last executing test programs: 1m33.94289783s ago: executing program 2 (id=4231): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000280)={0x0, 0x0, r4, 0xffffc329, 0x2, 0x25, 0x8, 0x6, 0x8, 0x9, 0x2, 0x80000001}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x260086, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r5 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000300)='.pending_reads\x00', 0xc00, 0x88) fspick(0xffffffffffffffff, &(0x7f0000000040)='./bus\x00', 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r5, 0x40a0ae49, &(0x7f0000000c00)={0x24ea, 0x4, 0x3000, 0x2000, &(0x7f000016e000/0x2000)=nil, 0x200}) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x80000000, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x41, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x1b) writev(r6, &(0x7f0000000180)=[{&(0x7f00000006c0)="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", 0x532}, {&(0x7f0000000600)}, {&(0x7f0000000340)="cf0d27d1653081dd048029d227e630947e0c58522e1657827dd3b146013e782821931c71c52dac6adda7b8b19d1f78016df5186dfc96e04eae73611ea52b0762f25083fecaf1db24ed4332da100db738c412dfd3481342dac2a35f9c070b99ad121c9710194b08e8ef094d9c2b462738f923a3dd028662bb77c9e82a54768be1a2bacef0456c79cfacb232b9a58fbfdfac837acb32d48e", 0x97}, {&(0x7f0000000500)="cac234d2a369e8d0b762c70b1614990e05ab50b6e3442292235d86ff96958ab353e6263e99f988c59c7a54c3cc6e805caacc507adbafa601bcf563d756c67bce6f9c04f76d55d94e10a6b08a0fba23dddfaac34c9586560d5ca5e878bcfe4bc2835d417f6568e2f6380471b0834663f1821e771e5aed0bdeffdfa77d805dc1d9073cd805052f0d68fdc0f7fc2131a1989a27ca729e0ea45e2c493e2ec72e9e8be76cfc77d60f4f443331a0f6b913d7ef6979bb0ba6e877a04abda66bc6ead43bf5482c81fc267659d7bbd8a7ee4f37b55ee85ae3be38bc4cb8eaa5f59f71985e588159648fa36df38d53", 0xea}, {&(0x7f0000000cc0)}], 0x5) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r7, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea", 0x81) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080)={0x8000, 0x44, 0x18}, 0x18) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x10200, 0x0, 0xf000, 0x1000, &(0x7f0000f9a000/0x1000)=nil}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'veth1_macvtap\x00'}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000080)={@multicast1, @local, r8}, 0xc) 1m33.722425756s ago: executing program 2 (id=4233): socketpair$nbd(0x1, 0x1, 0x0, 0x0) fchmodat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x27) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x2010) bind$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20000000) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0xfffe, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c09425, &(0x7f0000000480)={"879a92439c4d1d8ef0bae9a0b5e8df3e", 0x0, 0x0, {0x1, 0x6}, {0xfffffffffffffff8, 0x8}, 0x101, [0x6, 0xb36, 0x8, 0x5, 0x2, 0x6, 0x39, 0x9, 0x5, 0x5e5, 0x6, 0x5, 0x0, 0x6, 0xbe, 0x4]}) r3 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) writev(r3, &(0x7f00000022c0)=[{&(0x7f0000000000)='x', 0x1}, {&(0x7f00000001c0)='\x00\x00\x00\x00', 0x4}, {&(0x7f0000002280)="9c1b84", 0x3}], 0x3) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0x81}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c000000130001c3000000000000000000000800", @ANYRES32=r8, @ANYBLOB="0000d400000000000a0001"], 0x2c}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0x2, 0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xfd, 0x5, 0x8, 0x800, 0x2, 0xffffffea, 0x4}}, {0x4}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xd17ade2259c64518}, 0x0) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) unshare(0x400) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000004000000000000000000000000000000000000000000006af2e9755b3a45417ba10853b81f751a5f3e71f8dc77c88e2b32656f2571358a"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000280)={r10, 0x0, &(0x7f0000000380)=""/246}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800451b001c00000000fb02907800000000e000030000009078006400d2"], 0x0) 1m33.139029802s ago: executing program 2 (id=4236): r0 = semget$private(0x0, 0x6, 0x3b1) semctl$SETVAL(r0, 0xff7f0000, 0x10, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) getsockopt$bt_hci(r2, 0x0, 0x2, &(0x7f0000000000)=""/44, &(0x7f0000000180)=0x2c) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f000065a000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000339000/0x3000)=nil) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x13, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), 0xffffffffffffffff) r3 = syz_open_dev$vim2m(&(0x7f0000000300), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000340)={0x1, @pix_mp={0x328, 0x1, 0x32314247, 0x7, 0x7, [{0xd, 0x4}, {0xfffffffe, 0x7}, {0x0, 0x6}, {0x8, 0x844}, {0x1, 0x4}, {0x6, 0x5}, {0xfffffff9, 0x40}, {0x3, 0x2ba}], 0x9, 0x7, 0x1, 0x0, 0x1}}) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000040)={@host}) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000140)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x4, 0xabc, 0x2449, 0x0, 0x0, 0x4}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r4, 0x7a5, &(0x7f0000000140)={{@host, 0x25}, 0x1}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/address_bits', 0x0, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) 1m30.455364448s ago: executing program 2 (id=4241): bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) write$tun(0xffffffffffffffff, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r2, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x8c, 0x0, 0x4000000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0xd55, {0x4, 0x0, 0x0, 0x0, 0x1, 0x0, {0x200000000001, 0x0, 0x4, 0x100000001, 0x0, 0x10000000, 0x2, 0x0, 0x0, 0xc000, 0x3, 0x0, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) chmod(&(0x7f0000000280)='./file0/../file0/file0\x00', 0x8) syz_fuse_handle_req(r0, &(0x7f0000006140)="7672139f6dfe7e10c37e3d50cbf562f2d282560a8454436f47e3f8ebc8e1fd792cee485f0bbe04efd996204a61c0d0772d8e489b6f4c7f78727738db2cd945bd9c9e3acea680ff3cf19e93fecd8832112f3ba0c952d39a0ec4e181e428d2a0b3a0e2da56673973a046eeb1bbb5190f22b2bca28b7bbe31ad76a1f78b6a029a8af489f6504b065915d63ac878725830e46aaad9db413d3d077bd674f5378f86e919a9fe9048a31f6534cacee89e88089851073c7b83642426efe63bf03edb870437a89f8b3f969cd80fe93dd4c55de2ff8560e72be3bbcd5ab399a7804abda51819a6d7b4083ae0371595ed9d6039787398c95617fa2db5bc3d786635de6777ec73518ec0d34e57683465c813e1ced803af62718f6b048d766174900789c3c0bdbe13e1cc48923c418402a93685f777c66e358c1fca553960565574f7c4d9167774a6347df159c4f3ad0caa4af45e4f0a9aaff419e85187cdcd8e38b5983997a926167e2287f8d9e1c8204734d3dc1e25b551cdfa566bac00ad849bf423bef21fc2197f2388bb3b347933bab61425787ff52577f3805e2d1f1bb20d2f288f88b9859db8208e2608eef52e573c36e5109d39826354dc3a562c23d87c585d968fde51ebf91911cd4f33a84f75b7731fac2eed48257bd054d6182f8cdbcd8a722ef32a8597f437e763db99dd7ebb43d9f3882451c24f66ca50ec0ad9058b24601685308133d367c480b7f4999a82ddd179051b43da6b98272928872c19a49834d79726aaac3724dc160d15cf92846a41ecc92948cc5a9cc4f7d6bdd01ceb79cd673cda60a56ff4bd75d8ad6a2bbeefce74f3480496196bf0b74388b7307bd57cc6c67dae4e621766614a4b0adf03aafa2c692b7d200276cb6720c4c00b0f16d0554a13feb1d9b95b5a8596cdcffcb5f43620ad0bb5ee700833aeacb20fe79059e3151d2ff31d737f9b1ebdafb0dbb75aa1b7f426670af32935ccd077137f0ed698b18013d9ca8d4fdb9c1ad59332726db8429af47775d7427bc6d49fdbdfb90daaa1b7e4997082296aad53f8044d26bb56989d0361d83175eedfb10dd3b54bcac20c3222e10af2853085b6d9c2a3132df8678d6cfdb6378bea6f9d308ad85e64d6b1adbacf190135003812c501df017a335cf80ed58ff3f237c9a7bc50dc411059056f00fdd4957cfb0d6cab6e7d24f240ff0530779f9daa7ab351149f0a2666bae744d6c56a67c259eba851cb114aad7f7529ef3eba66a5ddc3bfdc1168c76bb8eb7d0d4a6895b20dec236ef791078e97c480a01e7b2ef2bcb1da0bc493d6cb6cabc6e188a64835fbe1bb56fd0445df647ec41249db6efb4d68adf66449154e04c8cd7348ef02cd0afdec17ace65c2dfc4e024e0e2f3539508821b6cab7f1648d7b5b1a18ff301377f4f98f56ef05328d9fc62fd719cfaf49855f60272cddae74db365623efff3963e40e094a099b5b67fb8f9576be4549b1545d3231203aa30b4a5387860e8487be93bf13e7fdf70a92c4f9d2369f6ed84e2fc4ed938b512f6d5de28f020d7757ced0a7257794b634987d573250639fe66905e7713693de3a7870813803df631d626f4cec977ddc9f6cd62b1e425e9290ebe017c1f563452145a620d52663967cb3f29251607ca9b334e1334967e72d8c89cbbd4059705e6fca7124250f1338a3cb6a1b06c9b3624bbfb4b05dfbf397ff788499ebd2d2800ca5e22c12746041d04699728cf90e4441b82f45ee75bebb6aedcebef826c3b7b177104db327c78b90bee755f0b37fab27853a861108880864c123a70877e649e848abcfb94d4b996ace0734103cdf877e6669019d6017183406335b218858e0330de80f6860030d21e5cc29f165a38df3e5a63ecafc5d50ff4d93339af3a10ba1ab4aa89243b8c9d886a127c93bb946a7c80b6144673483653680dd7adbc25e7841ca9f393c42e9cf6b1fdfa91549c0d6a205dd7eef3a6b4e8dff9fd6c4f5e2b2511990fb38439392c9fda618a1f7dd797e3db4f6651956cd465aaee32ea18c02b9a3e2301dfc63289af5762bbe7e639f6ed0a19cc5acbdb3571c7fbb10f01a1d33038b75c762b6f0ea20d564fc1c7fff81cfd16bcddb051f93057584f4c17afc2c353c90570b71c856113cb58a2e514e75f8b06b2e55b9474199f21a848a4b18d34b1c0eb851be03467d79a40dbcc6ae670cbd1895bc46e6d27bfd9959512e8b4634dc498c63e42331f34a0707e486dc810f361d97953d5eaa0783f3a856081a6e41c057ca2d70c7f44623898af8d39841727a80ac1368135ee5024ff51868ba82fe618433666de64944892783761ec674d05f16f7828b9b24c95210c94fedcc20f58c638c74c12ae14c1287d3bcff75764aecc79aa71ce1c18deb39a4f2274ad661ccb703dc70249eed802577e4d6258010d53294bde2cd2e8167adbf9cb8db10f009a57b29ca1f22a3091638ec9087f35f22cdd359f3a1d102e2cbc7423ec4a6a1a4f8cf6358b8112656d5019d74aede5f7fa4778498fa9414519626e89d1cc09a1ec07e67f984b15d9fbccee6d50acc83a817024f503687df684c768dc96c90941f3279d68d8c804508f7a79d92e7bb8c22520847ced2f1f0ec71cabf96feedcec35ee52326fc45fff73673547e8e55f452c9dfd29231eb9b4f9a70d4e11b43112bc7cb457d371a93f53e2f7d96cf24839bc19b4c9b741aa565128064a92caf8338bf1a05a371684dbab7b45742d2735fc089c0dc740ebd14e70628de5eabc01fdd3080647fa283e95726f3ea9aef5537a534eb8741a7a47c675be8d65d17ef204a12757e8d4eec0d2a7df77f735be0ee6ef8dfe777571fc17acd0b1b9ee1a0845a5a1167ebbd9f771b83c2a5bbbc015a97091225319e13bf0985778da02e51c1909da0dbad32f00b400f1489880cec6237e36d3c1a50a13119aface904090e58f8707ab93f3b565d446568f68d4b3b62ffec0d7ff62191f5c9fcb8219abf1df71c7a5e7a1025e32ea576a01b0e0cf69d3af1b39f6a6896371a7bc1be6c51d971030b1b9ed6d8ae653f5c57368248280129c084122c50b2172c4f905e09dd0301cd2825806fcc6765ac6df707412b3be6a1d05557634d79eb41630ebd71b11434b68ab631a46855e19d71fefb77a01d3a9f8a43e978de8885394c3f5ca51dedb7bcd99b596e8beb2ea4ebd1079cd1e74f3642940119b1173f1ef3cce44c93516d52fa6da11158a432484e8a0b90152c8d4cf5012d48ad4b8ab1bf76e9ef921ece129be5834acf8b93e5816a4db2203f27f3255a83a8dcb457b8ffaccd6598fcf507b30c385c3df4aa47519c3d70f8683025cbca6e5b103e39280ba7a7ba33eddf5ace5065380747e8cbca9a2cd0781f9c9b93fef674a53935c5cb5f3e38cea7155eb959ad241cc635f4e86297c839d48288065a6bd45eb717b1b6ea20a213dc4834a297119eac95ba0ed4ec2245c4692653d670f45261bd54d7772d8d052efafe4486f37c54a94d7022b4b78c4bc7a567fe965d49639004a57b0e45e017bbb149026bcfc12092717dc468cad62bcaa18979582636ce88305140254f7b334b55200f5047387381ffd1f7d34b0fb7bff311f613d7e1b0cf6d8b38702ce9b650350abdcc5a81d0cc97a2b0a5aa11d945c9c302fd23272aef4bf3eece57c765a241893969a3e7d195eaded5af7f1f2845866aeee79a84907bfe6e78526c3b1f107cc28b3732b52bfa8859bceab06263bc8e85e96cf482044bc7516e42583a5b2139b0393c6fac2965b07944d954e74a2430def8ccf574fdc54ddfe5a1d167a0d791cdf202bf99a62bbbfb7c1aac776bde76dc3541228d3230a15fb7c6f687e262bc85a1b1508019369062ca77933b9afccc35f0f8265ee5eae168ece37324de2538a9721934332112f54402d244c82940bcda0a867dfc11d2a99dcd54c7d3b32fcb6eb19ed8950336eeddbf372c91a66f31f7f065a8ab86ec6d40350591bdc0cbf3aa9cad447c4906b00bfd376ca489d48bd49401b5d25f5852d0eff001502ec6fc869c9d5791b3161df0dfc0d6f4994cf277cbce6bbc99e9d409d2a293cbb37ab3d8655b88abdd34ad47bc035dfd504c9ec8b88d657b6376853a1933d4a0f4828aa020cfef3e518fdfacd3d9900b5b9a482dd593c01788ddbd6978f1a7ba80471a3891050451b1f170943181de415f0907b798bc701aaae564e30724c167ab58bed0ab85a75a957a196d2a51f3c6ff01fe57199fa8c526526b552d29b6cb0a41112aee4aa54a7aab1fd5504f7a3c5db2a7c1afcc840991d929a7faecf2e7dc0688f07da2981ca8a78db871ba770c971c561e4521932bf7c08ac554ecc531bfa16e767ee3e2fc54d45d8ff5ec92dd846632f140f9f7a70c4eab2b194317835f3b1e8d4064c2d564d0d61639b9c62d1ad04f76dec2d3251ae4685e152f3b0940ef6d02c81307de3e98bbcbdc1db14b8ba68baaeb3c3d387b4ac0e6b7e9ed144d85565c95120e3548fa1836dfc444ade6be458d9d43f6192d9d83cd7b2aa0f5ae9c238297787b91ac72bb9218f810d00006b2091f2b8a95cdaf60e9e79dbcfe52dccc93efcb729c15323e21ceb886252339dda73d9f07aba55ccc88af838c4ee739b13794884cd12ad6ccb02e821100f03b200af7e4bea30fc88a057622b71b13ef7f99c46f662b344dd4a6c1a6645ec552e2bd329f30cb4c4a06447f6741596e53a2f7d095a2ac618722543de728602d8bd65e6ea442c7e7353c497368107002bd10a50a752d18b90292aefd5e0b40c31b162914bd60d4a80d6ea36b008c795de53e0114b658d75b08c1279541c0e27971e65d6770bf8ecaacd8f0d16eda72167e5028582fb9873e2b55bd1d248d77e8d95aeb5d4ae46e8e9acb0726e1147374e344e22af5d5aa304a8d628e511f3a42a014ef500234147a817b8e34acc3c34ab3df1765a7d767c97bf71ced449b0d4af0a484205447d5129a6c5854a3597ba7aed9fe762dde593b85099f613f8ee8e9306786cb54a0d4aee73f45a1d53c91480a73b110fc366f95805dbb87556316241aa71856358910109931dcca820d10b783238e43dafac54666b73096722d415b6dabbc97795ac8ffccdc507ef3b232a13fb6c5a813eebd72060b8d99eda46e23a97ebf718f7ebff1e2a98c9af045e8474c0c94cbadd9097b36c6df5de20d2496b4048422a8e15097e6ce16145b737f84e7e86441496d1363273bcddc634b5fd9497091214fd7c5d5ea576f0035a8ecb207669a502020483f65b105c1ec0f2f43c45923a5fe1bef8e98a8a391c95b5f29afa2dc0257e073ad354d58ace6f74f6ad65dcb54a2e052b28a61ae06da59e993a14c39962f8a8fd02ad04c1d98503f3aec3b77426d460bf7bf5384ca02353c850db2fffe47e64d476a79583db1a53c98fb1492dd9a91031ff56a44594453b6f2f1ad96e4c8d19e434fbaff9451a73149942b612e4b85a02112ee67b323c1157b0da54045e44a859ecc7c0bd38ff4a26dc249ada967b7fe85fd0c82af5009b75da343422ed8bbb30dc6896b33ff4f0b3b29093f34fb782654827b45479f3c7b7839acd519c45442d7ba3a0cfd3cbba10a5a465608831054499f71ae35edd44d1ce9ef7b064f6790c8689854cd0c766c08c8307b57b1f4c956ad081c064e656d1582c56ed9fdd577f84fbf3ee451acd4d10f0c0a4dc1e6ab1f85261ec686580ecdbbfeb6fb0d291f7e08477fd3935142c2ed8caa847b9d19299c32f62d320cc5237fce666d181777568521e1d5e93c78dd99fc0301335b61cec3f8ae050175f0f07812793ab5025b7f16115789f4519ea79775ceeb2b9ee339b0a80ea2eecd4edf2393a28e0ca4c1252bb24fa7420bab46e2937095e5b9f96cde111de110213dade07359aadfd74c7ee3b893d713662ed204bb9a77b8e9cb4c3ea253ed400f068f5eb84d192ec1bf8d0cb311b875e097e924f5444e748d540fb40ab800b06f5de0c11fef6af640835b552d0b9cd95cf7f79aa9610b850f597372f4334513f4bdb8155cfc2831ba6fff1c8d66fe1372fc211906e816bb4d6c5dc765d49a57d130bcb9734e53bad549d35b53028211e532583e4c1f05d2d3ff0ad57747b57b8004492988dccaa5c3dc7edaa1f3e23c614f897da273648807a50fff28b3ab314966277f76ff5be2a708971c1ca494fd50e0c64e43671b1b07b4e5e0c51732e3dee53ff4d10cfd75bb6f0e09fcc5a7f32d073b1b9bd610d5189c8178af7d52dd7f91b8f9e292b87b320163e6374fcf874db938c17351f43be3f641e92812d72bca591f809ba06349572c1b063e37a59571599bbbbfe6989fcee3d27b7466357a8a5ba48e643a2899f92b208bc0dd48f553dd1f2a6fc95621f4c68067d7dd5ba691b99b3addd839c6391c1ffcdd2832941e2fe7c25490f7a1580ff17a62d4063a8feb35ceef20ad6bfe252697d4631156f8dc8b03107cd1640e1fe8450a89f0565f011b47b9536f6c639b67a32a45542be789cd7aa4e08dbf6e1a8a87f7a74248a976d14eeb7c7139ff00f5cf3e0d0557051a75348ac3c1418ec78ebd3ae32bec0b1e9bc4043f74453b86bc2c6099ab8425a0d2cc9e56879b8fe50b41002af7b3b851860a8108ee284c6f21a25985678e555c2ab5fce4c614dc01c45b943c5045773d314b3aae06f696620d5341b20729c971f0944e86cb012c90ddc315e12572e3517d2e5d4df33c60f30e84cb1ba94125d13e38fff920e292660a32a9a1ee693201be938419a92e6d73a939fbaef1c2d463be57d555902292855ac250cb68429aae8e9f0f6dbfb960e51ca48c1b49e6d2780f2a123d943abf0dd93150d41380b3d99dabf27a7212e86a741650a6634c4e569cc5a8c5d97ec6d70e5cd66f5848e8a09f2a76cd11482f6d3717eef5bab444cb90d7360237bfa65dc75ba3d864d688c2d4e983de7d978a6222e2c0bdf4111f645ce8e409124844455b347415142c886fc95ba869fb4b770dbfad34e267590341ce287ee591f6cd5b6e4a5604b6b0f57cdca1b457c66d1c731ee1002839a1263d8b75b256c90eab7b43d36b7495e50e0865c2a14bfb87713b9ada89bdd453791f6c18046d220bd9e16bbe021df828d2deca20cbb77553e3f54c418179283b236bc231e478558c25af5cd14cd3dabb1cf3e359f7389ee84fad8c98faf560da9b36694e86a80c8d9d3261900bc195d441770774653bd78e66e0999a0f99c9675ed3030c74499c67d869d14cf3ac4df406ea91799de18b129be5d3eb8409047778d063f3bb6e6e6a5820e899ebf43049a079997ff8e36d36e5ccf49cbeb52e5db213c5e46654428cb773a72c6bb01454133aab163b537675e4ace88579c840fcb555e96e3b362869650194b654762b10d0d490b9a4ef1f91f6c32aad575b5cbccb6bb1666476985534ab3159c42c1545bfc1018fb5279c049467a8a46c16f8ba86e1d4041828e68a6c7d7c9a0481718da4ff29ed21f3956f7afa84c54369ac4d85fd93c60491cb5155a751e17dd1bea07854b6fddfeb6eebef32029e8353fca32c0d8831e0c33aca792c71a2792067442c1964c69b7ae56d80abb62dacb502bba580af066d851d69f47012433bfd02fc681c6687261d7709da82a2cdfbe46e2157c54166ce2e041d97f5a824b7ed4b9f25067072617a27ce4f74c574b435da03c2afa4acbd8c1d2d43bffe4570d236e2374fbeb85fd8672bf62b89f8d3cefd63aaaf0054db14d23c4df208bff4d211299d547f5f3b4c7f57d79c1983ac0f2b6fdc60acc7bbdcafc5eebe1ece85bc31e57e9f553444e20d22b7578df116b83d34a91caae699c770e14af09c1cb9814381294f3c7d6e13735e982b2ab17d6bdb74cf7328a7d3b3e963cae944dbc9f91aa1ca629e471ecbffe8c573885209b772e5de04ca6954a9fa196733066d1219380bac92cf297ddc4aab061406fa5f4e73e16398316934be86be4feb69b94ba4ded5996fa17abee2d8015f41b293bc643826672a4d4b007baa9cb93754efa0d5a08b153a1f389e6c1753cb248ea21a18c7e7d58e54f61b6d07c400b105d1364a091c7ac92309e8951a840edd590dde3a3994b53a5c3302fb404094c8787da420c3034d3b289d3667276d2220de8cc8f94989f900483acda9b6d878bf360477dd59cce976e0a4ab29129492e35adc83b41ae4f84483bb89876ec4955e83f9a22a0c506f5532e5390f3d548d327516e5fa7ef8d613be77b4967dd8602de27f28a97cab485f2ccd97f244df27f5969c3626b5e50d7cc802bdb6203494f7cc4d7e1ffc31a6df947f91f1ad8f8110d773840ad3beec8197e7516467b62882af0b7cd0db18e18d86535cca2d00b8d4b1ac22f8f264d22c36a50c8a342da8b0222f657b04b17a1e282d366e6799cfbbd6d8429c79cd989d6cfffcd83790803cc608c3815cf4013a54f07100db8770b7deb1873905ae9d29d0918e06fe0ff42020940ae136a1b01cc283507a051ac23795736213421ac88ea2f7cc3a84bf63ca45957a14986e906a73a9b4f578064d3e34eb3952e01b7b8d239e31c95756539028cbaeba975134b7fde393f0b365f01f5757c89f8db7ff6fa90efa0c4c8a4696f26ae8f6241c4d5672fac434ee547579b08f8e5418590cf526e8aa46b7329e45c41c58680b348562b10de4cbd9d88b22e8e206bb53a54e51c62d4701d2f87f1e2c91f4c78bfd0e29ff05fbc5c2ffe252332c775745aa8b09345906452ef8eafdaf7aa63d9abdc6707454710c73faa131032ce6d760e3b545887cd63188cfccd629e8f17ba7265f67c6e9db46843da5873726563763c08c33a389aff7be2a73da702a56650e9f1e3ea48f7467075d51a6b4dcf943079eccfe67c2fefb16be5216263548029e5754e7c74164e38e4fe3f26d5fad42fc6dfce5618e17bcb978b752106a36436f5be59f960b334c4d6533ac9d0705e84e4c8c90eaffded330482e689dfb788ba3dbf3280de075227a6eab2423ba6331801e1c95913fa37b0d6614ac7e286de82002cfec99d212bcdb4916f82248d1724c0479091d3a95538f6f370f1c8a0d120cc2fa8037003d8555602bf434128b73c06210cda0b49b789d232cc5d25bd6f3028d0ab8d7cb4b4b2555ed819ae6a15c23a7398f72320b924007f16d7e814be30907c24ac5196d84c00adfa449adf3c53a94a8f64f184d42fdacc05492b3f7324f444d13860053dcf877fe2486932248c9e0cc54e4b119a995b00e73d61958fef582bcf52b9e316594e67929ef69d2c2cf36f4c0e6c31a9c740f8caafa31e10a36fda851d6d28ef2442930960497a33cf10c85b5312512325b41865441a8e93c89fe694f133b79e3eef37fc4dbff0fbaa56b699520da1bfae1dd39f0ba9dcffca01188903f46341c815aa54898b87a4e049c8ff28bcb9b69132fda3fc3d10268c480bb76ecb12b48b9808e8e67e42a9bca0c32a48f310c890f9cf61d5e1c09b08f0eb983c765e98acd139cdd5561b0ee4c0e8331a18112037ec39bb29df24ead90a809ea9d57fde46acc2ada50843d9e88575889770d1b407c3f290b353e757fc349bda8fb4add1041e0fff3810a0a3cdddb4e816d8d4682d4e275ae9f2dd1bc06905040a955bd8da336e211a0bdf1b8e1abc8457102d0ba3461bca211e0e47ae82f9ebbaac20a9ed91a96c3d0516844cac3304bdb85c94d1cb703a0c05afdb1db104b2a45a68c198face83a313aecf1da56fcd111123690a1410aa6fa2402ad11fa5331d784beaa49c4cfa74f68dfcb6a9cf6e91e5602ee9439adb5b3cefbe9a9e93c25febe17e8ce47db7846c9b950b55111a676ca855c90e8e82c8adf70cd76bd344085045486f8bbc119d8c24e89ceaca34ac36be0f6f1e1bf1b05c249d0f11cfb1d03b33eee4d94bcbdfa6e659bb109b1262532ab8d54a1dc46645e97496183d88f89b59271a0a8335d1ec1b136e1d4165e5c97c37b336ea5d14f57fd0dcae894254db8d86cd8c2630f944189f4633f1fc373b4e8fd9595a46193eba0fbbfa4f58d5fdf8790c51305065005a61f0e9026eed4f704084b996e2976c883b88818d6b74c2e61c1c41bdc8a34e3a3c792a7652fdb5f4f22ca9e20be548938e174974b28704378cb771b6af910cce6d2e406bb3af4f12033b9d56fcad8307215c812eeccbbad484618c4d0b14d560aedf62e9f6d4b10f0732a559b1d213005434f1ea025e2efae734f10acc42b999a1639e053551aa0fe356431ab7bb6a7beee9b573ce290f8876250962a57d380104d6c800e86e89e1d511d28d3808efcd62a1c6d809ed7507b640de32f432b8ef96255942867c1953fa10d97c5927a277141449a57ddc34521908fd04cfb32ff464a1c4d1935a660bc572f73750102e3ee1a9c6d2abc1b709952cabf6ff4e6d08a2953172d6d9a7a2004cfee1f3b44c6846968cc382238b10846e84a8def3381046193d699434493b136a439c97cb8059fa957e2e80e8598ecf358acb0c07c46411a8c3cdcbd2a40fead2d33be7cd9f447ce0183c166fcff90fa4d50993f1b40743dd8f85ec95185fa64fe1c65900c4a08e5fd4158e413d72a801f128fcc580d22e0994cefb23819804fb55ab7a6e82d47ab108c112bd9d94a48f934d9fbe49672298b91405b3993e61b9bfe4cdd26cf69ba37a8a60d45ff87eb98f8a01a49474d8b7b2e14f6685cad0c4cf60fb9239b5b70208ad5ad6c151c375ccfb09d55c8b140ede7e51a48a33c13724eeb51bd7bcf3767186a1de9e54e0aebec316f6f677e9f244e9350efc6feeef3a606d4527e1aecad2ca6b6222decc0ac034b3efcf6fc653d7e2b95b9fc2d3bb58e1bdc47318fce4928fce7fc1dff89f908495dbd41fa03e976a65bc36d968188fd0d44ac1c4200be82ca3c9db1d0c3c0333a0e817f14565f2771955e0107db94bb790f079ff8fd55afafaaf8b346bf80dba79a74b0129a8d6370344363faf41f40d1e45591ef9677e5745ff5b0e5f76a2053c773cfff2bb1ccc7061cfa0c041d68feb12c56ab3a3b795efc0881d9ffe06caf9a3430bc60e9d716f11d3672b1403416c14b4f8a9caa1b54f7e616d0fd1cf9bb3b52bdb1945074dfef4e6a4a8069084a674414b74c972aca7513cf068ca99da6bfd1cec93cb8769f52bc06366b32bf6cbf6c46919b0da4ed6ba16a2a0cd123ea31634ce07081d593684c61cefa577196c6656d374000945ceedbdb8dbc0b01894edc8d7cab1b635ea248b9742efd6e094b40ab5b97701433c1cc5dbf6041f8f2f41437469518ebef65b7bdb6a0b1e06e7ed405e97c229849aa476647f02521abad910c018cd4eff3f43da9eaebf849575fa0135a697d7571f6cc305652a1cf014d2b97ab7cd254a29fa0f35d122b289c2dbcba9e01af7332c405acf55954b6a81af2a19484339943b08103e6d81b46fdbce53c16baa142bc2ac948b692c3d0006ecf6d2f24e89acd8c1167668657d3a0a4689a69c221619fb9c898b244b442032ffdb63d42ded7850409faeba18af67bcc8e3b8801e55e83e45243f2ce64d2dab507b9d20dca219b55c74e767702e0dc0ecdbfbc00fa5683007d68992bc9080feb8e16ad2528e6afa59217eeff0bf75247caacc5e4c38680478897c360", 0x2000, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x78, 0x0, 0x1, {0x0, 0x0, 0x0, {0x0, 0xffffffff, 0x177, 0x1a6, 0x7f, 0x7, 0x7, 0x3, 0x8, 0xc000, 0x2, r3, 0x0, 0x8, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x202, 0x1, 0xcccd2000, 0x1000, &(0x7f0000009000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000000c0)={0x5, 0x0, 0x5000, 0x2000, &(0x7f000002f000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x4, 0x3, 0xf000, 0x1000, &(0x7f000002f000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000000)={0x200, 0x0, 0xffff1000, 0x1000, &(0x7f0000ffb000/0x1000)=nil}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r6 = socket(0x18, 0x4, 0x0) connect$pppoe(r6, &(0x7f0000000100)={0x18, 0x0, {0x2, @multicast, 'vcan0\x00'}}, 0x1e) sendmmsg$unix(r6, &(0x7f0000002280)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)='c', 0x1}, {0x0}], 0x2, 0x0, 0x0, 0x8}}], 0x1, 0x4044081) 1m28.369489971s ago: executing program 2 (id=4250): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000)=@fragment={0x3c, 0x0, 0x5, 0x1, 0x0, 0x1, 0x64}, 0x8) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000100)=0x3, 0x4) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @host}, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001040)={0xc, {"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", 0x7c4}}, 0x1006) listen(r1, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) recvmmsg(r4, &(0x7f0000005cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004400)=""/211, 0xd3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005c40)=[{0x0}], 0x1}}], 0x3, 0x0, &(0x7f0000005ec0)={0x0, 0x3938700}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2d, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001900010929bd70008000000002181000000000010000000008000100ac1414000800d0b5296401021800168014000300fc0000000000000000000000000000000600150002000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1m26.861883642s ago: executing program 2 (id=4254): syz_open_dev$sndmidi(0x0, 0x2, 0x141102) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x0, {0x0, 0x1, 0x3}}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xff}, 0x2}, 0x18) unshare(0x2a020400) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x2e, @loopback, 