778] Tainted: [L]=SOFTLOCKUP [ 415.070193][T11778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 415.070199][T11778] Call Trace: [ 415.070204][T11778] [ 415.070209][T11778] dump_stack_lvl+0x189/0x250 [ 415.070227][T11778] ? __pfx____ratelimit+0x10/0x10 [ 415.070244][T11778] ? __pfx_dump_stack_lvl+0x10/0x10 [ 415.070256][T11778] ? __pfx__printk+0x10/0x10 [ 415.070271][T11778] ? __pfx___might_resched+0x10/0x10 [ 415.070283][T11778] ? fs_reclaim_acquire+0x7d/0x100 [ 415.070302][T11778] should_fail_ex+0x414/0x560 [ 415.070321][T11778] should_failslab+0xa8/0x100 [ 415.070334][T11778] __kmalloc_cache_noprof+0x84/0x700 [ 415.070345][T11778] ? rtnl_newlink+0xfb/0x1c90 [ 415.070355][T11778] ? stack_depot_save_flags+0x40/0x850 [ 415.070373][T11778] rtnl_newlink+0xfb/0x1c90 [ 415.070384][T11778] ? kasan_save_track+0x4f/0x80 [ 415.070394][T11778] ? kasan_save_track+0x3e/0x80 [ 415.070402][T11778] ? kasan_save_free_info+0x46/0x50 [ 415.070415][T11778] ? __kasan_slab_free+0x5c/0x80 [ 415.070425][T11778] ? kmem_cache_free+0x197/0x620 [ 415.070433][T11778] ? nlmon_xmit+0xb0/0x100 [ 415.070445][T11778] ? dev_hard_start_xmit+0x2cd/0x800 [ 415.070457][T11778] ? __dev_queue_xmit+0x1493/0x3140 [ 415.070469][T11778] ? __netlink_deliver_tap+0x5ad/0x850 [ 415.070481][T11778] ? netlink_deliver_tap+0x19c/0x1b0 [ 415.070492][T11778] ? netlink_unicast+0x7fa/0x9e0 [ 415.070502][T11778] ? netlink_sendmsg+0x805/0xb30 [ 415.070514][T11778] ? __pfx_rtnl_newlink+0x10/0x10 [ 415.070523][T11778] ? __se_sys_splice+0x2e1/0x460 [ 415.070536][T11778] ? __do_fast_syscall_32+0x1f7/0x590 [ 415.070547][T11778] ? do_fast_syscall_32+0x34/0x80 [ 415.070557][T11778] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 415.070586][T11778] ? kasan_quarantine_put+0xdd/0x220 [ 415.070596][T11778] ? lockdep_hardirqs_on+0x98/0x140 [ 415.070610][T11778] ? kmem_cache_free+0x197/0x620 [ 415.070619][T11778] ? nlmon_xmit+0xb0/0x100 [ 415.070636][T11778] ? __lock_acquire+0x6b6/0x2cf0 [ 415.070649][T11778] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 415.070663][T11778] ? __dev_queue_xmit+0x289/0x3140 [ 415.070675][T11778] ? __dev_queue_xmit+0x289/0x3140 [ 415.070687][T11778] ? __dev_queue_xmit+0x289/0x3140 [ 415.070713][T11778] ? __pfx_rtnl_newlink+0x10/0x10 [ 415.070724][T11778] rtnetlink_rcv_msg+0x7cf/0xb70 [ 415.070737][T11778] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 415.070747][T11778] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 415.070756][T11778] ? ref_tracker_free+0x63a/0x7d0 [ 415.070766][T11778] ? __asan_memcpy+0x40/0x70 [ 415.070775][T11778] ? __pfx_ref_tracker_free+0x10/0x10 [ 415.070790][T11778] netlink_rcv_skb+0x208/0x470 [ 415.070803][T11778] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 415.070815][T11778] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 415.070833][T11778] ? netlink_deliver_tap+0x2e/0x1b0 [ 415.070850][T11778] netlink_unicast+0x82f/0x9e0 [ 415.070866][T11778] ? __pfx_netlink_unicast+0x10/0x10 [ 415.070878][T11778] ? netlink_sendmsg+0x642/0xb30 [ 415.070890][T11778] ? skb_put+0x11b/0x210 [ 415.070903][T11778] netlink_sendmsg+0x805/0xb30 [ 415.070921][T11778] ? __pfx_netlink_sendmsg+0x10/0x10 [ 415.070936][T11778] ? aa_sock_msg_perm+0xf1/0x1b0 [ 415.070950][T11778] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 415.070961][T11778] ? __pfx_netlink_sendmsg+0x10/0x10 [ 415.070974][T11778] __sock_sendmsg+0x21c/0x270 [ 415.070991][T11778] sock_sendmsg+0x158/0x230 [ 415.071007][T11778] ? __pfx_sock_sendmsg+0x10/0x10 [ 415.071028][T11778] ? __asan_memset+0x22/0x50 [ 415.071043][T11778] ? iov_iter_bvec+0xb8/0x180 [ 415.071056][T11778] splice_to_socket+0x8f5/0xf00 [ 415.071084][T11778] ? __pfx_splice_to_socket+0x10/0x10 [ 415.071110][T11778] ? get_pid_task+0x20/0x1f0 [ 415.071131][T11778] ? bpf_lsm_file_permission+0x9/0x20 [ 415.071142][T11778] ? security_file_permission+0x75/0x290 [ 415.071153][T11778] ? rw_verify_area+0x255/0x4d0 [ 415.071170][T11778] ? __pfx_splice_to_socket+0x10/0x10 [ 415.071182][T11778] do_splice+0xc79/0x1660 [ 415.071208][T11778] ? __pfx_do_splice+0x10/0x10 [ 415.071226][T11778] __se_sys_splice+0x2e1/0x460 [ 415.071242][T11778] ? __pfx___se_sys_splice+0x10/0x10 [ 415.071257][T11778] ? __ia32_sys_splice+0x21/0xf0 [ 415.071272][T11778] __do_fast_syscall_32+0x1f7/0x590 [ 415.071284][T11778] ? rcu_is_watching+0x15/0xb0 [ 415.071300][T11778] ? do_fast_syscall_32+0x34/0x80 [ 415.071314][T11778] do_fast_syscall_32+0x34/0x80 [ 415.071326][T11778] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 415.071338][T11778] RIP: 0023:0xf700d539 [ 415.071349][T11778] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 415.071358][T11778] RSP: 002b:00000000f53dc55c EFLAGS: 00000206 ORIG_RAX: 0000000000000139 [ 415.071370][T11778] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 415.071377][T11778] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 000000000004ffe6 [ 415.071384][T11778] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 415.071390][T11778] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 415.071396][T11778] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 415.071411][T11778] [ 415.684679][ T5920] usb 6-1: Using ep0 maxpacket: 16 [ 415.711262][ T5920] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 415.728623][ T5920] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.743289][ T5920] usb 6-1: Product: syz [ 415.747525][ T5920] usb 6-1: Manufacturer: syz [ 415.752236][ T5920] usb 6-1: SerialNumber: syz [ 415.758079][T11780] FAULT_INJECTION: forcing a failure. [ 415.758079][T11780] name failslab, interval 1, probability 0, space 0, times 0 [ 415.765826][ T5920] usb 6-1: config 0 descriptor?? [ 415.771385][T11780] CPU: 1 UID: 0 PID: 11780 Comm: syz.0.1555 Tainted: G L syzkaller #0 PREEMPT(full) [ 415.771415][T11780] Tainted: [L]=SOFTLOCKUP [ 415.771423][T11780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 415.771434][T11780] Call Trace: [ 415.771442][T11780] [ 415.771451][T11780] dump_stack_lvl+0x189/0x250 [ 415.771479][T11780] ? __pfx____ratelimit+0x10/0x10 [ 415.771510][T11780] ? __pfx_dump_stack_lvl+0x10/0x10 [ 415.771533][T11780] ? __pfx__printk+0x10/0x10 [ 415.771566][T11780] ? __pfx___might_resched+0x10/0x10 [ 415.771592][T11780] should_fail_ex+0x414/0x560 [ 415.771626][T11780] should_failslab+0xa8/0x100 [ 415.771651][T11780] __kmalloc_noprof+0xdf/0x800 [ 415.771669][T11780] ? kfree+0x4d/0x660 [ 415.771693][T11780] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 415.771724][T11780] tomoyo_realpath_from_path+0xe3/0x5d0 [ 415.771752][T11780] ? tomoyo_domain+0xd8/0x130 [ 415.771783][T11780] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 415.771804][T11780] tomoyo_path_number_perm+0x1e8/0x5a0 [ 415.771828][T11780] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 415.771848][T11780] ? __lock_acquire+0x6b6/0x2cf0 [ 415.771904][T11780] ? __fget_files+0x2a/0x420 [ 415.771933][T11780] ? __fget_files+0x3a0/0x420 [ 415.771954][T11780] ? __fget_files+0x2a/0x420 [ 415.771982][T11780] security_file_ioctl_compat+0xcb/0x2d0 [ 415.772005][T11780] __ia32_compat_sys_ioctl+0x128/0x840 [ 415.772028][T11780] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 415.772047][T11780] ? __fget_files+0x3a0/0x420 [ 415.772077][T11780] ? fput+0xa0/0xd0 [ 415.772102][T11780] ? ksys_write+0x22a/0x250 [ 415.772119][T11780] ? exc_page_fault+0x82/0x100 [ 415.772140][T11780] ? __pfx_ksys_write+0x10/0x10 [ 415.772162][T11780] ? __do_fast_syscall_32+0xbe/0x590 [ 415.772188][T11780] __do_fast_syscall_32+0x1f7/0x590 [ 415.772210][T11780] ? rcu_is_watching+0x15/0xb0 [ 415.772232][T11780] ? do_fast_syscall_32+0x34/0x80 [ 415.772259][T11780] do_fast_syscall_32+0x34/0x80 [ 415.772279][T11780] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 415.772303][T11780] RIP: 0023:0xf7fe1539 [ 415.772320][T11780] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 415.772343][T11780] RSP: 002b:00000000f54d655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 415.772363][T11780] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c01864c6 [ 415.772377][T11780] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 415.772389][T11780] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 415.772401][T11780] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 415.772413][T11780] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 415.772442][T11780] [ 415.772451][T11780] ERROR: Out of memory at tomoyo_realpath_from_path. [ 416.232625][ T5920] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 416.244199][ T5920] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 416.254154][ T5920] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 416.262182][ T5920] usb 6-1: media controller created [ 416.277454][ T5920] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 416.349610][ T24] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 416.438129][ T5920] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 416.448657][ T5920] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 416.501107][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 416.513130][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 416.530053][ T24] usb 3-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 416.546053][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.569586][ T24] usb 3-1: config 0 descriptor?? [ 416.934792][ T24] Bluetooth: Can't get state to change to load ram patch err [ 416.952243][ T24] Bluetooth: Loading patch file failed [ 416.967620][T11798] netlink: 'syz.6.1570': attribute type 1 has an invalid length. [ 416.976393][ T24] ath3k 3-1:0.0: probe with driver ath3k failed with error -71 [ 417.002606][ T24] usb 3-1: USB disconnect, device number 69 [ 417.051629][T11800] vivid-008: disconnect [ 417.265989][ T24] usb 6-1: USB disconnect, device number 48 [ 417.341404][ T24] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 417.482844][ T5937] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 417.534257][T11815] syzkaller0: entered promiscuous mode [ 417.540949][T11815] syzkaller0: entered allmulticast mode [ 417.664993][T11799] vivid-008: reconnect [ 417.670590][ T5937] usb 7-1: Using ep0 maxpacket: 32 [ 417.692366][ T5937] usb 7-1: unable to get BOS descriptor or descriptor too short [ 417.712498][ T5937] usb 7-1: config 2 has an invalid interface number: 147 but max is 0 [ 417.721105][ T5937] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 417.749363][ T5937] usb 7-1: config 2 has no interface number 0 [ 417.755599][ T5937] usb 7-1: config 2 interface 147 has no altsetting 0 [ 417.792070][ T5937] usb 7-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=c8.8e [ 417.811587][ T5937] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.832265][ T5937] usb 7-1: Product: syz [ 417.836481][ T5937] usb 7-1: Manufacturer: syz [ 417.852077][ T5937] usb 7-1: SerialNumber: syz [ 417.873043][T11822] @0: renamed from bond_slave_1 (while UP) [ 417.986965][T11824] tap1: tun_chr_ioctl cmd 2147767506 [ 417.989868][ T24] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 418.005152][T11824] FAULT_INJECTION: forcing a failure. [ 418.005152][T11824] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 418.029685][T11824] CPU: 1 UID: 0 PID: 11824 Comm: syz.2.1568 Tainted: G L syzkaller #0 PREEMPT(full) [ 418.029716][T11824] Tainted: [L]=SOFTLOCKUP [ 418.029724][T11824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 418.029736][T11824] Call Trace: [ 418.029743][T11824] [ 418.029751][T11824] dump_stack_lvl+0x189/0x250 [ 418.029781][T11824] ? __pfx____ratelimit+0x10/0x10 [ 418.029813][T11824] ? __pfx_dump_stack_lvl+0x10/0x10 [ 418.029838][T11824] ? __pfx__printk+0x10/0x10 [ 418.029880][T11824] should_fail_ex+0x414/0x560 [ 418.029914][T11824] _copy_to_user+0x31/0xb0 [ 418.029940][T11824] __tun_chr_ioctl+0x151d/0x1df0 [ 418.029970][T11824] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 418.029994][T11824] ? __fget_files+0x2a/0x420 [ 418.030024][T11824] ? __fget_files+0x3a0/0x420 [ 418.030049][T11824] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 418.030072][T11824] __ia32_compat_sys_ioctl+0x543/0x840 [ 418.030094][T11824] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 418.030114][T11824] ? __fget_files+0x3a0/0x420 [ 418.030151][T11824] ? fput+0xa0/0xd0 [ 418.030177][T11824] ? ksys_write+0x22a/0x250 [ 418.030195][T11824] ? exc_page_fault+0x82/0x100 [ 418.030215][T11824] ? __pfx_ksys_write+0x10/0x10 [ 418.030236][T11824] ? __do_fast_syscall_32+0xbe/0x590 [ 418.030261][T11824] __do_fast_syscall_32+0x1f7/0x590 [ 418.030285][T11824] ? rcu_is_watching+0x15/0xb0 [ 418.030308][T11824] ? do_fast_syscall_32+0x34/0x80 [ 418.030335][T11824] do_fast_syscall_32+0x34/0x80 [ 418.030357][T11824] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 418.030379][T11824] RIP: 0023:0xf700d539 [ 418.030397][T11824] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 418.030415][T11824] RSP: 002b:00000000f53fd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 418.030437][T11824] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800454d2 [ 418.030450][T11824] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 418.030462][T11824] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 418.030472][T11824] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 418.030482][T11824] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 418.030505][T11824] [ 418.293169][ T5937] ims_pcu 7-1:2.147: Missing CDC union descriptor [ 418.324189][ T5937] ims_pcu 7-1:2.147: probe with driver ims_pcu failed with error -22 [ 418.352908][ T5937] usb 7-1: USB disconnect, device number 24 [ 418.369607][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 418.377174][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 418.389523][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 418.399491][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 418.412692][ T24] usb 6-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 418.421835][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.432844][ T24] usb 6-1: config 0 descriptor?? [ 418.579189][T11832] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1571'. [ 418.650625][T11832] netlink: 'syz.0.1571': attribute type 11 has an invalid length. [ 418.681132][T11832] vxlan0: entered promiscuous mode [ 418.691257][ T8931] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.736696][ T8931] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.765291][ T8931] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.778886][T11838] FAULT_INJECTION: forcing a failure. [ 418.778886][T11838] name failslab, interval 1, probability 0, space 0, times 0 [ 418.803066][T11838] CPU: 0 UID: 0 PID: 11838 Comm: syz.2.1573 Tainted: G L syzkaller #0 PREEMPT(full) [ 418.803099][T11838] Tainted: [L]=SOFTLOCKUP [ 418.803106][T11838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 418.803118][T11838] Call Trace: [ 418.803127][T11838] [ 418.803136][T11838] dump_stack_lvl+0x189/0x250 [ 418.803164][T11838] ? __pfx____ratelimit+0x10/0x10 [ 418.803196][T11838] ? __pfx_dump_stack_lvl+0x10/0x10 [ 418.803220][T11838] ? __pfx__printk+0x10/0x10 [ 418.803253][T11838] ? __pfx___might_resched+0x10/0x10 [ 418.803274][T11838] ? fs_reclaim_acquire+0x7d/0x100 [ 418.803301][T11838] should_fail_ex+0x414/0x560 [ 418.803337][T11838] should_failslab+0xa8/0x100 [ 418.803363][T11838] __kmalloc_noprof+0xdf/0x800 [ 418.803383][T11838] ? tomoyo_encode+0x28b/0x550 [ 418.803414][T11838] tomoyo_encode+0x28b/0x550 [ 418.803446][T11838] tomoyo_realpath_from_path+0x58d/0x5d0 [ 418.803483][T11838] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 418.803505][T11838] tomoyo_path_number_perm+0x1e8/0x5a0 [ 418.803531][T11838] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 418.803552][T11838] ? __lock_acquire+0x6b6/0x2cf0 [ 418.803612][T11838] ? __fget_files+0x2a/0x420 [ 418.803641][T11838] ? __fget_files+0x3a0/0x420 [ 418.803664][T11838] ? __fget_files+0x2a/0x420 [ 418.803693][T11838] security_file_ioctl_compat+0xcb/0x2d0 [ 418.803717][T11838] __ia32_compat_sys_ioctl+0x128/0x840 [ 418.803740][T11838] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 418.803761][T11838] ? __fget_files+0x3a0/0x420 [ 418.803792][T11838] ? fput+0xa0/0xd0 [ 418.803825][T11838] ? ksys_write+0x22a/0x250 [ 418.803842][T11838] ? exc_page_fault+0x82/0x100 [ 418.803859][T11838] ? __pfx_ksys_write+0x10/0x10 [ 418.803882][T11838] ? __do_fast_syscall_32+0xbe/0x590 [ 418.803908][T11838] __do_fast_syscall_32+0x1f7/0x590 [ 418.803927][T11838] ? rcu_is_watching+0x15/0xb0 [ 418.803949][T11838] ? do_fast_syscall_32+0x34/0x80 [ 418.803972][T11838] do_fast_syscall_32+0x34/0x80 [ 418.803991][T11838] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 418.804011][T11838] RIP: 0023:0xf700d539 [ 418.804026][T11838] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 418.804041][T11838] RSP: 002b:00000000f53fd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 418.804059][T11838] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c01864c6 [ 418.804071][T11838] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 418.804084][T11838] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 418.804095][T11838] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 418.804105][T11838] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 418.804129][T11838] [ 418.807020][ T8931] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.828488][T11838] ERROR: Out of memory at tomoyo_realpath_from_path. [ 419.202353][ T8327] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 419.361887][ T8327] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 419.556608][ T8327] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 419.582553][ T8327] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 419.593951][ T8327] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 419.608032][ T8327] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 419.640643][ T8327] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.699824][ T8327] usb 7-1: config 0 descriptor?? [ 419.745757][T11852] syzkaller0: entered promiscuous mode [ 419.757659][T11852] syzkaller0: entered allmulticast mode [ 419.927511][ T8327] usbhid 7-1:0.0: can't add hid device: -32 [ 419.949868][ T8327] usbhid 7-1:0.0: probe with driver usbhid failed with error -32 [ 420.142369][T11858] tap0: tun_chr_ioctl cmd 2147767506 [ 420.388259][T11865] vivid-000: disconnect [ 420.603837][T11869] syzkaller0: entered promiscuous mode [ 420.625908][T11869] syzkaller0: entered allmulticast mode [ 420.632933][T11813] syz.5.1564 (11813): drop_caches: 2 [ 420.726209][ T24] usbhid 6-1:0.0: can't add hid device: -71 [ 420.738099][ T24] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 420.759180][ T24] usb 6-1: USB disconnect, device number 49 [ 420.808110][T11873] random: crng reseeded on system resumption [ 420.852216][T11873] Unrecognized hibernate image header format! [ 420.881650][T11873] PM: hibernation: Image mismatch: architecture specific data [ 421.050722][T11863] vivid-000: reconnect [ 421.055772][T11884] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1589'. [ 421.057277][T11888] FAULT_INJECTION: forcing a failure. [ 421.057277][T11888] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 421.081435][T11888] CPU: 0 UID: 0 PID: 11888 Comm: syz.5.1590 Tainted: G L syzkaller #0 PREEMPT(full) [ 421.081462][T11888] Tainted: [L]=SOFTLOCKUP [ 421.081470][T11888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 421.081480][T11888] Call Trace: [ 421.081488][T11888] [ 421.081496][T11888] dump_stack_lvl+0x189/0x250 [ 421.081523][T11888] ? __pfx____ratelimit+0x10/0x10 [ 421.081552][T11888] ? __pfx_dump_stack_lvl+0x10/0x10 [ 421.081576][T11888] ? __pfx__printk+0x10/0x10 [ 421.081605][T11888] ? __might_fault+0xb0/0x130 [ 421.081641][T11888] should_fail_ex+0x414/0x560 [ 421.081701][T11888] _copy_from_user+0x2d/0xb0 [ 421.081723][T11888] drm_ioctl+0x58a/0xb10 [ 421.081753][T11888] ? __pfx_drm_mode_create_lease_ioctl+0x10/0x10 [ 421.081776][T11888] ? __pfx_drm_ioctl+0x10/0x10 [ 421.081811][T11888] ? __fget_files+0x3a0/0x420 [ 421.081832][T11888] ? __fget_files+0x2a/0x420 [ 421.081851][T11888] ? drm_compat_ioctl+0xa7/0x330 [ 421.081878][T11888] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 421.081905][T11888] __ia32_compat_sys_ioctl+0x543/0x840 [ 421.081925][T11888] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 421.081948][T11888] ? __fget_files+0x3a0/0x420 [ 421.081973][T11888] ? fput+0xa0/0xd0 [ 421.081994][T11888] ? ksys_write+0x22a/0x250 [ 421.082008][T11888] ? exc_page_fault+0x82/0x100 [ 421.082025][T11888] ? __pfx_ksys_write+0x10/0x10 [ 421.082044][T11888] ? __do_fast_syscall_32+0xbe/0x590 [ 421.082065][T11888] __do_fast_syscall_32+0x1f7/0x590 [ 421.082084][T11888] ? rcu_is_watching+0x15/0xb0 [ 421.082103][T11888] ? do_fast_syscall_32+0x34/0x80 [ 421.082125][T11888] do_fast_syscall_32+0x34/0x80 [ 421.082143][T11888] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 421.082163][T11888] RIP: 0023:0xf7f95539 [ 421.082177][T11888] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 421.082192][T11888] RSP: 002b:00000000f548655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 421.082210][T11888] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c01864c6 [ 421.082222][T11888] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 421.082232][T11888] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 421.082242][T11888] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 421.082253][T11888] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 421.082277][T11888] [ 421.454071][T11895] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1591'. [ 421.463327][T11895] netlink: 'syz.0.1591': attribute type 11 has an invalid length. [ 421.473422][T11895] FAULT_INJECTION: forcing a failure. [ 421.473422][T11895] name failslab, interval 1, probability 0, space 0, times 0 [ 421.488767][T11895] CPU: 1 UID: 0 PID: 11895 Comm: syz.0.1591 Tainted: G L syzkaller #0 PREEMPT(full) [ 421.488785][T11895] Tainted: [L]=SOFTLOCKUP [ 421.488790][T11895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 421.488797][T11895] Call Trace: [ 421.488802][T11895] [ 421.488807][T11895] dump_stack_lvl+0x189/0x250 [ 421.488825][T11895] ? __pfx____ratelimit+0x10/0x10 [ 421.488842][T11895] ? __pfx_dump_stack_lvl+0x10/0x10 [ 421.488854][T11895] ? __pfx__printk+0x10/0x10 [ 421.488873][T11895] ? __pfx___might_resched+0x10/0x10 [ 421.488890][T11895] should_fail_ex+0x414/0x560 [ 421.488909][T11895] should_failslab+0xa8/0x100 [ 421.488923][T11895] kmem_cache_alloc_lru_noprof+0x8d/0x6e0 [ 421.488940][T11895] ? __d_alloc+0x37/0x6f0 [ 421.488957][T11895] __d_alloc+0x37/0x6f0 [ 421.488974][T11895] d_alloc+0x4b/0x190 [ 421.488986][T11895] ? lookup_one_qstr_excl+0xc8/0x360 [ 421.489001][T11895] lookup_one_qstr_excl+0xdc/0x360 [ 421.489014][T11895] ? lookup_noperm_common+0x245/0x430 [ 421.489030][T11895] start_dirop+0x5c/0x90 [ 421.489043][T11895] simple_start_creating+0xc4/0x100 [ 421.489058][T11895] ? __pfx_simple_start_creating+0x10/0x10 [ 421.489071][T11895] ? do_raw_spin_unlock+0x122/0x240 [ 421.489085][T11895] ? mntput+0x65/0xc0 [ 421.489099][T11895] debugfs_start_creating+0xdb/0x1a0 [ 421.489112][T11895] __debugfs_create_file+0x6f/0x400 [ 421.489125][T11895] debugfs_create_file_full+0x3f/0x60 [ 421.489138][T11895] ref_tracker_dir_debugfs+0x14e/0x2d0 [ 421.489149][T11895] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 421.489175][T11895] ? trace_kmalloc+0x1f/0xb0 [ 421.489183][T11895] ? __kvmalloc_node_noprof+0x5f5/0x920 [ 421.489197][T11895] ? __raw_spin_lock_init+0x45/0x100 [ 421.489212][T11895] alloc_netdev_mqs+0x272/0x11b0 [ 421.489228][T11895] ? __pfx_vxlan_setup+0x10/0x10 [ 421.489246][T11895] rtnl_create_link+0x31f/0xcf0 [ 421.489265][T11895] rtnl_newlink_create+0x25c/0xb00 [ 421.489289][T11895] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 421.489314][T11895] ? __pfx___mutex_lock+0x10/0x10 [ 421.489344][T11895] ? ns_capable+0x8a/0xf0 [ 421.489366][T11895] rtnl_newlink+0x16e7/0x1c90 [ 421.489402][T11895] ? __pfx_rtnl_newlink+0x10/0x10 [ 421.489420][T11895] ? __se_sys_splice+0x2e1/0x460 [ 421.489444][T11895] ? __do_fast_syscall_32+0x1f7/0x590 [ 421.489464][T11895] ? do_fast_syscall_32+0x34/0x80 [ 421.489483][T11895] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 421.489540][T11895] ? kasan_quarantine_put+0xdd/0x220 [ 421.489559][T11895] ? lockdep_hardirqs_on+0x98/0x140 [ 421.489586][T11895] ? kmem_cache_free+0x197/0x620 [ 421.489605][T11895] ? nlmon_xmit+0xb0/0x100 [ 421.489649][T11895] ? __lock_acquire+0x6b6/0x2cf0 [ 421.489672][T11895] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 421.489698][T11895] ? __dev_queue_xmit+0x289/0x3140 [ 421.489723][T11895] ? __dev_queue_xmit+0x289/0x3140 [ 421.489747][T11895] ? __dev_queue_xmit+0x289/0x3140 [ 421.489801][T11895] ? __pfx_rtnl_newlink+0x10/0x10 [ 421.489821][T11895] rtnetlink_rcv_msg+0x7cf/0xb70 [ 421.489847][T11895] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 421.489867][T11895] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 421.489885][T11895] ? ref_tracker_free+0x63a/0x7d0 [ 421.489905][T11895] ? __asan_memcpy+0x40/0x70 [ 421.489923][T11895] ? __pfx_ref_tracker_free+0x10/0x10 [ 421.489955][T11895] netlink_rcv_skb+0x208/0x470 [ 421.489983][T11895] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 421.490006][T11895] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 421.490044][T11895] ? netlink_deliver_tap+0x2e/0x1b0 [ 421.490078][T11895] netlink_unicast+0x82f/0x9e0 [ 421.490109][T11895] ? __pfx_netlink_unicast+0x10/0x10 [ 421.490134][T11895] ? netlink_sendmsg+0x642/0xb30 [ 421.490156][T11895] ? skb_put+0x11b/0x210 [ 421.490182][T11895] netlink_sendmsg+0x805/0xb30 [ 421.490217][T11895] ? __pfx_netlink_sendmsg+0x10/0x10 [ 421.490247][T11895] ? aa_sock_msg_perm+0xf1/0x1b0 [ 421.490275][T11895] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 421.490294][T11895] ? __pfx_netlink_sendmsg+0x10/0x10 [ 421.490321][T11895] __sock_sendmsg+0x21c/0x270 [ 421.490354][T11895] sock_sendmsg+0x158/0x230 [ 421.490384][T11895] ? __pfx_sock_sendmsg+0x10/0x10 [ 421.490423][T11895] ? __asan_memset+0x22/0x50 [ 421.490449][T11895] ? iov_iter_bvec+0xb8/0x180 [ 421.490472][T11895] splice_to_socket+0x8f5/0xf00 [ 421.490518][T11895] ? __pfx_splice_to_socket+0x10/0x10 [ 421.490567][T11895] ? get_pid_task+0x20/0x1f0 [ 421.490607][T11895] ? bpf_lsm_file_permission+0x9/0x20 [ 421.490631][T11895] ? security_file_permission+0x75/0x290 [ 421.490652][T11895] ? rw_verify_area+0x255/0x4d0 [ 421.490683][T11895] ? __pfx_splice_to_socket+0x10/0x10 [ 421.490706][T11895] do_splice+0xc79/0x1660 [ 421.490755][T11895] ? __pfx_do_splice+0x10/0x10 [ 421.490790][T11895] __se_sys_splice+0x2e1/0x460 [ 421.490823][T11895] ? __pfx___se_sys_splice+0x10/0x10 [ 421.490855][T11895] ? __ia32_sys_splice+0x21/0xf0 [ 421.490884][T11895] __do_fast_syscall_32+0x1f7/0x590 [ 421.490907][T11895] ? rcu_is_watching+0x15/0xb0 [ 421.490928][T11895] ? do_fast_syscall_32+0x34/0x80 [ 421.490955][T11895] do_fast_syscall_32+0x34/0x80 [ 421.490978][T11895] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 421.491003][T11895] RIP: 0023:0xf7fe1539 [ 421.491021][T11895] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 421.491040][T11895] RSP: 002b:00000000f54b555c EFLAGS: 00000206 ORIG_RAX: 0000000000000139 [ 421.491061][T11895] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 421.491075][T11895] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 000000000004ffe6 [ 421.491087][T11895] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 421.491099][T11895] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 421.491112][T11895] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 421.491144][T11895] [ 421.499414][ T5920] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 422.130400][ T8660] usb 7-1: USB disconnect, device number 25 [ 422.411105][T11905] syzkaller1: entered promiscuous mode [ 422.416599][T11905] syzkaller1: entered allmulticast mode [ 422.454671][ T5920] usb 3-1: device descriptor read/64, error -71 [ 422.718150][ T5920] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 422.747539][T11902] netlink: 'syz.5.1592': attribute type 20 has an invalid length. [ 422.755549][T11902] IPv6: NLM_F_CREATE should be specified when creating new route [ 423.146262][ T5920] usb 3-1: device descriptor read/64, error -71 [ 423.279828][ T5920] usb usb3-port1: attempt power cycle [ 423.492960][ T5937] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 423.629615][ T5920] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 423.649380][ T5937] usb 5-1: Using ep0 maxpacket: 32 [ 423.655422][ T5920] usb 3-1: device descriptor read/8, error -71 [ 423.662659][ T5937] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 423.670826][ T5937] usb 5-1: config 0 has no interface number 0 [ 423.678985][ T5937] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 423.688164][ T5937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.696227][ T5937] usb 5-1: Product: syz [ 423.700464][ T5937] usb 5-1: Manufacturer: syz [ 423.705067][ T5937] usb 5-1: SerialNumber: syz [ 423.714771][ T5937] usb 5-1: config 0 descriptor?? [ 423.724653][ T5937] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 423.928876][ T5937] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 423.947384][ T5937] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 424.341852][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 424.359096][ T8324] usb 5-1: USB disconnect, device number 62 [ 424.360172][T11938] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1606'. [ 424.471517][ T8327] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 424.472131][ T8324] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 424.505704][ T8324] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 424.527337][ T8324] quatech2 5-1:0.51: device disconnected [ 424.536645][T11938] netlink: 'syz.5.1606': attribute type 11 has an invalid length. [ 424.663818][ T8327] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 424.687561][ T8327] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 424.698219][T11938] FAULT_INJECTION: forcing a failure. [ 424.698219][T11938] name failslab, interval 1, probability 0, space 0, times 0 [ 424.713263][ T8327] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 424.733197][ T8327] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 424.756825][T11938] CPU: 1 UID: 0 PID: 11938 Comm: syz.5.1606 Tainted: G L syzkaller #0 PREEMPT(full) [ 424.756849][T11938] Tainted: [L]=SOFTLOCKUP [ 424.756854][T11938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 424.756861][T11938] Call Trace: [ 424.756866][T11938] [ 424.756872][T11938] dump_stack_lvl+0x189/0x250 [ 424.756890][T11938] ? __pfx____ratelimit+0x10/0x10 [ 424.756907][T11938] ? __pfx_dump_stack_lvl+0x10/0x10 [ 424.756919][T11938] ? __pfx__printk+0x10/0x10 [ 424.756937][T11938] ? __pfx___might_resched+0x10/0x10 [ 424.756948][T11938] ? fs_reclaim_acquire+0x7d/0x100 [ 424.756963][T11938] should_fail_ex+0x414/0x560 [ 424.756982][T11938] should_failslab+0xa8/0x100 [ 424.756996][T11938] kmem_cache_alloc_noprof+0x88/0x710 [ 424.757012][T11938] ? security_inode_alloc+0x39/0x330 [ 424.757028][T11938] security_inode_alloc+0x39/0x330 [ 424.757043][T11938] inode_init_always_gfp+0x9ed/0xdc0 [ 424.757059][T11938] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 424.757071][T11938] alloc_inode+0x82/0x1b0 [ 424.757084][T11938] new_inode+0x22/0x170 [ 424.757099][T11938] __debugfs_create_file+0xb8/0x400 [ 424.757112][T11938] debugfs_create_file_full+0x3f/0x60 [ 424.757125][T11938] ref_tracker_dir_debugfs+0x14e/0x2d0 [ 424.757136][T11938] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 424.757162][T11938] ? trace_kmalloc+0x1f/0xb0 [ 424.757171][T11938] ? __kvmalloc_node_noprof+0x5f5/0x920 [ 424.757185][T11938] ? __raw_spin_lock_init+0x45/0x100 [ 424.757201][T11938] alloc_netdev_mqs+0x272/0x11b0 [ 424.757216][T11938] ? __pfx_vxlan_setup+0x10/0x10 [ 424.757234][T11938] rtnl_create_link+0x31f/0xcf0 [ 424.757253][T11938] rtnl_newlink_create+0x25c/0xb00 [ 424.757273][T11938] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 424.757287][T11938] ? __pfx___mutex_lock+0x10/0x10 [ 424.757304][T11938] ? ns_capable+0x8a/0xf0 [ 424.757317][T11938] rtnl_newlink+0x16e7/0x1c90 [ 424.757337][T11938] ? __pfx_rtnl_newlink+0x10/0x10 [ 424.757354][T11938] ? stack_trace_save+0x9c/0xe0 [ 424.757387][T11938] ? __lock_acquire+0x6b6/0x2cf0 [ 424.757420][T11938] ? __lock_acquire+0x6b6/0x2cf0 [ 424.757437][T11938] ? __lock_acquire+0x6b6/0x2cf0 [ 424.757466][T11938] ? __lock_acquire+0x6b6/0x2cf0 [ 424.757481][T11938] ? is_bpf_text_address+0x292/0x2b0 [ 424.757497][T11938] ? is_bpf_text_address+0x26/0x2b0 [ 424.757528][T11938] ? __pfx_rtnl_newlink+0x10/0x10 [ 424.757539][T11938] rtnetlink_rcv_msg+0x7cf/0xb70 [ 424.757549][T11938] ? stack_depot_save_flags+0x40/0x850 [ 424.757567][T11938] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 424.757577][T11938] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 424.757588][T11938] ? __lock_acquire+0x6b6/0x2cf0 [ 424.757606][T11938] netlink_rcv_skb+0x208/0x470 [ 424.757621][T11938] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 424.757633][T11938] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 424.757652][T11938] ? netlink_deliver_tap+0x2e/0x1b0 [ 424.757671][T11938] netlink_unicast+0x82f/0x9e0 [ 424.757688][T11938] ? __pfx_netlink_unicast+0x10/0x10 [ 424.757700][T11938] ? netlink_sendmsg+0x642/0xb30 [ 424.757712][T11938] ? skb_put+0x11b/0x210 [ 424.757725][T11938] netlink_sendmsg+0x805/0xb30 [ 424.757744][T11938] ? __pfx_netlink_sendmsg+0x10/0x10 [ 424.757759][T11938] ? aa_sock_msg_perm+0xf1/0x1b0 [ 424.757774][T11938] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 424.757783][T11938] ? __pfx_netlink_sendmsg+0x10/0x10 [ 424.757797][T11938] __sock_sendmsg+0x21c/0x270 [ 424.757815][T11938] sock_sendmsg+0x158/0x230 [ 424.757833][T11938] ? __pfx_sock_sendmsg+0x10/0x10 [ 424.757855][T11938] ? __asan_memset+0x22/0x50 [ 424.757870][T11938] ? iov_iter_bvec+0xb8/0x180 [ 424.757884][T11938] splice_to_socket+0x8f5/0xf00 [ 424.757910][T11938] ? __pfx_splice_to_socket+0x10/0x10 [ 424.757936][T11938] ? get_pid_task+0x20/0x1f0 [ 424.757958][T11938] ? bpf_lsm_file_permission+0x9/0x20 [ 424.757969][T11938] ? security_file_permission+0x75/0x290 [ 424.757980][T11938] ? rw_verify_area+0x255/0x4d0 [ 424.757997][T11938] ? __pfx_splice_to_socket+0x10/0x10 [ 424.758009][T11938] do_splice+0xc79/0x1660 [ 424.758036][T11938] ? __pfx_do_splice+0x10/0x10 [ 424.758054][T11938] __se_sys_splice+0x2e1/0x460 [ 424.758071][T11938] ? __pfx___se_sys_splice+0x10/0x10 [ 424.758087][T11938] ? __ia32_sys_splice+0x21/0xf0 [ 424.758102][T11938] __do_fast_syscall_32+0x1f7/0x590 [ 424.758114][T11938] ? rcu_is_watching+0x15/0xb0 [ 424.758126][T11938] ? do_fast_syscall_32+0x34/0x80 [ 424.758141][T11938] do_fast_syscall_32+0x34/0x80 [ 424.758152][T11938] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 424.758166][T11938] RIP: 0023:0xf7f95539 [ 424.758176][T11938] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 424.758185][T11938] RSP: 002b:00000000f546555c EFLAGS: 00000206 ORIG_RAX: 0000000000000139 [ 424.758197][T11938] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 424.758205][T11938] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 000000000004ffe6 [ 424.758212][T11938] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 424.758218][T11938] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 424.758225][T11938] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 424.758241][T11938] [ 424.759509][T11938] debugfs: out of free dentries, can not create file 'netdev@ffff888056958618' [ 424.772644][ T8327] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 425.313906][T11938] vxlan0: entered promiscuous mode [ 425.321730][ T5979] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 425.409396][ T5979] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 425.428591][ T5979] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 425.459504][ T5979] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 425.471314][T11940] netlink: 'syz.5.1607': attribute type 1 has an invalid length. [ 425.519378][ T8327] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 425.527603][ T8327] usb 7-1: Product: syz [ 425.569373][ T8327] usb 7-1: Manufacturer: syz [ 425.582687][T11940] 8021q: adding VLAN 0 to HW filter on device bond5 [ 425.612575][ T8327] cdc_wdm 7-1:1.0: skipping garbage [ 425.617860][ T8327] cdc_wdm 7-1:1.0: skipping garbage [ 425.647283][T11944] macvlan0: entered promiscuous mode [ 425.653295][T11944] macvlan0: entered allmulticast mode [ 425.660205][T11944] bond5: entered promiscuous mode [ 425.666837][T11944] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 425.681094][ T8327] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 425.687041][ T8327] cdc_wdm 7-1:1.0: Unknown control protocol [ 425.701698][T11944] bond5: left promiscuous mode [ 425.746452][T11949] FAULT_INJECTION: forcing a failure. [ 425.746452][T11949] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 425.760074][T11949] CPU: 1 UID: 0 PID: 11949 Comm: syz.4.1610 Tainted: G L syzkaller #0 PREEMPT(full) [ 425.760103][T11949] Tainted: [L]=SOFTLOCKUP [ 425.760110][T11949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 425.760120][T11949] Call Trace: [ 425.760127][T11949] [ 425.760134][T11949] dump_stack_lvl+0x189/0x250 [ 425.760159][T11949] ? __pfx____ratelimit+0x10/0x10 [ 425.760185][T11949] ? __pfx_dump_stack_lvl+0x10/0x10 [ 425.760205][T11949] ? __pfx__printk+0x10/0x10 [ 425.760228][T11949] ? __might_fault+0xb0/0x130 [ 425.760261][T11949] should_fail_ex+0x414/0x560 [ 425.760289][T11949] _copy_from_user+0x2d/0xb0 [ 425.760309][T11949] memdup_user+0x5e/0xd0 [ 425.760328][T11949] drm_mode_create_lease_ioctl+0x31c/0x1970 [ 425.760372][T11949] ? __lock_acquire+0x6b6/0x2cf0 [ 425.760389][T11949] ? __pfx_drm_mode_create_lease_ioctl+0x10/0x10 [ 425.760421][T11949] ? do_raw_spin_unlock+0x122/0x240 [ 425.760445][T11949] ? _raw_spin_unlock+0x28/0x50 [ 425.760468][T11949] ? drm_is_current_master+0x19f/0x200 [ 425.760491][T11949] drm_ioctl_kernel+0x2cf/0x390 [ 425.760515][T11949] ? __pfx_drm_mode_create_lease_ioctl+0x10/0x10 [ 425.760532][T11949] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 425.760563][T11949] drm_ioctl+0x67f/0xb10 [ 425.760589][T11949] ? __pfx_drm_mode_create_lease_ioctl+0x10/0x10 [ 425.760610][T11949] ? __pfx_drm_ioctl+0x10/0x10 [ 425.760643][T11949] ? __fget_files+0x3a0/0x420 [ 425.760663][T11949] ? __fget_files+0x2a/0x420 [ 425.760682][T11949] ? drm_compat_ioctl+0xa7/0x330 [ 425.760701][T11949] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 425.760722][T11949] __ia32_compat_sys_ioctl+0x543/0x840 [ 425.760741][T11949] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 425.760758][T11949] ? __fget_files+0x3a0/0x420 [ 425.760784][T11949] ? fput+0xa0/0xd0 [ 425.760807][T11949] ? ksys_write+0x22a/0x250 [ 425.760821][T11949] ? exc_page_fault+0x82/0x100 [ 425.760838][T11949] ? __pfx_ksys_write+0x10/0x10 [ 425.760857][T11949] ? __do_fast_syscall_32+0xbe/0x590 [ 425.760878][T11949] __do_fast_syscall_32+0x1f7/0x590 [ 425.760897][T11949] ? rcu_is_watching+0x15/0xb0 [ 425.760916][T11949] ? do_fast_syscall_32+0x34/0x80 [ 425.760938][T11949] do_fast_syscall_32+0x34/0x80 [ 425.760955][T11949] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 425.760975][T11949] RIP: 0023:0xf7fb6539 [ 425.760990][T11949] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 425.761005][T11949] RSP: 002b:00000000f54a655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 425.761022][T11949] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c01864c6 [ 425.761034][T11949] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 425.761044][T11949] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 425.761054][T11949] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 425.761064][T11949] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 425.761087][T11949] [ 426.086278][T11928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.095352][T11928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.164519][ C0] cdc_wdm 7-1:1.0: unknown notification 6 received: index 0 len 0 [ 426.173450][ C0] cdc_wdm 7-1:1.0: unknown notification 9 received: index 257 len 513 [ 426.182565][ C0] cdc_wdm 7-1:1.0: unknown notification 179 received: index 23821 len 14314 [ 426.191981][ C0] cdc_wdm 7-1:1.0: unknown notification 128 received: index 0 len 1600 [ 426.416577][ T5920] usb 7-1: USB disconnect, device number 26 [ 426.443990][ T30] kauditd_printk_skb: 98 callbacks suppressed [ 426.444008][ T30] audit: type=1326 audit(1765803832.648:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11952 comm="syz.4.1612" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6539 code=0x7ffc0000 [ 426.489410][ T30] audit: type=1326 audit(1765803832.678:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11952 comm="syz.4.1612" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7fb6539 code=0x7ffc0000 [ 426.535297][ T30] audit: type=1326 audit(1765803832.678:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11952 comm="syz.4.1612" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6539 code=0x7ffc0000 [ 426.584328][ T30] audit: type=1326 audit(1765803832.678:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11952 comm="syz.4.1612" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7fb6539 code=0x7ffc0000 [ 426.643919][ T30] audit: type=1326 audit(1765803832.678:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11952 comm="syz.4.1612" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6539 code=0x7ffc0000 [ 426.719350][ T30] audit: type=1326 audit(1765803832.678:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11952 comm="syz.4.1612" exe="/root/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf7fb6539 code=0x7ffc0000 [ 426.821985][ T30] audit: type=1326 audit(1765803832.678:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11952 comm="syz.4.1612" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fb6558 code=0x7ffc0000 [ 426.920639][ T30] audit: type=1326 audit(1765803832.718:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11952 comm="syz.4.1612" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fb6558 code=0x7ffc0000 [ 427.018838][ T30] audit: type=1326 audit(1765803832.718:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11952 comm="syz.4.1612" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6539 code=0x7ffc0000 [ 427.119480][ T30] audit: type=1326 audit(1765803832.718:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11952 comm="syz.4.1612" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb6539 code=0x7ffc0000 [ 427.230009][T11971] loop8: detected capacity change from 0 to 8 [ 427.253260][ T5896] Dev loop8: unable to read RDB block 8 [ 427.258890][ T5896] loop8: unable to read partition table [ 427.279897][ T5896] loop8: partition table beyond EOD, truncated [ 427.305206][T11971] Dev loop8: unable to read RDB block 8 [ 427.313640][T11971] loop8: unable to read partition table [ 427.326365][T11971] loop8: partition table beyond EOD, truncated [ 427.350511][T11975] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1619'. [ 427.379414][T11971] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 427.380060][T11975] netlink: 'syz.5.1619': attribute type 11 has an invalid length. [ 427.529507][ T8327] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 427.679444][ T8327] usb 7-1: Using ep0 maxpacket: 16 [ 427.697283][ T8327] usb 7-1: config 0 interface 0 altsetting 66 endpoint 0x81 has an invalid bInterval 112, changing to 10 [ 427.737794][ T8327] usb 7-1: config 0 interface 0 has no altsetting 0 [ 427.759740][ T8327] usb 7-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 427.783165][ T8327] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.816011][ T8327] usb 7-1: config 0 descriptor?? [ 428.113817][T11973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.155344][T11973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.732963][ T8327] usb 7-1: string descriptor 0 read error: -71 [ 428.774098][ T8327] usbhid 7-1:0.0: can't add hid device: -71 [ 428.782619][ T8327] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 428.811106][ T8327] usb 7-1: USB disconnect, device number 27 [ 428.918422][T11985] tipc: Enabled bearer , priority 0 [ 428.940744][T11985] syzkaller0: entered promiscuous mode [ 428.946482][T11985] syzkaller0: entered allmulticast mode [ 428.994322][T11985] tipc: Resetting bearer [ 429.023979][T11984] tipc: Resetting bearer [ 429.060089][T11984] tipc: Disabling bearer [ 429.354496][T11988] netlink: 'syz.5.1624': attribute type 1 has an invalid length. [ 429.465957][T11994] FAULT_INJECTION: forcing a failure. [ 429.465957][T11994] name failslab, interval 1, probability 0, space 0, times 0 [ 429.485785][T11988] 8021q: adding VLAN 0 to HW filter on device bond6 [ 429.513066][T11994] CPU: 1 UID: 0 PID: 11994 Comm: syz.4.1626 Tainted: G L syzkaller #0 PREEMPT(full) [ 429.513095][T11994] Tainted: [L]=SOFTLOCKUP [ 429.513102][T11994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 429.513115][T11994] Call Trace: [ 429.513124][T11994] [ 429.513134][T11994] dump_stack_lvl+0x189/0x250 [ 429.513163][T11994] ? __pfx____ratelimit+0x10/0x10 [ 429.513195][T11994] ? __pfx_dump_stack_lvl+0x10/0x10 [ 429.513219][T11994] ? __pfx__printk+0x10/0x10 [ 429.513254][T11994] ? __pfx___might_resched+0x10/0x10 [ 429.513282][T11994] should_fail_ex+0x414/0x560 [ 429.513317][T11994] should_failslab+0xa8/0x100 [ 429.513343][T11994] __kmalloc_noprof+0xdf/0x800 [ 429.513364][T11994] ? drm_mode_create_lease_ioctl+0x4d6/0x1970 [ 429.513384][T11994] ? _copy_from_user+0x94/0xb0 [ 429.513418][T11994] drm_mode_create_lease_ioctl+0x4d6/0x1970 [ 429.513449][T11994] ? __lock_acquire+0x6b6/0x2cf0 [ 429.513469][T11994] ? __pfx_drm_mode_create_lease_ioctl+0x10/0x10 [ 429.513509][T11994] ? do_raw_spin_unlock+0x122/0x240 [ 429.513540][T11994] ? _raw_spin_unlock+0x28/0x50 [ 429.513568][T11994] ? drm_is_current_master+0x19f/0x200 [ 429.513596][T11994] drm_ioctl_kernel+0x2cf/0x390 [ 429.513627][T11994] ? __pfx_drm_mode_create_lease_ioctl+0x10/0x10 [ 429.513647][T11994] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 429.513687][T11994] drm_ioctl+0x67f/0xb10 [ 429.513720][T11994] ? __pfx_drm_mode_create_lease_ioctl+0x10/0x10 [ 429.513746][T11994] ? __pfx_drm_ioctl+0x10/0x10 [ 429.513787][T11994] ? __fget_files+0x3a0/0x420 [ 429.513811][T11994] ? __fget_files+0x2a/0x420 [ 429.513835][T11994] ? drm_compat_ioctl+0xa7/0x330 [ 429.513856][T11994] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 429.513881][T11994] __ia32_compat_sys_ioctl+0x543/0x840 [ 429.513902][T11994] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 