last executing test programs: 14m48.356656148s ago: executing program 4 (id=2210): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = io_uring_setup(0x3b44, &(0x7f00000002c0)={0x0, 0x86a1, 0x0, 0x0, 0x20000004}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0xfffffffc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) 14m47.746448987s ago: executing program 4 (id=2211): r0 = socket$kcm(0x10, 0x2, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r4 = fcntl$dupfd(r3, 0x406, r3) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f00000002c0)={"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"}) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) (async) ioctl$KVM_XEN_HVM_CONFIG(r4, 0x4038ae7a, &(0x7f0000000100)={0x3, 0x24f, &(0x7f0000000040)="62cbce985d1f49117512a096bd0e09ffa5a6967a765abab82ebafd0aa7159c945d", &(0x7f0000000080)="3dd249d3793071a48194e04db12e2719454d82fd1cc9ca17bc8ac0356ffebd76eff1d46247288c089e7b2e53f9e30214dcd1d0fc7886380fe7157fa9dfb4a3e21113aa4ebab2d84accdb60d104e9f9ad8cc7554043f5f4605785f4", 0x21, 0x5b}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0x29e}]}) (async) sendmsg$kcm(r0, &(0x7f0000000940), 0x7d5aa298a5254f59) 14m47.387924385s ago: executing program 4 (id=2212): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x54, 0x10, 0x1, 0x18, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x10000000, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 14m47.115765683s ago: executing program 4 (id=2214): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) syz_open_dev$media(&(0x7f00000001c0), 0xffffffffffff0001, 0x80) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='.\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0x400, 0x7, 0x1b5}) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac-aes-neon\x00'}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="21050000"], 0x14}}, 0x0) io_uring_enter(r5, 0x80002219, 0x7721, 0x16, 0x0, 0x0) 14m46.184775502s ago: executing program 4 (id=2219): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0) shutdown(0xffffffffffffffff, 0x1) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$sndpcmp(0x0, 0x7, 0x5090c2) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r1, 0x80184132, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'veth0_virt_wifi\x00', &(0x7f00000002c0)=@ethtool_rx_ntuple={0x35, {0xe, @tcp_ip4_spec={@loopback, @dev={0xac, 0x14, 0x14, 0x14}, 0x4e20, 0x4e21, 0x1}, @esp_ip4_spec={@dev={0xac, 0x14, 0x14, 0x14}, @loopback, 0x49, 0x2}, 0x3, 0x1, 0x800, 0x5, 0xffffffffffffffff}}}) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e22, @empty}, 0x10) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r3, &(0x7f00000001c0)='O', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x2, 0x0, @private2={0xfc, 0x2, '\x00', 0x10}}, 0x1c) shutdown(r3, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f00005c7000/0x3000)=nil, 0x3000, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r6, &(0x7f0000000540)={&(0x7f0000000240)=@name={0x1e, 0x2, 0x3, {{}, 0x2}}, 0x10, 0x0}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) 14m45.898762882s ago: executing program 4 (id=2220): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x40}}, 0x50) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="0408fdf0354026ffe543106fe39f86530780a752c5e6b1"], 0x7) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x1, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x44600, 0x0) close(0x3) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x206f) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x9}}, './file0\x00'}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000a, 0x204031, 0xffffffffffffffff, 0xbdd8000) r5 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r5, &(0x7f0000000380)={0xc, 0x8, 0x144, {&(0x7f0000001140)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x1, @loopback, 0x100009}, {0xa, 0x4e22, 0xfffffffc, @mcast1}, r6}}, 0x48) setsockopt$RDS_FREE_MR(r4, 0x114, 0x3, &(0x7f00000000c0)={{0x2, 0x7}}, 0x10) syz_fuse_handle_req(r2, &(0x7f00000041c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x0, {0x0, 0x1eb1a86ce41ecea5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc0102, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 14m45.336506844s ago: executing program 32 (id=2220): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x40}}, 0x50) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="0408fdf0354026ffe543106fe39f86530780a752c5e6b1"], 0x7) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x1, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x44600, 0x0) close(0x3) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x206f) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x9}}, './file0\x00'}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000a, 0x204031, 0xffffffffffffffff, 0xbdd8000) r5 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r5, &(0x7f0000000380)={0xc, 0x8, 0x144, {&(0x7f0000001140)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x1, @loopback, 0x100009}, {0xa, 0x4e22, 0xfffffffc, @mcast1}, r6}}, 0x48) setsockopt$RDS_FREE_MR(r4, 0x114, 0x3, &(0x7f00000000c0)={{0x2, 0x7}}, 0x10) syz_fuse_handle_req(r2, &(0x7f00000041c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x0, {0x0, 