0x4e24, 0x2, 'wlc\x00', 0xc, 0x9, 0x40}, 0x2c) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'vxcan1\x00', @remote}) 1m11.33269423s ago: executing program 32 (id=4254): syz_open_dev$sndmidi(0x0, 0x2, 0x141102) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x0, {0x0, 0x1, 0x3}}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xff}, 0x2}, 0x18) unshare(0x2a020400) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x2e, @loopback, 0x4e24, 0x2, 'wlc\x00', 0xc, 0x9, 0x40}, 0x2c) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'vxcan1\x00', @remote}) 1m4.292587317s ago: executing program 0 (id=4321): socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)={0x74, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0x0, 0x6, @device_b}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xffffffffffffff7f}, @NL80211_ATTR_KEY_SEQ={0x0, 0xa, "56eee3355049ec975045bd5e90c3cb8c"}, @NL80211_ATTR_KEY, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x48880}, 0x4) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x3) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000740)={'pim6reg1\x00', 0x400}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRES16=r1, @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$TCSETSW2(r1, 0x5408, 0x0) llistxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x41, 0x0) r7 = openat$random(0xffffff9c, &(0x7f0000000040), 0xa4101, 0x0) ftruncate(r7, 0x6) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, 0x0) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 1m2.978803946s ago: executing program 0 (id=4328): sendmsg$inet(0xffffffffffffffff, 0x0, 0x600) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@mpls_delroute={0x30, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x14, 0x12, {0x1a, "cfeacfbd6c9555bb04b2f81c4d07"}}]}, 0x30}}, 0x4) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}], {0x14}}, 0x94}, 0x1, 0x20, 0x0, 0x8040}, 0x0) 1m1.168940705s ago: executing program 0 (id=4330): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xff7f, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0317000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYBLOB="1e"], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 1m0.604634291s ago: executing program 0 (id=4334): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'macvlan1\x00', 0x0}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000080)={@remote, r3}, 0x14) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f0000000000), 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000001900010000000000000000000a0010000000fd00000000001400050000b8642f00000000000000000000000000036020bfc0"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x80) r6 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_clone(0xb00b000, 0x0, 0x28, &(0x7f0000000040), 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0xfffffffffffffffe, 0x10000, {0x8, 0x0, 0x0, {0x0, 0x20000000008, 0x0, 0x0, 0x0, 0x0, 0x80001, 0x3966, 0x0, 0x8000, 0xfffffffc, 0x0, 0x0, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f00000001c0)='./file0/../file0/../file0/../file0/file0\x00', 0x0, 0x0) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x8000, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x400c094, 0x0, 0x0) 59.603745534s ago: executing program 0 (id=4335): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x2, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303", @ANYRESHEX], 0x0) (async) syz_open_dev$evdev(&(0x7f0000000140), 0x3, 0x480) (async) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) (async) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x2c0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 57.583215393s ago: executing program 0 (id=4343): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x2710, @host}, 0x10) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0xc, {"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", 0x7c4}}, 0x1006) listen(r3, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) recvmmsg(r6, &(0x7f0000005cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004400)=""/211, 0xd3}}, {{0x0, 0x0, &(0x7f0000004600), 0x2}}, {{0x0, 0x0, &(0x7f0000005c40)=[{0x0, 0x7}], 0x1}}], 0x3, 0x0, &(0x7f0000005ec0)={0x0, 0x3938700}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2d, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001900010929bd70008000000002181000000000010000000008000100ac1414000800d0b5296401021800168014000300fc0000000000000000000000000000000600150002000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 56.112728369s ago: executing program 33 (id=4343): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x2710, @host}, 0x10) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0xc, {"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", 0x7c4}}, 0x1006) listen(r3, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) recvmmsg(r6, &(0x7f0000005cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004400)=""/211, 0xd3}}, {{0x0, 0x0, &(0x7f0000004600), 0x2}}, {{0x0, 0x0, &(0x7f0000005c40)=[{0x0, 0x7}], 0x1}}], 0x3, 0x0, &(0x7f0000005ec0)={0x0, 0x3938700}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2d, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001900010929bd70008000000002181000000000010000000008000100ac1414000800d0b5296401021800168014000300fc0000000000000000000000000000000600150002000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 41.874716762s ago: executing program 5 (id=4391): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000000280)={&(0x7f0000000180)="cdb487e054", 0x5}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000100)="d21e9e42", 0x4}) io_cancel(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3, 0x3, r0, &(0x7f00000001c0)="029375ed0d6dad088a08dfc397a70a5afec3ad52e1232e171f1ad2b059eb671aaf88ff0745849891b849903d79f1e9b612c769abc19907dc0eef258b5deb3b9e494e808724af3e181d99b2103bea54497dcf3cecab0fed756ba56661c2bdb3dea17fecdee524d283b8bb0caf7e3e4c", 0x6f, 0x0, 0x0, 0x3}, &(0x7f0000000300)) close_range(r3, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x801) io_submit(r2, 0x1, &(0x7f00000017c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x5, r4, 0x0, 0x0, 0x9}]) syz_open_dev$I2C(&(0x7f0000000040), 0x40, 0x400) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000021c0)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) ioctl$SOUND_MIXER_READ_CAPS(r1, 0x80044dfc, &(0x7f0000000000)) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000240)) 41.591596047s ago: executing program 5 (id=4394): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f00000001c0)=0x304008000) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f00000003c0)={0x1}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x2, @remote}}}, 0x108) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0xf0, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x2, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}}, 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001c0001"], 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r5, 0x107, 0xc, &(0x7f0000000000)=0x9, 0x4) 39.613197998s ago: executing program 5 (id=4399): socket$inet_sctp(0x2, 0x2, 0x84) r0 = socket(0x848000000015, 0x805, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={0x0, 0xfffffffa}, &(0x7f0000000040)=0xffffffffffffff11) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000140)={r1, 0x8001}, 0x8) r3 = socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = userfaultfd(0x1) r7 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x1, 0x801) ioctl$MON_IOCH_MFLUSH(r8, 0x9208, 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r9 = userfaultfd(0x1) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000280)) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) write$FUSE_NOTIFY_STORE(r7, &(0x7f0000000200)={0x2c, 0x4, 0x0, {0x4, 0x8, 0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}}, 0x2c) ioctl$UFFDIO_COPY(r9, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa006}, 0x4) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r12 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r11, &(0x7f0000000240)={@val={0x0, 0x800}, @val={0x0, 0x0, 0x3, 0x9}, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @loopback, @random="b5ef09a7db7d", @local}}, 0x2a) sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0xc8}}, 0x0) 37.781216886s ago: executing program 5 (id=4403): syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./file0\x00', 0x1000a0, 0x0, 0xfe, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWTABLE={0x1ac, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_USERDATA={0xb8, 0x6, "865cc6f6c86f298bcdf7179b0bb5d8d819debf611dd1003d2bc372ea3ae9f47945a7aea4dfaa465bc87b6b8d3f276000fca1c8622b76ac522fd40b6c751ec404b818fefa62a48f4e455aa583117ca86d80422649796ac4cd5589076c82136356ce512f6b25891f1d6e9d409b4e8c45a09ffee29c8e83c955a477ae8d06e13c5bb68dd882d58697c39b6d2ad2fae11ce51a8a374ce66fce353dad385cb0222df2a5945b1f628ba554b72c78e1b62fd28d9b6f9138"}, @NFTA_TABLE_USERDATA={0xc7, 0x6, "92d0acf792bd44127e0a1d5f468c4d0730a92065c4d82bb7a781a0ed94c9da2560c49170f409093a6cbb98d0b6cb4716e66d3a20ebd748f507020702e5dbdfa7b89d14317c8e7ab506d901a359e98ded7bf2dd873ed0d01afbbaa91d072cb1f10f39ef9f6291e508f2d7c30bf6e28b9ea2ced693dd04213cbfff1d99eb2d99c3f81fd1383c5c227fd1ed5f536289e909c3d671d14064a44d52b02b8e6ae58a077e6b730dd3edf79ec39cbdce076d6fcb6312b0355a4bb060345bb96951b753f299342f"}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x4}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}}, 0x244}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xd0}, 0x1, 0x0, 0x0, 0x90b4}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(r3, &(0x7f0000000bc0)='./file0\x00', 0x800) move_mount(r4, &(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x220) 37.538244713s ago: executing program 5 (id=4404): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket(0x1d, 0x3, 0x7) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000000400003366"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r3}, 0x20) sendmmsg$unix(r3, &(0x7f0000001680), 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x801, 0x0, 0x2000, {0x1, 0x0, 0xa}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) r6 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r7 = openat$binfmt(0xffffffffffffff9c, r6, 0x42, 0x1ff) close(r7) execveat$binfmt(0xffffffffffffff9c, r6, 0x0, 0x0, 0x0) r8 = openat$binfmt(0xffffffffffffff9c, r6, 0x2, 0x0) close(r8) execveat$binfmt(r0, r6, 0x0, 0x0, 0x1000) execveat$binfmt(0xffffffffffffff9c, r6, 0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) r10 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 37.227273435s ago: executing program 5 (id=4405): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x8, r1}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x300, 0x0, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000080)=0xf58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r7, 0x0, 0x18, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 36.673963933s ago: executing program 34 (id=4405): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x8, r1}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x300, 0x0, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000080)=0xf58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r7, 0x0, 0x18, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 10.341506891s ago: executing program 1 (id=4481): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x10}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x2c}], 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) socket(0x1e, 0x2, 0xffffffff) close(r5) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3ccb510b1134200292b010203010902"], 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000100)=0x6) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x3, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x8b, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xfffffdc9) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80082, 0x0) ioctl$TIOCSETD(r8, 0x5423, 0x0) dup(r8) syz_io_uring_setup(0x6c0e, &(0x7f0000000200)={0x0, 0xec25, 0x8, 0xfffffffd, 0x22c}, &(0x7f00000006c0), &(0x7f0000000140)) 9.837169974s ago: executing program 3 (id=4483): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000540)="e304620def9c11354be71425d41bdaac9e5514cfc3757dccdad5fc9373afb2e0d48fe82ff1240ab729a3ecafd416bb7f550aa36b17f9d72c7a82d1e9952cdecda88d4bacb19a71a32536352d9f81c20f8863a91ed1b6188acf8b475028a83031995cf854dc163094b6bb8313284eb03cdf51686c0c30a7ba5edc64ebb17ea6888b0e6e7ea1063f5a0268c854a50a570cb93ecc4c3952575061af05864311fd495c2c99386654b9d78cbb004232be8e48219dfd5cb40a0bbc72c64845bca10b6f9951cb22f84af62e57075543537ab96d36ccc46c765075e52cdf8aacec946665f4", 0xe1, 0x4004, &(0x7f0000000280)={0xa, 0x4e22, 0xff, @loopback, 0x7}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000940)={0x38, 0x5, 0x0, 0x4, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x9}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20008840, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @value=0x3}) add_key$keyring(&(0x7f0000000300), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, &(0x7f00000000c0)=""/83, 0x53, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="4c00000002060108100034e4000000000400000000000900020473797a3100000000050000000012000300686173683a6e65742c706f72740000000000000000000000000000000000eca6e96c701e37de2b8309b63b32b2836e6ce6bb5e63be04583932f621682ba56479bdd452066348b13f9824d73831e7cd8a0163cc4356245a1b6993dcf7ec3952c9ae379c5fb536fb2f93969b4d9e8f861e29fe2bf73eb8790089d278b57b79aa8fd72924277686670c830501e16d"], 0x4c}}, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500013289bad8814a4434801800018014000240fe8000000000000000000000000000bb060004400e1f00000500070088000000060005404e220000"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c00000007ea040000000000020500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10}}, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) open(&(0x7f0000000380)='./file0\x00', 0x6ec58fa5834dfb19, 0xdb) r6 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x141000) r7 = fcntl$dupfd(r6, 0x0, r6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'vcan0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x7, [{0x9, 0x1}, {0x6, 0x6}, {0x4, 0x8001}, {0x4, 0x3}, {0x1, 0xd5}, {0xffff8001, 0x7f}, {0x5, 0xffffffff}]}}) ioctl$USBDEVFS_REAPURBNDELAY(r7, 0x4004550d, &(0x7f0000000500)) 8.623111281s ago: executing program 7 (id=4488): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05072bbd7000ffdbdf2501000000280002800c00518008000100080000000c00018008000100010000000c0001800800330006000000040003"], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) 8.506313661s ago: executing program 7 (id=4490): socket$inet(0x2, 0x3, 0x6) r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201410117512920570509201ec70102030109022400010200100009045807028ab53800090506020001000006090582020002"], 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x100000000, 0x4, 0x9, 0x3}, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@getchain={0x54, 0x66, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x1, 0x5}, {0xf, 0xc}, {0x8, 0xb}}, [{0x8}, {0x4, 0xb, 0x101}, {0x8, 0xb, 0x10c80000}, {0x8, 0xb, 0x32}, {0x8, 0xb, 0xc614}, {0x8, 0xb, 0x6a76}]}, 0x6f}}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) shutdown(0xffffffffffffffff, 0x1) connect(0xffffffffffffffff, &(0x7f0000000000)=@generic={0x5, "1fc73e813dd991ba2347c88de0a7d74e081b1bd8b6772d4ae79911954e27678632f47a75705615129fcc6424b663089c788dbc93b3a8d4da7e08a4e532c73c6792d75061de41bbe7b726d9e1896bb228b6de32819eb63cc138ce7349be76eeb1f079201efb2efa8498cdeaf886e40d52851b2acfc5b23948f4e02ef13b26"}, 0x80) socketpair$unix(0x1, 0x5, 0x0, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$pokeuser(0x6, r6, 0x108, 0x4) ptrace$pokeuser(0x6, r6, 0x118, 0x6000003f) sendmmsg(r1, 0x0, 0x0, 0x40840) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) r7 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4) sched_getattr(r6, &(0x7f00000000c0)={0x38}, 0x38, 0x0) ftruncate(r7, 0x7000000) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000000100d8ea3fa1a08f361a6037b4c6"], 0x14}}, 0x40) mlock2(&(0x7f000027f000/0x2000)=nil, 0x2000, 0x1) r8 = socket$inet6(0xa, 0x3, 0x40) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f00000001c0)={@initdev={0xfe, 0x88, '\x00', 0xfc, 0x0}, 0x800, 0x0, 0x3, 0x1, 0x0, 0x4}, 0xe5371bee3fa2fe39) syz_usb_control_io$uac1(r0, 0x0, 0x0) 7.564345344s ago: executing program 3 (id=4491): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000016c0)={0x2, 0x0, [{0x2, 0x28, &(0x7f0000000080)=""/40}, {0xd100828e98ba2273, 0xef, &(0x7f00000015c0)=""/239}]}) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f00000001c0)=0x304008000) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f00000003c0)={0x1}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x2, @remote}}}, 0x108) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0xf0, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x2, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}}, 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000ff000003bfa30000000000000703000000feffff620af0fff8ffffff71a4f0ff0000000015040200000000001d400200000000004704000001ed000062030000000000001d440000000000007a0a00fe00ffffffdb03000040000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa5b4e377184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7592566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6cb5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a00"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) io_setup(0x8, &(0x7f0000000000)) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r3, 0x107, 0xc, &(0x7f0000000000)=0x9, 0x4) 7.006724374s ago: executing program 6 (id=4493): r0 = socket(0x11, 0x80a, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0xa1, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602200000000e000a000d000000028000001294", 0x2e}], 0x1, 0x0, 0x0, 0x2400}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000ffff26bd7000fbdbdf2500ff0000", @ANYRES32=0x0, @ANYBLOB="010000002120000008000500", @ANYRES32=0x0, @ANYBLOB="1c00128009000100766c616e000000000c00028006000100010000000a000200aaaaaaaaaaaa00000a000100aaaaaaaaaa230000"], 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x1070bd28, 0x25dfdbf7, {0x0, 0x0, 0x0, r6, {0xf000, 0x7}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0xc8804) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r2, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002802c0008"], 0x78}}, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000400)) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x13f, 0xa}}, 0x20) request_key(&(0x7f0000000b80)='rxrpc_s\x00', &(0x7f0000000bc0)={'syz', 0x0}, &(0x7f0000000c00)=']!\'\x00', 0xfffffffffffffffe) copy_file_range(0xffffffffffffffff, &(0x7f0000000100)=0x6, 0xffffffffffffffff, 0x0, 0x4, 0x0) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000140)=0x9, 0x5940, 0x6) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000580)=ANY=[@ANYBLOB="7261770000000000000000000000000100000000000000000000000000000000b9000000d759436ec1971125cba389080181dd648b1aeab50a7aff5ee08d46cd26a89f1198411d3267632c350e69ce4504f5ce19ce6b7047c25f44408727c7fd2f2f59e4ecf3e5b174e5b4be0646307d13cc3b6eca83614258bdd7ec63daeacd5315a9568af0da56235d8c4a9cbe23a1044c01000c05df06023f01477cbccc62f3a5d3adcabc987416db9647be826b001a8de3cac815d0341e96fb4145ada2df16f520eb4c94e021ad18f0"], &(0x7f0000000280)=0xb7) r8 = syz_open_dev$vim2m(&(0x7f0000000240), 0x6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_DQBUF(r8, 0xc044560f, &(0x7f0000000380)=@mmap={0x0, 0x1, 0x4, 0x2, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "00bb54f0"}}) ioctl$vim2m_VIDIOC_STREAMOFF(r8, 0x40045612, &(0x7f0000000100)=0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) 6.918558882s ago: executing program 1 (id=4494): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, 0x0}, 0xc001) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2fc, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x268, 0xffffffff, 0xffffffff, 0x268, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@multicast1, @private=0xa010100, 0xffffffff, 0xffffffff, 'xfrm0\x00', 'vlan1\x00', {}, {}, 0x0, 0x0, 0x49}, 0x6, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "00000100cbd047da9ca965f96ad58a1f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bf0bc37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x79}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x6, 0x9, 0x2, 0x2, 'netbios-ns\x00', 'syz1\x00', {0x4}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, {0x0, [0x6, 0x0, 0x0, 0x0, 0x1], 0x0, 0x5}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x358) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a000018000000080005", @ANYRES32=r2], 0x50}, 0x1, 0xba01}, 0x20004010) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x38, 0x2, 0x6, 0x5, 0x0, 0x0, {0x3}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x1c, 0x4, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r6 = syz_clone(0xc000, &(0x7f0000000180)="a6f4042da75d51f5857e07154282916f946be6f0df94c0b49e52d75e72bf971e8079612bdb1893fa5f50020a94abc079b1677b16d0dd33d2409df181d800da6bf3559c9bc4c489c16bd0485120957e6db29ef432c099a17830418b40b723a9622ff0b0c5c9bd16e030f9edf87c7e31c52f1dd293f398652af5eb284ba73b3065520676d4d8dc674bb44dc78657fd318bba4fc374078512b2d0b22cd6380f6ccc08", 0xa1, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f00000002c0)="bed3d07cf2e3f7e7828d7ee682a02cc84bbfc0fad29199768b9e521e210819b0ca97a84478f7fa3e6063d1c25c7831878adb0455f6b12dfb63335b6a376b6abc4508b660db553f024d7ff6f0a2fedf964c3ae9bce3fae6d9cce3b0a16b53") sched_setscheduler(r6, 0x1, &(0x7f0000000080)=0x7) socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x404c080) 6.596293007s ago: executing program 6 (id=4495): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)={0x88, r1, 0x5, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x52, 0xe, {{{}, {}, @device_b, @broadcast, @from_mac}, 0x0, @random=0x4, 0xc, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @void, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x9, 0x3c, 0x2}}, @void, @void, @val={0x71, 0x7, {0x1, 0x1, 0x0, 0x1, 0x1, 0xf0, 0x8}}, @void, [{0xdd, 0x9, "36921077327ccfde42"}, {0xdd, 0x6, "c8d56e9e289f"}]}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x143c}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x300}]}, 0x88}}, 0x0) 6.122616415s ago: executing program 6 (id=4496): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8282, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0xa, 0x2) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'lo\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f0000000000)={&(0x7f0000000580)={0x1d, r2}, 0x10, &(0x7f00000003c0)={&(0x7f0000000400)=@canfd={{0x4, 0x1, 0x1, 0x1}, 0x37, 0x2, 0x0, 0x0, "cca6f1e10194fd9304e8689818861d84be21875faed70061c5322a4ca458f0f2e584421bc2541407c3498de2c8afc31232034c834cdc4586231d4cd77cc6c6ad"}, 0x48}, 0x2, 0x0, 0x0, 0x20000004}, 0x10004010) syz_open_dev$media(&(0x7f0000000040), 0x4c6c, 0x200) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x35, 0xe, 0x4, 0x1, 0xffffffff, 0x1000, 0xf4, 0x5, 0x7fffffffffffb, 0x1, 0x3eee, 0x40001, 0x0, 0xc12, 0x1, 0xbde], 0x1000, 0x3d4316}) ioctl$KVM_RUN(r5, 0xae80, 0x0) io_uring_setup(0x1781, &(0x7f0000000500)={0x0, 0x698c, 0x40, 0x2, 0xfffffffe}) open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901) (async) r6 = socket$can_bcm(0x1d, 0x2, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) (async) connect$can_bcm(r6, &(0x7f00000000c0), 0x10) (async) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES8=r4], 0x448}}, 0x0) sendmsg$can_bcm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) (async) sendmmsg$inet(r6, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000480)="9f336d2bbf41f19e47e98b4015e3b0384d86a1ceb4e530554e8caf3edea7a0bc8154bf392bb5cf9cbd50e8b1967862f33fb2e0b09f879b9b4413835a37f7150843318cd4a0f6c924a4f206faf33f8883d3b9629f0fa8", 0x56}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100)}}], 0x2, 0x0) (async) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local}) (async) write$tun(r0, &(0x7f00000024c0)=ANY=[@ANYBLOB="00000800000003000000000000004959002c0065000004019078ac1414bbffffffffd0966f9a2b2407c08a2398073867490d147e"], 0xff04) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'veth1_to_bond\x00', 0x7101}) (async) socket(0x400000000010, 0x3, 0x0) (async) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001000000000904"], 0x0) syz_usb_control_io(r8, 0x0, 0x0) (async) syz_usb_control_io$hid(r8, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000a80)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 5.922875276s ago: executing program 1 (id=4497): mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xfffffffffcfffff5, 0x20031, 0xffffffffffffffff, 0xbe9f5000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x63d}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x18100}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 5.864989035s ago: executing program 3 (id=4498): syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$l2tp(0x2, 0x2, 0x73) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000140)={0x1d, 0x0, 0x0, {0x1, 0xff, 0x2}, 0xfd}, 0x18) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) r1 = inotify_init1(0x0) r2 = inotify_add_watch(r1, &(0x7f0000000200)='.