429.513920][T11994] ? __fget_files+0x3a0/0x420 [ 429.513949][T11994] ? fput+0xa0/0xd0 [ 429.513976][T11994] ? ksys_write+0x22a/0x250 [ 429.513994][T11994] ? exc_page_fault+0x82/0x100 [ 429.514015][T11994] ? __pfx_ksys_write+0x10/0x10 [ 429.514038][T11994] ? __do_fast_syscall_32+0xbe/0x590 [ 429.514065][T11994] __do_fast_syscall_32+0x1f7/0x590 [ 429.514089][T11994] ? rcu_is_watching+0x15/0xb0 [ 429.514112][T11994] ? do_fast_syscall_32+0x34/0x80 [ 429.514139][T11994] do_fast_syscall_32+0x34/0x80 [ 429.514162][T11994] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 429.514186][T11994] RIP: 0023:0xf7fb6539 [ 429.514203][T11994] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 429.514221][T11994] RSP: 002b:00000000f54a655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 429.514244][T11994] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c01864c6 [ 429.514259][T11994] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 429.514272][T11994] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 429.514285][T11994] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 429.514297][T11994] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 429.514328][T11994] [ 429.549512][T11990] macvlan0: entered promiscuous mode [ 429.856607][T11990] macvlan0: entered allmulticast mode [ 429.863717][T11990] bond6: entered promiscuous mode [ 429.872135][T11990] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 429.925624][T11990] bond6: left promiscuous mode [ 430.183186][T12012] libceph: resolve '0' (ret=-3): failed [ 431.869263][T12032] tipc: Enabled bearer , priority 0 [ 431.876987][T12032] syzkaller0: entered promiscuous mode [ 431.897781][T12032] syzkaller0: entered allmulticast mode [ 432.064651][T12036] tipc: Resetting bearer [ 432.184861][T12031] tipc: Resetting bearer [ 432.228616][T12031] tipc: Disabling bearer [ 432.654761][T12045] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1639'. [ 432.986833][T12054] netlink: 'syz.4.1642': attribute type 1 has an invalid length. [ 433.023167][T12054] 8021q: adding VLAN 0 to HW filter on device bond3 [ 433.038122][T12056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1643'. [ 433.074851][T12054] macvlan2: entered promiscuous mode [ 433.080473][T12054] macvlan2: entered allmulticast mode [ 433.087550][T12054] bond3: entered promiscuous mode [ 433.095807][T12058] netlink: 'syz.0.1643': attribute type 10 has an invalid length. [ 433.101919][T12054] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 433.114767][T12054] bond3: left promiscuous mode [ 433.184780][T12058] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 433.196967][T12058] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 433.384677][T12065] FAULT_INJECTION: forcing a failure. [ 433.384677][T12065] name failslab, interval 1, probability 0, space 0, times 0 [ 433.399085][T12065] CPU: 1 UID: 0 PID: 12065 Comm: syz.6.1646 Tainted: G L syzkaller #0 PREEMPT(full) [ 433.399119][T12065] Tainted: [L]=SOFTLOCKUP [ 433.399129][T12065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 433.399142][T12065] Call Trace: [ 433.399152][T12065] [ 433.399161][T12065] dump_stack_lvl+0x189/0x250 [ 433.399200][T12065] ? __pfx____ratelimit+0x10/0x10 [ 433.399232][T12065] ? __pfx_dump_stack_lvl+0x10/0x10 [ 433.399258][T12065] ? __pfx__printk+0x10/0x10 [ 433.399296][T12065] ? __pfx___might_resched+0x10/0x10 [ 433.399315][T12065] ? fs_reclaim_acquire+0x7d/0x100 [ 433.399339][T12065] should_fail_ex+0x414/0x560 [ 433.399370][T12065] should_failslab+0xa8/0x100 [ 433.399394][T12065] kmem_cache_alloc_noprof+0x88/0x710 [ 433.399423][T12065] ? radix_tree_node_alloc+0x7e/0x3a0 [ 433.399455][T12065] radix_tree_node_alloc+0x7e/0x3a0 [ 433.399490][T12065] idr_get_free+0x2b3/0xa70 [ 433.399527][T12065] idr_alloc_u32+0x159/0x2d0 [ 433.399551][T12065] ? __pfx_idr_alloc_u32+0x10/0x10 [ 433.399575][T12065] ? __pfx___drm_mode_object_find+0x10/0x10 [ 433.399601][T12065] idr_alloc+0x6e/0xd0 [ 433.399621][T12065] drm_mode_create_lease_ioctl+0xe0b/0x1970 [ 433.399649][T12065] ? __lock_acquire+0x6b6/0x2cf0 [ 433.399669][T12065] ? __pfx_drm_mode_create_lease_ioctl+0x10/0x10 [ 433.399708][T12065] ? do_raw_spin_unlock+0x122/0x240 [ 433.399736][T12065] ? _raw_spin_unlock+0x28/0x50 [ 433.399762][T12065] ? drm_is_current_master+0x19f/0x200 [ 433.399788][T12065] drm_ioctl_kernel+0x2cf/0x390 [ 433.399819][T12065] ? __pfx_drm_mode_create_lease_ioctl+0x10/0x10 [ 433.399839][T12065] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 433.399874][T12065] drm_ioctl+0x67f/0xb10 [ 433.399906][T12065] ? __pfx_drm_mode_create_lease_ioctl+0x10/0x10 [ 433.399931][T12065] ? __pfx_drm_ioctl+0x10/0x10 [ 433.399971][T12065] ? __fget_files+0x3a0/0x420 [ 433.399995][T12065] ? __fget_files+0x2a/0x420 [ 433.400018][T12065] ? drm_compat_ioctl+0xa7/0x330 [ 433.400041][T12065] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 433.400067][T12065] __ia32_compat_sys_ioctl+0x543/0x840 [ 433.400091][T12065] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 433.400111][T12065] ? __fget_files+0x3a0/0x420 [ 433.400142][T12065] ? fput+0xa0/0xd0 [ 433.400168][T12065] ? ksys_write+0x22a/0x250 [ 433.400192][T12065] ? exc_page_fault+0x82/0x100 [ 433.400213][T12065] ? __pfx_ksys_write+0x10/0x10 [ 433.400234][T12065] ? __do_fast_syscall_32+0xbe/0x590 [ 433.400259][T12065] __do_fast_syscall_32+0x1f7/0x590 [ 433.400281][T12065] ? rcu_is_watching+0x15/0xb0 [ 433.400304][T12065] ? do_fast_syscall_32+0x34/0x80 [ 433.400332][T12065] do_fast_syscall_32+0x34/0x80 [ 433.400354][T12065] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 433.400378][T12065] RIP: 0023:0xf705d539 [ 433.400395][T12065] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 433.400413][T12065] RSP: 002b:00000000f544d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 433.400435][T12065] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c01864c6 [ 433.400449][T12065] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 433.400462][T12065] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 433.400474][T12065] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 433.400485][T12065] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 433.400513][T12065] [ 433.922548][ T30] audit: type=1326 audit(1765803840.128:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12068 comm="syz.4.1647" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb6539 code=0x0 [ 434.159424][ T8324] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 434.167689][T12077] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1652'. [ 434.397262][T12082] loop6: detected capacity change from 0 to 2640 [ 434.405624][T12082] buffer_io_error: 29 callbacks suppressed [ 434.405653][T12082] Buffer I/O error on dev loop6, logical block 0, async page read [ 434.419531][T12082] Buffer I/O error on dev loop6, logical block 0, async page read [ 434.427523][T12082] Buffer I/O error on dev loop6, logical block 0, async page read [ 434.435503][T12082] Buffer I/O error on dev loop6, logical block 0, async page read [ 434.443477][T12082] Buffer I/O error on dev loop6, logical block 0, async page read [ 434.480223][ T8324] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 434.491567][ T8324] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 434.510721][ T8324] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 434.537472][T12085] geneve2: entered promiscuous mode [ 434.550773][ T8324] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 434.584668][ T8324] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 434.594157][T12082] Buffer I/O error on dev loop6, logical block 0, async page read [ 434.607752][T12083] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.617340][T12082] Buffer I/O error on dev loop6, logical block 0, async page read [ 434.625587][ T8324] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 434.635478][T12083] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.644454][T12082] Buffer I/O error on dev loop6, logical block 0, async page read [ 434.658353][ T8324] usb 7-1: Product: syz [ 434.662676][ T8324] usb 7-1: Manufacturer: syz [ 434.673983][ T8324] cdc_wdm 7-1:1.0: skipping garbage [ 434.683981][ T8324] cdc_wdm 7-1:1.0: skipping garbage [ 434.699701][T12082] ldm_validate_partition_table(): Disk read failed. [ 434.712632][T12083] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.712845][ T8324] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 434.746818][T12083] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.767830][T12078] Buffer I/O error on dev loop6, logical block 1, async page read [ 434.782323][ T8324] cdc_wdm 7-1:1.0: Unknown control protocol [ 434.896133][T12086] Buffer I/O error on dev loop6, logical block 0, async page read [ 434.936113][T12067] m1Ie5n: entered promiscuous mode [ 434.945463][T12067] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1648'. [ 434.995029][T12082] Dev loop6: unable to read RDB block 0 [ 435.002997][ C1] cdc_wdm 7-1:1.0: unknown notification 6 received: index 0 len 0 [ 435.013320][T12082] loop6: unable to read partition table [ 435.026386][T12096] sctp: [Deprecated]: syz.4.1654 (pid 12096) Use of int in maxseg socket option. [ 435.026386][T12096] Use struct sctp_assoc_value instead [ 435.041776][T12082] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 435.163425][T12098] netlink: 'syz.0.1656': attribute type 1 has an invalid length. [ 435.204453][T12098] 8021q: adding VLAN 0 to HW filter on device bond7 [ 435.226107][ T8327] usb 7-1: USB disconnect, device number 28 [ 435.256270][T12098] macvlan0: entered promiscuous mode [ 435.272855][ T8328] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 435.283373][T12098] macvlan0: entered allmulticast mode [ 435.293655][T12098] bond7: entered promiscuous mode [ 435.299469][T12098] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 435.317744][T12098] bond7: left promiscuous mode [ 435.489146][ T8328] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 435.501870][ T8328] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.512464][ T8328] usb 6-1: Product: syz [ 435.517036][ T8328] usb 6-1: Manufacturer: syz [ 435.522373][ T8328] usb 6-1: SerialNumber: syz [ 435.559982][ T8328] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 435.600178][ T8327] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 435.658669][T12104] FAULT_INJECTION: forcing a failure. [ 435.658669][T12104] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 435.723109][T12104] CPU: 0 UID: 0 PID: 12104 Comm: syz.0.1658 Tainted: G L syzkaller #0 PREEMPT(full) [ 435.723140][T12104] Tainted: [L]=SOFTLOCKUP [ 435.723145][T12104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 435.723151][T12104] Call Trace: [ 435.723157][T12104] [ 435.723166][T12104] dump_stack_lvl+0x189/0x250 [ 435.723195][T12104] ? __pfx____ratelimit+0x10/0x10 [ 435.723226][T12104] ? __pfx_dump_stack_lvl+0x10/0x10 [ 435.723250][T12104] ? __pfx__printk+0x10/0x10 [ 435.723287][T12104] should_fail_ex+0x414/0x560 [ 435.723307][T12104] _copy_to_user+0x31/0xb0 [ 435.723320][T12104] drm_ioctl+0x6a4/0xb10 [ 435.723338][T12104] ? __pfx_drm_mode_create_lease_ioctl+0x10/0x10 [ 435.723362][T12104] ? __pfx_drm_ioctl+0x10/0x10 [ 435.723403][T12104] ? __fget_files+0x3a0/0x420 [ 435.723427][T12104] ? __fget_files+0x2a/0x420 [ 435.723450][T12104] ? drm_compat_ioctl+0xa7/0x330 [ 435.723464][T12104] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 435.723478][T12104] __ia32_compat_sys_ioctl+0x543/0x840 [ 435.723491][T12104] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 435.723501][T12104] ? __fget_files+0x3a0/0x420 [ 435.723523][T12104] ? fput+0xa0/0xd0 [ 435.723549][T12104] ? ksys_write+0x22a/0x250 [ 435.723567][T12104] ? exc_page_fault+0x82/0x100 [ 435.723588][T12104] ? __pfx_ksys_write+0x10/0x10 [ 435.723611][T12104] ? __do_fast_syscall_32+0xbe/0x590 [ 435.723629][T12104] __do_fast_syscall_32+0x1f7/0x590 [ 435.723642][T12104] ? rcu_is_watching+0x15/0xb0 [ 435.723654][T12104] ? do_fast_syscall_32+0x34/0x80 [ 435.723668][T12104] do_fast_syscall_32+0x34/0x80 [ 435.723679][T12104] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 435.723711][T12104] RIP: 0023:0xf7fe1539 [ 435.723728][T12104] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 435.723746][T12104] RSP: 002b:00000000f54d655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 435.723768][T12104] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c01864c6 [ 435.723783][T12104] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 435.723793][T12104] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 435.723799][T12104] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 435.723806][T12104] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 435.723821][T12104] [ 436.090835][ T5199] ldm_validate_partition_table(): Disk read failed. [ 436.097545][ T5199] Dev loop6: unable to read RDB block 0 [ 436.182183][ T5199] loop6: unable to read partition table [ 436.202518][T12109] netlink: 'syz.0.1660': attribute type 23 has an invalid length. [ 436.295972][T12112] bridge1: entered promiscuous mode [ 436.301400][T12112] bridge1: entered allmulticast mode [ 436.329534][ T8328] usb 7-1: new full-speed USB device number 29 using dummy_hcd [ 436.424219][ T5920] usb 6-1: USB disconnect, device number 50 [ 436.512078][ T8328] usb 7-1: config 1 interface 0 has no altsetting 0 [ 436.531393][ T8328] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 436.544780][ T8328] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.569706][ T8328] usb 7-1: Product: syz [ 436.578710][ T8328] usb 7-1: Manufacturer: syz [ 436.589358][ T8328] usb 7-1: SerialNumber: syz [ 436.605820][T12106] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 436.792322][T12119] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1664'. [ 437.057763][ T8328] usblp 7-1:1.0: usblp0: USB Bidirectional printer dev 29 if 0 alt 4 proto 3 vid 0x0525 pid 0xA4A8 [ 437.082948][ T8328] usb 7-1: USB disconnect, device number 29 [ 437.097487][T12125] netlink: 'syz.2.1667': attribute type 1 has an invalid length. [ 437.121640][ T8328] usblp0: removed [ 437.177150][T12125] 8021q: adding VLAN 0 to HW filter on device bond5 [ 437.212125][T12127] macvlan0: entered promiscuous mode [ 437.230479][T12127] macvlan0: entered allmulticast mode [ 437.237349][T12127] bond5: entered promiscuous mode [ 437.253648][T12127] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 437.265461][T12127] bond5: left promiscuous mode [ 437.279944][ T8327] usb 6-1: Service connection timeout for: 257 [ 437.286211][ T8327] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 437.301053][ T8327] ath9k_htc: Failed to initialize the device [ 437.331491][ T5920] usb 6-1: ath9k_htc: USB layer deinitialized [ 437.505457][T12135] FAULT_INJECTION: forcing a failure. [ 437.505457][T12135] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 437.520528][T12135] CPU: 1 UID: 0 PID: 12135 Comm: syz.2.1670 Tainted: G L syzkaller #0 PREEMPT(full) [ 437.520559][T12135] Tainted: [L]=SOFTLOCKUP [ 437.520566][T12135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 437.520579][T12135] Call Trace: [ 437.520587][T12135] [ 437.520596][T12135] dump_stack_lvl+0x189/0x250 [ 437.520626][T12135] ? __pfx____ratelimit+0x10/0x10 [ 437.520658][T12135] ? __pfx_dump_stack_lvl+0x10/0x10 [ 437.520682][T12135] ? __pfx__printk+0x10/0x10 [ 437.520723][T12135] should_fail_ex+0x414/0x560 [ 437.520757][T12135] _copy_to_user+0x31/0xb0 [ 437.520783][T12135] simple_read_from_buffer+0xe1/0x170 [ 437.520812][T12135] proc_fail_nth_read+0x1b3/0x220 [ 437.520846][T12135] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 