0x1eb1a86ce41ecea5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc0102, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 9.51669464s ago: executing program 3 (id=5777): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) fchdir(0xffffffffffffffff) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000180)={0x3, 'veth0_to_hsr\x00', {0x7}, 0x9}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {0x0, 0x0, 0x2}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) (fail_nth: 10) 7.296043513s ago: executing program 3 (id=5784): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_IOEVENTFD(r1, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x5000, 0x0, 0xffffffffffffffff, 0x5}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r2) r3 = syz_open_dev$video4linux(&(0x7f0000001380), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r3, 0xc038563c, &(0x7f0000000040)={0x0, 0x0, {0x1, 0xfffffffc, 0x400}}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/kexec_loaded', 0x901200, 0x25) ioctl$FICLONERANGE(r4, 0x4020940d, &(0x7f00000004c0)={{r2}, 0x10000, 0xe2, 0x1}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) 7.022223369s ago: executing program 3 (id=5786): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x141b41, 0x191) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmmsg$unix(r2, 0x0, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000030000005800018044000400200001000a000000000000000000000000000000400000000000000000000000200002000a00000000000000fc"], 0x6c}}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b51500000000000000000a000000", @ANYRES32=r5, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x84) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'veth0_to_hsr\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r7, 0x0, 0x0, 0x700, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x578410eb) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) setsockopt(r8, 0x84, 0x82, &(0x7f0000000040)='\x00\'\x00\x00\x00\x00\x00\x00', 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0x6}], 0x1c) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex;De', 0x0) sendto$inet6(r8, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) fallocate(r0, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x2000000) 5.758203547s ago: executing program 3 (id=5788): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) timer_create(0x0, 0x0, 0xffffffffffffffff) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) getrandom(0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000a80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = fcntl$getown(r0, 0x9) ptrace$ARCH_MAP_VDSO_32(0x1e, r2, 0x2, 0x2002) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x17, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200001f000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000005900008500000086000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) syz_usb_connect(0x5, 0x24, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x16, 0x24, 0xc1, 0x8, 0x45e, 0x775, 0xdd6d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x8, 0xe0, 0x42, [{{0x9, 0x4, 0x8e, 0x0, 0x0, 0xff, 0xf2, 0x1e, 0x6}}]}}]}}, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ncm(0x0, 0x78, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x66, 0x2, 0x1, 0x2, 0x0, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "b0546fbce5"}, {0x5, 0x24, 0x0, 0xfffd}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x4, 0x5, 0x75}, {0x6, 0x24, 0x1a, 0x3fd, 0x20}, [@obex={0x5, 0x24, 0x15, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x3f7, 0x9, 0x0, 0xff}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x18, 0x7, 0x59}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x9, 0x1, 0xf6}}}}}}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0x50, 0x2, 0x4, 0x40, 0xc}, 0x5, &(0x7f00000000c0)=ANY=[], 0x7, [{0xaa, &(0x7f0000000100)=@string={0xaa, 0x3, "06e95e4c3d24fabf4b0d2e394729219c706e193a589056e5cdb2fc1fb06e149428722ef400786dd4bde4199acf2c3e6da595969c05ed213e7c018a43457b050ee2ca3fce85e8623931fd037cbe438b8121b7bea48a8bc4d141176c9d2e0380b05b3c5c69fb307a3fac3cb81b39763015a4457637e2b6c106535775fdffc7c0d7499a76533d0343d7402e6a5ab84f2ef1fd092a96479f11e7df47004034470f8110d24e3cf2aa71d7"}}, {0xa9, &(0x7f0000000880)=ANY=[@ANYBLOB]}, {0x8c, &(0x7f0000000300)=@string={0x8c, 0x3, "d34f7bc8bf26d98a67e1285b2a5308623c53ce66dcdb51c76fa30dadbb06a3cee1ce500b8109e2c1a23ba79c3f4a8db5fea47b2ce155e0f0c303855f0f9f5b3d4bdfbec97534e49a808de1a64e487aa23ffea917ffaa5137c368dfbf1f2a5bf86c9bb7bad1cc59fa6bdad5008a4b1b3f552d2a263a8607563fef2601f39198a457021f0d64ade06fb444"}}, {0x73, &(0x7f00000003c0)=@string={0x73, 0x3, "511ee9a536adcf6556b185464410fc29111f74a2b45bd66a9c16b733e5dd3ba357ccf1b8c3decf559a71f6b7fa61b4494d5004f6718ac729ea475741aa9bf0adb61b66d44c5b3ada3c3241cd6cb75d8a70a4c18e93937543b8d8c58c7cee8460a9391daadb8d70f4dbf6aac6d21d09fb0b"}}, {0xc7, &(0x7f0000000980)=ANY=[@ANYBLOB="c7031a90c487e87b9d7d4aeeaf78573f4095be7dc78e3f42eaf631f037aa024f38cc513f83ae40c89d0155f6569b5923186c6b1f8a920fdd2dac97af068e932c64103a5ed6bc8bc2909e72b4532df1e712d0a1cc922d2a44cbd1c60eb1bb6e3b55abea9a4a8ca251a77222525f1dec462ee037a5ed77f0b6e720547b6d744a30fcdc46356fab04276f05d94765e8884b5abc69495bb480d95d70a5c814b8496016b244185de02f131b8f04a7b19152f3cf52e7a2185119993d102ff1aaa6192d8dbaf616401dbaba60e529"]}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x3c01}}, {0x7a, &(0x7f00000005c0)=@string={0x7a, 