\x00', 0x10000a0) r3 = dup(r1) inotify_rm_watch(r3, r2) 5.726428849s ago: executing program 3 (id=4499): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000900000024000480130001"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 5.626952076s ago: executing program 6 (id=4500): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect(r0, &(0x7f0000000280)=@hci={0x1f, 0x2, 0x3}, 0x80) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000005000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r4, 0xfffffffc) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="00000600000000000000", @ANYRES16=r8, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e00000000000000000004000380"], 0x30}}, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000000c0)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f0000000440)={0x0, 0x0, r9, 0x0, 0x0, 0x0, &(0x7f0000000300)}) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r10, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r11, &(0x7f0000000400)={0x0, 0x1802, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r12, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) 5.599657456s ago: executing program 3 (id=4501): r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x54090) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYRESDEC=r2], 0x3c}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000080)=0xf7e) read$dsp(r5, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r4, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xe) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x16) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001a40)=@raw={'raw\x00', 0x8, 0x3, 0x224, 0x0, 0xe138, 0x198, 0xd8, 0x198, 0x190, 0x358, 0x358, 0x190, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0xff000000, 0x0, 'netdevsim0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x8, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x280) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r8, 0x2000) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4050000000000007110180000000000cf050000000000009500000000000000579f4af7ae3640e7ec2131e2cbe9d684e1e42f26f5e3bd767cda3ae4a4616ef9186a6f1a9f57012c5e9f858dcf63fda603c9185a028ad74881d70b268477b3e9716fbf1975127ed29ebf909f39c5651821944b395e26995c8fb627d212db242288a09e689af2b896bc100b6e9d2f3411f504fbf73610d6007742fbfef93dbe251411c8f6b82ec1326d5d7f849dd040b378beb2d9e565c05a75896b000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) r9 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000092ecc620ac05c2773aeb010203010902240001000020000904c40102fffd0180090502021002020000090582120002000000"], 0x0) syz_usb_control_io$uac1(r9, &(0x7f0000000000)={0xc, 0x0, &(0x7f0000001300)=ANY=[]}, 0x0) 5.570021427s ago: executing program 1 (id=4502): r0 = socket(0x26, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="28000000190001000000000000000000021800000000ff000000000008000100ac141400040008"], 0x28}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x3000000, 0x0, 0x4000001}, 0x40000) 5.335748201s ago: executing program 7 (id=4503): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000016c0)={0x2, 0x0, [{0x2, 0x28, &(0x7f0000000080)=""/40}, {0xd100828e98ba2273, 0xef, &(0x7f00000015c0)=""/239}]}) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f00000001c0)=0x304008000) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f00000003c0)={0x1}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x2, @remote}}}, 0x108) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0xf0, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x2, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}}, 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001c0001"], 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r5, 0x107, 0xc, &(0x7f0000000000)=0x9, 0x4) 5.210361472s ago: executing program 1 (id=4504): socket$inet_sctp(0x2, 0x2, 0x84) r0 = socket(0x848000000015, 0x805, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={0x0, 0xfffffffa}, &(0x7f0000000040)=0xffffffffffffff11) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000140)={r1, 0x8001}, 0x8) r3 = socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = userfaultfd(0x1) r7 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x1, 0x801) ioctl$MON_IOCH_MFLUSH(r8, 0x9208, 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000280)) sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x1000000, 0x0, 0x0}, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) write$FUSE_NOTIFY_STORE(r7, &(0x7f0000000200)={0x2c, 0x4, 0x0, {0x4, 0x8, 0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}}, 0x2c) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa006}, 0x4) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r10, &(0x7f0000000240)={@val={0x0, 0x800}, @val={0x0, 0x0, 0x3, 0x9}, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @loopback, @random="b5ef09a7db7d", @local}}, 0x2a) sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0xc8}}, 0x0) 4.068741137s ago: executing program 7 (id=4507): syz_open_dev$sndctrl(&(0x7f0000000080), 0x186, 0x904) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000034c0)={0x2020}, 0xcac) r1 = openat$incfs(r0, &(0x7f0000000000)='.log\x00', 0x303c00, 0x2) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f00000008c0)=0x76a0) 3.698695846s ago: executing program 4 (id=4508): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000540)="e304620def9c11354be71425d41bdaac9e5514cfc3757dccdad5fc9373afb2e0d48fe82ff1240ab729a3ecafd416bb7f550aa36b17f9d72c7a82d1e9952cdecda88d4bacb19a71a32536352d9f81c20f8863a91ed1b6188acf8b475028a83031995cf854dc163094b6bb8313284eb03cdf51686c0c30a7ba5edc64ebb17ea6888b0e6e7ea1063f5a0268c854a50a570cb93ecc4c3952575061af05864311fd495c2c99386654b9d78cbb004232be8e48219dfd5cb40a0bbc72c64845bca10b6f9951cb22f84af62e57075543537ab96d36ccc46c765075e52cdf8aacec946665f4", 0xe1, 0x4004, &(0x7f0000000280)={0xa, 0x4e22, 0xff, @loopback, 0x7}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000940)={0x38, 0x5, 0x0, 0x4, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x9}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20008840, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @value=0x3}) add_key$keyring(&(0x7f0000000300), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, &(0x7f00000000c0)=""/83, 0x53, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="4c00000002060108100034e4000000000400000000000900020473797a3100000000050000000012000300686173683a6e65742c706f72740000000000000000000000000000000000eca6e96c701e37de2b8309b63b32b2836e6ce6bb5e63be04583932f621682ba56479bdd452066348b13f9824d73831e7cd8a0163cc4356245a1b6993dcf7ec3952c9ae379c5fb536fb2f93969b4d9e8f861e29fe2bf73eb8790089d278b57b79aa8fd72924277686670c830501e16d"], 0x4c}}, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500013289bad8814a4434801800018014000240fe8000000000000000000000000000bb060004400e1f00000500070088000000060005404e220000"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c00000007ea040000000000020500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10}}, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) open(&(0x7f0000000380)='./file0\x00', 0x6ec58fa5834dfb19, 0xdb) r6 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x141000) r7 = fcntl$dupfd(r6, 0x0, r6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'vcan0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x7, [{0x9, 0x1}, {0x6, 0x6}, {0x4, 0x8001}, {0x4, 0x3}, {0x1, 0xd5}, {0xffff8001, 0x7f}, {0x5, 0xffffffff}]}}) ioctl$USBDEVFS_REAPURBNDELAY(r7, 0x4004550d, &(0x7f0000000500)) 3.611506565s ago: executing program 7 (id=4509): ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0x2000c5fb, @value=0x3}) (async) r0 = add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000540)="bc3009bb66682c9d4233b0cc", 0xc, 0xfffffffffffffffe) (async) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0x53, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x0, 0x3}) (async) timer_create(0x1, 0x0, &(0x7f0000000300)=0x0) (async) timer_create(0x2, 0x0, &(0x7f00000000c0)=0x0) timer_settime(r3, 0x0, &(0x7f0000000080), 0x0) (async) unshare(0x40000000) (async) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000300)={0x1, 0x1000}, 0x4) (async) getsockopt$SO_TIMESTAMP(r4, 0x1, 0x40, &(0x7f0000000180), &(0x7f00000001c0)=0x4) (async) timer_settime(r2, 0x1, &(0x7f0000000480)={{0x77359400}, {0x77359400}}, &(0x7f00000004c0)) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x73220c8b}], 0x1}, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) (async) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x8685}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44000}, 0x9000) (async) recvmmsg(r4, &(0x7f0000003540)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x0, 0x0) syz_clone(0x0, &(0x7f0000000500)="ee89058821f3a75abe902b106f6437e3ed735df5c1632fcb24c14848ec5b1828c132f0da559610336454391de4fb4caaac150cd1df12bd2c7a051c0849a692f763130aeabc32a62c67ed321796e25cd12f4f8358661db8f8bfd1ac1cfe0882cfc001643810af2c163397ceb642897345e68826eb9d4376b1909b0ee0db2e4033300f22b781ad03d004f2b950e2946f8b8a96269f41985dfa2b7f74bc47d44f9039b2d7c124845b", 0xa7, &(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)="83dc1c6e862a3fee92e55183377a16628e7c0d8cde2aeb45886fba2b73a9c2f75e53fdf3fdbeecb246d58d591a79255e642388299e147118f2fa5b46ddac40d189fd2199d5c9a618548537dae97323c5570d5e57cd875ab36865c49455debe0c45521671b4431582978401beb37c1550567374f14997ac37213b32e618f1dc66e2d924a56322b786bbae24c56cbb3d4a140db885516df5348376dc512b872e6ecabd38d051cd314a46482f594ebb0c57b3f92320f26dfe65484cdda57295137d99ae1999dc79a49215155bfa53a192af99db") r9 = socket(0x400000000010, 0x3, 0x0) add_key$user(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000340)="85c358d692ee753f314002be0ddb89d6d8f740d1f05f5acb8afda61c89b3d11de6fc8a9d76684c766769464f27423ef0c2af68b1bfa724830a9f6316473ea1d096104d9da10764a6978aa98247daa470a0132d750e9a9ea23ed9caa770a9282480b7eeb83e12bafe5b52d6d5f9e21bc6e382fb53800fa197854a10e7995faef6c928d64f15651ca9ffc45bc9cdc1de74eb53e590ab9def72170dbbd01b6041f5a9d9d3be5b13a286a66d956ef785c799a80d8b113bfeb9247a48727154c5d3c18f42", 0xc2, 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}}, 0x24}}, 0x0) clock_getres(0x4, 0xfffffffffffffffe) (async) sendmsg$nl_generic(r9, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1a4}, 0x1, 0x0, 0x0, 0x34040810}, 0x40000) timer_settime(0x0, 0x0, &(0x7f0000000140)={{}, {0x77359400}}, 0x0) 2.211794828s ago: executing program 6 (id=4510): socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r0 = userfaultfd(0x80001) r1 = syz_open_procfs(0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x110, &(0x7f0000000140)=0x9, 0x0, 0x4) read$FUSE(r1, &(0x7f0000000640)={0x2020}, 0x2020) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x81000) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x10a}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r3, 0x29, 0x18, 0x0, &(0x7f00000001c0)) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 1.949151149s ago: executing program 4 (id=4511): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000001, @mcast2, 0x6}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f00000003c0)={0x1, r2}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c602b0304000e0580a7b6070d63e200000000", 0x5ac) 1.880913808s ago: executing program 3 (id=4512): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) recvmmsg(r3, &(0x7f0000005cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004400)=""/211, 0xd3}}, {{0x0, 0x0, &(0x7f0000004600), 0x2}}, {{0x0, 0x0, &(0x7f0000005c40)=[{0x0, 0x7}], 0x1}}], 0x3, 0x0, &(0x7f0000005ec0)={0x0, 0x3938700}) r4 = socket$kcm(0x2d, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x40051) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f00000062c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000004200)={0x50, 0x0, r7, {0x7, 0x29, 0x0, 0x80000}}, 0x50) syz_fuse_handle_req(r6, &(0x7f00000021c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000970700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eeffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20, 0x0, 0x400000000000, {0x0, 0x18}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) readv(r8, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/5, 0x5}], 0x1) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000080)={r4}) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') pread64(r9, &(0x7f0000000280)=""/86, 0x56, 0x4000000000000f3) preadv(r9, 0x0, 0x0, 0xc9, 0x1) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) 1.714955246s ago: executing program 7 (id=4513): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000000540)={'sit0\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[], 0x118) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_XSAVE(r6, 0x5000aea5, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r3, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x4, 0x874fd42a7836ef68, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000009905000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001340), &(0x7f0000000900), 0x2c8257be, r7, 0x0, 0x1ba8847c99}, 0x38) 1.71256282s ago: executing program 4 (id=4514): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000280)={0x0, 0x0, r3, 0xffffc329, 0x2, 0x25, 0x8, 0x6, 0x8, 0x9, 0x2, 0x80000001}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x260086, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000300)='.pending_reads\x00', 0xc00, 0x88) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') fspick(r5, &(0x7f0000000040)='./bus\x00', 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r4, 0x40a0ae49, &(0x7f0000000c00)={0x24ea, 0x4, 0x3000, 0x2000, &(0x7f000016e000/0x2000)=nil, 0x200, r5}) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x80000000, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x41, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x1b) writev(r6, &(0x7f0000000180)=[{&(0x7f00000006c0)="dac56dc914a62dfd95f6975bf4711e26a353148c07050de39e3b441e2cea43330051a680fb8c922ffa1e4aaeac2d79f828d7e0c55ac0e6f847866391a14caf4aab89227e4c3d41171963646eb502f1db251d54e8abdf395c596eadb6b8093a5beee1ecb2206b5dc088b5a8e1bb196caf0a10470b95ae7aea08998b0fa2577c2cddf65f2a9b841ab60bf7caed4b0c740f917182ef01ad97acb2aff9d83e423435da45b4d7d495eee637571bfa4d845ab1f987c83e028f56760e66273cd1b85cfa74f4c9ad6f3062fc70be341310bf3471af31fb95adb3b27b271fd00cb324a7811f8c6108c1e9c5b94d630c7cc8bda45047e2f042ebf74cdfe8d4b0082347783f492c454f447ce166fd738e67686d1eb0ec12331c3d708ea34e8c3d6928668ddb7585ff953c0e8ad984140f9dc335ae1efc8f3368a02e4be7080370765c85b06350253653100b531cd2745fee8dd51bc5f78d9c40dc57200c853bf7343c60a5805517307f2b20735ab05f0d5ab12b0213b2d21ae040ad8949b361e083f983353763526fcc1ad25b6b8e93a51af3a50f57b88b72fcab92e673072101aa0cc6bf929c60cd462801741cdaee45aec0490cf66aade91ebfa54d5176fbf8ea087555bfe27b65ccbe2c617d5c3efaa649290a8a10cc7646802077643be8e656a72d31fa9f5b9bd93c65654f9b9f203e02cc92a317ffdb107c23076be455c5ffcd4bbc6f422206de851ed25ced9f0c751b021bc1538c0707f3a419e8729721a184007e37fbf5fa22258b0cb9ea76c4378dcc448f61d741765f2539df4f10f6b1579125f38a755fe01bd3e7f077c7e31cf9d650e338df5050df18e4fef7519c006e7f6ff58a6457b1e70954b6031c96eca65a8649d36aa4388539041296f47d3944f55f03655852166dd3dc8368fe0f8cb1737c5e0e4301000000cba2f2f1254666a2f0bae0da0abe39edaaffd76c90b6adfda2e5aff0487826615dcd8a87a4feb8faa4fbd7565f0a891d65d6061edcb404752460d02987fb7b39176a17e84e9cfdc556e88070f612cb9bd7825b05d532621b3dc26c214b9d87d41217fe94785e8036016ce9ccd7afa56b0a3fc2004f138328fcb6f70a61096ddc94e0c315dcde2d77fd8fb51c39763855a089a7a7ab3161b9712d69f78aa8d5d70734d8bb82785c344d631cc3e0035f25de86435c8dbe6ffce26cd67bb84ad868b3cfc527d006637216990f7d2f94cdc17fe17286b98d2f5b08bd80952175ada3424085bf523335fcced2ffe14610128827a592416ff3135b9398c0f345b8bbe487d8746b1262d7cc84459728d5e01d9d1652dfb21b8268e8487d1be6155af92f3bcfa0cc16527ef7fce070749999bc0d2c97e2562abb0d57cdf237a0b713671937e6a2d6373aac87b240f6a2ced6a5a5fdbc0241420d1d0e74f26ca2a4b10edea45cb0e2f822add9233967739efbf0ec06444338a88d2d6b19d2ea9654f3bc803abbeb5888d9e7de325cd72035cf5af11fbdbb250738010e5c2c63ba97afbadc718dfd525f92b3118904d1c70e3b26a2d4f9f98544eed76563f7d35c266790c3dc085b5b0a2c6b258fdc593e68aac5a06fd29cec097e33692616852239e6a9f17993283e05ecc52b5002e0a5202e2e971a0778138c97c297d410485e0680ef62991d57e9d294e79dd0f278dbc72ca832ac6af46e4262450facd4967640b9de15efb3534e318a77f24d9f2e02f06910fc4cd2bb47279c9b5161a118f6ad9dac5202aad1264b89be72af2008a4739396cf174773fdcc92ba108b1e1b32281cf0f8314a9eae07adae50b4902b84735eb2ec1e110f4531a91a7e7e72b113f54a138e03241f323fdec28d40568a89b75dca1424137dcb745b55001b160000", 0x532}, {&(0x7f0000000600)}, {&(0x7f0000000340)="cf0d27d1653081dd048029d227e630947e0c58522e1657827dd3b146013e782821931c71c52dac6adda7b8b19d1f78016df5186dfc96e04eae73611ea52b0762f25083fecaf1db24ed4332da100db738c412dfd3481342dac2a35f9c070b99ad121c9710194b08e8ef094d9c2b462738f923a3dd028662bb77c9e82a54768be1a2bacef0456c79cfacb232b9a58fbfdfac837acb32d48e", 0x97}, {&(0x7f0000000500)="cac234d2a369e8d0b762c70b1614990e05ab50b6e3442292235d86ff96958ab353e6263e99f988c59c7a54c3cc6e805caacc507adbafa601bcf563d756c67bce6f9c04f76d55d94e10a6b08a0fba23dddfaac34c9586560d5ca5e878bcfe4bc2835d417f6568e2f6380471b0834663f1821e771e5aed0bdeffdfa77d805dc1d9073cd805052f0d68fdc0f7fc2131a1989a27ca729e0ea45e2c493e2ec72e9e8be76cfc77d60f4f443331a0f6b913d7ef6979bb0ba6e877a04abda66bc6ead43bf5482c81fc267659d7bbd8a7ee4f37b55ee85ae3be38bc4cb8eaa5f59f71985e588159648fa36df38d53", 0xea}, {&(0x7f0000000cc0)}], 0x5) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r7, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea", 0x81) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080)={0x8000, 0x44, 0x18}, 0x18) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x10200, 0x0, 0xf000, 0x1000, &(0x7f0000f9a000/0x1000)=nil}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'veth1_macvtap\x00'}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000080)={@multicast1, @local, r8}, 0xc) 1.261288169s ago: executing program 1 (id=4515): ioctl$VIDIOC_ENUMAUDIO(0xffffffffffffffff, 0xc0345641, &(0x7f0000000080)={0x8, "b5ed0423753b6a03af25124a57ce9ad88d2556119a9a3d48e0cc1f7d25e249d7", 0x2, 0x1}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0xfffe, 0x7, @mcast2}, {0xa, 0x0, 0xb, @loopback}}}, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, 0x0, 0x0) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x3) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) r6 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) writev(r6, &(0x7f00000003c0)=[{0x0}], 0x1) socket$inet(0x2, 0x5, 0x3) write$sndseq(r6, &(0x7f0000000480)=[{0x73, 0x4, 0x5, 0xf, @time={0x9, 0x6}, {0x0, 0x91}, {0x6, 0x4}, @ext={0x0, 0x0}}], 0x1c) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000280)={0x3, r5, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r3, 0xc02464bb, &(0x7f0000000080)={0x3, r5, 0x1fc, 0x0, 0x4, 0x800008, 0x0, 0x4, 0x4000}) bind$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000040)={0x1, 0x8, 0x2, 0x8, 0x7, 0x5, 0x3, 0x0, 0x2, 0x5, 0x36, 0x2, 0x5}, 0xe) r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) recvfrom$inet(r6, &(0x7f0000000140)=""/60, 0x3c, 0x40000020, &(0x7f0000000180)={0x2, 0x4e24, @private=0xa010102}, 0x10) ioctl$VIDIOC_G_SELECTION(r7, 0xc040565e, &(0x7f0000000300)={0x9, 0x102, 0x0, {0x8, 0x0, 0x2f, 0xa0}}) 1.064314232s ago: executing program 4 (id=4516): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x2102, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x9e2f0d24e263ab2c, 0x28, 0x8001, 0x0, 0x1, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000300)={0xb, @pix_mp={0x6, 0x10001, 0x55595659, 0x5, 0x7, [{0x2, 0x7f}, {0x40, 0xfffffffb}, {0x6927fd44, 0x10001}, {0x0, 0x81}, {0xd, 0x8}, {0x5, 0x8}, {0x8, 0x2}, {0x7, 0x9}], 0x10, 0x4, 0x7, 0x2, 0x2}}) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001280), 0x0) poll(&(0x7f0000000100), 0x0, 0x8) r4 = socket(0x40000000015, 0x5, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg(r6, &(0x7f0000001600)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0x4, {0xa, 0x4e20, 0x7a3, @dev={0xfe, 0x80, '\x00', 0x26}, 0x1}}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000480)="a5b4cbb89a22835751b7152f37d075e96bbbe5a46f1735fe534602c37b0d24a2586724eb0bf43bf930cf5e46a262210c69e08eb075c88ff47598ee5577d77e9ceb8ee588860b14a444d00ca952f30cbe783c50dd4c", 0x55}, {}, {&(0x7f0000000500)="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", 0x1000}], 0x3, &(0x7f0000001540)=[{0x58, 0x11, 0x100, "16fb0597044c84361d42a06fb58444c2810e43a42268a6f7a1b70062b402d6000a6dd366377673b0cca016e823d1b090f430102510b225b495fcc706756e27f2eb785237d5c99e5b030362"}, {0x64, 0x114, 0x7ec5, "51ba382085e62e003193e29ae4627b6213a42451d4f07c4654f393c51872235c7e344da142eb1ed25c101545ee4399402738c15b9126b948f3edf5d5b6f180bfd2dd2eb72311bf8346aeb73d5273b368cc16dee0f9"}], 0xbc}, 0x4000000) sendto(r5, &(0x7f0000000100)="51bf7336f6cdf0ca6c13c866d6bc7b55f2d501845841bb2c078a988b7eb38f11a326083cf884920013fbae4a3a5d9c8ea7ea86669fb6212da0b5c82136d9519daeb17c9f96ad78cccef50ab4eabcafbc1a18735359cd7329816984d180735476f901401079349dfbe2e614f51a07c00544d90a594972ba60e1b497f88dcdc1e45dd28c0678d803638e7bd70a8638136e52c5e932c4111d3c917fb22583198b00707e3a2e001260cbc206759c245451686164eff751e4df8995", 0xb9, 0x20000000, &(0x7f0000000280)=@l2tp={0x2, 0x0, @broadcast, 0x2}, 0x80) bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x1a000}}, 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000180)={0x80000000, 0x0, 0x0, 0xb71}, 0x10) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0xc080) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 347.510029ms ago: executing program 6 (id=4517): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="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", 0xfc) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, &(0x7f0000000400)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r1, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='devices.list\x00', 0x275a, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x6}) fcntl$lock(r3, 0x6, &(0x7f0000000040)={0x0, 0x1, 0xe7, 0x8}) fcntl$lock(r3, 0x24, &(0x7f0000000140)={0x2, 0x1, 0x100000002, 0x8}) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', 0x0}) sendto$inet(r3, &(0x7f0000000200)="9eecb3ccd4062207e40fffa16e463946cb7d0a85ccb934a4c383adb25945de7dfd1b267533c3ba428c62c28f3e846ebedcf6d732cd2f83a07825785c02c633cb459f1471a6dda89813566cf7a5100ce1", 0x50, 0x0, &(0x7f0000000080)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) setsockopt(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000), 0x0) socket(0x2, 0x80805, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 317.893164ms ago: executing program 4 (id=4518): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) sendmsg$can_raw(r0, 0x0, 0x4000855) 0s ago: executing program 4 (id=4519): r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000080)={0xcf, {0x5, 0x4, 0x1, 0x9, 0x9, 0xfffffff7}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f00000000c0)=[0x739b, 0x9], 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITE={0x17, 0x0, 0x4007, @fd=r0, 0x6, 0x0, 0x0, 0x12}) io_uring_enter(r0, 0x627, 0xc1040000, 0x43, 0x0, 0x0) kernel console output (not intermixed with test programs): : config 168 descriptor has 1 excess byte, ignoring [ 1722.629309][T11186] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1722.640161][T22749] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1722.650911][T11186] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1722.664556][T11186] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1722.676671][T22749] usb 