437.520871][T12135] ? rw_verify_area+0x2a6/0x4d0 [ 437.520900][T12135] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 437.520922][T12135] vfs_read+0x200/0xa30 [ 437.520940][T12135] ? fdget_pos+0x247/0x320 [ 437.520969][T12135] ? __pfx___mutex_lock+0x10/0x10 [ 437.520992][T12135] ? __pfx_vfs_read+0x10/0x10 [ 437.521012][T12135] ? __fget_files+0x2a/0x420 [ 437.521041][T12135] ? __fget_files+0x3a0/0x420 [ 437.521064][T12135] ? __fget_files+0x2a/0x420 [ 437.521093][T12135] ksys_read+0x145/0x250 [ 437.521109][T12135] ? exc_page_fault+0x82/0x100 [ 437.521130][T12135] ? __pfx_ksys_read+0x10/0x10 [ 437.521153][T12135] ? __do_fast_syscall_32+0xbe/0x590 [ 437.521181][T12135] __do_fast_syscall_32+0x1f7/0x590 [ 437.521205][T12135] ? rcu_is_watching+0x15/0xb0 [ 437.521228][T12135] ? do_fast_syscall_32+0x34/0x80 [ 437.521257][T12135] do_fast_syscall_32+0x34/0x80 [ 437.521279][T12135] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 437.521304][T12135] RIP: 0023:0xf700d539 [ 437.521322][T12135] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 437.521340][T12135] RSP: 002b:00000000f53fd590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 437.521361][T12135] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f53fd620 [ 437.521376][T12135] RDX: 000000000000000f RSI: 00000000f73a6ff4 RDI: 0000000000000000 [ 437.521388][T12135] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 437.521399][T12135] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 437.521411][T12135] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 437.521442][T12135] [ 438.047699][T12147] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1675'. [ 438.059414][ T8328] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 438.219845][ T8328] usb 5-1: Using ep0 maxpacket: 8 [ 438.226785][ T8328] usb 5-1: config 1 descriptor has 1 excess byte, ignoring [ 438.234227][ T8328] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 438.245223][ T8328] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 438.254946][ T8328] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 438.265874][ T8328] usb 5-1: config 1 interface 1 has no altsetting 0 [ 438.274251][ T8328] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 438.283473][ T8328] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.291531][ T8328] usb 5-1: Product: syz [ 438.295937][ T8328] usb 5-1: Manufacturer: syz [ 438.300618][ T8328] usb 5-1: SerialNumber: syz [ 438.514093][ T8328] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 438.522084][ T8328] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 438.528170][ T8328] usb 5-1: 2:1 : invalid channels 0 [ 438.552155][ T8328] usb 5-1: USB disconnect, device number 63 [ 438.580729][ T5896] udevd[5896]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 439.219427][ T8327] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 439.851572][T12176] syzkaller0: entered promiscuous mode [ 439.857086][T12176] syzkaller0: entered allmulticast mode [ 439.996216][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.002874][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.014787][T12173] tipc: Enabled bearer , priority 0 [ 440.122345][T12180] tipc: Resetting bearer [ 440.146478][T12170] tipc: Resetting bearer [ 440.201949][T12170] tipc: Disabling bearer [ 440.741004][T12184] netlink: 'syz.6.1682': attribute type 1 has an invalid length. [ 440.791354][T12187] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1684'. [ 440.834330][T12184] 8021q: adding VLAN 0 to HW filter on device bond5 [ 440.847305][T12188] macvlan2: entered promiscuous mode [ 440.872588][T12188] macvlan2: entered allmulticast mode [ 440.911361][T12188] bond5: entered promiscuous mode [ 440.926350][T12188] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 440.939660][ T8327] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 440.963055][T12188] bond5: left promiscuous mode [ 441.098894][ T8327] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 441.130682][ T8327] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.138726][ T8327] usb 6-1: Product: syz [ 441.185612][ T8327] usb 6-1: Manufacturer: syz [ 441.192952][ T8327] usb 6-1: SerialNumber: syz [ 441.272693][ T30] audit: type=1326 audit(1765803847.478:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12195 comm="syz.2.1689" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x0 [ 441.301970][T12207] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1690'. [ 441.432153][T12205] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1691'. [ 441.453867][T12205] ip6tnl1: entered promiscuous mode [ 441.564619][T12212] trusted_key: encrypted_key: keyword 'newdefault' not recognized [ 442.275771][T12222] tipc: Enabled bearer , priority 0 [ 442.283407][T12223] program syz.6.1695 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 442.298527][T12222] syzkaller0: entered promiscuous mode [ 442.305139][T12222] syzkaller0: entered allmulticast mode [ 442.364189][T12222] tipc: Resetting bearer [ 442.380564][T12223] tap1: tun_chr_ioctl cmd 2147767506 [ 442.395572][T12221] tipc: Resetting bearer [ 442.430630][T12221] tipc: Disabling bearer [ 442.625703][T12231] IPVS: set_ctl: invalid protocol: 1463 0.0.0.0:30992 [ 443.319391][ T5920] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 443.484784][ T5920] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 443.498427][ T5920] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 443.521113][ T5920] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 443.530390][ T5920] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 443.539076][ T5920] usb 7-1: SerialNumber: syz [ 443.722267][ T8327] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 443.771753][ T8327] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 443.851998][ T8327] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 443.858725][ T5920] usb 7-1: 0:2 : does not exist [ 443.899448][ T8327] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 443.924015][ T5920] usb 7-1: USB disconnect, device number 30 [ 443.969939][ T8327] usb 6-1: USB disconnect, device number 51 [ 443.983712][ T5946] udevd[5946]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 444.277263][T12263] loop6: detected capacity change from 0 to 2640 [ 444.277807][T12263] buffer_io_error: 15196 callbacks suppressed [ 444.277823][T12263] Buffer I/O error on dev loop6, logical block 0, async page read [ 444.310503][T12263] Buffer I/O error on dev loop6, logical block 0, async page read [ 444.310540][T12263] Buffer I/O error on dev loop6, logical block 0, async page read [ 444.310571][T12263] Buffer I/O error on dev loop6, logical block 0, async page read [ 444.377787][T12265] syzkaller0: entered promiscuous mode [ 444.377802][T12265] syzkaller0: entered allmulticast mode [ 444.568584][T12263] Buffer I/O error on dev loop6, logical block 0, async page read [ 444.653448][T12263] Buffer I/O error on dev loop6, logical block 0, async page read [ 444.661851][T12263] Buffer I/O error on dev loop6, logical block 0, async page read [ 444.670858][T12263] Buffer I/O error on dev loop6, logical block 0, async page read [ 444.695881][T12263] ldm_validate_partition_table(): Disk read failed. [ 444.708926][T12263] Buffer I/O error on dev loop6, logical block 0, async page read [ 444.806569][T12259] Buffer I/O error on dev loop6, logical block 0, async page read [ 444.815725][T12263] Dev loop6: unable to read RDB block 0 [ 444.821735][T12263] loop6: unable to read partition table [ 444.855353][T12263] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 444.864486][T12272] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 444.872568][T12272] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 444.920873][T12272] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 444.928507][T12272] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 445.115230][T12276] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1710'. [ 445.302228][ T5199] ldm_validate_partition_table(): Disk read failed. [ 445.328768][ T5199] Dev loop6: unable to read RDB block 0 [ 445.469737][ T5199] loop6: unable to read partition table [ 445.986912][ T5199] ldm_validate_partition_table(): Disk read failed. [ 446.022590][ T5199] Dev loop6: unable to read RDB block 0 [ 446.038170][ T5199] loop6: unable to read partition table [ 446.728337][ T5199] ldm_validate_partition_table(): Disk read failed. [ 446.742973][ T5199] Dev loop6: unable to read RDB block 0 [ 446.844455][ T5199] loop6: unable to read partition table [ 446.983306][T12310] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1721'. [ 448.697150][T12340] tipc: Enabled bearer , priority 0 [ 448.707963][T12340] syzkaller0: entered promiscuous mode [ 448.715676][T12340] syzkaller0: entered allmulticast mode [ 448.870485][T12340] tipc: Resetting bearer [ 448.881323][T12339] tipc: Resetting bearer [ 448.910252][T12339] tipc: Disabling bearer [ 449.089392][ T8328] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 449.253948][ T8328] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 449.262448][ T8328] usb 3-1: config 0 has no interface number 0 [ 449.277864][ T8328] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 449.295816][ T8328] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 449.306419][ T8328] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 449.316992][ T8328] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.359845][ T8328] usb 3-1: config 0 descriptor?? [ 449.724796][T12353] loop6: detected capacity change from 0 to 2640 [ 449.732307][T12353] buffer_io_error: 8865 callbacks suppressed [ 449.732332][T12353] Buffer I/O error on dev loop6, logical block 0, async page read [ 449.750273][T12353] Buffer I/O error on dev loop6, logical block 0, async page read [ 449.758243][T12353] Buffer I/O error on dev loop6, logical block 0, async page read [ 449.766645][T12353] Buffer I/O error on dev loop6, logical block 0, async page read [ 449.827257][ T8328] usbhid 3-1:0.1: can't add hid device: -71 [ 449.838565][ T8328] usbhid 3-1:0.1: probe with driver usbhid failed with error -71 [ 449.856397][ T8328] usb 3-1: USB disconnect, device number 75 [ 449.865652][T12358] netlink: 'syz.5.1734': attribute type 1 has an invalid length. [ 449.874695][T12353] Buffer I/O error on dev loop6, logical block 0, async page read [ 449.904209][T12352] Buffer I/O error on dev loop6, logical block 145, async page read [ 449.926865][T12352] Buffer I/O error on dev loop6, logical block 145, async page read [ 449.935955][T12352] Buffer I/O error on dev loop6, logical block 145, async page read [ 449.949821][T12352] Buffer I/O error on dev loop6, logical block 145, async page read [ 449.967674][T12350] Buffer I/O error on dev loop6, logical block 1, async page read [ 449.973194][T12358] 8021q: adding VLAN 0 to HW filter on device bond7 [ 450.200405][T12353] ldm_validate_partition_table(): Disk read failed. [ 450.207121][T12353] Dev loop6: unable to read RDB block 0 [ 450.211033][T12366] netlink: 'syz.5.1736': attribute type 21 has an invalid length. [ 450.222846][T12353] loop6: unable to read partition table [ 450.259469][T12366] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1736'. [ 450.266537][T12353] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 451.289843][ T8328] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 451.431105][T12391] tap0: tun_chr_ioctl cmd 2147767506 [ 451.471170][ T8328] usb 5-1: Using ep0 maxpacket: 8 [ 451.484930][ T8328] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 451.504249][ T8328] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 451.559621][ T8328] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 451.605886][ T8328] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 451.643539][ T8328] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 451.667154][ T8328] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 451.686259][ T8328] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.778095][T12397] netlink: 'syz.5.1746': attribute type 1 has an invalid length. [ 451.823576][T12397] 8021q: adding VLAN 0 to HW filter on device bond8 [ 451.850621][T12397] macvlan0: entered promiscuous mode [ 451.856038][T12397] macvlan0: entered allmulticast mode [ 451.866446][T12397] bond8: entered promiscuous mode [ 451.875206][T12397] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 451.892675][T12397] bond8: left promiscuous mode [ 451.944603][ T8328] usb 5-1: GET_CAPABILITIES returned 0 [ 451.958577][ T8328] usbtmc 5-1:16.0: can't read capabilities [ 452.186181][T12403] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1748'. [ 452.589555][T12401] team0 (unregistering): Port device team_slave_0 removed [ 452.612872][T12412] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1750'. [ 452.623117][T12401] team0 (unregistering): Port device team_slave_1 removed [ 452.959570][ T8324] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 452.997902][T12420] netlink: 'syz.5.1752': attribute type 10 has an invalid length. [ 453.025141][T12420] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 453.119367][ T8324] usb 7-1: Using ep0 maxpacket: 16 [ 453.130568][ T8324] usb 7-1: descriptor type invalid, skip [ 453.138558][ T8324] usb 7-1: config 4 has an invalid interface number: 223 but max is 0 [ 453.147885][ T8324] usb 7-1: config 4 has no interface number 0 [ 453.154379][ T8324] usb 7-1: config 4 interface 223 altsetting 12 bulk endpoint 0x2 has invalid maxpacket 8 [ 453.164874][ T8324] usb 7-1: config 4 interface 223 has no altsetting 0 [ 453.175415][ T8324] usb 7-1: New USB device found, idVendor=0df6, idProduct=005c, bcdDevice=a3.8b [ 453.185328][ T8324] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.193841][ T8324] usb 7-1: Product: 얱룣ҕ턼램卬婺쉩㖑予੾랐​朎ෟ寍❾뗮࢜ᏽ厔ꗛ痔쓽杴迄짎䝆㌦䅊執㜾䄆䔯⻡适⾒冤扌㠞ꂚ뻺ஷ⮑䙎䋘 [ 453.213041][ T8324] usb 7-1: Manufacturer: Ј [ 453.217732][ T8324] usb 7-1: SerialNumber: ᐌ [ 453.237358][T12414] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 453.509823][ T8324] usb 7-1: USB disconnect, device number 31 [ 454.053999][ T8324] usb 5-1: USB disconnect, device number 64 [ 454.739626][T12437] FAULT_INJECTION: forcing a failure. [ 454.739626][T12437] name failslab, interval 1, probability 0, space 0, times 0 [ 454.758834][T12437] CPU: 1 UID: 0 PID: 12437 Comm: syz.5.1757 Tainted: G L syzkaller #0 PREEMPT(full) [ 454.758864][T12437] Tainted: [L]=SOFTLOCKUP [ 454.758872][T12437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 454.758884][T12437] Call Trace: [ 454.758892][T12437] [ 454.758901][T12437] dump_stack_lvl+0x189/0x250 [ 454.758931][T12437] ? __pfx____ratelimit+0x10/0x10 [ 454.758959][T12437] ? __pfx_dump_stack_lvl+0x10/0x10 [ 454.758971][T12437] ? __pfx__printk+0x10/0x10 [ 454.758987][T12437] ? __pfx___might_resched+0x10/0x10 [ 454.758999][T12437] ? fs_reclaim_acquire+0x7d/0x100 [ 454.759013][T12437] should_fail_ex+0x414/0x560 [ 454.759032][T12437] should_failslab+0xa8/0x100 [ 454.759046][T12437] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 454.759062][T12437] ? __alloc_skb+0x255/0x430 [ 454.759072][T12437] ? napi_skb_cache_get+0x4a5/0x780 [ 454.759082][T12437] ? napi_skb_cache_get+0x151/0x780 [ 454.759095][T12437] __alloc_skb+0x255/0x430 [ 454.759107][T12437] ? __pfx___alloc_skb+0x10/0x10 [ 454.759118][T12437] ? netlink_autobind+0xdb/0x300 [ 454.759131][T12437] ? netlink_autobind+0x2c2/0x300 [ 454.759147][T12437] netlink_sendmsg+0x5c6/0xb30 [ 454.759165][T12437] ? __pfx_netlink_sendmsg+0x10/0x10 [ 454.759179][T12437] ? __import_iovec+0x5d4/0x7f0 [ 454.759190][T12437] ? aa_sock_msg_perm+0xf1/0x1b0 [ 