0x3, "b67d4b9629ba0a0a844ab078f680aa117426dacc263884d976a6f95fe60af028261c9576c1b096de529395b81559a16ba198634d7cdccc98b2cdfb28f9be6f986729227c2870ad246ac66a02ecf737b016bfd4de00c388607365fb7cefa4a9bb905d282e81be7d817f42bf7381c6e6dd430a88e9777632a1"}}]}) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=@newlink={0x5c, 0x10, 0x421, 0x4, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x26d2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x3}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x22}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}}, @IFLA_BROADCAST={0xa}]}, 0x5c}}, 0xc080) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r5, 0x0, 0x0) syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') 5.565215941s ago: executing program 5 (id=5789): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001400)=ANY=[@ANYRES16=r2, @ANYBLOB="010829bd7000fbdbdf25140000001c0007"], 0x30}, 0x1, 0x0, 0x0, 0x8085}, 0x4000) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)={0x14, r2, 0x400, 0x70bd2c, 0x25dfdbfb}, 0x14}}, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000040)={&(0x7f0000000180)=[{0xa5b0, 0x100, 0xbc, &(0x7f0000000380)="3da83b89e7e315975b9502f62ff3ca7c45b52332697c04b6a9bf92257286cc8f3e9dfacf1451e10d229d1dee4c8e9e0697c993ee1b6e1778b1e13eb59fe396024358210e51c2e9b02bcfd1abecef622fa45a08ef70a00f61e1a974c44855c52c28eaacf1948e626c0060122fc70481e70efc2bddafc3206d7584507d3a320a55811578404b25b9e124bfeaf08237a9a6da134e91e532d2ced4fed2744b45e72d85d747d303062df603aba37735ebb9ebba8557e8a90f9e889a6a357f"}], 0x1}) (fail_nth: 10) 3.449208517s ago: executing program 0 (id=5800): r0 = socket$packet(0x11, 0x3, 0x300) unshare(0x24060400) r1 = socket(0x15, 0x5, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) getsockopt(r1, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x37, 0x8, 0x2, 0x180, 0x4, 0xf, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x6, 0x9, 0x8000000000000000, 0xf4a, 0x0, 0xbdb], 0xffff1001, 0x204000}) r4 = syz_open_procfs(0x0, &(0x7f0000002340)='fdinfo\x00') getdents(r4, &(0x7f0000000000)=""/43, 0x2b) getdents64(r4, 0x0, 0x0) ioctl$KVM_GET_MSRS_cpu(r4, 0xc008ae88, &(0x7f0000000340)={0x9, 0x0, [{0x79, 0x0, 0x5}, {0x634, 0x0, 0xffffffffffffffff}, {0x904, 0x0, 0x4}, {0x8ab, 0x0, 0xffffffffffffffff}, {0xb8b, 0x0, 0x4}, {0xb2d, 0x0, 0x7}, {0x99e, 0x0, 0x6}, {0x8b2, 0x0, 0x5}, {0x951, 0x0, 0x2a87}]}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x5, 0x0, 0x0, 0x0, 0x1}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000240)=ANY=[@ANYBLOB="0103"], 0x34}}, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) msgsnd(0x0, 0x0, 0x5b, 0x0) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f00000001c0)=0x7, 0x4) 3.219720588s ago: executing program 0 (id=5801): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r2) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400", @ANYRES16=r3, @ANYRES16], 0x14}, 0x1, 0x0, 0x0, 0x48080}, 0x4018) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r4, 0x810c9365, 0x0) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x1, 0x0) fchdir(r8) ioprio_set$pid(0x3, 0x0, 0x0) r9 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r9, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0xff, 0x5, 0x100, 0x7cf4, 0x1, 0x10001, 0xd, 0x6000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x1}}}, 0xa0) sendfile(r9, r9, &(0x7f0000000080)=0x2, 0x7f03) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r2) r10 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r10, 0x4048aecb, &(0x7f00000034c0)={{0x1, 0x0, 0x80, {0x2, 0x2000, 0x2}}, "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", "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"}) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfd000/0x400000)=nil) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_SET_NESTED_STATE(r10, 0x4048aecb, &(0x7f0000001440)={{0x7, 0x0, 0x80, {0xffffffffffffffff, 0xc000, 0x2}}, "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", "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"}) 2.783954142s ago: executing program 2 (id=5802): r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f000001ae40), 0x0, 0x0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x80) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'syztnl1\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000004c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044005}, 0x4000) socket$kcm(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xa}}}, 0x24}}, 0x0) 2.630709444s ago: executing program 2 (id=5805): r0 = socket(0x22, 0x2, 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x141201) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000000000)=""/150, &(0x7f00000000c0)=0xffffffffffffffb7) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000080)=@urb_type_control={0x2, {}, 0x0, 0x81, &(0x7f0000000100)={0x40, 0x18, 0x0, 0x0, 0x9}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.470601086s ago: executing program 5 (id=5806): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r3, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000040)=0x2) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008200)={0x14, 0x1e, 0x1, 0xfffffffc, 