4-1: config 0 descriptor?? [ 1722.682524][T11186] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1722.731008][T11186] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1722.738497][T11186] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1722.749371][T11186] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1722.761422][T11186] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1722.780874][T11186] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1722.822259][T11186] usb 2-1: string descriptor 0 read error: -22 [ 1722.828693][T11186] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1722.839489][T11186] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1722.857819][T11186] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1723.230016][T22749] usbhid 4-1:0.0: can't add hid device: -71 [ 1723.242244][T22749] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1723.300091][T22749] usb 4-1: USB disconnect, device number 70 [ 1723.338377][T23447] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1723.792929][T23434] [U] ¹ [ 1724.607220][T11186] usb 2-1: USB disconnect, device number 86 [ 1724.847370][T23459] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1725.051747][T23469] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4024'. [ 1725.117957][T23465] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1727.464021][T23492] delete_channel: no stack [ 1728.079369][T23510] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4032'. [ 1728.381179][T23517] netlink: 'syz.0.4033': attribute type 4 has an invalid length. [ 1728.389278][T23517] netlink: 17 bytes leftover after parsing attributes in process `syz.0.4033'. [ 1729.092585][T23524] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4036'. [ 1729.121929][T23524] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4036'. [ 1729.512456][T23528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4038'. [ 1729.542241][T23528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4038'. [ 1730.092981][T11186] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1730.277054][T11186] usb 5-1: Using ep0 maxpacket: 16 [ 1730.293312][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.300329][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.307114][T22749] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1730.335916][T11186] usb 5-1: config 0 has no interfaces? [ 1730.347834][T11186] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 1730.357126][T11186] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1730.365431][T11186] usb 5-1: Product: syz [ 1730.369825][T11186] usb 5-1: Manufacturer: syz [ 1730.374681][T11186] usb 5-1: SerialNumber: syz [ 1730.444078][T11186] usb 5-1: config 0 descriptor?? [ 1730.514142][T22749] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1730.527362][T22749] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1730.572821][T22749] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1730.586617][T22749] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1730.609258][T22749] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1730.626733][T22749] usb 4-1: config 0 descriptor?? [ 1730.814754][T11186] usb 5-1: USB disconnect, device number 61 [ 1731.123536][T22749] plantronics 0003:047F:FFFF.0013: reserved main item tag 0xd [ 1731.184392][T23514] delete_channel: no stack [ 1731.258834][T22749] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1731.394158][T21840] usb 4-1: USB disconnect, device number 71 [ 1731.441434][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 1731.441446][ T30] audit: type=1326 audit(1762545360.606:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23550 comm="syz.2.4043" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f05539 code=0x0 [ 1731.498527][T23553] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4043'. [ 1731.632315][T23546] fido_id[23546]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1731.874806][T11186] usb 3-1: new full-speed USB device number 85 using dummy_hcd [ 1732.057990][T11186] usb 3-1: config 5 has an invalid interface number: 123 but max is 0 [ 1732.068836][T11186] usb 3-1: config 5 has no interface number 0 [ 1732.080352][T11186] usb 3-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 1732.107777][T11186] usb 3-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1732.130797][T11186] usb 3-1: config 5 interface 123 has no altsetting 0 [ 1732.223448][T11186] usb 3-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 1732.244490][T11186] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1732.274413][T11186] usb 3-1: Product: syz [ 1732.287449][T23558] ªªªªªª: renamed from vlan0 (while UP) [ 1732.332340][T11186] usb 3-1: Manufacturer: syz [ 1732.362083][T11186] usb 3-1: SerialNumber: syz [ 1732.825589][T23568] fuse: Unknown parameter 'f]' [ 1733.562860][T21840] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1733.747586][T21840] usb 5-1: Using ep0 maxpacket: 16 [ 1733.769362][T21840] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1733.798229][T21840] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 1733.846994][T21840] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 1733.962180][T21840] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1734.076124][T21840] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1734.134169][T21840] usb 5-1: Product: syz [ 1734.150326][T21840] usb 5-1: Manufacturer: syz [ 1734.165892][T21840] usb 5-1: SerialNumber: syz [ 1734.504648][T11186] ni6501 3-1:5.123: driver 'ni6501' failed to auto-configure device. [ 1734.713193][T11186] usb 3-1: USB disconnect, device number 85 [ 1734.871332][T23575] delete_channel: no stack [ 1736.113631][T21840] cdc_ncm 5-1:1.0: bind() failure [ 1736.152462][T21840] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1736.209510][T21840] cdc_ncm 5-1:1.1: bind() failure [ 1736.325431][T21840] usb 5-1: USB disconnect, device number 62 [ 1736.738280][T23610] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1737.582238][T23620] netlink: 'syz.2.4059': attribute type 1 has an invalid length. [ 1737.634041][T23620] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1737.649749][T23619] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1737.660012][T23619] bond1: (slave batadv1): making interface the new active one [ 1737.668652][T23619] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 1737.860568][T23621] vhci_hcd vhci_hcd.0: port 0 already used [ 1738.293837][T23634] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4063'. [ 1738.563034][T23646] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1738.752208][T21840] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1738.762988][T23648] kvm: kvm [23647]: vcpu5, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x15000000 [ 1738.902078][T21840] usb 5-1: device descriptor read/64, error -71 [ 1739.401637][T21840] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1739.637104][T23657] netlink: 'syz.2.4070': attribute type 16 has an invalid length. [ 1739.645324][T23657] netlink: 'syz.2.4070': attribute type 3 has an invalid length. [ 1739.657258][T23657] netlink: 64066 bytes leftover after parsing attributes in process `syz.2.4070'. [ 1739.669445][T23657] batman_adv: batadv0: adding TT local entry ba:e1:05:00:07:00 to non-existent VLAN 1280 [ 1739.682188][T21840] usb 5-1: device descriptor read/64, error -71 [ 1739.822366][T21840] usb usb5-port1: attempt power cycle [ 1740.192230][T21840] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1740.212837][T21840] usb 5-1: device descriptor read/8, error -71 [ 1740.484960][T21840] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1740.523120][T21840] usb 5-1: device descriptor read/8, error -71 [ 1740.643570][T21840] usb usb5-port1: unable to enumerate USB device [ 1741.216317][T23672] delete_channel: no stack [ 1742.162187][T21840] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1742.651488][T21840] usb 2-1: Using ep0 maxpacket: 32 [ 1742.712959][T21840] usb 2-1: config 0 has an invalid interface number: 234 but max is 1 [ 1742.742368][T21840] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1742.772261][T18426] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1742.810844][T21840] usb 2-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 1742.876687][T21840] usb 2-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 1742.936103][T21840] usb 2-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 1742.971823][T21840] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1743.004517][T21840] usb 2-1: config 0 has no interface number 0 [ 1743.010680][T21840] usb 2-1: config 0 interface 234 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 1743.024006][T18426] usb 4-1: Using ep0 maxpacket: 16 [ 1743.032523][T21840] usb 2-1: config 0 interface 234 has no altsetting 0 [ 1743.062960][T21840] usb 2-1: New USB device found, idVendor=124a, idProduct=4026, bcdDevice=32.b2 [ 1743.073809][T21840] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1743.124753][T18426] usb 4-1: config 0 has no interfaces? [ 1743.132337][T21840] usb 2-1: Product: syz [ 1743.136764][T21840] usb 2-1: Manufacturer: syz [ 1743.145610][T21840] usb 2-1: SerialNumber: syz [ 1743.151875][T18426] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 1743.161349][T18426] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1743.170081][T18426] usb 4-1: Product: syz [ 1743.299286][T18426] usb 4-1: Manufacturer: syz [ 1743.324785][T18426] usb 4-1: SerialNumber: syz [ 1743.344325][T21840] usb 2-1: config 0 descriptor?? [ 1743.365087][T23703] FAULT_INJECTION: forcing a failure. [ 1743.365087][T23703] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1743.367848][T18426] usb 4-1: config 0 descriptor?? [ 1743.378460][T23703] CPU: 1 UID: 0 PID: 23703 Comm: syz.2.4082 Not tainted syzkaller #0 PREEMPT(full) [ 1743.378487][T23703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1743.378507][T23703] Call Trace: [ 1743.378517][T23703] [ 1743.378526][T23703] dump_stack_lvl+0x189/0x250 [ 1743.378559][T23703] ? __pfx____ratelimit+0x10/0x10 [ 1743.378587][T23703] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1743.378619][T23703] ? __pfx__printk+0x10/0x10 [ 1743.378643][T23703] ? __might_fault+0xb0/0x130 [ 1743.378693][T23703] should_fail_ex+0x414/0x560 [ 1743.378738][T23703] _copy_from_user+0x2d/0xb0 [ 1743.378769][T23703] generic_map_update_batch+0x57c/0x7f0 [ 1743.378816][T23703] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1743.378849][T23703] ? __fget_files+0x2a/0x420 [ 1743.378880][T23703] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1743.378912][T23703] bpf_map_do_batch+0x39b/0x630 [ 1743.378944][T23703] __sys_bpf+0x690/0x860 [ 1743.378970][T23703] ? __pfx___sys_bpf+0x10/0x10 [ 1743.379012][T23703] ? ksys_write+0x22a/0x250 [ 1743.379043][T23703] ? exc_page_fault+0x82/0x100 [ 1743.379078][T23703] ? __pfx_ksys_write+0x10/0x10 [ 1743.379121][T23703] __ia32_sys_bpf+0x7c/0x90 [ 1743.379156][T23703] __do_fast_syscall_32+0xb6/0x2b0 [ 1743.379193][T23703] ? lockdep_hardirqs_on+0x9c/0x150 [ 1743.379231][T23703] do_fast_syscall_32+0x34/0x80 [ 1743.379267][T23703] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1743.379295][T23703] RIP: 0023:0xf7f05539 [ 1743.379316][T23703] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1743.379337][T23703] RSP: 002b:00000000f53f655c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 1743.379361][T23703] RAX: ffffffffffffffda RBX: 000000000000001a RCX: 0000000080000300 [ 1743.379378][T23703] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 0000000000000000 [ 1743.379394][T23703] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1743.379407][T23703] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1743.379422][T23703] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1743.379457][T23703] [ 1743.471363][T23705] binder: 23704:23705 ioctl 6611 0 returned -22 [ 1743.566071][T23706] binder: 23704:23706 ioctl 40046205 0 returned -22 [ 1743.622517][ T980] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1743.695436][T23705] program syz.2.4084 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1743.716375][T23705] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4084'. [ 1743.794129][ T980] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1743.807157][ T980] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1743.925579][T18426] usb 4-1: USB disconnect, device number 72 [ 1743.930167][ T980] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1743.963955][ T980] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1743.990364][ T980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1744.019923][ T980] usb 5-1: config 0 descriptor?? [ 1744.485536][ T980] plantronics 0003:047F:FFFF.0014: ignoring exceeding usage max [ 1744.506756][ T980] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1744.585292][T23717] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1744.956977][T18426] usb 5-1: USB disconnect, device number 67 [ 1745.069041][T21840] usb 2-1: USB disconnect, device number 87 [ 1746.046572][T23742] netlink: 'syz.4.4094': attribute type 10 has an invalid length. [ 1746.685778][ T980] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1746.862094][ T980] usb 4-1: Using ep0 maxpacket: 32 [ 1746.874730][ T980] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 1746.902091][ T980] usb 4-1: config 0 has no interface number 0 [ 1746.944691][ T980] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1746.953929][ T980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1746.961916][ T980] usb 4-1: Product: syz [ 1746.966428][ T980] usb 4-1: Manufacturer: syz [ 1746.984867][ T980] usb 4-1: SerialNumber: syz [ 1747.036453][ T980] usb 4-1: config 0 descriptor?? [ 1747.106095][ T980] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1747.313970][ T980] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1747.340122][ T980] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1747.692158][T21840] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1747.816137][T23768] syzkaller1: entered promiscuous mode [ 1747.837807][T23768] syzkaller1: entered allmulticast mode [ 1747.859913][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1747.878837][ T980] usb 4-1: USB disconnect, device number 73 [ 1747.895379][ T980] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1747.918185][ T980] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1747.955481][ T980] quatech2 4-1:0.51: device disconnected [ 1748.048646][T21840] usb 5-1: Using ep0 maxpacket: 16 [ 1748.125241][T23775] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4104'. [ 1748.134707][T21840] usb 5-1: config 0 has no interfaces? [ 1748.148122][T23775] bridge_slave_0: default FDB implementation only supports local addresses [ 1748.159755][T21840] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 1748.207706][T21840] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1748.247693][T21840] usb 5-1: Product: syz [ 1748.256157][T21840] usb 5-1: Manufacturer: syz [ 1748.260869][T21840] usb 5-1: SerialNumber: syz [ 1748.328150][T21840] usb 5-1: config 0 descriptor?? [ 1748.779471][T11186] usb 5-1: USB disconnect, device number 68 [ 1750.529698][T23799] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4109'. [ 1751.851473][T23819] FAULT_INJECTION: forcing a failure. [ 1751.851473][T23819] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1751.884911][T23819] CPU: 1 UID: 0 PID: 23819 Comm: syz.2.4115 Not tainted syzkaller #0 PREEMPT(full) [ 1751.884934][T23819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1751.884945][T23819] Call Trace: [ 1751.884953][T23819] [ 1751.884961][T23819] dump_stack_lvl+0x189/0x250 [ 1751.884991][T23819] ? __pfx____ratelimit+0x10/0x10 [ 1751.885016][T23819] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1751.885039][T23819] ? __pfx__printk+0x10/0x10 [ 1751.885058][T23819] ? __might_fault+0xb0/0x130 [ 1751.885093][T23819] should_fail_ex+0x414/0x560 [ 1751.885124][T23819] _copy_from_iter+0x1de/0x1790 [ 1751.885152][T23819] ? rcu_is_watching+0x15/0xb0 [ 1751.885192][T23819] ? __alloc_skb+0x142/0x2d0 [ 1751.885210][T23819] ? __pfx__copy_from_iter+0x10/0x10 [ 1751.885233][T23819] ? __build_skb_around+0x262/0x3f0 [ 1751.885266][T23819] ? netlink_sendmsg+0x642/0xb30 [ 1751.885282][T23819] ? skb_put+0x11b/0x210 [ 1751.885304][T23819] netlink_sendmsg+0x6b2/0xb30 [ 1751.885332][T23819] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1751.885353][T23819] ? __import_iovec+0x5d4/0x7f0 [ 1751.885375][T23819] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1751.885405][T23819] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1751.885424][T23819] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1751.885444][T23819] __sock_sendmsg+0x21c/0x270 [ 1751.885473][T23819] ____sys_sendmsg+0x505/0x830 [ 1751.885498][T23819] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1751.885535][T23819] ___sys_sendmsg+0x21f/0x2a0 [ 1751.885558][T23819] ? __pfx____sys_sendmsg+0x10/0x10 [ 1751.885613][T23819] ? __fget_files+0x2a/0x420 [ 1751.885631][T23819] ? __fget_files+0x3a0/0x420 [ 1751.885659][T23819] __sys_sendmsg+0x164/0x220 [ 1751.885681][T23819] ? __pfx___sys_sendmsg+0x10/0x10 [ 1751.885717][T23819] ? __pfx_ksys_write+0x10/0x10 [ 1751.885748][T23819] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1751.885778][T23819] ? lockdep_hardirqs_on+0x9c/0x150 [ 1751.885808][T23819] __do_fast_syscall_32+0xb6/0x2b0 [ 1751.885837][T23819] ? lockdep_hardirqs_on+0x9c/0x150 [ 1751.885866][T23819] do_fast_syscall_32+0x34/0x80 [ 1751.885894][T23819] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1751.885918][T23819] RIP: 0023:0xf7f05539 [ 1751.885934][T23819] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1751.885951][T23819] RSP: 002b:00000000f53f655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1751.885970][T23819] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 1751.885983][T23819] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 1751.885995][T23819] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1751.886006][T23819] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1751.886017][T23819] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1751.886045][T23819] [ 1752.527952][T23827] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 1752.534513][T23827] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1752.558701][T23827] vhci_hcd vhci_hcd.0: Device attached [ 1752.582940][T23827] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4117'. [ 1752.972104][ T980] usb 34-1: SetAddress Request (2) to port 0 [ 1752.987984][ T980] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1753.157280][T23839] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4118'. [ 1753.262246][T23839] netlink: 88 bytes leftover after parsing attributes in process `syz.2.4118'. [ 1753.370078][T23828] vhci_hcd: connection reset by peer [ 1753.385782][T23838] Failed to get privilege flags for destination (handle=0x2:0x25) [ 1753.634301][ T6193] vhci_hcd: stop threads [ 1753.638693][ T6193] vhci_hcd: release socket [ 1753.658263][ T6193] vhci_hcd: disconnect device [ 1754.262242][T11186] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1754.412054][T11186] usb 4-1: Using ep0 maxpacket: 16 [ 1754.420878][T11186] usb 4-1: config 0 has no interfaces? [ 1754.435295][T11186] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 1754.444558][T11186] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1754.462221][T11186] usb 4-1: Product: syz [ 1754.482534][T11186] usb 4-1: Manufacturer: syz [ 1754.503178][T11186] usb 4-1: SerialNumber: syz [ 1754.522831][T11186] usb 4-1: config 0 descriptor?? [ 1754.793367][T11186] usb 4-1: USB disconnect, device number 74 [ 1754.981461][T23854] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4121'. [ 1755.283701][T23859] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1756.322273][T23869] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4125'. [ 1756.808684][T23882] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1756.815228][T23882] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1756.840163][T23879] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1756.922722][T23882] vhci_hcd vhci_hcd.0: Device attached [ 1757.042702][T21840] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1757.153293][T23888] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1757.159521][T23888] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1757.167888][T23888] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1757.220491][T23888] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1757.392150][T21840] usb 4-1: Using ep0 maxpacket: 32 [ 1757.582156][T23883] vhci_hcd: connection closed [ 1757.614040][ T2948] vhci_hcd: stop threads [ 1757.623413][ T2948] vhci_hcd: release socket [ 1757.629758][ T2948] vhci_hcd: disconnect device [ 1757.734891][T21840] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 1757.743884][T21840] usb 4-1: config 0 has no interface number 0 [ 1757.750115][T21840] usb 4-1: config 0 interface 184 has no altsetting 0 [ 1757.823872][T21840] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1757.841610][T21840] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1757.864641][T21840] usb 4-1: Product: syz [ 1757.877470][T21840] usb 4-1: Manufacturer: syz [ 1757.886778][T21840] usb 4-1: SerialNumber: syz [ 1757.931111][T21840] usb 4-1: config 0 descriptor?? [ 1757.971412][T21840] smsc75xx v1.0.0 [ 1758.122527][ T980] usb 34-1: device descriptor read/8, error -110 [ 1758.172855][T21840] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1758.229459][T21840] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1758.289983][T23899] vhci_hcd vhci_hcd.0: port 0 already used [ 1758.362361][ T10] vhci_hcd: vhci_device speed not set [ 1758.373032][T21840] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1758.383803][T21840] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -32 [ 1758.747841][T23908] netlink: 'syz.4.4132': attribute type 10 has an invalid length. [ 1758.773500][T23908] bridge0: port 3(netdevsim0) entered blocking state [ 1758.781531][T23908] bridge0: port 3(netdevsim0) entered disabled state [ 1758.791128][T23908] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1758.811163][T23908] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1758.878640][T23908] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:2158x16 (0x30314752, 8, 0, 0, 0) [ 1759.087536][T11186] usb 4-1: USB disconnect, device number 75 [ 1759.231921][T23913] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1759.282364][T21758] Bluetooth: hci3: command 0x0406 tx timeout [ 1759.292205][T10163] Bluetooth: hci2: command 0x0406 tx timeout [ 1759.298512][T10164] Bluetooth: hci4: command 0x0406 tx timeout [ 1759.306997][T10164] Bluetooth: hci1: command 0x0406 tx timeout [ 1759.504831][ T980] usb usb34-port1: attempt power cycle [ 1759.580862][T23924] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1760.138273][ T980] usb usb34-port1: unable to enumerate USB device [ 1761.806524][T23950] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4138'. [ 1764.872180][T23713] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1765.027578][T23713] usb 2-1: Using ep0 maxpacket: 32 [ 1765.044622][T23713] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1765.063037][T23713] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1765.098587][T23713] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 1765.125643][T23713] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1765.151664][T23713] usb 2-1: Product: syz [ 1765.172155][T23713] usb 2-1: Manufacturer: syz [ 1765.177382][T23713] usb 2-1: SerialNumber: syz [ 1765.464384][T23713] usb 2-1: Not enough endpoints found in device, aborting! [ 1765.534136][T24004] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4156'. [ 1765.674461][T24004] netlink: 88 bytes leftover after parsing attributes in process `syz.2.4156'. [ 1767.387453][T24028] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4159'. [ 1767.650575][T21840] usb 2-1: USB disconnect, device number 88 [ 1767.839254][T24035] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1767.924542][T21758] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 1768.298175][T21680] schedule_timeout: wrong timeout value ffffffffffffffff [ 