454.759204][T12437] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 454.759214][T12437] ? __pfx_netlink_sendmsg+0x10/0x10 [ 454.759228][T12437] __sock_sendmsg+0x21c/0x270 [ 454.759245][T12437] ____sys_sendmsg+0x505/0x820 [ 454.759260][T12437] ? __pfx_____sys_sendmsg+0x10/0x10 [ 454.759275][T12437] ? kstrtouint+0x6e/0xe0 [ 454.759305][T12437] ___sys_sendmsg+0x21f/0x2a0 [ 454.759327][T12437] ? __pfx____sys_sendmsg+0x10/0x10 [ 454.759355][T12437] ? rcu_read_lock_any_held+0xb3/0x120 [ 454.759402][T12437] ? __fget_files+0x2a/0x420 [ 454.759426][T12437] ? __fget_files+0x3a0/0x420 [ 454.759459][T12437] __sys_sendmsg+0x164/0x220 [ 454.759491][T12437] ? __pfx___sys_sendmsg+0x10/0x10 [ 454.759522][T12437] ? __pfx_ksys_write+0x10/0x10 [ 454.759545][T12437] ? __do_fast_syscall_32+0xbe/0x590 [ 454.759571][T12437] __do_fast_syscall_32+0x1f7/0x590 [ 454.759594][T12437] ? rcu_is_watching+0x15/0xb0 [ 454.759617][T12437] ? do_fast_syscall_32+0x34/0x80 [ 454.759642][T12437] do_fast_syscall_32+0x34/0x80 [ 454.759664][T12437] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 454.759688][T12437] RIP: 0023:0xf7f95539 [ 454.759704][T12437] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 454.759722][T12437] RSP: 002b:00000000f548655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 454.759743][T12437] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 454.759757][T12437] RDX: 000000000000c000 RSI: 0000000000000000 RDI: 0000000000000000 [ 454.759769][T12437] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 454.759781][T12437] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 454.759793][T12437] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 454.759821][T12437] [ 455.431087][T12439] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1756'. [ 455.704270][T12442] netlink: 'syz.5.1758': attribute type 1 has an invalid length. [ 455.841895][T12442] 8021q: adding VLAN 0 to HW filter on device bond9 [ 455.857019][T12445] macvlan0: entered promiscuous mode [ 455.872444][T12445] macvlan0: entered allmulticast mode [ 455.900448][T12445] bond9: entered promiscuous mode [ 455.906297][T12445] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 455.982420][T12445] bond9: left promiscuous mode [ 456.761561][T12463] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1763'. [ 457.044508][T12472] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1776'. [ 457.444272][T12478] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1762'. [ 458.389468][ T5922] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 458.581225][ T5922] usb 7-1: config 26 has an invalid interface number: 142 but max is 0 [ 458.599524][ T5922] usb 7-1: config 26 has no interface number 0 [ 458.609842][ T5922] usb 7-1: New USB device found, idVendor=0547, idProduct=6801, bcdDevice=a4.f4 [ 458.650722][ T5922] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.685975][ T5922] gspca_main: touptek-2.14.0 probing 0547:6801 [ 459.104665][T12500] netlink: 'syz.5.1772': attribute type 1 has an invalid length. [ 459.119972][ T5922] usb 7-1: USB disconnect, device number 32 [ 459.312745][T12500] 8021q: adding VLAN 0 to HW filter on device bond10 [ 459.433033][T12502] macvlan0: entered promiscuous mode [ 459.453844][T12502] macvlan0: entered allmulticast mode [ 459.473521][T12502] bond10: entered promiscuous mode [ 459.486308][T12502] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 459.530276][T12502] bond10: left promiscuous mode [ 459.832211][T12505] random: crng reseeded on system resumption [ 460.286796][T12514] kvm: kvm [12511]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x94c40000ffe1 [ 460.305696][T12514] kvm: kvm [12511]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x94c4000000f5 [ 460.319588][T12514] kvm: kvm [12511]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x94c400000153 [ 460.329007][T12514] kvm: kvm [12511]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x94c40000014f [ 460.339970][T12514] kvm: kvm [12511]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x94c400000157 [ 460.349788][T12514] kvm: kvm [12511]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x94c4000001b7 [ 460.359268][T12514] kvm: kvm [12511]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x94c4000002df [ 460.368750][T12514] kvm: kvm [12511]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x94c4000003a7 [ 460.378216][T12514] kvm: kvm [12511]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x94c400000347 [ 460.387897][T12514] kvm: kvm [12511]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x94c40000030f [ 460.559575][ T8327] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 460.709467][ T8327] usb 5-1: Using ep0 maxpacket: 16 [ 460.720295][ T8327] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 460.756428][ T8327] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 460.776800][ T8327] usb 5-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 460.810578][ T8327] usb 5-1: config 0 interface 0 has no altsetting 0 [ 460.837756][ T8327] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 460.866820][ T8327] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.903334][ T8327] usb 5-1: config 0 descriptor?? [ 461.700387][T12519] ipt_REJECT: TCP_RESET invalid for non-tcp [ 461.775936][ T8327] hid (null): global environment stack underflow [ 461.926227][T12536] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1784'. [ 461.995433][ T8327] usb 5-1: USB disconnect, device number 65 [ 462.029586][ T8324] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 462.249841][ T8324] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 462.260177][ T8324] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.268561][ T8324] usb 3-1: Product: syz [ 462.289649][ T8324] usb 3-1: Manufacturer: syz [ 462.294369][ T8324] usb 3-1: SerialNumber: syz [ 462.527732][T12533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.540039][T12533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.566591][ T8324] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 462.588717][ T8324] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 462.608599][ T8324] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 462.730567][ T8324] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 462.745613][ T8324] usb 3-1: USB disconnect, device number 76 [ 462.979056][T12545] netlink: 'syz.6.1787': attribute type 1 has an invalid length. [ 463.017619][T12545] 8021q: adding VLAN 0 to HW filter on device bond6 [ 463.033840][T12545] macvlan2: entered promiscuous mode [ 463.039224][T12545] macvlan2: entered allmulticast mode [ 463.045520][T12545] bond6: entered promiscuous mode [ 463.061817][T12545] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 463.080098][T12545] bond6: left promiscuous mode [ 464.386369][T12561] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 464.531261][T12561] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 465.215754][T12585] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1796'. [ 467.079477][ T5920] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 467.249384][ T5920] usb 6-1: Using ep0 maxpacket: 16 [ 467.262335][ T5920] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 467.273579][ T5920] usb 6-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 467.324091][ T5920] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.348279][ T5920] usb 6-1: config 0 descriptor?? [ 467.508551][ T8327] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 467.560582][T12622] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1809'. [ 467.760658][ T8327] usb 3-1: Using ep0 maxpacket: 8 [ 467.772836][ T8327] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 467.796135][ T8327] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 467.819500][ T8327] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 467.828086][ T8327] usb 3-1: Product: syz [ 467.863557][ T5920] input: HID 041e:3100 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:041E:3100.0027/input/input47 [ 467.907517][ T8327] usb 3-1: Manufacturer: syz [ 467.917095][ T8327] usb 3-1: SerialNumber: syz [ 467.947292][ T5920] creative-sb0540 0003:041E:3100.0027: input,hidraw0: USB HID v0.00 Device [HID 041e:3100] on usb-dummy_hcd.5-1/input0 [ 468.164345][ T5920] usb 6-1: USB disconnect, device number 52 [ 468.413900][ T8327] usb 3-1: palm_os_3_probe - error -110 getting connection information [ 468.440155][ T8327] visor 3-1:1.0: probe with driver visor failed with error -110 [ 468.488326][T12627] fido_id[12627]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 468.878379][T12638] tipc: Enabled bearer , priority 0 [ 468.901742][T12638] syzkaller0: entered promiscuous mode [ 468.935254][T12638] syzkaller0: entered allmulticast mode [ 468.977073][T12638] tipc: Resetting bearer [ 468.985413][T12637] tipc: Resetting bearer [ 469.010417][T12637] tipc: Disabling bearer [ 469.149971][T12641] lo: entered promiscuous mode [ 469.167803][T12641] lo: entered allmulticast mode [ 469.214013][T12643] tipc: Enabled bearer , priority 0 [ 469.224799][T12643] syzkaller0: entered promiscuous mode [ 469.230453][T12643] syzkaller0: entered allmulticast mode [ 469.296825][T12643] tipc: Resetting bearer [ 469.309206][T12645] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1812'. [ 469.320784][T12642] tipc: Resetting bearer [ 469.339464][T12645] netlink: 'syz.5.1812': attribute type 11 has an invalid length. [ 469.381386][T12642] tipc: Disabling bearer [ 469.572775][T12647] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 469.632794][T12649] netlink: 'syz.6.1815': attribute type 21 has an invalid length. [ 469.674156][T12652] fuse: Bad value for 'rootmode' [ 469.950644][T12658] netlink: 'syz.6.1818': attribute type 1 has an invalid length. [ 470.044869][T12657] FAULT_INJECTION: forcing a failure. [ 470.044869][T12657] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 470.067668][T12658] 8021q: adding VLAN 0 to HW filter on device bond7 [ 470.122853][T12661] macvlan2: entered promiscuous mode [ 470.239524][T12657] CPU: 0 UID: 0 PID: 12657 Comm: syz.5.1819 Tainted: G L syzkaller #0 PREEMPT(full) [ 470.239558][T12657] Tainted: [L]=SOFTLOCKUP [ 470.239566][T12657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 470.239580][T12657] Call Trace: [ 470.239590][T12657] [ 470.239599][T12657] dump_stack_lvl+0x189/0x250 [ 470.239633][T12657] ? __pfx____ratelimit+0x10/0x10 [ 470.239666][T12657] ? __pfx_dump_stack_lvl+0x10/0x10 [ 470.239692][T12657] ? __pfx__printk+0x10/0x10 [ 470.239723][T12657] ? __might_fault+0xb0/0x130 [ 470.239768][T12657] should_fail_ex+0x414/0x560 [ 470.239805][T12657] _copy_to_iter+0x1de/0x1790 [ 470.239841][T12657] ? anon_pipe_read+0xd14/0x1040 [ 470.239868][T12657] ? __pfx__copy_to_iter+0x10/0x10 [ 470.239890][T12657] ? __pfx___mutex_lock+0x10/0x10 [ 470.239921][T12657] ? page_copy_sane+0x4e/0x280 [ 470.239946][T12657] copy_page_to_iter+0x10c/0x1c0 [ 470.239974][T12657] anon_pipe_read+0x4d1/0x1040 [ 470.240025][T12657] ? __pfx_anon_pipe_read+0x10/0x10 [ 470.240053][T12657] ? __pfx_autoremove_wake_function+0x10/0x10 [ 470.240086][T12657] ? common_file_perm+0x1b5/0x220 [ 470.240124][T12657] ? bpf_lsm_file_permission+0x9/0x20 [ 470.240149][T12657] ? security_file_permission+0x75/0x290 [ 470.240174][T12657] fifo_pipe_read+0x22/0xd0 [ 470.240201][T12657] vfs_read+0x55a/0xa30 [ 470.240234][T12657] ? __pfx_vfs_read+0x10/0x10 [ 470.240267][T12657] ? __fget_files+0x2a/0x420 [ 470.240303][T12657] ksys_read+0x145/0x250 [ 470.240323][T12657] ? exc_page_fault+0x82/0x100 [ 470.240346][T12657] ? __pfx_ksys_read+0x10/0x10 [ 470.240371][T12657] ? __do_fast_syscall_32+0xbe/0x590 [ 470.240400][T12657] __do_fast_syscall_32+0x1f7/0x590 [ 470.240425][T12657] ? rcu_is_watching+0x15/0xb0 [ 470.240457][T12657] ? do_fast_syscall_32+0x34/0x80 [ 470.240487][T12657] do_fast_syscall_32+0x34/0x80 [ 470.240514][T12657] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 470.240534][T12657] RIP: 0023:0xf7f95539 [ 470.240551][T12657] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 470.240566][T12657] RSP: 002b:00000000f548655c EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 470.240587][T12657] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800040c0 [ 470.240601][T12657] RDX: 0000000000002020 RSI: 0000000000000000 RDI: 0000000000000000 [ 470.240612][T12657] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 470.240622][T12657] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 470.240634][T12657] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 470.240664][T12657] [ 470.559398][T12661] macvlan2: entered allmulticast mode [ 470.566170][T12661] bond7: entered promiscuous mode [ 470.661527][T12661] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 470.846417][ T8327] usb 3-1: USB disconnect, device number 77 [ 470.860208][T12661] bond7: left promiscuous mode [ 471.423685][T12687] tipc: Enabled bearer , priority 0 [ 471.432331][T12687] syzkaller0: entered promiscuous mode [ 471.437824][T12687] syzkaller0: entered allmulticast mode [ 471.468496][T12687] tipc: Resetting bearer [ 471.478210][T12686] tipc: Resetting bearer [ 471.495127][T12686] tipc: Disabling bearer [ 471.594261][T12691] netlink: 'syz.5.1828': attribute type 10 has an invalid length. [ 471.606717][T12691] netlink: 'syz.5.1828': attribute type 10 has an invalid length. [ 471.624523][ T30] audit: type=1326 audit(1765803877.828:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12692 comm="syz.2.1829" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 471.658919][ T5920] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 471.667723][ T30] audit: type=1326 audit(1765803877.848:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12692 comm="syz.2.1829" exe="/root/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 471.693579][T12691] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 471.749499][ T30] audit: type=1326 audit(1765803877.858:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12692 comm="syz.2.1829" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 471.772261][ T30] audit: type=1326 audit(1765803877.858:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12692 comm="syz.2.1829" exe="/root/syz-executor" sig=0 arch=40000003 syscall=270 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 471.850047][ T30] audit: type=1326 audit(1765803877.858:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12692 comm="syz.2.1829" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 471.883470][ T5920] usb 7-1: config 128 has an invalid interface number: 148 but max is 0 [ 471.903125][ T5920] usb 7-1: config 128 has no interface number 0 [ 471.910579][ T30] audit: type=1326 audit(1765803877.858:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12692 comm="syz.2.1829" exe="/root/syz-executor" sig=0 arch=40000003 syscall=338 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 471.978457][ T5920] usb 7-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 472.020100][ T5920] usb 7-1: config 128 interface 148 altsetting 9 endpoint 0x5 has an invalid bInterval 129, changing to 11 [ 472.049411][ T30] audit: type=1326 audit(1765803877.858:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12692 comm="syz.2.1829" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 472.084947][ T5920] usb 7-1: config 128 interface 148 has no altsetting 0 [ 472.114276][ T5920] usb 7-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 472.129580][ T5920] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.139797][ T30] audit: type=1326 audit(1765803877.858:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12692 