0x10000, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0x2000c000) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYRESHEX=0x0, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000590000009541a8471cb5e0deb85f8e4fa5475dad4ba7bc263dfb636ae805b89c1040969a11d4d90a26d3541ae8fb57a40519d8b15979f2f8ab0f1c22f4536e5b6866ea16ee66c0b57efa07827ac157eab5af95748525ed08bbe2f04ccf5ada77a8e14dadbb"], 0x0, 0x8, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) r5 = socket$inet_tcp(0x2, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000040)={'lo\x00'}) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r6, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r6, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f"], 0x18) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x3c, r8, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xf7}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}]}, 0x3c}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x6c, r8, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x2a}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3ff}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2.457383854s ago: executing program 2 (id=5807): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000001f00)) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000840), 0x80000, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r2, 0x80044dfb, &(0x7f0000000880)) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f00000007c0)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x2, @private0}, 0x1c, &(0x7f0000000d00)=[{&(0x7f00000002c0)='\n', 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0x7}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000040)='\v', 0x1}], 0x1}}], 0x2, 0x40088d4) shutdown(r3, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90) recvmmsg(r1, &(0x7f0000001080)=[{{0x0, 0x0, 0x0}, 0x6435}], 0x1, 0x10000, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001f40)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) fcntl$lock(r2, 0x0, &(0x7f0000000080)={0x1, 0x0, 0x6, 0xbf3, r4}) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@dev={0xfe, 0x80, '\x00', 0x3e}, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x20, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0xf, 0x0, 0x2dd}, 0x0, 0x0, 0x0, 0x0, 0x3}, [@tmpl={0x184, 0x5, [{{@in6=@local, 0x4d6, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x32}, 0x0, @in6=@empty}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in6=@local, 0x0, 0x1, 0x3}, {{@in6=@mcast2, 0x0, 0x3c}, 0x2, @in=@remote, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, {{@in=@broadcast, 0x0, 0x32}, 0x2, @in=@empty, 0xffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x3c}, 0x2, @in=@broadcast, 0x0, 0x2, 0x1, 0x0, 0x0, 0x8}]}]}, 0x23c}}, 0x0) 2.051751114s ago: executing program 3 (id=5808): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) socket$netlink(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="680000000206010100000000000000000000000005000100070000000900020073797a30000000001c00078005001500100000000800124000000000080008400000202113000300686173"], 0x68}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setpriority(0x1, 0x0, 0x1) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000840)={{0x0, 0x2, 0xfffffffe, 0x3, 'syz1\x00', 0x2}, 0x3, 0x3, 0x55, 0x0, 0x3, 0x65a2, 'syz0\x00', &(0x7f0000000800)=['%\x00', '1![\xb0\xfd\x00', '+\x00'], 0xa}) semget(0x1, 0x4, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x0, 0x0, 0x1000000, 'syz1\x00'}, 0x0, [0x0, 0x2, 0x40000000000, 0xfffffffffffffffe, 0xffffffefffffffff, 0x0, 0x4, 0x0, 0x7fffffff, 0x4, 0x0, 0x0, 0xfffffeffbfffffff, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x3, 0x0, 0x0, 0x4000004, 0x0, 0x6, 0x0, 0x40, 0x0, 0xfffffffffffffffd, 0x100200000, 0xe, 0x6, 0x0, 0xfffffffffffffffe, 0x0, 0x9, 0x0, 0x10000, 0x1000, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x7, 0x10000, 0x7785, 0x0, 0x4, 0x4, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x0, 0x80000002000, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xb, 0x0, 0x80000000000000, 0x400, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10000000000, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x100, 0x81, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x2, 0x100000000000, 0xffffffffffffffff, 0x3, 0x7, 0x0, 0x7, 0xc0c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffeffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x80]}) readahead(0xffffffffffffffff, 0x100, 0x96) socket$packet(0x11, 0x3, 0x300) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 2.000552526s ago: executing program 1 (id=5809): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) ioctl$int_in(r1, 0x5452, &(0x7f0000000280)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x100000f, 0x110, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x41fd, &(0x7f00000000c0)={0x0, 0x58f6, 0x8, 0x2, 0x12c}, &(0x7f0000000040), &(0x7f0000000140)=0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) connect$unix(r6, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r7 = syz_io_uring_setup(0x4cc7, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0xfffffffd}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x30}, 0x0) sendmmsg$inet_sctp(r10, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x1, 