1768.533284][T21680] CPU: 0 UID: 0 PID: 21680 Comm: vivid-003-sdr-c Not tainted syzkaller #0 PREEMPT(full) [ 1768.533312][T21680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1768.533323][T21680] Call Trace: [ 1768.533329][T21680] [ 1768.533335][T21680] dump_stack_lvl+0x189/0x250 [ 1768.533363][T21680] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1768.533384][T21680] ? __pfx__printk+0x10/0x10 [ 1768.533409][T21680] schedule_timeout+0x1e1/0x270 [ 1768.533428][T21680] ? __pfx_schedule_timeout+0x10/0x10 [ 1768.533452][T21680] ? prepare_to_wait_event+0x437/0x480 [ 1768.533480][T21680] vivid_thread_sdr_cap+0xa62/0xf80 [ 1768.533511][T21680] ? __pfx_vivid_thread_sdr_cap+0x10/0x10 [ 1768.533533][T21680] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1768.533554][T21680] ? __kthread_parkme+0x7b/0x200 [ 1768.533571][T21680] ? __kthread_parkme+0x1a1/0x200 [ 1768.533593][T21680] kthread+0x711/0x8a0 [ 1768.533614][T21680] ? __pfx_vivid_thread_sdr_cap+0x10/0x10 [ 1768.533628][T21680] ? __pfx_kthread+0x10/0x10 [ 1768.533649][T21680] ? _raw_spin_unlock_irq+0x23/0x50 [ 1768.533668][T21680] ? lockdep_hardirqs_on+0x9c/0x150 [ 1768.533688][T21680] ? __pfx_kthread+0x10/0x10 [ 1768.533708][T21680] ret_from_fork+0x4bc/0x870 [ 1768.533725][T21680] ? __pfx_ret_from_fork+0x10/0x10 [ 1768.533746][T21680] ? __switch_to_asm+0x39/0x70 [ 1768.533758][T21680] ? __switch_to_asm+0x33/0x70 [ 1768.533769][T21680] ? __pfx_kthread+0x10/0x10 [ 1768.533805][T21680] ret_from_fork_asm+0x1a/0x30 [ 1768.533830][T21680] [ 1769.959454][T24056] FAULT_INJECTION: forcing a failure. [ 1769.959454][T24056] name failslab, interval 1, probability 0, space 0, times 0 [ 1770.072157][T24056] CPU: 0 UID: 0 PID: 24056 Comm: syz.4.4167 Not tainted syzkaller #0 PREEMPT(full) [ 1770.072178][T24056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1770.072187][T24056] Call Trace: [ 1770.072193][T24056] [ 1770.072200][T24056] dump_stack_lvl+0x189/0x250 [ 1770.072223][T24056] ? __pfx____ratelimit+0x10/0x10 [ 1770.072242][T24056] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1770.072261][T24056] ? __pfx__printk+0x10/0x10 [ 1770.072282][T24056] ? __lock_acquire+0xab9/0xd20 [ 1770.072301][T24056] should_fail_ex+0x414/0x560 [ 1770.072325][T24056] should_failslab+0xa8/0x100 [ 1770.072341][T24056] kmem_cache_alloc_noprof+0x74/0x6e0 [ 1770.072360][T24056] ? skb_clone+0x212/0x3a0 [ 1770.072379][T24056] skb_clone+0x212/0x3a0 [ 1770.072396][T24056] __netlink_deliver_tap+0x404/0x850 [ 1770.072418][T24056] ? netlink_deliver_tap+0x2e/0x1b0 [ 1770.072432][T24056] netlink_deliver_tap+0x19c/0x1b0 [ 1770.072445][T24056] netlink_dump+0x92b/0xe90 [ 1770.072475][T24056] ? __pfx_netlink_dump+0x10/0x10 [ 1770.072513][T24056] netlink_recvmsg+0x676/0xa30 [ 1770.072532][T24056] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1770.072544][T24056] ? __kmalloc_noprof+0x432/0x7f0 [ 1770.072563][T24056] ? iovec_from_user+0x87/0x250 [ 1770.072585][T24056] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1770.072607][T24056] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1770.072620][T24056] ? security_socket_recvmsg+0x7e/0x2e0 [ 1770.072654][T24056] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1770.072669][T24056] sock_recvmsg+0x22c/0x270 [ 1770.072692][T24056] ____sys_recvmsg+0x1c9/0x460 [ 1770.072715][T24056] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1770.072730][T24056] ? get_compat_msghdr+0x37e/0x4a0 [ 1770.072761][T24056] ___sys_recvmsg+0x1b5/0x510 [ 1770.072781][T24056] ? __pfx____sys_recvmsg+0x10/0x10 [ 1770.072816][T24056] ? __fget_files+0x3a0/0x420 [ 1770.072838][T24056] do_recvmmsg+0x36a/0x770 [ 1770.072861][T24056] ? __pfx_do_recvmmsg+0x10/0x10 [ 1770.072877][T24056] ? ksys_write+0x1cb/0x250 [ 1770.072912][T24056] ? __fget_files+0x3a0/0x420 [ 1770.072931][T24056] __sys_recvmmsg+0x19d/0x280 [ 1770.072949][T24056] ? __pfx___sys_recvmmsg+0x10/0x10 [ 1770.072966][T24056] ? __pfx_ksys_write+0x10/0x10 [ 1770.072991][T24056] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 1770.073010][T24056] __do_fast_syscall_32+0xb6/0x2b0 [ 1770.073032][T24056] ? lockdep_hardirqs_on+0x9c/0x150 [ 1770.073056][T24056] do_fast_syscall_32+0x34/0x80 [ 1770.073078][T24056] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1770.073095][T24056] RIP: 0023:0xf702d539 [ 1770.073108][T24056] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1770.073122][T24056] RSP: 002b:00000000f541d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 1770.073137][T24056] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001b40 [ 1770.073154][T24056] RDX: 0000000000000001 RSI: 0000000000002142 RDI: 0000000000000000 [ 1770.073164][T24056] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1770.073172][T24056] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1770.073181][T24056] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1770.073204][T24056] [ 1770.855126][T24065] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1772.262594][T24078] trusted_key: encrypted_key: keyword 'tpdate' not recognized [ 1772.304915][T24078] trusted_key: encrypted_key: keyword 'tpdate' not recognized [ 1772.339158][T24078] trusted_key: encrypted_key: keyword 'tpdate' not recognized [ 1772.419957][T24086] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1772.426511][T24086] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1772.444382][T24086] vhci_hcd vhci_hcd.0: Device attached [ 1772.765022][T24100] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4176'. [ 1772.780291][ T43] usb 41-1: new low-speed USB device number 9 using vhci_hcd [ 1773.216924][T24106] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1773.830532][ T980] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1773.937924][T24087] vhci_hcd: connection reset by peer [ 1773.992048][ T980] usb 3-1: Using ep0 maxpacket: 32 [ 1774.002455][ T6193] vhci_hcd: stop threads [ 1774.006779][ T6193] vhci_hcd: release socket [ 1774.021015][ T6193] vhci_hcd: disconnect device [ 1774.040981][ T980] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1774.079595][ T980] usb 3-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice=30.48 [ 1774.092477][ T980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1774.131540][ T980] usb 3-1: Product: syz [ 1774.155516][ T980] usb 3-1: Manufacturer: syz [ 1774.170781][ T980] usb 3-1: SerialNumber: syz [ 1774.216657][ T980] usb 3-1: config 0 descriptor?? [ 1774.451135][ T980] usb 3-1: USB disconnect, device number 86 [ 1775.712152][ T980] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1775.862951][ T980] usb 3-1: Using ep0 maxpacket: 8 [ 1775.870176][ T980] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1775.877767][ T980] usb 3-1: New USB device found, idVendor=05ac, idProduct=0323, bcdDevice= 0.00 [ 1775.902111][ T980] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1775.933875][ T980] usb 3-1: config 0 descriptor?? [ 1775.992111][T23440] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1776.152067][T23440] usb 2-1: Using ep0 maxpacket: 8 [ 1776.937532][ T980] magicmouse 0003:05AC:0323.0015: hidraw0: USB HID vff.ff Device [HID 05ac:0323] on usb-dummy_hcd.2-1/input0 [ 1777.074018][T23440] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1777.087601][T23440] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1777.096289][T23440] usb 2-1: Product: syz [ 1777.100480][T23440] usb 2-1: Manufacturer: syz [ 1777.105152][T23440] usb 2-1: SerialNumber: syz [ 1777.115629][T23440] usb 2-1: config 0 descriptor?? [ 1777.326426][T23440] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 1777.659406][T24153] netlink: 'syz.4.4191': attribute type 46 has an invalid length. [ 1777.668497][T24153] netlink: 212868 bytes leftover after parsing attributes in process `syz.4.4191'. [ 1777.882766][ T43] vhci_hcd: vhci_device speed not set [ 1777.892048][T21840] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1778.052036][T21840] usb 4-1: Using ep0 maxpacket: 16 [ 1778.084599][T21840] usb 4-1: config 0 has no interfaces? [ 1778.097630][T21840] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 1778.110652][T21840] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1778.119271][T21840] usb 4-1: Product: syz [ 1778.126821][T21840] usb 4-1: Manufacturer: syz [ 1778.131591][T21840] usb 4-1: SerialNumber: syz [ 1778.139570][T21840] usb 4-1: config 0 descriptor?? [ 1778.191026][T21840] usb 3-1: USB disconnect, device number 87 [ 1778.352334][T24168] Failed to get privilege flags for destination (handle=0x2:0x25) [ 1778.452119][T18426] usb 4-1: USB disconnect, device number 76 [ 1778.501438][T24164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1778.519794][T24164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1779.073476][T24172] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1779.573301][T24178] Failed to get privilege flags for destination (handle=0x2:0x25) [ 1779.994248][T24183] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1780.520737][T24186] netlink: 'syz.2.4197': attribute type 10 has an invalid length. [ 1780.579635][T24192] netlink: 'syz.3.4198': attribute type 7 has an invalid length. [ 1780.812112][T24192] netlink: 'syz.3.4198': attribute type 8 has an invalid length. [ 1780.884615][T23440] usb write operation failed. (-71) [ 1780.894243][T23440] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1780.941163][T23440] dvbdev: DVB: registering new adapter (Terratec H7) [ 1780.957086][T23440] usb 2-1: media controller created [ 1781.072155][T23440] usb read operation failed. (-71) [ 1781.122170][T23440] usb write operation failed. (-71) [ 1781.157159][T23440] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 1781.332174][T23440] usb 2-1: USB disconnect, device number 89 [ 1781.404955][T24196] tipc: Enabled bearer , priority 0 [ 1781.412710][T24196] syzkaller0: entered promiscuous mode [ 1781.418181][T24196] syzkaller0: entered allmulticast mode [ 1781.492173][T24195] tipc: Resetting bearer [ 1781.573344][T24201] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4202'. [ 1781.627498][T24205] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4202'. [ 1781.704423][T24195] tipc: Disabling bearer [ 1782.057726][T21840] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1782.322018][T21840] usb 3-1: Using ep0 maxpacket: 16 [ 1782.332235][T21840] usb 3-1: too many configurations: 90, using maximum allowed: 8 [ 1782.352273][T21840] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1782.360191][T21840] usb 3-1: can't read configurations, error -61 [ 1782.618406][T21840] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1782.852234][T21840] usb 3-1: Using ep0 maxpacket: 16 [ 1782.912449][T21840] usb 3-1: too many configurations: 90, using maximum allowed: 8 [ 1782.971129][T21840] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1783.010880][T21840] usb 3-1: can't read configurations, error -61 [ 1783.066412][T21840] usb usb3-port1: attempt power cycle [ 1783.422154][T21840] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1783.457406][T21840] usb 3-1: Using ep0 maxpacket: 16 [ 1783.672977][T21840] usb 3-1: too many configurations: 90, using maximum allowed: 8 [ 1783.794785][T21840] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1783.802844][T21840] usb 3-1: can't read configurations, error -61 [ 1783.942097][T21840] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1784.094993][T21840] usb 3-1: Using ep0 maxpacket: 16 [ 1784.102531][T21840] usb 3-1: too many configurations: 90, using maximum allowed: 8 [ 1784.136021][T21840] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1784.136058][T21840] usb 3-1: can't read configurations, error -61 [ 1784.136394][T21840] usb usb3-port1: unable to enumerate USB device [ 1784.734055][T24240] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4209'. [ 1785.249308][T24257] program syz.2.4211 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1785.462291][ T10] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1785.722026][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 1785.737895][ T10] usb 4-1: config 0 has no interfaces? [ 1785.765710][ T10] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 1785.775338][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1785.902155][ T10] usb 4-1: Product: syz [ 1785.906430][ T10] usb 4-1: Manufacturer: syz [ 1785.911041][ T10] usb 4-1: SerialNumber: syz [ 1785.949325][ T10] usb 4-1: config 0 descriptor?? [ 1786.232229][T22749] usb 4-1: USB disconnect, device number 77 [ 1787.075838][T24273] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4217'. [ 1787.091300][T24273] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4217'. [ 1787.755204][T24265] delete_channel: no stack [ 1788.596887][T24282] can: request_module (can-proto-3) failed. [ 1788.758105][T24297] Failed to get privilege flags for destination (handle=0x2:0x25) [ 1788.807755][ T6193] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1788.830624][ T6193] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1788.847695][ T6193] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1788.973457][ T6193] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1790.692511][T24323] netlink: 'syz.3.4228': attribute type 25 has an invalid length. [ 1790.723946][T24325] netlink: 'syz.3.4228': attribute type 25 has an invalid length. [ 1790.765846][T24328] FAULT_INJECTION: forcing a failure. [ 1790.765846][T24328] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1790.812548][T24328] CPU: 0 UID: 0 PID: 24328 Comm: syz.2.4230 Not tainted syzkaller #0 PREEMPT(full) [ 1790.812572][T24328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1790.812583][T24328] Call Trace: [ 1790.812595][T24328] [ 1790.812604][T24328] dump_stack_lvl+0x189/0x250 [ 1790.812651][T24328] ? __pfx____ratelimit+0x10/0x10 [ 1790.812678][T24328] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1790.812706][T24328] ? __pfx__printk+0x10/0x10 [ 1790.812739][T24328] should_fail_ex+0x414/0x560 [ 1790.812776][T24328] _copy_to_user+0x31/0xb0 [ 1790.812804][T24328] simple_read_from_buffer+0xe1/0x170 [ 1790.812840][T24328] proc_fail_nth_read+0x1b3/0x220 [ 1790.812870][T24328] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1790.812899][T24328] ? rw_verify_area+0x2a6/0x4d0 [ 1790.812926][T24328] ? __lock_acquire+0xab9/0xd20 [ 1790.812944][T24328] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1790.812971][T24328] vfs_read+0x200/0xa30 [ 1790.812998][T24328] ? fdget_pos+0x247/0x320 [ 1790.813022][T24328] ? __pfx___mutex_lock+0x10/0x10 [ 1790.813053][T24328] ? __pfx_vfs_read+0x10/0x10 [ 1790.813082][T24328] ? __fget_files+0x2a/0x420 [ 1790.813105][T24328] ? __fget_files+0x3a0/0x420 [ 1790.813124][T24328] ? __fget_files+0x2a/0x420 [ 1790.813152][T24328] ksys_read+0x145/0x250 [ 1790.813178][T24328] ? exc_page_fault+0x82/0x100 [ 1790.813207][T24328] ? __pfx_ksys_read+0x10/0x10 [ 1790.813238][T24328] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1790.813269][T24328] ? lockdep_hardirqs_on+0x9c/0x150 [ 1790.813299][T24328] __do_fast_syscall_32+0xb6/0x2b0 [ 1790.813329][T24328] ? lockdep_hardirqs_on+0x9c/0x150 [ 1790.813361][T24328] do_fast_syscall_32+0x34/0x80 [ 1790.813392][T24328] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1790.813417][T24328] RIP: 0023:0xf7f05539 [ 1790.813435][T24328] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1790.813453][T24328] RSP: 002b:00000000f53f6590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 1790.813483][T24328] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53f6620 [ 1790.813498][T24328] RDX: 000000000000000f RSI: 00000000f7396ff4 RDI: 0000000000000000 [ 1790.813511][T24328] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1790.813522][T24328] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1790.813534][T24328] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1790.813565][T24328] [ 1791.487014][T24340] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4232'. [ 1791.719298][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.727461][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.060583][T24347] Failed to get privilege flags for destination (handle=0x2:0x25) [ 1792.102393][ T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1792.111147][ T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1792.141710][ T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1792.161381][ T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1792.311475][T24351] Failed to get privilege flags for destination (handle=0x2:0x25) [ 1793.173528][T24355] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4237'. [ 1793.658825][T24359] FAULT_INJECTION: forcing a failure. [ 1793.658825][T24359] name failslab, interval 1, probability 0, space 0, times 0 [ 1793.693617][T24359] CPU: 0 UID: 0 PID: 24359 Comm: syz.0.4239 Not tainted syzkaller #0 PREEMPT(full) [ 1793.693646][T24359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1793.693660][T24359] Call Trace: [ 1793.693669][T24359] [ 1793.693679][T24359] dump_stack_lvl+0x189/0x250 [ 1793.693713][T24359] ? __pfx____ratelimit+0x10/0x10 [ 1793.693743][T24359] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1793.693772][T24359] ? __pfx__printk+0x10/0x10 [ 1793.693801][T24359] ? __pfx___might_resched+0x10/0x10 [ 1793.693824][T24359] ? fs_reclaim_acquire+0x7d/0x100 [ 1793.693875][T24359] should_fail_ex+0x414/0x560 [ 1793.693910][T24359] should_failslab+0xa8/0x100 [ 1793.693932][T24359] kmem_cache_alloc_node_noprof+0x77/0x710 [ 1793.693959][T24359] ? __alloc_skb+0x112/0x2d0 [ 1793.693984][T24359] __alloc_skb+0x112/0x2d0 [ 1793.694006][T24359] ctrl_getfamily+0x3a1/0x590 [ 1793.694034][T24359] ? __pfx_ctrl_getfamily+0x10/0x10 [ 1793.694067][T24359] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1793.694101][T24359] genl_family_rcv_msg_doit+0x215/0x300 [ 1793.694133][T24359] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1793.694182][T24359] genl_rcv_msg+0x60e/0x790 [ 1793.694213][T24359] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1793.694236][T24359] ? __pfx_ctrl_getfamily+0x10/0x10 [ 1793.694261][T24359] ? __asan_memcpy+0x40/0x70 [ 1793.694285][T24359] ? __pfx_ref_tracker_free+0x10/0x10 [ 1793.694312][T24359] netlink_rcv_skb+0x208/0x470 [ 1793.694329][T24359] ? __lock_acquire+0xab9/0xd20 [ 1793.694367][T24359] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1793.694403][T24359] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1793.694456][T24359] ? down_read+0x1ad/0x2e0 [ 1793.694479][T24359] genl_rcv+0x28/0x40 [ 1793.694502][T24359] netlink_unicast+0x82f/0x9e0 [ 1793.694542][T24359] ? __pfx_netlink_unicast+0x10/0x10 [ 1793.694574][T24359] ? netlink_sendmsg+0x642/0xb30 [ 1793.694592][T24359] ? skb_put+0x11b/0x210 [ 1793.694616][T24359] netlink_sendmsg+0x805/0xb30 [ 1793.694647][T24359] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1793.694672][T24359] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1793.694705][T24359] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1793.694726][T24359] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1793.694748][T24359] __sock_sendmsg+0x21c/0x270 [ 1793.694780][T24359] __sys_sendto+0x3bd/0x520 [ 1793.694803][T24359] ? __pfx___sys_sendto+0x10/0x10 [ 1793.694837][T24359] ? __might_fault+0xb0/0x130 [ 1793.694890][T24359] __ia32_compat_sys_socketcall+0x71c/0x9c0 [ 1793.694915][T24359] ? __fget_files+0x3a0/0x420 [ 1793.694939][T24359] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 1793.694964][T24359] ? fput+0xa0/0xd0 [ 1793.694993][T24359] ? rcu_is_watching+0x15/0xb0 [ 1793.695021][T24359] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1793.695053][T24359] ? lockdep_hardirqs_on+0x9c/0x150 [ 1793.695085][T24359] __do_fast_syscall_32+0xb6/0x2b0 [ 1793.695117][T24359] ? lockdep_hardirqs_on+0x9c/0x150 [ 1793.695151][T24359] do_fast_syscall_32+0x34/0x80 [ 1793.695183][T24359] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1793.695207][T24359] RIP: 0023:0xf709d539 [ 1793.695224][T24359] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1793.695241][T24359] RSP: 002b:00000000f548c3f0 EFLAGS: 00000206 ORIG_RAX: 0000000000000066 [ 1793.695263][T24359] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000f548c404 [ 1793.695277][T24359] RDX: 0000000000000000 RSI: 00000000f548c550 RDI: 00000000f7436ff4 [ 1793.695290][T24359] RBP: 00000000f548c550 R08: 0000000000000000 R09: 0000000000000000 [ 1793.695302][T24359] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1793.695323][T24359] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1793.695355][T24359] [ 1795.334108][T24380] netlink: 'syz.4.4246': attribute type 10 has an invalid length. [ 1795.614457][T24375] netlink: 'syz.1.4244': attribute type 16 has an invalid length. [ 1795.632171][T24375] netlink: 'syz.1.4244': attribute type 17 has an invalid length. [ 1795.648557][T24386] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1796.207426][T24381] tipc: Resetting bearer [ 1796.223209][T24381] tipc: Resetting bearer [ 1796.495012][T24375] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1798.188420][T24416] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1798.234721][T24419] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20004 [ 1798.294909][T24420] vxcan1: entered allmulticast mode [ 1798.307365][T24414] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1800.122717][T24435] netlink: 'syz.1.4257': attribute type 4 has an invalid length. [ 1800.130770][T24435] netlink: 17 bytes leftover after parsing attributes in process `syz.1.4257'. [ 1800.212788][T24437] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1800.219347][T24437] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1800.373607][T24437] vhci_hcd vhci_hcd.0: Device attached [ 1800.432055][T23440] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1800.632253][ T43] usb 41-1: new low-speed USB device number 10 using vhci_hcd [ 1800.677420][T23440] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1800.687867][T23440] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1800.732146][T24438] vhci_hcd: connection reset by peer [ 1800.732727][T23440] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1800.740474][ T12] vhci_hcd: stop threads [ 1800.751865][T23440] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1800.818877][ T12] vhci_hcd: release socket [ 1800.828846][ T12] vhci_hcd: disconnect device [ 1800.839856][T23440] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1800.867060][T23440] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1800.880242][T23440] usb 2-1: invalid MIDI out EP 0 [ 1801.020596][T23440] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1801.514217][T24406] udevd[24406]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1802.714570][T24462] Failed to get privilege flags for destination (handle=0x2:0x25) [ 1802.851339][T24461] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1803.063749][T18426] usb 2-1: USB disconnect, device number 90 [ 1803.080609][T24434] delete_channel: no stack [ 1804.942113][T22749] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1805.092075][T22749] usb 5-1: Using ep0 maxpacket: 32 [ 1805.098835][T22749] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 1805.108000][T22749] usb 5-1: config 0 has no interface number 0 [ 1805.114225][T22749] usb 5-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1805.125010][T22749] usb 5-1: config 0 interface 67 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1805.138446][T22749] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1805.152387][T22749] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1805.190782][T22749] usb 5-1: Product: syz [ 1805.233096][T22749] usb 5-1: Manufacturer: syz [ 1805.252383][T22749] usb 5-1: SerialNumber: syz [ 1805.295277][T22749] usb 5-1: config 0 descriptor?? [ 1805.385028][T22749] smsc95xx v2.0.0 [ 1805.389355][T22749] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1805.422345][T22749] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -22 [ 1805.792542][ T43] vhci_hcd: vhci_device speed not set [ 1805.944685][T24506] vhci_hcd vhci_hcd.0: port 0 already used [ 1807.403748][ T30] audit: type=1326 audit(1762545436.576:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24519 comm="syz.3.4276" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1807.456493][ T30] audit: type=1326 audit(1762545436.576:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24519 comm="syz.3.4276" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1807.639656][T24526] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4275'. [ 