comm="syz.2.1829" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 472.167128][ T5922] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 472.178123][ T5920] usb 7-1: Product: syz [ 472.182449][ T5920] usb 7-1: Manufacturer: syz [ 472.187424][ T5920] usb 7-1: SerialNumber: syz [ 472.197916][ T30] audit: type=1326 audit(1765803877.858:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12692 comm="syz.2.1829" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 472.222684][ T30] audit: type=1326 audit(1765803877.858:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12692 comm="syz.2.1829" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 472.344709][ T5922] usb 6-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 472.354098][ T5922] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.386326][ T5922] usb 6-1: config 0 descriptor?? [ 472.412955][ T5922] pwc: Creative Labs Webcam Pro Ex detected. [ 472.431557][ T5920] usb 7-1: USB disconnect, device number 33 [ 473.009418][ T5920] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 473.030839][T12712] FAULT_INJECTION: forcing a failure. [ 473.030839][T12712] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 473.089552][T12712] CPU: 0 UID: 0 PID: 12712 Comm: syz.4.1834 Tainted: G L syzkaller #0 PREEMPT(full) [ 473.089587][T12712] Tainted: [L]=SOFTLOCKUP [ 473.089595][T12712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 473.089607][T12712] Call Trace: [ 473.089616][T12712] [ 473.089625][T12712] dump_stack_lvl+0x189/0x250 [ 473.089655][T12712] ? __pfx____ratelimit+0x10/0x10 [ 473.089683][T12712] ? __pfx_dump_stack_lvl+0x10/0x10 [ 473.089706][T12712] ? __pfx__printk+0x10/0x10 [ 473.089734][T12712] ? fs_reclaim_acquire+0x7d/0x100 [ 473.089764][T12712] should_fail_ex+0x414/0x560 [ 473.089796][T12712] prepare_alloc_pages+0x22b/0x650 [ 473.089825][T12712] __alloc_frozen_pages_noprof+0x123/0x370 [ 473.089853][T12712] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 473.089885][T12712] ? policy_nodemask+0x27c/0x720 [ 473.089912][T12712] alloc_pages_mpol+0x232/0x4a0 [ 473.089938][T12712] vma_alloc_folio_noprof+0xe4/0x200 [ 473.089964][T12712] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 473.090000][T12712] folio_prealloc+0x30/0x180 [ 473.090021][T12712] do_wp_page+0x1231/0x5810 [ 473.090071][T12712] ? __pfx_do_wp_page+0x10/0x10 [ 473.090095][T12712] ? do_raw_spin_lock+0x121/0x290 [ 473.090124][T12712] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 473.090162][T12712] handle_mm_fault+0x14c5/0x32b0 [ 473.090205][T12712] ? handle_mm_fault+0xdb/0x32b0 [ 473.090242][T12712] ? __pfx_handle_mm_fault+0x10/0x10 [ 473.090290][T12712] ? lock_mm_and_find_vma+0x9c/0x300 [ 473.090319][T12712] do_user_addr_fault+0x764/0x1380 [ 473.090356][T12712] exc_page_fault+0x82/0x100 [ 473.090380][T12712] asm_exc_page_fault+0x26/0x30 [ 473.090399][T12712] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 473.090427][T12712] Code: 48 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 8f 48 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 473.090445][T12712] RSP: 0018:ffffc9000d007878 EFLAGS: 00050206 [ 473.090463][T12712] RAX: ffffffff848c9701 RBX: ffff8880269d7000 RCX: 0000000000001000 [ 473.090478][T12712] RDX: 0000000000000000 RSI: ffff8880269d7000 RDI: 00000000800040c0 [ 473.090491][T12712] RBP: ffffc9000d0079e8 R08: ffff8880269d7fff R09: 1ffff11004d3afff [ 473.090504][T12712] R10: dffffc0000000000 R11: ffffed1004d3b000 R12: 1ffff92001a00fab [ 473.090518][T12712] R13: 00000000800040c0 R14: ffffc9000d007d68 R15: 0000000000001000 [ 473.090541][T12712] ? _copy_to_iter+0x1b1/0x1790 [ 473.090568][T12712] _copy_to_iter+0x24f/0x1790 [ 473.090601][T12712] ? anon_pipe_read+0xd14/0x1040 [ 473.090624][T12712] ? __pfx__copy_to_iter+0x10/0x10 [ 473.090645][T12712] ? __pfx___mutex_lock+0x10/0x10 [ 473.090674][T12712] ? page_copy_sane+0x4e/0x280 [ 473.090697][T12712] copy_page_to_iter+0x10c/0x1c0 [ 473.090722][T12712] anon_pipe_read+0x4d1/0x1040 [ 473.090770][T12712] ? __pfx_anon_pipe_read+0x10/0x10 [ 473.090796][T12712] ? __pfx_autoremove_wake_function+0x10/0x10 [ 473.090824][T12712] ? common_file_perm+0x1b5/0x220 [ 473.090851][T12712] ? bpf_lsm_file_permission+0x9/0x20 [ 473.090870][T12712] ? security_file_permission+0x75/0x290 [ 473.090895][T12712] fifo_pipe_read+0x22/0xd0 [ 473.090916][T12712] vfs_read+0x55a/0xa30 [ 473.090943][T12712] ? __pfx_vfs_read+0x10/0x10 [ 473.090969][T12712] ? __fget_files+0x2a/0x420 [ 473.090996][T12712] ksys_read+0x145/0x250 [ 473.091011][T12712] ? exc_page_fault+0x82/0x100 [ 473.091028][T12712] ? __pfx_ksys_read+0x10/0x10 [ 473.091046][T12712] ? __do_fast_syscall_32+0xbe/0x590 [ 473.091067][T12712] __do_fast_syscall_32+0x1f7/0x590 [ 473.091086][T12712] ? rcu_is_watching+0x15/0xb0 [ 473.091105][T12712] ? do_fast_syscall_32+0x34/0x80 [ 473.091127][T12712] do_fast_syscall_32+0x34/0x80 [ 473.091145][T12712] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 473.091165][T12712] RIP: 0023:0xf7fb6539 [ 473.091179][T12712] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 473.091193][T12712] RSP: 002b:00000000f54a655c EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 473.091209][T12712] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800040c0 [ 473.091221][T12712] RDX: 0000000000002020 RSI: 0000000000000000 RDI: 0000000000000000 [ 473.091231][T12712] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 473.091240][T12712] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 473.091250][T12712] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 473.091275][T12712] [ 473.898297][ T5920] usb 7-1: config 128 has an invalid interface number: 148 but max is 0 [ 473.906779][ T5920] usb 7-1: config 128 has no interface number 0 [ 473.913987][ T5920] usb 7-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 473.924187][ T5920] usb 7-1: config 128 interface 148 altsetting 9 endpoint 0x5 has an invalid bInterval 129, changing to 11 [ 473.936178][ T5920] usb 7-1: config 128 interface 148 has no altsetting 0 [ 473.958056][ T5920] usb 7-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 473.967287][ T5920] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.975401][ T5920] usb 7-1: Product: syz [ 473.979734][ T5920] usb 7-1: Manufacturer: syz [ 473.984328][ T5920] usb 7-1: SerialNumber: syz [ 474.082596][T12718] netlink: 348 bytes leftover after parsing attributes in process `syz.2.1835'. [ 474.238602][T12684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.281080][T12684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.622329][T12727] netlink: 'syz.0.1838': attribute type 1 has an invalid length. [ 474.656038][ T5922] pwc: Failed to set LED on/off time (-71) [ 474.688905][ T5922] pwc: send_video_command error -71 [ 474.720048][ T5922] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 474.767254][ T5922] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 474.806081][ T5922] usb 6-1: USB disconnect, device number 53 [ 475.003736][T12727] 8021q: adding VLAN 0 to HW filter on device bond8 [ 475.074674][T12728] macvlan0: entered promiscuous mode [ 475.092345][T12728] macvlan0: entered allmulticast mode [ 475.113535][T12728] bond8: entered promiscuous mode [ 475.121074][T12738] Cannot find del_set index 2 as target [ 475.138711][T12728] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 475.166398][T12728] bond8: left promiscuous mode [ 475.263780][ T5920] usb 7-1: USB disconnect, device number 34 [ 475.297599][T12738] tap0: tun_chr_ioctl cmd 2147767506 [ 475.582664][T12746] tipc: Enabled bearer , priority 0 [ 475.594579][T12746] syzkaller0: entered promiscuous mode [ 475.603626][T12746] syzkaller0: entered allmulticast mode [ 475.686295][T12746] tipc: Resetting bearer [ 475.698111][T12744] tipc: Resetting bearer [ 475.716785][T12744] tipc: Disabling bearer [ 476.328364][T12755] FAULT_INJECTION: forcing a failure. [ 476.328364][T12755] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 476.385313][T12755] CPU: 0 UID: 0 PID: 12755 Comm: syz.5.1846 Tainted: G L syzkaller #0 PREEMPT(full) [ 476.385343][T12755] Tainted: [L]=SOFTLOCKUP [ 476.385350][T12755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 476.385361][T12755] Call Trace: [ 476.385369][T12755] [ 476.385379][T12755] dump_stack_lvl+0x189/0x250 [ 476.385407][T12755] ? __pfx____ratelimit+0x10/0x10 [ 476.385438][T12755] ? __pfx_dump_stack_lvl+0x10/0x10 [ 476.385462][T12755] ? __pfx__printk+0x10/0x10 [ 476.385492][T12755] ? fs_reclaim_acquire+0x7d/0x100 [ 476.385524][T12755] should_fail_ex+0x414/0x560 [ 476.385558][T12755] prepare_alloc_pages+0x22b/0x650 [ 476.385589][T12755] __alloc_frozen_pages_noprof+0x123/0x370 [ 476.385617][T12755] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 476.385651][T12755] ? policy_nodemask+0x27c/0x720 [ 476.385681][T12755] alloc_pages_mpol+0x232/0x4a0 [ 476.385710][T12755] vma_alloc_folio_noprof+0xe4/0x200 [ 476.385737][T12755] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 476.385774][T12755] folio_prealloc+0x30/0x180 [ 476.385796][T12755] do_wp_page+0x1231/0x5810 [ 476.385845][T12755] ? __pfx_do_wp_page+0x10/0x10 [ 476.385869][T12755] ? do_raw_spin_lock+0x121/0x290 [ 476.385899][T12755] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 476.385935][T12755] handle_mm_fault+0x14c5/0x32b0 [ 476.385976][T12755] ? handle_mm_fault+0xdb/0x32b0 [ 476.386013][T12755] ? __pfx_handle_mm_fault+0x10/0x10 [ 476.386055][T12755] ? __pfx___up_read+0x10/0x10 [ 476.386084][T12755] ? lock_mm_and_find_vma+0x9c/0x300 [ 476.386113][T12755] do_user_addr_fault+0x764/0x1380 [ 476.386151][T12755] exc_page_fault+0x82/0x100 [ 476.386174][T12755] asm_exc_page_fault+0x26/0x30 [ 476.386193][T12755] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 476.386219][T12755] Code: 48 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 8f 48 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 476.386236][T12755] RSP: 0018:ffffc90014baf878 EFLAGS: 00050206 [ 476.386255][T12755] RAX: ffffffff848c9701 RBX: ffff88802981c000 RCX: 00000000000000c0 [ 476.386270][T12755] RDX: 0000000000000000 RSI: ffff88802981cf40 RDI: 0000000080005000 [ 476.386284][T12755] RBP: ffffc90014baf9e8 R08: ffff88802981cfff R09: 1ffff110053039ff [ 476.386299][T12755] R10: dffffc0000000000 R11: ffffed1005303a00 R12: 1ffff92002975fab [ 476.386315][T12755] R13: 00000000800040c0 R14: ffffc90014bafd68 R15: 0000000000001000 [ 476.386340][T12755] ? _copy_to_iter+0x1b1/0x1790 [ 476.386368][T12755] _copy_to_iter+0x24f/0x1790 [ 476.386400][T12755] ? anon_pipe_read+0xd14/0x1040 [ 476.386425][T12755] ? __pfx__copy_to_iter+0x10/0x10 [ 476.386445][T12755] ? __pfx___mutex_lock+0x10/0x10 [ 476.386474][T12755] ? page_copy_sane+0x4e/0x280 [ 476.386497][T12755] copy_page_to_iter+0x10c/0x1c0 [ 476.386523][T12755] anon_pipe_read+0x4d1/0x1040 [ 476.386572][T12755] ? __pfx_anon_pipe_read+0x10/0x10 [ 476.386599][T12755] ? __pfx_autoremove_wake_function+0x10/0x10 [ 476.386628][T12755] ? common_file_perm+0x1b5/0x220 [ 476.386658][T12755] ? bpf_lsm_file_permission+0x9/0x20 [ 476.386679][T12755] ? security_file_permission+0x75/0x290 [ 476.386703][T12755] fifo_pipe_read+0x22/0xd0 [ 476.386727][T12755] vfs_read+0x55a/0xa30 [ 476.386755][T12755] ? __pfx_vfs_read+0x10/0x10 [ 476.386785][T12755] ? __fget_files+0x2a/0x420 [ 476.386819][T12755] ksys_read+0x145/0x250 [ 476.386836][T12755] ? exc_page_fault+0x82/0x100 [ 476.386858][T12755] ? __pfx_ksys_read+0x10/0x10 [ 476.386881][T12755] ? __do_fast_syscall_32+0xbe/0x590 [ 476.386908][T12755] __do_fast_syscall_32+0x1f7/0x590 [ 476.386931][T12755] ? rcu_is_watching+0x15/0xb0 [ 476.386954][T12755] ? do_fast_syscall_32+0x34/0x80 [ 476.386982][T12755] do_fast_syscall_32+0x34/0x80 [ 476.387004][T12755] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 476.387028][T12755] RIP: 0023:0xf7f95539 [ 476.387044][T12755] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 476.387060][T12755] RSP: 002b:00000000f548655c EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 476.387079][T12755] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800040c0 [ 476.387098][T12755] RDX: 0000000000002020 RSI: 0000000000000000 RDI: 0000000000000000 [ 476.387111][T12755] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 476.387123][T12755] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 476.387136][T12755] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 476.387166][T12755] [ 476.409438][ T24] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 477.159451][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 477.166503][ T24] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 477.175418][ T24] usb 7-1: config 179 has no interface number 0 [ 477.223177][ T24] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 477.263931][ T24] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 477.319417][ T24] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 477.341855][ T24] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 477.494137][ T24] usb 7-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 477.517901][ T24] usb 7-1: config 179 interface 65 has no altsetting 0 [ 477.529456][ T24] usb 7-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 477.578258][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.701726][ T24] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input49 [ 477.780530][ T5184] input input49: unable to receive magic message: -110 [ 477.790363][ T5184] input input49: unable to receive magic message: -32 [ 477.836914][ T5184] input input49: unable to receive magic message: -32 [ 477.863956][ T5184] input input49: unable to receive magic message: -32 [ 477.946071][ T5946] input input49: unable to receive magic message: -32 [ 477.973118][T12753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.010465][T12753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.028316][ T5184] input input49: unable to receive magic message: -32 [ 478.040337][T12753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.049200][T12753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.049516][ T24] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 478.186736][ C1] [ 478.189118][ C1] ======================================================== [ 478.196321][ C1] WARNING: possible irq lock inversion dependency detected [ 478.203547][ C1] syzkaller #0 Tainted: G L [ 478.209530][ C1] -------------------------------------------------------- [ 478.216724][ C1] syz.4.1851/12768 just changed the state of lock: [ 478.223224][ C1] ffff888055ebd230 (&dev->event_lock#2){..-.}-{3:3}, at: input_event+0x76/0xe0 [ 478.232296][ C1] but this lock took another, SOFTIRQ-READ-unsafe lock in the past: [ 478.240300][ C1] (tasklist_lock){.+.+}-{3:3} [ 478.240354][ C1] [ 478.240354][ C1] [ 478.240354][ C1] and interrupts could create inverse lock ordering between them. [ 478.240354][ C1] [ 478.259439][ C1] [ 478.259439][ C1] other info that might help us debug this: [ 478.267520][ C1] Chain exists of: [ 478.267520][ C1] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 478.267520][ C1] [ 478.281174][ C1] Possible interrupt unsafe locking scenario: [ 478.281174][ C1] [ 478.289513][ C1] CPU0 CPU1 [ 478.294890][ C1] ---- ---- [ 478.300361][ C1] lock(tasklist_lock); [ 478.304644][ C1] local_irq_disable(); [ 478.311406][ C1] lock(&dev->event_lock#2); [ 478.318642][ C1] lock(&client->buffer_lock); [ 478.326053][ C1] [ 478.329525][ C1] lock(&dev->event_lock#2); [ 478.334455][ C1] [ 478.334455][ C1] *** DEADLOCK *** [ 478.334455][ C1] [ 478.342623][ C1] no locks held by syz.4.1851/12768. [ 478.347925][ C1] [ 478.347925][ C1] the shortest dependencies between 2nd lock and 1st lock: [ 478.357326][ C1] -> (tasklist_lock){.