0xc081) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f00000008c0)=@IORING_OP_LINKAT={0x27, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x1000, 0x0, {0x0, r11}}) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x21, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x1, {0x2, r11}}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x40, 0x107, 0xfffffffe, 0x2, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x8811}, 0x20004800) 1.957380934s ago: executing program 2 (id=5810): mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000083c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0x1000001, 0x5069f481, 0x8, 0x7fff, 0x0, 0x800, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x400000000000000, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) close(0x3) socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r2, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @empty, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=[@hopopts={{0x14, 0x29, 0x36, {0x2e}}}], 0x14}, 0x20040084) 1.947239957s ago: executing program 1 (id=5811): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000005900)=@newtaction={0x14, 0x30, 0x10, 0x70bd2d, 0x25dfdbff}, 0x14}}, 0x44884) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003fc0)=@newtfilter={0xb54, 0x2c, 0xd27, 0x70bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_cgroup={{0xb}, {0xb24, 0x2, [@TCA_CGROUP_ACT={0x4}, @TCA_CGROUP_EMATCHES={0x28c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7f}}, @TCA_EMATCH_TREE_LIST={0x1d4, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0xbb30}, {0x8, 0xffff3fb8, 0x6, 0x3, 0x7, 0x1, 0x1}}}, @TCF_EM_IPT={0x138, 0x3, 0x0, 0x0, {{0x9}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_DATA={0xe5, 0x5, "6690e9d6646390e1a7829f10205c929012e8302a30a0ca06fa8b79333adb33e6b4b64a38ae28929362ee95fa583f4841096db052704c2c000b0ad802c487638f7a8535de60b9bffb6f6a38f31d3fd7b5e69b4fbf5a23c4814eb92480b582687d1f14b41f10ec15bed454a1826526ece806f15fc933089e0ee8437c5d0ec3aa4912c94ed8439ad8b427e825f83df9e856a727a3ef35b3d32501457d7f9ca439f3bd515de3a4975288fecea726027c56da8137bcb6a1b9ac41f8d8b3a04f74ea907f4ee74bc4e8fb383c28842766c77f227d5c83fb2438e16a8457c4248da02a7074"}, @TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}]}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x590b, 0x2, 0x8}, {0x1000, 0x8, 0x1, "139a1c1499e512c6"}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x4, 0x8, 0x6}, {0xffffffffffffffff, 0x1}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x9, 0x7, 0xfffd}, {{0x4, 0x1, 0x1}, {0x0, 0x1, 0x1}}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x5, 0x7, 0x7}, {{0x1, 0x1}, {0x1, 0x1}}}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x8, 0x2, 0xdda}, {0x6, 0x7, 0x2, "bc8ec03d818844"}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x0, 0x1, 0x800}, {0x5b, 0x9, 0x8, 0x5, 0x7, 0x2, 0x2}}}]}, @TCA_EMATCH_TREE_LIST={0xa4, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x3, 0x0, 0x0, {{0x7}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x8001, 0xff, 0x2}, {0x8, 0x8, 0x2}}}]}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x5, 0x8, 0x3}, {0xffffffffffffffff, 0x5, 0x4}}}, @TCF_EM_META={0x24, 0x2, 0x0, 0x0, {{0xfffc, 0x4, 0xf}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x10a, 0x3}, {0x1000, 0x1, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x800, 0x2}, {0x2dbe, 0x2, 0x1}}}]}}, @TCF_EM_IPT={0x40, 0x1, 0x0, 0x0, {{0x8001, 0x9, 0x7}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_DATA={0xd, 0x5, "598885f195d476a4c9"}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}]}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x5, 0x7, 0x2}, {{0x1, 0x1, 0x1}, {0x3, 0x1, 0x1, 0x1}}}}]}]}, @TCA_CGROUP_POLICE={0xc, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x6a}]}, @TCA_CGROUP_POLICE={0x884, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0xffffffffffffffff, 0x1, 0x4, 0x4, {0x1, 0x2, 0x6, 0x4, 0xfb, 0xbf8}, {0x9, 0x2, 0x7, 0x1, 0x101, 0x800}, 0x8f, 0xfffff800, 0x8}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x4a2a, 0xfff, 0x1, 0x55ed, 0x700, 0xd, 0x98, 0x6, 0x9, 0x400, 0x3, 0x3c1, 0x1, 0x4, 0x7, 0x5, 0x13b231df, 0x3, 0x5, 0x2, 0x3, 0x1, 0x8, 0x4, 0x8, 0x401, 0x3, 0x1000, 0x3, 0xa, 0xfffffff7, 0x6, 0xf41, 0xeea4, 0x7, 0x5, 0x2, 0x10, 0x8, 0xfffffff7, 0x42e7, 0x4, 0x1f, 0xfff, 0xb, 0xb1, 0x7, 0x401, 0x2, 0x0, 0x3, 0xacb, 0x4, 0x81, 0xd, 0x80000000, 0x9, 0xe, 0x4, 0x24, 0x9, 0x80000001, 0x9, 0x4, 0x2, 0x3, 0xba, 0xfffffff9, 0x6, 0x7, 0x5104, 0x5, 0xb, 0x2, 0xf, 0x0, 0x0, 0x7, 0x46, 0x40, 0xc, 0x2, 0x7, 0x4, 0x3, 0x7, 0x2add, 0x9, 0xbf7, 0xfffffffd, 0x2, 0x8, 0x44265c61, 0x9, 0xc9, 0x200, 0x80000000, 0x5, 0x4, 0x5, 0x4, 0x3, 0x80000000, 0x3, 0x401, 0x8000, 0x1, 0x1, 0xbc, 0x5, 0x2, 0x800, 0x281e, 0x0, 0xa, 0xf1, 0x7, 0x2, 0x400, 0x6, 0x2, 0x2, 0x98, 0x6, 0xae1, 0x80000000, 0x7, 0x8, 0x1ff, 0x11df, 0x5, 0x1000, 0x116, 0x8, 0x3eae, 0x3, 0x2, 0x7, 0x3e601135, 0xd5, 0xab8, 0x5, 0x8080000, 0x4, 0x36, 0xe5a2, 0x437, 0x5, 0x7, 0x2, 0x3cf, 0x9, 0x7fffffff, 0x1, 0x5, 0x8, 0x4, 0x48ab, 0x55e1, 0x7, 0xa, 0x3, 0x7, 0x8, 0xb, 0x0, 0xffff460b, 0x6, 0x9, 0x1, 0xfffffff7, 0x7f, 0x0, 0x42b, 0x6, 0x7, 0xd, 0x1, 0x1, 0x0, 0x7ff, 0x306, 0x0, 0xffff, 0x4, 0x31f, 0x8, 0x6, 0x2, 0x5, 0x7a7f, 0x9c, 0x401, 0x2068, 0x1, 0x5, 0x9, 0x7, 0x2d7, 