1807.649633][ T30] audit: type=1326 audit(1762545436.576:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24519 comm="syz.3.4276" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1807.650986][T24526] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4275'. [ 1807.701017][ T30] audit: type=1326 audit(1762545436.576:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24519 comm="syz.3.4276" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1807.743127][T24527] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4277'. [ 1807.842933][ T30] audit: type=1326 audit(1762545436.576:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24519 comm="syz.3.4276" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1807.867809][ T30] audit: type=1326 audit(1762545436.576:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24519 comm="syz.3.4276" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1807.901752][ T30] audit: type=1326 audit(1762545436.576:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24519 comm="syz.3.4276" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1807.936261][ T30] audit: type=1326 audit(1762545436.576:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24519 comm="syz.3.4276" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1807.968728][ T30] audit: type=1326 audit(1762545436.576:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24519 comm="syz.3.4276" exe="/root/syz-executor" sig=0 arch=40000003 syscall=174 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1808.007829][ T30] audit: type=1326 audit(1762545436.576:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24519 comm="syz.3.4276" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1808.110650][T11186] usb 5-1: USB disconnect, device number 69 [ 1808.326917][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888079df4400: Timeout. Failed to send simple message. [ 1809.107132][ T43] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1809.342196][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 1809.353497][ T43] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 1809.366166][ T43] usb 2-1: config 0 has no interface number 0 [ 1809.379109][ T43] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1809.477944][ T43] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1809.519572][ T43] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1809.540683][ T43] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1809.579948][ T43] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1809.712718][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1809.897275][ T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1809.915269][ T43] usb 2-1: config 0 descriptor?? [ 1809.920524][ T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1809.943829][ T43] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1809.960092][ T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1809.997711][ T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1811.151618][T24571] vhci_hcd vhci_hcd.0: port 0 already used [ 1811.302335][T24569] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4288'. [ 1811.834586][T23713] usb 2-1: USB disconnect, device number 91 [ 1811.845005][T23713] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 1811.977553][T24587] kvm: requested 128228 ns i8254 timer period limited to 200000 ns [ 1811.986930][T24587] kvm: requested 81295 ns i8254 timer period limited to 200000 ns [ 1811.996372][T24587] kvm: requested 24304 ns i8254 timer period limited to 200000 ns [ 1812.012438][T24587] kvm: requested 185219 ns i8254 timer period limited to 200000 ns [ 1812.048802][T24587] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 1812.496558][T24606] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1812.801733][T24602] syzkaller0: entered promiscuous mode [ 1812.807383][T24602] syzkaller0: entered allmulticast mode [ 1814.109578][T22197] vhci_hcd: connection reset by peer [ 1814.118373][ T3516] vhci_hcd: stop threads [ 1814.123209][ T3516] vhci_hcd: release socket [ 1814.128717][ T3516] vhci_hcd: disconnect device [ 1814.192539][ T5888] vhci_hcd: vhci_device speed not set [ 1814.921324][T23922] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1814.950198][T23922] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1814.959752][T23922] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1814.976607][T23922] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1814.985446][T23922] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1815.162154][T23713] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1815.313964][T23713] usb 4-1: config 0 has no interfaces? [ 1815.324890][T23713] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1815.353635][T23713] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1815.376239][T23713] usb 4-1: Product: syz [ 1815.382394][T23713] usb 4-1: Manufacturer: syz [ 1815.387137][T23713] usb 4-1: SerialNumber: syz [ 1815.401399][T23713] usb 4-1: config 0 descriptor?? [ 1815.631841][T11186] usb 4-1: USB disconnect, device number 78 [ 1816.738671][T24637] vhci_hcd vhci_hcd.0: port 0 already used [ 1816.964283][T24647] netlink: 'syz.1.4309': attribute type 10 has an invalid length. [ 1817.122320][T23922] Bluetooth: hci0: command tx timeout [ 1817.440363][T24647] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:2158x16 (0x30314752, 8, 0, 0, 0) [ 1817.653402][T24632] chnl_net:caif_netlink_parms(): no params data found [ 1817.785738][T24656] netlink: 'syz.4.4310': attribute type 10 has an invalid length. [ 1817.801526][T24658] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4311'. [ 1817.859020][T24656] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:2158x16 (0x30314752, 8, 0, 0, 0) [ 1817.867675][T24660] netlink: 'syz.1.4311': attribute type 10 has an invalid length. [ 1818.358529][T24632] bridge0: port 1(bridge_slave_0) entered blocking state [ 1818.394853][T24632] bridge0: port 1(bridge_slave_0) entered disabled state [ 1818.423521][T24632] bridge_slave_0: entered allmulticast mode [ 1818.432358][T23713] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1818.511525][T24632] bridge_slave_0: entered promiscuous mode [ 1818.544638][T24632] bridge0: port 2(bridge_slave_1) entered blocking state [ 1818.552211][T24632] bridge0: port 2(bridge_slave_1) entered disabled state [ 1818.560469][T24632] bridge_slave_1: entered allmulticast mode [ 1818.572555][T24632] bridge_slave_1: entered promiscuous mode [ 1818.637841][T23713] usb 4-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 1818.661604][T23713] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1818.681083][T23713] usb 4-1: Product: syz [ 1818.691093][T23713] usb 4-1: Manufacturer: syz [ 1818.707807][T23713] usb 4-1: SerialNumber: syz [ 1818.723613][T23713] usb 4-1: config 0 descriptor?? [ 1818.734367][T24632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1818.742628][T23713] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 1818.774277][T24632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1818.942723][T24678] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4315'. [ 1818.953431][T24678] netlink: 43 bytes leftover after parsing attributes in process `syz.0.4315'. [ 1818.977481][T24678] netlink: 'syz.0.4315': attribute type 6 has an invalid length. [ 1818.998973][T24678] netlink: 'syz.0.4315': attribute type 5 has an invalid length. [ 1819.041366][T24678] netlink: 43 bytes leftover after parsing attributes in process `syz.0.4315'. [ 1819.071130][T24681] tipc: Failed to remove unknown binding: 66,1,1/3615956845:1393033972/1393033974 [ 1819.080736][T24681] tipc: Failed to remove unknown binding: 66,1,1/3615956845:1393033972/1393033974 [ 1819.116632][T24632] team0: Port device team_slave_0 added [ 1819.182660][T23922] Bluetooth: hci0: command tx timeout [ 1819.206033][T24632] team0: Port device team_slave_1 added [ 1819.334301][T22749] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1819.461220][T24632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1819.519054][T24632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1819.572139][T22749] usb 2-1: Using ep0 maxpacket: 8 [ 1819.616878][T22749] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1819.626098][T22749] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1819.657302][T22749] usb 2-1: Product: syz [ 1819.686299][T22749] usb 2-1: Manufacturer: syz [ 1819.696551][T22749] usb 2-1: SerialNumber: syz [ 1819.720206][T22749] usb 2-1: config 0 descriptor?? [ 1819.736467][T22749] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 1819.781716][T22749] pctv452e: pctv452e_power_ctrl: 1 [ 1819.781716][T22749] [ 1819.799753][T22749] usb 2-1: selecting invalid altsetting 3 [ 1819.815042][T22749] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 1819.815042][T22749] [ 1819.828875][T24632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1819.844612][T22749] dvb-usb: bulk message failed: -22 (5/0) [ 1819.870840][T22749] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1819.901158][T22749] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 1819.920659][T22749] usb 2-1: media controller created [ 1819.936225][T22749] dvb-usb: bulk message failed: -22 (8/0) [ 1819.951530][T22749] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 1819.973315][T22749] dvb-usb: MAC address reading failed. [ 1819.978945][T24681] pctv452e: I2C error -22; AA 02 00 00 EA -> 00 00 00 00 00 00 00 [ 1820.017228][T22749] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1820.059772][T24632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1820.093348][T24632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1820.119291][ C0] vkms_vblank_simulate: vblank timer overrun [ 1820.187077][T22749] DVB: Unable to find symbol stb0899_attach() [ 1820.220663][T22749] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 1820.283957][T24632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1820.432110][T22749] rc_core: IR keymap rc-tt-1500 not found [ 1820.446051][T22749] Registered IR keymap rc-empty [ 1820.475196][T22749] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 1820.502321][T22749] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input34 [ 1820.541074][T22749] dvb-usb: schedule remote query interval to 100 msecs. [ 1820.553228][T24632] hsr_slave_0: entered promiscuous mode [ 1820.567885][T22749] pctv452e: pctv452e_power_ctrl: 0 [ 1820.567885][T22749] [ 1820.577159][T24632] hsr_slave_1: entered promiscuous mode [ 1820.590083][T24632] debugfs: 'hsr0' already exists in 'hsr' [ 1820.593706][T22749] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 1820.608168][T24632] Cannot create hsr debugfs directory [ 1820.678777][ T43] dvb-usb: bulk message failed: -22 (4/0) [ 1820.686291][ T43] dvb-usb: error -22 while querying for an remote control event. [ 1820.693056][T24695] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4319'. [ 1820.715052][T22749] usb 2-1: USB disconnect, device number 92 [ 1820.899807][T22749] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 1821.048482][T11186] usb 4-1: USB disconnect, device number 79 [ 1821.243681][T23922] Bluetooth: hci0: command tx timeout [ 1821.757146][T24632] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1821.789698][T24632] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1821.841490][T24632] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1821.964280][T24632] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1822.335957][T24729] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1822.824534][T24632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1822.920714][T24632] 8021q: adding VLAN 0 to HW filter on device team0 [ 1822.959843][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1822.966982][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1823.067172][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1823.074295][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1823.313624][T23922] Bluetooth: hci0: command tx timeout [ 1823.753188][T24632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1823.976586][T24632] veth0_vlan: entered promiscuous mode [ 1824.021551][T24632] veth1_vlan: entered promiscuous mode [ 1824.196024][T24740] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1824.205313][T24740] macsec1: entered promiscuous mode [ 1824.224567][T24740] macsec1: entered allmulticast mode [ 1824.230950][T24740] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1824.248218][T24740] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 1824.256139][T24740] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 1824.287662][T24632] veth0_macvtap: entered promiscuous mode [ 1824.299982][T24632] veth1_macvtap: entered promiscuous mode [ 1824.323609][T24632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1824.346089][T24632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1824.439298][ T5888] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1824.557493][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1824.584764][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1824.643367][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1824.651722][T24747] Failed to get privilege flags for destination (handle=0x2:0x25) [ 1824.702282][ T5888] usb 2-1: Using ep0 maxpacket: 32 [ 1824.709387][ T5888] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1824.717986][ T5888] usb 2-1: config 0 has no interface number 0 [ 1824.730314][ T5888] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1824.750565][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1824.781512][ T5888] usb 2-1: Product: syz [ 1824.786631][ T5888] usb 2-1: Manufacturer: syz [ 1824.791523][ T5888] usb 2-1: SerialNumber: syz [ 1824.895896][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1824.915228][ T5888] usb 2-1: config 0 descriptor?? [ 1824.962706][ T2948] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1824.977532][ T5888] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1825.030991][ T2948] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1825.046344][ T2948] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1825.282740][ T5888] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1825.332452][ T5888] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1825.356108][ T6193] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1825.495635][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1825.512167][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1825.794911][ T6193] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1825.812045][ T6193] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1825.894963][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1825.909886][T21840] usb 2-1: USB disconnect, device number 93 [ 1825.923367][T21840] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1825.967266][T21840] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1826.004302][T21840] quatech2 2-1:0.51: device disconnected [ 1827.451498][T24754] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1827.498287][T24754] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1827.832030][T24784] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4344'. [ 1828.358989][T24754] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1828.447050][T24754] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1828.881411][T24754] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1828.902836][T24754] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1829.110353][T24754] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1829.136801][T24754] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1829.262076][T24804] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4346'. [ 1829.307249][T24804] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4346'. [ 1829.687800][T24808] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1831.032839][T24818] netlink: 'syz.5.4352': attribute type 10 has an invalid length. [ 1831.216359][T21758] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1831.237021][T21758] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1831.246599][T21758] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1831.257062][T21758] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1831.268828][T21758] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1831.517819][T24754] dvmrp5 (unregistering): left allmulticast mode [ 1831.896578][T24754] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1831.908627][T24754] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1831.921025][T24754] bond0 (unregistering): (slave team0): Releasing backup interface [ 1831.936430][T24754] bond0 (unregistering): Released all slaves [ 1831.960510][T24818] bridge0: port 3(netdevsim0) entered blocking state [ 1832.072102][T24818] bridge0: port 3(netdevsim0) entered disabled state [ 1832.090641][T24818] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 1832.188064][T24818] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 1832.201064][T24818] bridge0: port 3(netdevsim0) entered blocking state [ 1832.207933][T24818] bridge0: port 3(netdevsim0) entered forwarding state [ 1832.256233][T24829] bridge0: port 1(erspan0) entered blocking state [ 1832.268661][T24829] bridge0: port 1(erspan0) entered disabled state [ 1832.279183][T24829] erspan0: entered allmulticast mode [ 1832.323504][T24829] erspan0: entered promiscuous mode [ 1832.918456][T24754] hsr_slave_0: left promiscuous mode [ 1832.953758][T24754] hsr_slave_1: left promiscuous mode [ 1832.970684][T24754] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1832.988747][T24754] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1833.029836][T24754] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1833.049828][T24754] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1833.069435][T24754] batman_adv: batadv0: Interface deactivated: dummy0 [ 1833.082312][T24754] batman_adv: batadv0: Removing interface: dummy0 [ 1833.156323][T24754] veth1_macvtap: left promiscuous mode [ 1833.184706][T24754] veth0_macvtap: left promiscuous mode [ 1833.211331][T24754] veth1_vlan: left promiscuous mode [ 1833.245478][T24754] veth0_vlan: left promiscuous mode [ 1833.312447][T21758] Bluetooth: hci3: command tx timeout [ 1833.697994][T24886] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4364'. [ 1834.181869][T24895] Failed to get privilege flags for destination (handle=0x2:0x25) [ 1835.166062][T24754] team0 (unregistering): Port device team_slave_1 removed [ 1835.211745][T24754] team0 (unregistering): Port device team_slave_0 removed [ 1835.393124][T21758] Bluetooth: hci3: command tx timeout [ 1835.432050][T23713] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1835.577889][T24880] tipc: Started in network mode [ 1835.586134][T24880] tipc: Node identity 4, cluster identity 4711 [ 1835.601783][T24880] tipc: Node number set to 4 [ 1835.672198][T23713] usb 2-1: config 0 has no interfaces? [ 1835.744148][T23713] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1835.778056][T23713] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1835.804343][T23713] usb 2-1: Product: syz [ 1835.808558][T23713] usb 2-1: Manufacturer: syz [ 1835.817086][T23713] usb 2-1: SerialNumber: syz [ 1835.867058][T23713] usb 2-1: config 0 descriptor?? [ 1836.007551][T24914] KVM: debugfs: duplicate directory 24914-6 [ 1836.456342][ T5888] usb 2-1: USB disconnect, device number 94 [ 1836.608896][T24825] chnl_net:caif_netlink_parms(): no params data found [ 1837.472172][T21758] Bluetooth: hci3: command tx timeout [ 1838.127017][T24950] FAULT_INJECTION: forcing a failure. [ 1838.127017][T24950] name failslab, interval 1, probability 0, space 0, times 0 [ 1838.140424][T24950] CPU: 0 UID: 0 PID: 24950 Comm: syz.4.4376 Not tainted syzkaller #0 PREEMPT(full) [ 1838.140443][T24950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1838.140452][T24950] Call Trace: [ 1838.140458][T24950] [ 1838.140464][T24950] dump_stack_lvl+0x189/0x250 [ 1838.140489][T24950] ? __pfx____ratelimit+0x10/0x10 [ 1838.140508][T24950] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1838.140526][T24950] ? __pfx__printk+0x10/0x10 [ 1838.140543][T24950] ? __pfx___might_resched+0x10/0x10 [ 1838.140562][T24950] should_fail_ex+0x414/0x560 [ 1838.140586][T24950] should_failslab+0xa8/0x100 [ 1838.140601][T24950] __kmalloc_cache_noprof+0x6f/0x6f0 [ 1838.140623][T24950] ? fuse_file_alloc+0x56/0x230 [ 1838.140646][T24950] fuse_file_alloc+0x56/0x230 [ 1838.140667][T24950] fuse_file_open+0x157/0x910 [ 1838.140696][T24950] ? __pfx_fuse_file_open+0x10/0x10 [ 1838.140714][T24950] ? hook_file_open+0x1eb/0x870 [ 1838.140736][T24950] ? __pfx_hook_file_open+0x10/0x10 [ 1838.140753][T24950] ? __lock_acquire+0xab9/0xd20 [ 1838.140767][T24950] ? apparmor_file_open+0x4ea/0x700 [ 1838.140788][T24950] ? __pfx_apparmor_file_open+0x10/0x10 [ 1838.140808][T24950] fuse_open+0x370/0x750 [ 1838.140824][T24950] ? __pfx_fuse_open+0x10/0x10 [ 1838.140835][T24950] do_dentry_open+0x953/0x13f0 [ 1838.140860][T24950] vfs_open+0x3b/0x340 [ 1838.140873][T24950] ? path_openat+0x2ecd/0x3830 [ 1838.140892][T24950] path_openat+0x2ee5/0x3830 [ 1838.140923][T24950] ? is_bpf_text_address+0x26/0x2b0 [ 1838.140957][T24950] ? __pfx_path_openat+0x10/0x10 [ 1838.140972][T24950] ? arch_stack_walk+0xfc/0x150 [ 1838.140999][T24950] do_filp_open+0x1fa/0x410 [ 1838.141016][T24950] ? __pfx_do_filp_open+0x10/0x10 [ 1838.141068][T24950] ? __lock_acquire+0xab9/0xd20 [ 1838.141081][T24950] ? do_open_execat+0x93/0x560 [ 1838.141112][T24950] do_open_execat+0x135/0x560 [ 1838.141128][T24950] ? __pfx_do_open_execat+0x10/0x10 [ 1838.141174][T24950] alloc_bprm+0x28/0x5c0 [ 1838.141196][T24950] do_execveat_common+0x1b3/0x6a0 [ 1838.141223][T24950] __ia32_compat_sys_execveat+0xca/0xe0 [ 1838.141245][T24950] __do_fast_syscall_32+0xb6/0x2b0 [ 1838.141266][T24950] ? lockdep_hardirqs_on+0x9c/0x150 [ 1838.141289][T24950] do_fast_syscall_32+0x34/0x80 [ 1838.141309][T24950] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1838.141326][T24950] RIP: 0023:0xf702d539 [ 1838.141338][T24950] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1838.141350][T24950] RSP: 002b:00000000f53fc55c EFLAGS: 00000206 ORIG_RAX: 0000000000000166 [ 1838.141372][T24950] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080001400 [ 1838.141382][T24950] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1838.141390][T24950] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1838.141397][T24950] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1838.141405][T24950] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1838.141425][T24950] [ 1838.433440][ C0] vkms_vblank_simulate: vblank timer overrun [ 1838.610381][T24825] bridge0: port 1(bridge_slave_0) entered blocking state [ 1838.645872][T24825] bridge0: port 1(bridge_slave_0) entered disabled state [ 1838.684469][T24953] FAULT_INJECTION: forcing a failure. [ 1838.684469][T24953] name failslab, interval 1, probability 0, space 0, times 0 [ 1838.727435][T24825] bridge_slave_0: entered allmulticast mode [ 1838.806480][T24825] bridge_slave_0: entered promiscuous mode [ 1838.812370][T24953] CPU: 0 UID: 0 PID: 24953 Comm: syz.3.4377 Not tainted syzkaller #0 PREEMPT(full) [ 1838.812406][T24953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1838.812417][T24953] Call Trace: [ 1838.812425][T24953] [ 1838.812433][T24953] dump_stack_lvl+0x189/0x250 [ 1838.812462][T24953] ? __pfx____ratelimit+0x10/0x10 [ 1838.812505][T24953] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1838.812531][T24953] ? __pfx__printk+0x10/0x10 [ 1838.812553][T24953] ? __pfx___might_resched+0x10/0x10 [ 1838.812583][T24953] ? fs_reclaim_acquire+0x7d/0x100 [ 1838.812618][T24953] should_fail_ex+0x414/0x560 [ 1838.812653][T24953] should_failslab+0xa8/0x100 [ 1838.812694][T24953] __kvmalloc_node_noprof+0x158/0x910 [ 1838.812725][T24953] ? __nf_register_net_hook+0x232/0x930 [ 1838.812749][T24953] ? nf_hook_entries_grow+0x281/0x720 [ 1838.812778][T24953] nf_hook_entries_grow+0x281/0x720 [ 1838.812817][T24953] __nf_register_net_hook+0x2c9/0x930 [ 1838.812852][T24953] nf_register_net_hook+0xb2/0x190 [ 1838.812877][T24953] nf_register_net_hooks+0x44/0x1b0 [ 1838.812902][T24953] nf_ct_netns_do_get+0x363/0x5a0 [ 1838.812930][T24953] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 1838.812962][T24953] ? __raw_spin_lock_init+0x45/0x100 [ 1838.812995][T24953] nf_ct_netns_get+0x44/0xb0 [ 1838.813017][T24953] nft_connlimit_do_init+0x1de/0x2e0 [ 1838.813045][T24953] nft_set_elem_expr_alloc+0x1db/0x590 [ 1838.813080][T24953] ? __pfx_nft_set_elem_expr_alloc+0x10/0x10 [ 1838.813131][T24953] ? kasan_quarantine_put+0xdd/0x220 [ 1838.813161][T24953] ? lockdep_hardirqs_on+0x9c/0x150 [ 1838.813206][T24953] nft_set_expr_alloc+0x4da/0x760 [ 1838.813246][T24953] nf_tables_newset+0x1c4c/0x2540 [ 1838.813302][T24953] ? __pfx_nf_tables_newset+0x10/0x10 [ 1838.813354][T24953] ? __nla_parse+0x40/0x60 [ 1838.813382][T24953] nfnetlink_rcv+0x11d9/0x2590 [ 1838.813457][T24953] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1838.813505][T24953] ? ref_tracker_free+0x63a/0x7d0 [ 1838.813568][T24953] ? __netlink_deliver_tap+0x807/0x850 [ 1838.813592][T24953] ? netlink_deliver_tap+0x2e/0x1b0 [ 1838.813641][T24953] netlink_unicast+0x82f/0x9e0 [ 1838.813687][T24953] ? __pfx_netlink_unicast+0x10/0x10 [ 1838.813726][T24953] ? netlink_sendmsg+0x642/0xb30 [ 1838.813748][T24953] ? skb_put+0x11b/0x210 [ 1838.813777][T24953] netlink_sendmsg+0x805/0xb30 [ 1838.813813][T24953] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1838.813839][T24953] ? __import_iovec+0x5d4/0x7f0 [ 1838.813867][T24953] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1838.813906][T24953] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1838.813928][T24953] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1838.813954][T24953] __sock_sendmsg+0x21c/0x270 [ 1838.813990][T24953] ____sys_sendmsg+0x505/0x830 [ 1838.814030][T24953] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1838.814078][T24953] ___sys_sendmsg+0x21f/0x2a0 [ 1838.814108][T24953] ? __pfx____sys_sendmsg+0x10/0x10 [ 1838.814180][T24953] ? __fget_files+0x2a/0x420 [ 1838.814201][T24953] ? __fget_files+0x3a0/0x420 [ 1838.814238][T24953] __sys_sendmsg+0x164/0x220 [ 1838.814266][T24953] ? __pfx___sys_sendmsg+0x10/0x10 [ 1838.814304][T24953] ? __pfx_ksys_write+0x10/0x10 [ 1838.814342][T24953] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1838.814379][T24953] ? lockdep_hardirqs_on+0x9c/0x150 [ 1838.814416][T24953] __do_fast_syscall_32+0xb6/0x2b0 [ 1838.814453][T24953] ? lockdep_hardirqs_on+0x9c/0x150 [ 1838.814491][T24953] do_fast_syscall_32+0x34/0x80 [ 1838.814527][T24953] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1838.814555][T24953] RIP: 0023:0xf706d539 [ 1838.814583][T24953] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1838.814606][T24953] RSP: 002b:00000000f545d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1838.814630][T24953] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800000c0 [ 1838.814647][T24953] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1838.814662][T24953] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1838.814675][T24953] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1838.814690][T24953] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1838.814727][T24953] [ 1839.357573][T24959] atomic_op ffff888053585198 conn xmit_atomic 0000000000000000 [ 1839.377543][T24825] bridge0: port 2(bridge_slave_1) entered blocking state [ 1839.414210][T24825] bridge0: port 2(bridge_slave_1) entered disabled state [ 1839.462027][T24825] bridge_slave_1: entered allmulticast mode [ 1839.517296][T24825] bridge_slave_1: entered promiscuous mode [ 1839.538900][T24960] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1839.552336][T21758] Bluetooth: hci3: command tx timeout [ 1839.788865][T24967] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4381'. [ 1839.973064][T24825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1840.035310][T24825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1840.165717][T24825] team0: Port device team_slave_0 added [ 1840.241184][T24825] team0: Port device team_slave_1 added [ 1840.262416][T23440] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 1840.391342][T24825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1840.422815][T23440] usb 6-1: Invalid ep0 maxpacket: 64 [ 1840.462430][T24825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1840.488326][ C0] vkms_vblank_simulate: vblank timer overrun [ 1840.562866][T24825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1840.582890][T23440] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 1840.674288][T24825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1840.700568][T24825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1840.762788][T23440] usb 6-1: Invalid ep0 maxpacket: 64 [ 1840.819138][T23440] usb usb6-port1: attempt power cycle [ 1840.831551][T24825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1840.955646][T24825] hsr_slave_0: entered promiscuous mode [ 1841.004844][T24825] hsr_slave_1: entered promiscuous mode [ 1841.033999][T24825] debugfs: 'hsr0' already exists in 'hsr' [ 1841.058130][T24825] Cannot create hsr debugfs directory [ 1841.192065][T23440] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 1841.320848][T23440] usb 6-1: Invalid ep0 maxpacket: 64 [ 1841.622139][T23440] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 1841.647739][T23440] usb 6-1: Invalid ep0 maxpacket: 64 [ 1841.653851][T23440] usb usb6-port1: unable to enumerate USB device [ 1841.762693][T24825] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1841.773171][T24825] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1841.939421][T24825] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1842.001413][T24825] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1842.545752][T24825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1842.608148][T24825] 8021q: adding VLAN 0 to HW filter on device team0 [ 1842.639478][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 1842.646858][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1842.685946][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 1842.693140][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1842.964249][T24825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1843.047973][T25021] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1843.084530][T24825] veth0_vlan: entered promiscuous mode [ 1843.112561][T24825] veth1_vlan: entered promiscuous mode [ 1843.320317][T24825] veth0_macvtap: entered promiscuous mode [ 1843.367417][T24825] veth1_macvtap: entered promiscuous mode [ 1843.423407][T24825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1843.468273][T24825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1843.512023][ T2948] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1843.520982][ T50] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1843.544961][ T50] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1843.773704][ T50] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1843.945673][T25043] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4394'. [ 1844.110401][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1844.128438][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1844.193881][ T3516] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1844.232015][ T3516] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1844.814510][T25047] netlink: 6 bytes leftover after parsing attributes in process `syz.6.4345'. [ 1845.535434][T25061] netlink: 2088 bytes leftover after parsing attributes in process `syz.6.4398'. [ 1846.031746][T23713] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1846.293228][T25074] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4400'. [ 1846.452928][T23713] usb 5-1: Using ep0 maxpacket: 8 [ 1846.489381][T23713] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1846.543034][T23713] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1846.598967][T23713] usb 5-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 1846.623362][T23713] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1846.689394][T23713] usb 5-1: config 0 descriptor?? [ 1846.930589][T23713] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1847.077263][T23713] usb 5-1: USB disconnect, device number 70 [ 1847.124295][T25082] binder: 25081:25082 unknown command 0 [ 1847.129882][T25082] binder: 25081:25082 ioctl c0306201 80000080 returned -22 [ 1847.371264][T25087] netlink: 'syz.5.4403': attribute type 2 has an invalid length. [ 1847.512214][T23713] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1847.662074][T23713] usb 5-1: Using ep0 maxpacket: 8 [ 1847.674924][T23713] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEF, changing to 0x8F [ 1847.686579][T23713] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1847.696643][T23713] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1847.725666][T23713] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1847.764213][T23713] usb 5-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 1847.773987][T23713] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1847.782243][T23713] usb 5-1: SerialNumber: syz [ 1847.839762][T23713] usb 5-1: config 0 descriptor?? [ 1847.989970][T23713] hso 5-1:0.0: Can't find BULK IN endpoint [ 1848.010310][ T3516] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1848.285058][ T3516] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1848.295925][T25091] ======================================================= [ 1848.295925][T25091] WARNING: The mand mount option has been deprecated and [ 1848.295925][T25091] and is ignored by this kernel. Remove the mand [ 1848.295925][T25091] option from the mount to silence this warning. [ 1848.295925][T25091] ======================================================= [ 1848.361449][T25063] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4396'. [ 1848.493415][ T3516] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1848.643444][ T3516] bridge0: port 3(netdevsim0) entered disabled state [ 1848.736364][ T3516] netdevsim netdevsim5 netdevsim0 (unregistering): left allmulticast mode [ 1848.748448][ T3516] netdevsim netdevsim5 netdevsim0 (unregistering): left promiscuous mode [ 1848.774212][T25104] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1848.858681][ T3516] bridge0: port 3(netdevsim0) entered disabled state [ 1849.459656][T25110] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.4411'. [ 1849.553481][T11186] usb 5-1: USB disconnect, device number 71 [ 1849.607920][ T3516] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1850.051123][ T3516] bridge_slave_1: left allmulticast mode [ 1850.073800][ T3516] bridge_slave_1: left promiscuous mode [ 1850.099847][ T3516] bridge0: port 2(bridge_slave_1) entered disabled state [ 1850.230808][ T3516] bridge_slave_0: left allmulticast mode [ 1850.257630][ T3516] bridge_slave_0: left promiscuous mode [ 1850.299688][ T3516] bridge0: port 1(bridge_slave_0) entered disabled state [ 1850.622025][ T10] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1850.796273][T23922] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1850.807467][T23922] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1850.816981][T23922] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1850.829291][T23922] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1850.837677][T23922] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1850.965608][ T10] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1850.987193][ T10] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1851.036517][ T10] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1851.061817][ T10] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1851.071589][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1851.147479][ T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1851.155454][ T10] usb 2-1: invalid MIDI out EP 0 [ 1851.277761][ T10] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1851.540221][ T3516] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1851.560047][ T3516] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1851.575091][ T3516] bond0 (unregistering): Released all slaves [ 1852.912470][T21758] Bluetooth: hci0: command tx timeout [ 1853.157281][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.166699][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.268806][T11186] usb 2-1: USB disconnect, device number 95 [ 1853.277559][T25129] delete_channel: no stack [ 1853.484418][T25173] Failed to get privilege flags for destination (handle=0x2:0x25) [ 1853.784546][T25174] FAULT_INJECTION: forcing a failure. [ 1853.784546][T25174] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1853.799058][T25174] CPU: 0 UID: 0 PID: 25174 Comm: syz.1.4422 Not tainted syzkaller #0 PREEMPT(full) [ 1853.799077][T25174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1853.799087][T25174] Call Trace: [ 1853.799093][T25174] [ 1853.799099][T25174] dump_stack_lvl+0x189/0x250 [ 1853.799121][T25174] ? __pfx____ratelimit+0x10/0x10 [ 1853.799141][T25174] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1853.799160][T25174] ? __pfx__printk+0x10/0x10 [ 1853.799182][T25174] should_fail_ex+0x414/0x560 [ 1853.799207][T25174] _copy_to_user+0x31/0xb0 [ 1853.799226][T25174] simple_read_from_buffer+0xe1/0x170 [ 1853.799250][T25174] proc_fail_nth_read+0x1b3/0x220 [ 1853.799272][T25174] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1853.799292][T25174] ? rw_verify_area+0x2a6/0x4d0 [ 1853.799310][T25174] ? __lock_acquire+0xab9/0xd20 [ 1853.799322][T25174] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1853.799341][T25174] vfs_read+0x200/0xa30 [ 1853.799358][T25174] ? fdget_pos+0x247/0x320 [ 1853.799380][T25174] ? __pfx___mutex_lock+0x10/0x10 [ 1853.799413][T25174] ? __pfx_vfs_read+0x10/0x10 [ 1853.799432][T25174] ? __fget_files+0x2a/0x420 [ 1853.799446][T25174] ? __fget_files+0x3a0/0x420 [ 1853.799476][T25174] ? __fget_files+0x2a/0x420 [ 1853.799494][T25174] ksys_read+0x145/0x250 [ 1853.799512][T25174] ? exc_page_fault+0x82/0x100 [ 1853.799531][T25174] ? __pfx_ksys_read+0x10/0x10 [ 1853.799570][T25174] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1853.799593][T25174] ? lockdep_hardirqs_on+0x9c/0x150 [ 1853.799615][T25174] __do_fast_syscall_32+0xb6/0x2b0 [ 1853.799638][T25174] ? lockdep_hardirqs_on+0x9c/0x150 [ 1853.799662][T25174] do_fast_syscall_32+0x34/0x80 [ 1853.799683][T25174] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1853.799721][T25174] RIP: 0023:0xf7f26539 [ 1853.799734][T25174] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1853.799747][T25174] RSP: 002b:00000000f5416590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 1853.799763][T25174] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f5416620 [ 1853.799774][T25174] RDX: 000000000000000f RSI: 00000000f73b6ff4 RDI: 0000000000000000 [ 1853.799784][T25174] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1853.799793][T25174] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1853.799802][T25174] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1853.799824][T25174] [ 1854.041141][ C0] vkms_vblank_simulate: vblank timer overrun [ 1854.319244][ T3516] hsr_slave_0: left promiscuous mode [ 1854.382230][ T3516] hsr_slave_1: left promiscuous mode [ 1854.388402][ T3516] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1854.452119][ T3516] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1854.512652][ T3516] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1854.558253][ T3516] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1854.766119][ T3516] veth1_macvtap: left promiscuous mode [ 1854.771786][ T3516] veth0_macvtap: left promiscuous mode [ 1854.888530][ T3516] veth1_vlan: left promiscuous mode [ 1854.902577][ T3516] veth0_vlan: left promiscuous mode [ 1854.982587][T25200] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1855.010806][T21758] Bluetooth: hci0: command tx timeout [ 1855.033999][T25205] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4426'. [ 1856.930925][ T3516] team0 (unregistering): Port device team_slave_1 removed [ 1857.057393][ T3516] team0 (unregistering): Port device team_slave_0 removed [ 1857.075691][T21758] Bluetooth: hci0: command tx timeout [ 1858.254583][T25139] chnl_net:caif_netlink_parms(): no params data found [ 1859.159570][T21758] Bluetooth: hci0: command tx timeout [ 1859.304336][T25139] bridge0: port 1(bridge_slave_0) entered blocking state [ 1859.326407][T25139] bridge0: port 1(bridge_slave_0) entered disabled state [ 1859.344430][T25139] bridge_slave_0: entered allmulticast mode [ 1859.380886][T25139] bridge_slave_0: entered promiscuous mode [ 1859.450820][T25139] bridge0: port 2(bridge_slave_1) entered blocking state [ 1859.462009][T23713] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1859.479927][T25139] bridge0: port 2(bridge_slave_1) entered disabled state [ 1859.488075][T25139] bridge_slave_1: entered allmulticast mode [ 1859.505823][T25139] bridge_slave_1: entered promiscuous mode [ 1859.612103][T23713] usb 4-1: Using ep0 maxpacket: 16 [ 1859.620178][T23713] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 1859.638404][T23713] usb 4-1: config 1 has no interface number 0 [ 1859.645001][T23713] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1859.710944][T23713] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1859.794395][T25139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1859.851512][T23713] usb 4-1: config 1 interface 105 has no altsetting 0 [ 1859.882173][T25139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1860.018897][T23713] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1860.042050][T23713] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1860.053651][T23713] usb 4-1: Product: syz [ 1860.058017][T23713] usb 4-1: Manufacturer: syz [ 1860.085417][T23713] usb 4-1: SerialNumber: syz [ 1860.125798][T25139] team0: Port device team_slave_0 added [ 1860.150461][T25260] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1860.160298][T25260] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1860.168955][T25139] team0: Port device team_slave_1 added [ 1860.325772][T25271] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4437'. [ 1860.348037][T25274] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4437'. [ 1860.463181][T25139] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1860.470320][T25139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1860.592042][T25139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1860.623795][T25260] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1860.633400][T25260] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1860.642395][T25139] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1860.671357][T25139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1860.792037][T25139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1861.003360][T25139] hsr_slave_0: entered promiscuous mode [ 1861.012408][T22749] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1861.041552][T25139] hsr_slave_1: entered promiscuous mode [ 1861.055602][T25139] debugfs: 'hsr0' already exists in 'hsr' [ 1861.068722][T25139] Cannot create hsr debugfs directory [ 1861.184160][T22749] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1861.206361][T22749] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1861.234318][T22749] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1861.265169][T22749] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1861.295286][T22749] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1861.320404][T23713] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 1861.333070][T22749] usb 7-1: config 0 descriptor?? [ 1861.381807][T23713] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 1861.440854][T23713] aqc111 4-1:1.105 eth9: register 'aqc111' at usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 1e:96:70:16:d7:2a [ 1861.461113][T23713] usb 4-1: USB disconnect, device number 80 [ 1861.496150][T23713] aqc111 4-1:1.105 eth9: unregister 'aqc111' usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 1861.658117][T23713] aqc111 4-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1861.671551][T25139] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1861.675269][T23713] aqc111 4-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1861.688448][T23713] aqc111 4-1:1.105 eth9 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 1861.706753][T25139] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1861.772250][T25139] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1861.795349][T22749] plantronics 0003:047F:FFFF.0016: reserved main item tag 0xd [ 1861.817253][T25139] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1861.832724][T22749] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1862.056656][T11186] usb 7-1: USB disconnect, device number 2 [ 1862.135356][T25139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1862.162996][T25139] 8021q: adding VLAN 0 to HW filter on device team0 [ 1862.210251][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1862.210387][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1862.214683][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1862.214782][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1862.293798][T25139] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1862.293821][T25139] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1862.446549][T25314] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1862.936094][T25321] syzkaller0: entered promiscuous mode [ 1863.213749][T25139] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1863.342008][ T43] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1863.365357][T25139] veth0_vlan: entered promiscuous mode [ 1863.424344][T25330] FAULT_INJECTION: forcing a failure. [ 1863.424344][T25330] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1863.433969][T25139] veth1_vlan: entered promiscuous mode [ 1863.452355][T25330] CPU: 1 UID: 0 PID: 25330 Comm: syz.3.4446 Not tainted syzkaller #0 PREEMPT(full) [ 1863.452380][T25330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1863.452392][T25330] Call Trace: [ 1863.452401][T25330] [ 1863.452409][T25330] dump_stack_lvl+0x189/0x250 [ 1863.452440][T25330] ? __pfx____ratelimit+0x10/0x10 [ 1863.452466][T25330] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1863.452491][T25330] ? __pfx__printk+0x10/0x10 [ 1863.452511][T25330] ? __might_fault+0xb0/0x130 [ 1863.452548][T25330] should_fail_ex+0x414/0x560 [ 1863.452582][T25330] _copy_from_iter+0x1de/0x1790 [ 1863.452610][T25330] ? _copy_from_iter+0x24f/0x1790 [ 1863.452635][T25330] ? __pfx__copy_from_iter+0x10/0x10 [ 1863.452654][T25330] ? sock_alloc_send_pskb+0x86b/0x980 [ 1863.452682][T25330] ? __pfx__copy_from_iter+0x10/0x10 [ 1863.452725][T25330] ? page_copy_sane+0x16a/0x280 [ 1863.452750][T25330] copy_page_from_iter+0xdd/0x170 [ 1863.452779][T25330] skb_copy_datagram_from_iter+0x306/0x720 [ 1863.452819][T25330] packet_sendmsg+0x3797/0x5080 [ 1863.452861][T25330] ? match_mnt_path_str+0x570/0xb40 [ 1863.452909][T25330] ? __pfx___might_resched+0x10/0x10 [ 1863.452933][T25330] ? __lock_acquire+0xab9/0xd20 [ 1863.452969][T25330] ? __pfx_packet_sendmsg+0x10/0x10 [ 1863.452998][T25330] ? aa_sk_perm+0x81e/0x950 [ 1863.453033][T25330] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 1863.453072][T25330] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1863.453105][T25330] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1863.453126][T25330] ? __pfx_packet_sendmsg+0x10/0x10 [ 1863.453159][T25330] __sock_sendmsg+0x21c/0x270 [ 1863.453190][T25330] __sys_sendto+0x3bd/0x520 [ 1863.453224][T25330] ? __pfx___sys_sendto+0x10/0x10 [ 1863.453241][T25330] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 1863.453287][T25330] ? __fget_files+0x3a0/0x420 [ 1863.453319][T25330] ? ksys_write+0x22a/0x250 [ 1863.453346][T25330] ? exc_page_fault+0x82/0x100 [ 1863.453376][T25330] ? __pfx_ksys_write+0x10/0x10 [ 1863.453411][T25330] __ia32_sys_sendto+0xdd/0x100 [ 1863.453436][T25330] __do_fast_syscall_32+0xb6/0x2b0 [ 1863.453469][T25330] ? lockdep_hardirqs_on+0x9c/0x150 [ 1863.453502][T25330] do_fast_syscall_32+0x34/0x80 [ 1863.453534][T25330] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1863.453559][T25330] RIP: 0023:0xf706d539 [ 1863.453576][T25330] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1863.453594][T25330] RSP: 002b:00000000f545d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 1863.453617][T25330] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 1863.453631][T25330] RDX: 000000000001000a RSI: 0000000000000000 RDI: 0000000080000140 [ 1863.453645][T25330] RBP: 0000000000000014 R08: 0000000000000000 R09: 0000000000000000 [ 1863.453657][T25330] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1863.453669][T25330] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1863.453701][T25330] [ 