+.+}-{3:3} { [ 478.362861][ C1] HARDIRQ-ON-R at: [ 478.367234][ C1] lock_acquire+0x117/0x340 [ 478.374083][ C1] _raw_read_lock+0x36/0x50 [ 478.380931][ C1] __do_wait+0xde/0x740 [ 478.387429][ C1] do_wait+0x1e8/0x4f0 [ 478.393838][ C1] kernel_wait+0xab/0x170 [ 478.400520][ C1] call_usermodehelper_exec_work+0xbe/0x230 [ 478.408770][ C1] process_scheduled_works+0xad1/0x1770 [ 478.416675][ C1] worker_thread+0x8a0/0xda0 [ 478.423616][ C1] kthread+0x711/0x8a0 [ 478.430026][ C1] ret_from_fork+0x599/0xb30 [ 478.436947][ C1] ret_from_fork_asm+0x1a/0x30 [ 478.444072][ C1] SOFTIRQ-ON-R at: [ 478.448412][ C1] lock_acquire+0x117/0x340 [ 478.455256][ C1] _raw_read_lock+0x36/0x50 [ 478.462105][ C1] __do_wait+0xde/0x740 [ 478.468599][ C1] do_wait+0x1e8/0x4f0 [ 478.475024][ C1] kernel_wait+0xab/0x170 [ 478.481713][ C1] call_usermodehelper_exec_work+0xbe/0x230 [ 478.489948][ C1] process_scheduled_works+0xad1/0x1770 [ 478.497826][ C1] worker_thread+0x8a0/0xda0 [ 478.504752][ C1] kthread+0x711/0x8a0 [ 478.511160][ C1] ret_from_fork+0x599/0xb30 [ 478.518081][ C1] ret_from_fork_asm+0x1a/0x30 [ 478.525183][ C1] INITIAL USE at: [ 478.529412][ C1] lock_acquire+0x117/0x340 [ 478.536164][ C1] _raw_write_lock_irq+0xa2/0xf0 [ 478.543351][ C1] copy_process+0x2185/0x3950 [ 478.550308][ C1] kernel_clone+0x21e/0x820 [ 478.557064][ C1] user_mode_thread+0xdd/0x140 [ 478.564079][ C1] rest_init+0x23/0x300 [ 478.570486][ C1] start_kernel+0x3a7/0x400 [ 478.577247][ C1] x86_64_start_reservations+0x24/0x30 [ 478.584957][ C1] x86_64_start_kernel+0x143/0x1c0 [ 478.592318][ C1] common_startup_64+0x13e/0x147 [ 478.599530][ C1] INITIAL READ USE at: [ 478.604205][ C1] lock_acquire+0x117/0x340 [ 478.611395][ C1] _raw_read_lock+0x36/0x50 [ 478.618591][ C1] __do_wait+0xde/0x740 [ 478.625457][ C1] do_wait+0x1e8/0x4f0 [ 478.632236][ C1] kernel_wait+0xab/0x170 [ 478.639268][ C1] call_usermodehelper_exec_work+0xbe/0x230 [ 478.647867][ C1] process_scheduled_works+0xad1/0x1770 [ 478.656106][ C1] worker_thread+0x8a0/0xda0 [ 478.663388][ C1] kthread+0x711/0x8a0 [ 478.670166][ C1] ret_from_fork+0x599/0xb30 [ 478.677450][ C1] ret_from_fork_asm+0x1a/0x30 [ 478.684907][ C1] } [ 478.687735][ C1] ... key at: [] tasklist_lock+0x18/0x40 [ 478.695805][ C1] ... acquired at: [ 478.700016][ C1] _raw_read_lock+0x36/0x50 [ 478.704715][ C1] send_sigurg+0x12b/0x420 [ 478.709319][ C1] sk_send_sigurg+0x6c/0x2e0 [ 478.714081][ C1] queue_oob+0x420/0x4f0 [ 478.718485][ C1] unix_stream_sendmsg+0xc32/0xde0 [ 478.723755][ C1] __sock_sendmsg+0x21c/0x270 [ 478.728600][ C1] ____sys_sendmsg+0x505/0x820 [ 478.733531][ C1] ___sys_sendmsg+0x21f/0x2a0 [ 478.738378][ C1] __sys_sendmsg+0x164/0x220 [ 478.743142][ C1] __do_fast_syscall_32+0x1f7/0x590 [ 478.748596][ C1] do_fast_syscall_32+0x34/0x80 [ 478.753607][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 478.760102][ C1] [ 478.762418][ C1] -> (&f_owner->lock){....}-{3:3} { [ 478.767887][ C1] INITIAL USE at: [ 478.772028][ C1] lock_acquire+0x117/0x340 [ 478.778607][ C1] _raw_write_lock_irq+0xa2/0xf0 [ 478.785618][ C1] __f_setown+0x67/0x370 [ 478.791940][ C1] fcntl_dirnotify+0x3fa/0x6a0 [ 478.798801][ C1] do_fcntl+0x745/0x1a50 [ 478.805124][ C1] do_compat_fcntl64+0x477/0x720 [ 478.812165][ C1] __do_fast_syscall_32+0x1f7/0x590 [ 478.819439][ C1] do_fast_syscall_32+0x34/0x80 [ 478.826364][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 478.834854][ C1] INITIAL READ USE at: [ 478.839430][ C1] lock_acquire+0x117/0x340 [ 478.846453][ C1] _raw_read_lock_irqsave+0xaf/0x100 [ 478.854257][ C1] send_sigio+0x38/0x370 [ 478.861015][ C1] dnotify_handle_event+0x169/0x440 [ 478.868725][ C1] fsnotify+0x180b/0x1ab0 [ 478.875568][ C1] fsnotify_create+0x122/0x180 [ 478.882852][ C1] vfs_create+0x3d9/0x400 [ 478.889695][ C1] do_mknodat+0x3ea/0x610 [ 478.896538][ C1] __ia32_sys_mknodat+0xa7/0xc0 [ 478.903893][ C1] __do_fast_syscall_32+0x1f7/0x590 [ 478.911602][ C1] do_fast_syscall_32+0x34/0x80 [ 478.918961][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 478.927812][ C1] } [ 478.930567][ C1] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 478.939683][ C1] ... acquired at: [ 478.943736][ C1] _raw_read_lock_irqsave+0xaf/0x100 [ 478.949207][ C1] send_sigio+0x38/0x370 [ 478.953623][ C1] kill_fasync+0x24d/0x4d0 [ 478.958213][ C1] lease_break_callback+0x26/0x30 [ 478.963402][ C1] __break_lease+0x730/0x1620 [ 478.968240][ C1] vfs_truncate+0x428/0x520 [ 478.972905][ C1] do_sys_truncate+0xdb/0x190 [ 478.977763][ C1] __ia32_compat_sys_truncate+0x5b/0x70 [ 478.983488][ C1] __do_fast_syscall_32+0x1f7/0x590 [ 478.988871][ C1] do_fast_syscall_32+0x34/0x80 [ 478.993894][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 479.000389][ C1] [ 479.002698][ C1] -> (&new->fa_lock){....}-{3:3} { [ 479.007989][ C1] INITIAL USE at: [ 479.012040][ C1] lock_acquire+0x117/0x340 [ 479.018441][ C1] _raw_write_lock_irq+0xa2/0xf0 [ 479.025276][ C1] fasync_remove_entry+0xf1/0x1c0 [ 479.032207][ C1] pipe_fasync+0xa9/0x1e0 [ 479.038451][ C1] __fput+0x8a2/0xa70 [ 479.044357][ C1] delayed_fput+0x63/0xa0 [ 479.050600][ C1] process_scheduled_works+0xad1/0x1770 [ 479.058052][ C1] worker_thread+0x8a0/0xda0 [ 479.064555][ C1] kthread+0x711/0x8a0 [ 479.070582][ C1] ret_from_fork+0x599/0xb30 [ 479.077088][ C1] ret_from_fork_asm+0x1a/0x30 [ 479.083769][ C1] INITIAL READ USE at: [ 479.088262][ C1] lock_acquire+0x117/0x340 [ 479.095096][ C1] _raw_read_lock_irqsave+0xaf/0x100 [ 479.102733][ C1] kill_fasync+0x199/0x4d0 [ 479.109513][ C1] anon_pipe_read+0xf06/0x1040 [ 479.116631][ C1] fifo_pipe_read+0x22/0xd0 [ 479.123476][ C1] vfs_read+0x55a/0xa30 [ 479.129962][ C1] ksys_read+0x145/0x250 [ 479.136535][ C1] __do_fast_syscall_32+0x1f7/0x590 [ 479.144068][ C1] do_fast_syscall_32+0x34/0x80 [ 479.151255][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 479.159919][ C1] } [ 479.162578][ C1] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 479.171422][ C1] ... acquired at: [ 479.175382][ C1] _raw_read_lock_irqsave+0xaf/0x100 [ 479.180839][ C1] kill_fasync+0x199/0x4d0 [ 479.185429][ C1] evdev_pass_values+0x627/0xbd0 [ 479.190527][ C1] evdev_events+0x1e6/0x340 [ 479.195191][ C1] input_pass_values+0x288/0x890 [ 479.200287][ C1] input_event_dispose+0x330/0x6b0 [ 479.205565][ C1] input_inject_event+0x1dd/0x340 [ 479.210755][ C1] evdev_write+0x2fc/0x480 [ 479.215332][ C1] vfs_write+0x27e/0xb30 [ 479.219778][ C1] ksys_write+0x145/0x250 [ 479.224271][ C1] __do_fast_syscall_32+0x1f7/0x590 [ 479.229633][ C1] do_fast_syscall_32+0x34/0x80 [ 479.234644][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 479.241139][ C1] [ 479.243448][ C1] -> (&client->buffer_lock){....}-{3:3} { [ 479.249263][ C1] INITIAL USE at: [ 479.253230][ C1] lock_acquire+0x117/0x340 [ 479.259461][ C1] _raw_spin_lock+0x2e/0x40 [ 479.265705][ C1] evdev_pass_values+0xb9/0xbd0 [ 479.272372][ C1] evdev_events+0x1e6/0x340 [ 479.278603][ C1] input_pass_values+0x288/0x890 [ 479.285262][ C1] input_event_dispose+0x330/0x6b0 [ 479.292111][ C1] input_inject_event+0x1dd/0x340 [ 479.298871][ C1] evdev_write+0x2fc/0x480 [ 479.305010][ C1] vfs_write+0x27e/0xb30 [ 479.310979][ C1] ksys_write+0x145/0x250 [ 479.317033][ C1] __do_fast_syscall_32+0x1f7/0x590 [ 479.323959][ C1] do_fast_syscall_32+0x34/0x80 [ 479.330535][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 479.338592][ C1] } [ 479.341163][ C1] ... key at: [] evdev_open.__key.26+0x0/0x20 [ 479.349396][ C1] ... acquired at: [ 479.353269][ C1] _raw_spin_lock+0x2e/0x40 [ 479.357943][ C1] evdev_pass_values+0xb9/0xbd0 [ 479.362955][ C1] evdev_events+0x1e6/0x340 [ 479.367624][ C1] input_pass_values+0x288/0x890 [ 479.372751][ C1] input_event_dispose+0x330/0x6b0 [ 479.378035][ C1] input_inject_event+0x1dd/0x340 [ 479.383228][ C1] evdev_write+0x2fc/0x480 [ 479.387820][ C1] vfs_write+0x27e/0xb30 [ 479.392518][ C1] ksys_write+0x145/0x250 [ 479.397029][ C1] __do_fast_syscall_32+0x1f7/0x590 [ 479.402748][ C1] do_fast_syscall_32+0x34/0x80 [ 479.407769][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 479.414271][ C1] [ 479.416579][ C1] -> (&dev->event_lock#2){..-.}-{3:3} { [ 479.422314][ C1] IN-SOFTIRQ-W at: [ 479.426287][ C1] lock_acquire+0x117/0x340 [ 479.432427][ C1] _raw_spin_lock_irqsave+0xa7/0xf0 [ 479.439281][ C1] input_event+0x76/0xe0 [ 479.445179][ C1] xpad360_process_packet+0xda/0xdd0 [ 479.452200][ C1] xpad_irq_in+0x14e/0x25f0 [ 479.458346][ C1] __usb_hcd_giveback_urb+0x376/0x540 [ 479.465375][ C1] dummy_timer+0x85f/0x45b0 [ 479.471552][ C1] __hrtimer_run_queues+0x51c/0xc30 [ 479.478855][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 479.485626][ C1] handle_softirqs+0x27d/0x850 [ 479.492030][ C1] __irq_exit_rcu+0xca/0x1f0 [ 479.498262][ C1] irq_exit_rcu+0x9/0x30 [ 479.504145][ C1] sysvec_apic_timer_interrupt+0x57/0xc0 [ 479.511417][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 479.519135][ C1] INITIAL USE at: [ 479.523032][ C1] lock_acquire+0x117/0x340 [ 479.529091][ C1] _raw_spin_lock_irqsave+0xa7/0xf0 [ 479.535850][ C1] input_inject_event+0xa5/0x340 [ 479.542342][ C1] kbd_led_trigger_activate+0xbc/0x100 [ 479.549358][ C1] led_trigger_set+0x52d/0x950 [ 479.555675][ C1] led_trigger_set_default+0x260/0x2a0 [ 479.562701][ C1] led_classdev_register_ext+0x73d/0x960 [ 479.569887][ C1] input_leds_connect+0x517/0x790 [ 479.576468][ C1] input_register_device+0xd00/0x1170 [ 479.583399][ C1] atkbd_connect+0x73b/0xa50 [ 479.589538][ C1] serio_driver_probe+0x82/0xd0 [ 479.595946][ C1] really_probe+0x26d/0xad0 [ 479.602003][ C1] __driver_probe_device+0x18c/0x320 [ 479.608838][ C1] driver_probe_device+0x4f/0x240 [ 479.615413][ C1] __driver_attach+0x349/0x650 [ 479.621726][ C1] bus_for_each_dev+0x233/0x2b0 [ 479.628131][ C1] serio_handle_event+0x1f9/0x8d0 [ 479.634719][ C1] process_scheduled_works+0xad1/0x1770 [ 479.641933][ C1] worker_thread+0x8a0/0xda0 [ 479.648091][ C1] kthread+0x711/0x8a0 [ 479.653717][ C1] ret_from_fork+0x599/0xb30 [ 479.659853][ C1] ret_from_fork_asm+0x1a/0x30 [ 479.666174][ C1] } [ 479.668657][ C1] ... key at: [] input_allocate_device.__key.6+0x0/0x20 [ 479.677683][ C1] ... acquired at: [ 479.681484][ C1] mark_lock+0x115/0x190 [ 479.685987][ C1] __lock_acquire+0x68a/0x2cf0 [ 479.690913][ C1] lock_acquire+0x117/0x340 [ 479.695574][ C1] _raw_spin_lock_irqsave+0xa7/0xf0 [ 479.700941][ C1] input_event+0x76/0xe0 [ 479.705346][ C1] xpad360_process_packet+0xda/0xdd0 [ 479.710797][ C1] xpad_irq_in+0x14e/0x25f0 [ 479.715465][ C1] __usb_hcd_giveback_urb+0x376/0x540 [ 479.721003][ C1] dummy_timer+0x85f/0x45b0 [ 479.725674][ C1] __hrtimer_run_queues+0x51c/0xc30 [ 479.731035][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 479.736326][ C1] handle_softirqs+0x27d/0x850 [ 479.741336][ C1] __irq_exit_rcu+0xca/0x1f0 [ 479.746093][ C1] irq_exit_rcu+0x9/0x30 [ 479.750496][ C1] sysvec_apic_timer_interrupt+0x57/0xc0 [ 479.756286][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 479.762428][ C1] [ 479.764739][ C1] [ 479.764739][ C1] stack backtrace: [ 479.770616][ C1] CPU: 1 UID: 0 PID: 12768 Comm: syz.4.1851 Tainted: G L syzkaller #0 PREEMPT(full) [ 479.770643][ C1] Tainted: [L]=SOFTLOCKUP [ 479.770649][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 479.770661][ C1] Call Trace: [ 479.770669][ C1] [ 479.770676][ C1] dump_stack_lvl+0x189/0x250 [ 479.770701][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 479.770722][ C1] ? __pfx__printk+0x10/0x10 [ 479.770751][ C1] print_irq_inversion_bug+0x1d2/0x1e0 [ 479.770774][ C1] mark_lock_irq+0x3d2/0x420 [ 479.770796][ C1] mark_lock+0x115/0x190 [ 479.770815][ C1] __lock_acquire+0x68a/0x2cf0 [ 479.770836][ C1] ? do_raw_spin_lock+0x121/0x290 [ 479.770862][ C1] ? __lock_acquire+0x6b6/0x2cf0 [ 479.770881][ C1] ? input_event+0x76/0xe0 [ 479.770902][ C1] lock_acquire+0x117/0x340 [ 479.770919][ C1] ? input_event+0x76/0xe0 [ 479.770945][ C1] _raw_spin_lock_irqsave+0xa7/0xf0 [ 479.770972][ C1] ? input_event+0x76/0xe0 [ 479.770993][ C1] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 479.771022][ C1] input_event+0x76/0xe0 [ 479.771045][ C1] xpad360_process_packet+0xda/0xdd0 [ 479.771079][ C1] xpad_irq_in+0x14e/0x25f0 [ 479.771101][ C1] ? kcov_remote_start+0x97/0x7f0 [ 479.771125][ C1] ? kcov_remote_start+0x97/0x7f0 [ 479.771149][ C1] __usb_hcd_giveback_urb+0x376/0x540 [ 479.771176][ C1] dummy_timer+0x85f/0x45b0 [ 479.771211][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 479.771243][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 479.771266][ C1] ? debug_object_deactivate+0x6d/0x360 [ 479.771294][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 479.771318][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 479.771342][ C1] __hrtimer_run_queues+0x51c/0xc30 [ 479.771365][ C1] ? ktime_get_update_offsets_now+0x67/0x3d0 [ 479.771390][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 479.771412][ C1] ? read_tsc+0x9/0x20 [ 479.771436][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 479.771457][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 479.771482][ C1] handle_softirqs+0x27d/0x850 [ 479.771502][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 479.771521][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 479.771543][ C1] __irq_exit_rcu+0xca/0x1f0 [ 479.771560][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 479.771581][ C1] irq_exit_rcu+0x9/0x30 [ 479.771597][ C1] sysvec_apic_timer_interrupt+0x57/0xc0 [ 479.771614][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 479.771633][ C1] RIP: 0023:0xf70e7f4d [ 479.771648][ C1] Code: 39 f2 19 d9 72 ef 39 c5 73 3b 8b 54 24 0c 8b 7c 24 18 89 5d 04 83 c5 08 8b 5c 24 10 89 75 f8 89 10 8b 70 f8 89 58 04 8b 5d 00 <8b> 17 8b 7f 04 89 5c 24 0c 8b 5d 04 89 5c 24 10 8b 58 fc e9 6b ff [ 479.771663][ C1] RSP: 002b:00000000f759f800 EFLAGS: 00000286 [ 479.771679][ C1] RAX: 00000000f6d1ee48 RBX: 000000008177873a RCX: 0000000000000000 [ 479.771691][ C1] RDX: 000000008177873a RSI: 000000008177873a RDI: 00000000f6d1ec38 [ 479.771703][ C1] RBP: 00000000f6d1ec78 R08: 0000000000000000 R09: 0000000000000000 [ 479.771714][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 479.771725][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 479.771741][ C1] [ 480.121339][ T5922] usb 7-1: USB disconnect, device number 35 [ 480.121404][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 480.136176][ C1] dummy_hcd dummy_hcd.6: timer fired with no URBs pending? [ 480.299446][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 480.306038][ T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 480.317822][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 108, changing to 7 [ 480.329099][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 24694, setting to 1024 [ 480.347043][ T24] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 480.356275][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.365359][ T24] usb 3-1: Product: syz [ 480.369565][ T24] usb 3-1: Manufacturer: syz [ 480.374403][ T24] usb 3-1: SerialNumber: syz [ 480.382295][ T24] usb 3-1: config 0 descriptor?? [ 480.389512][ T24] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 480.398865][ T24] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 481.489996][ T24] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 481.496316][ T24] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 481.503522][ T24] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 481.510730][ T24] em28xx 3-1:0.0: No AC97 audio processor [ 481.740530][ T8324] usb 3-1: USB disconnect, device number 78 [ 481.746787][ T8324] em28xx 3-1:0.0: Disconnecting em28xx [ 481.758133][ T8324] em28xx 3-1:0.0: Freeing device