0x8, 0x8, 0x7, 0x3, 0x5, 0x2, 0x7, 0x108e, 0x47, 0x0, 0x2a, 0x0, 0xa60, 0xb8, 0x2a, 0x2, 0x4, 0x6, 0x9, 0x897, 0x9, 0x95, 0xcf5, 0x7, 0x4, 0x2, 0xac34, 0x0, 0x3, 0xfffffffd, 0x0, 0x6, 0xa7bf, 0xffff, 0xfffffff7, 0x8e06, 0x6, 0xa, 0xec52, 0x1, 0x7ff, 0x0, 0x7, 0x7, 0x73c, 0x1, 0x0, 0x4a, 0x3, 0xb, 0xf, 0x1, 0x2, 0xf5, 0x100, 0xffffffff]}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x1, 0x7fff, 0x3, 0x10, 0x2b0, 0x80000000, 0x80000000, 0x1, 0x0, 0xa00000, 0x9, 0x2, 0x0, 0x8, 0x8, 0x8001, 0xfffffffb, 0x5, 0xa, 0x401, 0x81, 0x1, 0x1, 0x6, 0xfffffff9, 0x40, 0x5, 0x77d1, 0x200, 0x7f, 0x401, 0x1, 0x800, 0x1ff, 0x31b, 0x8, 0xb, 0x4, 0x6, 0x5, 0x3, 0x1, 0xfffffffa, 0x86e, 0x1, 0xa36c, 0x2, 0x1, 0x8, 0x9, 0x1, 0x5, 0x3, 0x1, 0x9, 0x4, 0x5, 0x3, 0x8, 0x8, 0x0, 0x98, 0x4, 0x9, 0x3, 0x2, 0x5, 0x80, 0xd, 0x1, 0x4, 0x6, 0xc465, 0x7fffffff, 0x0, 0xfffffff5, 0xee1d, 0x88, 0x3, 0x4, 0x0, 0x62, 0x6, 0x8000, 0x9, 0x3, 0x0, 0xf, 0x2, 0xf, 0x0, 0x1, 0x9, 0x2e0, 0xd72, 0x4, 0x200, 0xf, 0x0, 0x10000, 0x8, 0x40, 0x3, 0x3, 0x1, 0x1, 0x9, 0x9f, 0x80, 0xfffffffc, 0x7fffffff, 0x3, 0xa, 0x0, 0xd3b, 0x42cb, 0x3a34, 0x0, 0x8000, 0x2, 0x5, 0x0, 0x7, 0x8, 0x8000, 0x8, 0x5, 0x7, 0x7fffffff, 0x72e4, 0x4, 0xb1, 0x1, 0xd, 0xf, 0xf, 0x7f, 0x885e, 0x3ff, 0x1ff, 0x7, 0x3, 0x9, 0x800000, 0x7, 0x2a2, 0x9, 0x2, 0x8, 0x2, 0x1, 0x6, 0x2, 0x8, 0x9, 0x0, 0x0, 0x4, 0xfffffff8, 0x800, 0x8, 0x3, 0x8, 0x2, 0xa, 0x40, 0x0, 0x3, 0x4, 0xfffffbff, 0x7, 0x3, 0x7, 0x8001, 0x1, 0x1, 0x8001, 0x5, 0x1, 0x7, 0x4000000, 0xe, 0x45be835a, 0x0, 0x4, 0x4, 0x3ff, 0x6, 0x4, 0x7ff, 0xfffffc00, 0x0, 0x72b, 0x3ff, 0x8, 0x9, 0xfff, 0x209f, 0x6, 0x40, 0x37a, 0x4, 0xffffffcd, 0x10001, 0x800000, 0xd4, 0xfff, 0x42, 0x2, 0x80000000, 0x80000000, 0x10001, 0x8, 0x6, 0x1, 0x5, 0x3, 0x0, 0x5c, 0x8, 0x1, 0x81800000, 0xa, 0x4, 0x8000, 0xfffffff0, 0xd8d, 0x1, 0x56c, 0x0, 0x1f, 0x3, 0x8001, 0xac7, 0x8, 0x5, 0xfff, 0x1, 0x5, 0x2, 0x1, 0x1, 0x1, 0x2, 0x7, 0x1, 0x169, 0x9, 0x5, 0x9, 0xc, 0x7, 0x8, 0x9]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x3, 0x600, 0xe, 0x5049d79a, {0x8, 0x0, 0x1, 0x1950, 0x9, 0x3}, {0x9, 0x1, 0x8, 0xc, 0x6, 0x7}, 0x7, 0x6, 0xfffffffb}}]}]}}]}, 0xb54}}, 0x2000c800) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.778501322s ago: executing program 1 (id=5812): setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x6, @loopback, 0x3}], 0x1c) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$caif_seqpacket(0x25, 0x5, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000020000300", @ANYRES32=r3, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) 1.67049563s ago: executing program 2 (id=5813): socket$inet6(0xa, 0x3, 0x8000000003c) r0 = socket$kcm(0x2, 0xa, 0x2) semctl$IPC_RMID(0x0, 0x0, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x14, 0x0, 0x1, 0x0, 0x25dfdbfe}, 0x14}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x51}}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x200, 0x0, 0x43, 0xa0, 0x0, 0x98, 0x168, 0x178, 0x178, 0x168, 0x178, 0x49, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xffffffff, 0x0, 'bridge_slave_1\x00', '\x00', {0xff}, {}, 0x0, 0x2}, 0x12a, 0x70, 0x98, 0x0, {0x0, 0x7a010000}}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x100, 0x8000}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @remote, 0x4, 0x7, [0x28, 0x19, 0x18, 0x2b, 0x3e, 0x3c, 0x7, 0xa, 0x31, 0x37, 0xe, 0xc, 0x15, 0x2e, 0x1f, 0x2c], 0x2, 0x5, 0x1400000000000000}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x260) 1.584523566s ago: executing program 5 (id=5814): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="410000000000000000000100000000000000014100000018001704000000000000005974683a76"], 0x34}}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r4, 0x84, 0x10, 0x0, &(0x7f0000000000)) bind$alg(r3, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r5 = accept$alg(r3, 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000000600), 0xfec8) unshare(0x2c020400) bpf$ITER_CREATE(0x21, 0x0, 0x0) r6 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000000000010ac054b02000000000001090224000100003000090400000103e6000009210000000122450009058103"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$printer(r6, &(0x7f0000000d00)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="200b45000000450d491e54441f8028edc3a0a0a1b57b1ccf880e080cb099033ccff104ddac884f0a570a797a39fa7106e99516aff3bc1d67aa4623ce7d7dc970cbfa0117860aab8eb2"], 0x0}, 0x0) recvmmsg(r5, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0x6}, {&(0x7f0000000140), 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xcc00}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0xfffffffffffffe63, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x5) ioctl$KVM_SET_CPUID(r9, 0x4008ae8a, &(0x7f0000000240)={0x2, 0x0, [{0x1, 0x5, 0x1, 0xa5, 0x800}, {0x7, 0x7fe, 0x4, 0x7fffff, 0x10000a}]}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r10 = syz_io_uring_setup(0x622b, &(0x7f0000000240)={0x0, 0xb6b5, 0x0, 0x0, 0x37e}, &(0x7f0000000340), &(0x7f0000000380)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r10, 0x13, 0xfffffffffffffffe, 0x2) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a30000000050a05000000001c00000000020000080900010073797a30000000000977f60073797a320000000004"], 0x58}}, 0x0) 1.531341426s ago: executing program 0 (id=5815): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x4}, 0x8) sendmmsg$inet_sctp(r2, &(0x7f0000002400)=[{&(0x7f0000001dc0)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000002300)=[{&(0x7f0000001e00)="dd", 0x1}], 0x1, &(0x7f0000002380)=[@init={0x18, 0x84, 0x0, {0x1, 0x6, 0x5, 0x41f2}}], 0x18, 0x4008800}], 0x1, 0xc5) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) r3 = socket$unix(0x1, 0x5, 0x0) connect$unix(r3, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) sendto$packet(r0, &(0x7f00000000c0)="3f03fe7f0300140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r5 = syz_io_uring_setup(0x1644, &(0x7f0000000580)={0x0, 0x0, 0x10100, 0x0, 0x17b}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r8, 0x0, 0xb, &(0x7f0000000500)=0x6, 0x4) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r5, {0x1}}, './file0/../file0\x00'}) ioctl$SNDRV_PCM_IOCTL_INFO(r9, 0x81204101, &(0x7f0000000600)) syz_io_uring_submit(r6, r7, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r5, 0x207a98, 0x0, 0x0, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x1, 0x27, &(0x7f0000000380)={0x0, 0x6, 0xd, 0x360}, 0x8, 0x7, 0x7f, 0x0, 0x7, 0x101, 0x0}) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f00000003c0)={0xf4, 0x9, 0x3, "408ae3cff69c10616d2fba103836b72f72b096619d64b3c4e02b4d00f90dbb76339878f6f4c48032370dc5e56df6eb72dd471a80e305a69f507a79026c6f6493710cabfaf2c2549db93c800b3d5a2e678487e667aeeab236f030728969ec9df748c6c05a89687ebde27dee334dc8e917b10dc271bb3e17b3bf0195ea0e504b3c38e6bb1b97c23c46df22418087a300e164203edabf7235a16b78a2e4cd97c74af11d197d1f055caa119c057a0fec1a14fcfbd34624d4812578c3e18787ec0f1eb5ce2c5b6aa42abffe4cf30eb1abd271df73539f4b6c513e5e389de6093eb84560dc943a00dc532edff35a5247a59322b613baf1"}) r10 = syz_io_uring_setup(0x7db4, &(0x7f0000000040)={0x0, 0x8690, 0x200, 0x1, 0xef}, &(0x7f0000000140), &(0x7f0000000180)) syz_io_uring_setup(0x6302, &(0x7f0000000200)={0x0, 0x61e2, 0x2000, 0x1, 0x29c, 0x0, r10}, &(0x7f0000000280), &(0x7f00000002c0)) 1.452368239s ago: executing program 1 (id=5816): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20041, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x0, 0x20008841) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x6, 0x0, &(0x7f00000000c0)="e0b9545dd30a", 0x0, 0x27cb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="08000000f050b341b43f0ad563accfa5158519790c287e43137f66d85a58f243fa463f3cb140461975b9d3cbbf3e45635012067d38682ee9bc663df233204133459eca4d38ef8b13aec1e855254b6af6cae1d072bfd3d6693ec31c1a0aa8fd48aabb4c1e705d5cdc69943d102288ef94a6387d335017619b6c0047e746fd68ad3ae5a13e425d7a1d9c9ff2d88b1a28d535e63561a18a9d8fcd35faa6aecf1292bc5555aedb8124b6f455bb52f9b0c07956cafecc17ebf7c84e76a4b89e57e1d7a7a19347ae118cc585a374f3d0b20d0196a376a7f030e9e7637d26fd104a4abc737117a48dd57fb571287faaa92fff4df2947b4c", @ANYRES16=0x0, @ANYBLOB="010000000000000000000100000030000180060001000200000008000500000000000c000700000000000000000008000900000000000800080000000000"], 0x44}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r11, @ANYBLOB="0c00990000000200000000000800a00094090000080026009409000008002700000000000800a1"], 0x48}}, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r12 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@textreal={0x8, &(0x7f00000001c0)="0f01cb363e6464670fae880050000066b91406000066b85eacd44e66ba000000000f3066b90d03000066b8d715691966baa1495ef00f300f01370f01cf0f01c266b9be0200000f320f01c40f20c06635000004000f22c0", 0x57}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r13 = socket$inet6(0xa, 0x6, 0x6) recvmmsg(r13, &(0x7f000000bf00), 0x0, 0x40008269, 0x0) setsockopt$inet6_int(r13, 0x29, 0x4d, &(0x7f0000000000)=0x8, 0x4) socket$nl_audit(0x10, 0x3, 0x9) 1.331874084s ago: executing program 2 (id=5817): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000200)={0xa, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000700)={&(0x7f0000000680)=[0x0], 0x0, 0x1}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000200)={0x48}) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000440)=ANY=[@ANYBLOB="400000000000000002004e22ac14142c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000100000002004e20ac141410000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000926320b038d86508e357382df0ef843f4e54db3499da6b27804817314b8d7417d43022821b7f126af441357f7c2f"], 0x110) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIOBLANK(r5, 0x4611, 0x3) ioctl$FBIO_WAITFORVSYNC(r5, 0x40044620, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r6) socket$netlink(0x10, 0x3, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000140)={0x0, 0xc, 0x0, 0x0, 0xff, "810000cc2b000000000000fa25ffff00ffffff"}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'veth1_vlan\x00'}) sendmsg$nl_route(r9, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000001c0001fc28bd7000fcdbdf2507000000", @ANYBLOB="8000260b0a0002000180c200000c00000c000e800500010003"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040010) sendmsg$nl_route(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[], 0x3c}}, 0x0) r10 = syz_open_pts(r7, 0x141601) fcntl$setstatus(r10, 0x4, 0x102800) 1.218198014s ago: executing program 0 (id=5818): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00', 