1863.777955][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1863.788878][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1863.802417][ T43] usb 7-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 1863.811503][ T43] usb 7-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0 [ 1863.820082][ T43] usb 7-1: Manufacturer: syz [ 1863.827857][ T43] usb 7-1: config 0 descriptor?? [ 1863.894824][T25333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4447'. [ 1863.921198][T25139] veth0_macvtap: entered promiscuous mode [ 1863.994351][T25139] veth1_macvtap: entered promiscuous mode [ 1864.048785][T25339] netlink: 'syz.1.4447': attribute type 10 has an invalid length. [ 1864.114891][T25139] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1864.165560][T25139] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1864.243913][ T50] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1864.272722][ T50] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1864.321508][ T43] hid_mf 0003:0079:1846.0017: unbalanced delimiter at end of report description [ 1864.374461][ T43] hid_mf 0003:0079:1846.0017: HID parse failed. [ 1864.397204][ T43] hid_mf 0003:0079:1846.0017: probe with driver hid_mf failed with error -22 [ 1864.892412][ T50] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1865.040660][ T50] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1865.060625][ T43] usb 7-1: USB disconnect, device number 3 [ 1865.223701][ T6193] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1865.251718][ T6193] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1865.360054][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1865.378444][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1865.391779][T25363] Set syz0 is full, maxelem 0 reached [ 1865.672317][ T43] usb 2-1: new full-speed USB device number 96 using dummy_hcd [ 1865.842282][ T43] usb 2-1: device descriptor read/64, error -71 [ 1866.082114][ T43] usb 2-1: new full-speed USB device number 97 using dummy_hcd [ 1866.242394][ T43] usb 2-1: device descriptor read/64, error -71 [ 1866.552995][ T43] usb usb2-port1: attempt power cycle [ 1866.912295][ T43] usb 2-1: new full-speed USB device number 98 using dummy_hcd [ 1866.936060][ T43] usb 2-1: device descriptor read/8, error -71 [ 1867.252192][ T43] usb 2-1: new full-speed USB device number 99 using dummy_hcd [ 1867.290250][ T43] usb 2-1: device descriptor read/8, error -71 [ 1867.442267][ T43] usb usb2-port1: unable to enumerate USB device [ 1867.555718][T25401] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1868.129922][T25409] Failed to get privilege flags for destination (handle=0x2:0x25) [ 1868.239441][ T13] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1868.283813][ T13] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1868.487072][ T13] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1868.592027][ T43] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1868.736579][ T2948] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1868.787112][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1868.892389][ T43] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1868.901462][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1868.990057][ T43] usb 5-1: config 0 descriptor?? [ 1869.089513][T25416] netlink: 'syz.3.4461': attribute type 10 has an invalid length. [ 1869.122219][T25416] bridge0: port 3(netdevsim0) entered blocking state [ 1869.162276][T25416] bridge0: port 3(netdevsim0) entered disabled state [ 1869.177883][T25416] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1869.215171][T25416] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1869.418291][ T43] keytouch 0003:0926:3333.0018: fixing up Keytouch IEC report descriptor [ 1869.458592][T25416] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:2158x16 (0x30314752, 8, 0, 0, 0) [ 1869.473061][T25425] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4460'. [ 1869.504576][ T43] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0018/input/input36 [ 1869.918341][ T43] keytouch 0003:0926:3333.0018: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 1869.975496][T25428] batadv_slave_1: entered promiscuous mode [ 1870.136219][T25418] batadv_slave_1: left promiscuous mode [ 1870.502246][T23713] usb 5-1: USB disconnect, device number 72 [ 1870.527037][T25445] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4463'. [ 1871.802660][ T5888] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1872.023748][ T5888] usb 5-1: Using ep0 maxpacket: 16 [ 1872.054991][ T5888] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1872.079501][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1872.101569][ T5888] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1872.132323][ T5888] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice=4f.32 [ 1872.158934][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1872.204016][ T5888] usb 5-1: Product: syz [ 1872.228208][ T5888] usb 5-1: Manufacturer: syz [ 1872.244350][ T5888] usb 5-1: SerialNumber: syz [ 1872.276647][ T5888] usb 5-1: config 0 descriptor?? [ 1872.291999][T25467] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1872.321170][ T5888] mceusb 5-1:0.0: mceusb_dev_probe: device setup failed! [ 1872.347293][ T5888] mceusb 5-1:0.0: probe with driver mceusb failed with error -12 [ 1872.748144][ T43] usb 5-1: USB disconnect, device number 73 [ 1873.177509][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 1873.177527][ T30] audit: type=1326 audit(1762545502.346:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25501 comm="syz.3.4475" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1873.522724][T25509] overlayfs: missing 'lowerdir' [ 1873.703762][T25499] fuse: blksize only supported for fuseblk [ 1873.713423][ T30] audit: type=1326 audit(1762545502.346:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25501 comm="syz.3.4475" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1873.740211][ T30] audit: type=1326 audit(1762545502.346:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25501 comm="syz.3.4475" exe="/root/syz-executor" sig=0 arch=40000003 syscall=70 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1873.762104][ C1] vkms_vblank_simulate: vblank timer overrun [ 1873.771973][ T30] audit: type=1326 audit(1762545502.346:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25501 comm="syz.3.4475" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1873.793954][ C1] vkms_vblank_simulate: vblank timer overrun [ 1873.814497][ T30] audit: type=1326 audit(1762545502.346:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25501 comm="syz.3.4475" exe="/root/syz-executor" sig=0 arch=40000003 syscall=345 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 1875.045781][T25536] tipc: Enabling of bearer rejected, failed to enable media [ 1875.351973][ T980] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 1875.532055][ T980] usb 2-1: Using ep0 maxpacket: 16 [ 1875.539360][ T980] usb 2-1: config 0 has no interfaces? [ 1875.548126][ T980] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 1875.560357][ T980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1875.570801][ T980] usb 2-1: Product: syz [ 1875.605416][ T980] usb 2-1: Manufacturer: syz [ 1875.610125][ T980] usb 2-1: SerialNumber: syz [ 1875.626478][ T980] usb 2-1: config 0 descriptor?? [ 1875.725970][T25546] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4483'. [ 1875.737719][T25546] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4483'. [ 1876.105080][T25550] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4484'. [ 1876.826887][T25568] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4487'. [ 1876.980782][T25566] netlink: 'syz.4.4489': attribute type 29 has an invalid length. [ 1876.990029][T25566] netlink: 'syz.4.4489': attribute type 29 has an invalid length. [ 1878.076272][ T5888] usb 2-1: USB disconnect, device number 100 [ 1878.168540][T25580] netlink: 'syz.6.4493': attribute type 10 has an invalid length. [ 1878.185052][T25580] bridge0: port 3(netdevsim0) entered blocking state [ 1878.192279][T25580] bridge0: port 3(netdevsim0) entered disabled state [ 1878.199266][T25580] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 1878.209693][T25580] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 1878.217824][T25580] bridge0: port 3(netdevsim0) entered blocking state [ 1878.224622][T25580] bridge0: port 3(netdevsim0) entered forwarding state [ 1878.266361][T25580] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:2158x16 (0x30314752, 8, 0, 0, 0) [ 1878.359418][T25584] netlink: 'syz.1.4494': attribute type 10 has an invalid length. [ 1878.372026][T23440] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1878.525004][T23440] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1878.539215][T23440] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1878.549105][T23440] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1878.824814][T23440] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1878.854957][T23440] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1878.902923][T23440] usb 5-1: config 0 descriptor?? [ 1879.340122][T23440] plantronics 0003:047F:FFFF.0019: reserved main item tag 0xd [ 1879.368656][T23440] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1879.607903][T23440] usb 5-1: USB disconnect, device number 74 [ 1880.053882][T25616] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4503'. [ 1880.782609][T23440] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1881.002202][T23440] usb 4-1: Using ep0 maxpacket: 32 [ 1881.025859][T23440] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 1881.047266][T25629] netlink: 'syz.4.4506': attribute type 38 has an invalid length. [ 1881.054496][T23440] usb 4-1: config 0 has no interface number 0 [ 1881.061281][T23440] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 1881.159601][T23440] usb 4-1: config 0 interface 196 has no altsetting 0 [ 1881.323480][T23440] usb 4-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 1881.343017][T23440] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1881.454353][T23440] usb 4-1: Product: syz [ 1881.482105][T23440] usb 4-1: Manufacturer: syz [ 1881.492400][T23440] usb 4-1: SerialNumber: syz [ 1881.527462][T23440] usb 4-1: config 0 descriptor?? [ 1881.582610][T25612] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1881.660589][T25639] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4508'. [ 1881.678064][T25639] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4508'. [ 1882.943275][T23440] ipheth 4-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 1882.987774][T23440] ipheth 4-1:0.196: probe with driver ipheth failed with error -71 [ 1883.094409][T23440] usb 4-1: USB disconnect, device number 81 [ 1884.050624][ T30] audit: type=1326 audit(1762545513.196:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25664 comm="syz.1.4515" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 1884.404458][ T30] audit: type=1326 audit(1762545513.196:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25664 comm="syz.1.4515" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 1884.526241][ T30] audit: type=1326 audit(1762545513.196:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25664 comm="syz.1.4515" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 1884.786089][ T30] audit: type=1326 audit(1762545513.196:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25664 comm="syz.1.4515" exe="/root/syz-executor" sig=0 arch=40000003 syscall=227 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 1885.002362][T25681] netlink: 'syz.6.4517': attribute type 12 has an invalid length. [ 1885.038928][ T30] audit: type=1326 audit(1762545513.196:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25664 comm="syz.1.4515" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 1885.067861][ T30] audit: type=1326 audit(1762545513.196:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25664 comm="syz.1.4515" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 1885.217903][ T30] audit: type=1326 audit(1762545513.196:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25664 comm="syz.1.4515" exe="/root/syz-executor" sig=0 arch=40000003 syscall=150 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 1885.442739][ T30] audit: type=1326 audit(1762545513.806:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25664 comm="syz.1.4515" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 1885.602207][ T30] audit: type=1326 audit(1762545513.806:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25664 comm="syz.1.4515" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 1885.812280][ T30] audit: type=1326 audit(1762545513.816:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25664 comm="syz.1.4515" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f26539 code=0x7ffc0000 [ 1886.134567][T25703] netlink: 'syz.7.4523': attribute type 12 has an invalid length. [ 1886.462651][T25714] netlink: 'syz.3.4527': attribute type 10 has an invalid length. [ 1886.755477][T25714] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:2158x16 (0x30314752, 8, 0, 0, 0) [ 1887.238324][T25726] netlink: 56 bytes leftover after parsing attributes in process `syz.6.4528'. [ 1887.249330][T25726] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4528'. [ 1914.595651][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.602464][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1957.632022][T23922] Bluetooth: hci3: command 0x0406 tx timeout [ 1972.992038][T23922] Bluetooth: hci0: command 0x0406 tx timeout [ 1976.035586][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.051401][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 2037.474649][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.480987][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 2051.552208][ T31] INFO: task kworker/0:2:3668 blocked for more than 143 seconds. [ 2051.560348][ T31] Not tainted syzkaller #0 [ 2051.565431][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2051.574158][ T31] task:kworker/0:2 state:D stack:22040 pid:3668 tgid:3668 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 2051.586334][ T31] Workqueue: usb_hub_wq hub_event [ 2051.591382][ T31] Call Trace: [ 2051.594701][ T31] [ 2051.597642][ T31] __schedule+0x1798/0x4cc0 [ 2051.602273][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2051.607667][ T31] ? __pfx___schedule+0x10/0x10 [ 2051.612634][ T31] ? schedule+0x91/0x360 [ 2051.617839][ T31] schedule+0x165/0x360 [ 2051.622131][ T31] usb_kill_urb+0x1be/0x2d0 [ 2051.626668][ T31] ? __pfx_usb_kill_urb+0x10/0x10 [ 2051.631726][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 2051.638119][ T31] usb_start_wait_urb+0x18c/0x4c0 [ 2051.643283][ T31] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 2051.648861][ T31] ? usb_alloc_urb+0x46/0x150 [ 2051.653905][ T31] usb_control_msg+0x232/0x3e0 [ 2051.658716][ T31] hub_port_init+0xbf9/0x2800 [ 2051.663683][ T31] hub_event+0x2532/0x4a20 [ 2051.668152][ T31] ? __pfx_hub_event+0x10/0x10 [ 2051.672977][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2051.678720][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2051.684097][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2051.689837][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2051.695660][ T31] process_scheduled_works+0xae1/0x17b0 [ 2051.701243][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 2051.707322][ T31] worker_thread+0x8a0/0xda0 [ 2051.712106][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2051.719478][ T31] ? __kthread_parkme+0x7b/0x200 [ 2051.724512][ T31] kthread+0x711/0x8a0 [ 2051.728600][ T31] ? __pfx_worker_thread+0x10/0x10 [ 2051.733769][ T31] ? __pfx_kthread+0x10/0x10 [ 2051.738385][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2051.743743][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2051.748973][ T31] ? __pfx_kthread+0x10/0x10 [ 2051.753663][ T31] ret_from_fork+0x4bc/0x870 [ 2051.758272][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2051.763484][ T31] ? __switch_to_asm+0x39/0x70 [ 2051.768265][ T31] ? __switch_to_asm+0x33/0x70 [ 2051.773384][ T31] ? __pfx_kthread+0x10/0x10 [ 2051.778002][ T31] ret_from_fork_asm+0x1a/0x30 [ 2051.782872][ T31] [ 2051.785952][ T31] INFO: task kworker/1:3:5833 blocked for more than 143 seconds. [ 2051.793842][ T31] Not tainted syzkaller #0 [ 2051.798789][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2051.807554][ T31] task:kworker/1:3 state:D stack:19512 pid:5833 tgid:5833 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 2051.819606][ T31] Workqueue: usb_hub_wq hub_event [ 2051.825500][ T31] Call Trace: [ 2051.828793][ T31] [ 2051.831719][ T31] __schedule+0x1798/0x4cc0 [ 2051.836323][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2051.841720][ T31] ? __pfx___schedule+0x10/0x10 [ 2051.846651][ T31] ? schedule+0x91/0x360 [ 2051.850916][ T31] schedule+0x165/0x360 [ 2051.855165][ T31] usb_kill_urb+0x1be/0x2d0 [ 2051.859696][ T31] ? __pfx_usb_kill_urb+0x10/0x10 [ 2051.864784][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 2051.870875][ T31] usb_start_wait_urb+0x18c/0x4c0 [ 2051.876152][ T31] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 2051.881750][ T31] ? usb_alloc_urb+0x46/0x150 [ 2051.886830][ T31] usb_control_msg+0x232/0x3e0 [ 2051.891619][ T31] hub_port_init+0xbf9/0x2800 [ 2051.898307][ T31] hub_event+0x2532/0x4a20 [ 2051.902982][ T31] ? __pfx_hub_event+0x10/0x10 [ 2051.907764][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2051.913788][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2051.919016][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2051.925706][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2051.931477][ T31] process_scheduled_works+0xae1/0x17b0 [ 2051.937217][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 2051.943308][ T31] worker_thread+0x8a0/0xda0 [ 2051.947903][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2051.954428][ T31] ? __kthread_parkme+0x7b/0x200 [ 2051.959390][ T31] kthread+0x711/0x8a0 [ 2051.963666][ T31] ? __pfx_worker_thread+0x10/0x10 [ 2051.968808][ T31] ? __pfx_kthread+0x10/0x10 [ 2051.973456][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2051.978678][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2051.983973][ T31] ? __pfx_kthread+0x10/0x10 [ 2051.988588][ T31] ret_from_fork+0x4bc/0x870 [ 2051.993705][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2051.998849][ T31] ? __switch_to_asm+0x39/0x70 [ 2052.003858][ T31] ? __switch_to_asm+0x33/0x70 [ 2052.008676][ T31] ? __pfx_kthread+0x10/0x10 [ 2052.013381][ T31] ret_from_fork_asm+0x1a/0x30 [ 2052.018185][ T31] [ 2052.021304][ T31] [ 2052.021304][ T31] Showing all locks held in the system: [ 2052.030086][ T31] 4 locks held by kworker/u8:0/12: [ 2052.035298][ T31] #0: ffff8880b883a058 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 2052.045372][ T31] #1: ffff8880b8924048 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 2052.054340][ T31] #2: ffffffff99a856e8 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0xbb/0x420 [ 2052.064683][ T31] #3: ffffffff99a23b28 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0xbb/0x420 [ 2052.074994][ T31] 1 lock held by khungtaskd/31: [ 2052.079849][ T31] #0: ffffffff8df3d660 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2052.089836][ T31] 5 locks held by kworker/0:2/3668: [ 2052.095086][ T31] #0: ffff8881446c7548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 2052.106729][ T31] #1: ffffc9000c2dfba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 2052.118633][ T31] #2: ffff88823beae198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 2052.127659][ T31] #3: ffff8880289cf518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b8/0x4a20 [ 2052.139580][ T31] #4: ffff888145f3c268 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e5/0x4a20 [ 2052.149348][ T31] 1 lock held by klogd/5188: [ 2052.154074][ T31] #0: ffff8880b883a058 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 2052.164361][ T31] 2 locks held by getty/5589: [ 2052.169064][ T31] #0: ffff888033bbe0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2052.178992][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 2052.189230][ T31] 5 locks held by kworker/1:3/5833: [ 2052.195007][ T31] #0: ffff8881446c7548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 2052.206540][ T31] #1: ffffc90003fffba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 2052.218566][ T31] #2: ffff888028ba8198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 2052.227571][ T31] #3: ffff888028b5b518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b8/0x4a20 [ 2052.238634][ T31] #4: ffff888028849968 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e5/0x4a20 [ 2052.248540][ T31] 2 locks held by syz.2.4254/24419: [ 2052.253819][ T31] #0: ffff8880571f9ec8 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 2052.264133][ T31] #1: ffff888056dcd260 (sk_lock-AF_CAN){+.+.}-{0:0}, at: j1939_sk_release+0xb3/0x7c0 [ 2052.273854][ T31] [ 2052.276200][ T31] ============================================= [ 2052.276200][ T31] [ 2052.284735][ T31] NMI backtrace for cpu 1 [ 2052.284750][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 2052.284770][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2052.284781][ T31] Call Trace: [ 2052.284789][ T31] [ 2052.284797][ T31] dump_stack_lvl+0x189/0x250 [ 2052.284827][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2052.284853][ T31] ? __pfx__printk+0x10/0x10 [ 2052.284883][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 2052.284907][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 2052.284936][ T31] ? __pfx__printk+0x10/0x10 [ 2052.284958][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2052.284990][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 2052.285014][ T31] watchdog+0xf60/0xfa0 [ 2052.285036][ T31] ? watchdog+0x1e2/0xfa0 [ 2052.285060][ T31] kthread+0x711/0x8a0 [ 2052.285086][ T31] ? __pfx_watchdog+0x10/0x10 [ 2052.285103][ T31] ? __pfx_kthread+0x10/0x10 [ 2052.285128][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2052.285159][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2052.285182][ T31] ? __pfx_kthread+0x10/0x10 [ 2052.285224][ T31] ret_from_fork+0x4bc/0x870 [ 2052.285247][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2052.285274][ T31] ? __switch_to_asm+0x39/0x70 [ 2052.285290][ T31] ? __switch_to_asm+0x33/0x70 [ 2052.285305][ T31] ? __pfx_kthread+0x10/0x10 [ 2052.285331][ T31] ret_from_fork_asm+0x1a/0x30 [ 2052.285364][ T31] [ 2052.285371][ T31] Sending NMI from CPU 1 to CPUs 0: [ 2052.431598][ C0] NMI backtrace for cpu 0 [ 2052.431613][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 2052.431631][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2052.431642][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 2052.431668][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 d1 21 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 2052.431683][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 2052.431697][ C0] RAX: 145eca3cade39000 RBX: ffffffff81967bf7 RCX: 145eca3cade39000 [ 2052.431710][ C0] RDX: 0000000000000001 RSI: ffffffff8d70dbaf RDI: ffffffff8bbf0760 [ 2052.431721][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b8832fdb R09: 1ffff110171065fb [ 2052.431734][ C0] R10: dffffc0000000000 R11: ffffed10171065fc R12: ffffffff8f7ce270 [ 2052.431750][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1b92a40 [ 2052.431761][ C0] FS: 0000000000000000(0000) GS:ffff88812613b000(0000) knlGS:0000000000000000 [ 2052.431774][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2052.431785][ C0] CR2: 000056158498a168 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 2052.431800][ C0] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 2052.431816][ C0] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2052.431828][ C0] Call Trace: [ 2052.431836][ C0] [ 2052.431843][ C0] default_idle+0x13/0x20 [ 2052.431858][ C0] default_idle_call+0x73/0xb0 [ 2052.431874][ C0] do_idle+0x1e7/0x510 [ 2052.431894][ C0] ? __pfx_do_idle+0x10/0x10 [ 2052.431918][ C0] cpu_startup_entry+0x44/0x60 [ 2052.431935][ C0] rest_init+0x2de/0x300 [ 2052.431952][ C0] start_kernel+0x3ae/0x410 [ 2052.431969][ C0] x86_64_start_reservations+0x24/0x30 [ 2052.431989][ C0] x86_64_start_kernel+0x143/0x1c0 [ 2052.432010][ C0] common_startup_64+0x13e/0x147 [ 2052.432056][ C0]