0x3}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003440)=ANY=[@ANYBLOB="1400000006252c9f8adefa9ba05bfdf623123c10000100689200a3257aa300000000000000000000000a1c000000000a010800000000000000000700000008000240000000005c000000090a01040000000000000000070900020073797a31000000000900010073797a3000000000080005400000000c08ba000340000000080800074000"], 0x2898}}, 0x20000010) sendto$inet6(r0, &(0x7f0000847fff)='\x00', 0x1, 0x861, &(0x7f000005ffe4)={0xa, 0x4e23, 0x2, @dev={0xfe, 0x80, '\x00', 0x28}, 0x2}, 0x1c) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x70, r2, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x9, 0x1}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x59}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x62}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x27}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x24}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x55}]}, 0x70}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000080) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e24, @loopback}}, 0x0, 0x0, 0x1000003, 0x0, 0x54, 0x6}, 0x9c) 1.126349135s ago: executing program 0 (id=5819): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r0, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20042, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) pipe2(&(0x7f0000000080), 0x4800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000240), 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 636.412721ms ago: executing program 5 (id=5820): r0 = socket$isdn(0x22, 0x2, 0x26) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) syz_usb_connect$uac1(0x0, 0xdc, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca00030100700009040000000101f4119f31b8989891f52d9b701970556a00000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff00092406050683", @ANYRES8=r1, @ANYRES16=r2, @ANYRESDEC=0x0], 0x0) close(r0) socket$isdn(0x22, 0x2, 0x26) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) (async) syz_usb_connect$uac1(0x0, 0xdc, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca00030100700009040000000101f4119f31b8989891f52d9b701970556a00000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff00092406050683", @ANYRES8=r1, @ANYRES16=r2, @ANYRESDEC=0x0], 0x0) (async) close(r0) (async) 306.987237ms ago: executing program 5 (id=5821): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000240)={r2, r0}) sendmmsg$inet(r2, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x20, 0x0) 263.629908ms ago: executing program 1 (id=5822): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000005900)=@newtaction={0x14, 0x30, 0x10, 0x70bd2d, 0x25dfdbff}, 0x14}}, 0x44884) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003fc0)=@newtfilter={0xb54, 0x2c, 0xd27, 0x70bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_cgroup={{0xb}, {0xb24, 0x2, [@TCA_CGROUP_ACT={0x4}, @TCA_CGROUP_EMATCHES={0x28c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7f}}, @TCA_EMATCH_TREE_LIST={0x1d4, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0xbb30}, {0x8, 0xffff3fb8, 0x6, 0x3, 0x7, 0x1, 0x1}}}, @TCF_EM_IPT={0x138, 0x3, 0x0, 0x0, {{0x9}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_DATA={0xe5, 0x5, "6690e9d6646390e1a7829f10205c929012e8302a30a0ca06fa8b79333adb33e6b4b64a38ae28929362ee95fa583f4841096db052704c2c000b0ad802c487638f7a8535de60b9bffb6f6a38f31d3fd7b5e69b4fbf5a23c4814eb92480b582687d1f14b41f10ec15bed454a1826526ece806f15fc933089e0ee8437c5d0ec3aa4912c94ed8439ad8b427e825f83df9e856a727a3ef35b3d32501457d7f9ca439f3bd515de3a4975288fecea726027c56da8137bcb6a1b9ac41f8d8b3a04f74ea907f4ee74bc4e8fb383c28842766c77f227d5c83fb2438e16a8457c4248da02a7074"}, @TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}]}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x590b, 0x2, 0x8}, {0x1000, 0x8, 0x1, "139a1c1499e512c6"}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x4, 0x8, 0x6}, {0xffffffffffffffff, 0x1}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x9, 0x7, 0xfffd}, {{0x4, 0x1, 0x1}, {0x0, 0x1, 0x1}}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x5, 0x7, 0x7}, {{0x1, 0x1}, {0x1, 0x1}}}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x8, 0x2, 0xdda}, {0x6, 0x7, 0x2, "bc8ec03d818844"}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x0, 0x1, 0x800}, {0x5b, 0x9, 0x8, 0x5, 0x7, 0x2, 0x2}}}]}, @TCA_EMATCH_TREE_LIST={0xa4, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x3, 0x0, 0x0, {{0x7}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x8001, 0xff, 0x2}, {0x8, 0x8, 0x2}}}]}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x5, 0x8, 0x3}, {0xffffffffffffffff, 0x5, 0x4}}}, @TCF_EM_META={0x24, 0x2, 0x0, 0x0, {{0xfffc, 0x4, 0xf}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x10a, 0x3}, {0x1000, 0x1, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x800, 0x2}, {0x2dbe, 0x2, 0x1}}}]}}, @TCF_EM_IPT={0x40, 0x1, 0x0, 0x0, {{0x8001, 0x9, 0x7}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_DATA={0xd, 0x5, "598885f195d476a4c9"}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}]}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x5, 0x7, 0x2}, {{0x1, 0x1, 0x1}, {0x3, 0x1, 0x1, 0x1}}}}]}]}, @TCA_CGROUP_POLICE={0xc, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x6a}]}, @TCA_CGROUP_POLICE={0x884, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0xffffffffffffffff, 0x1, 0x4, 0x4, {0x1, 0x2, 0x6, 0x4, 0xfb, 0xbf8}, {0x9, 0x2, 0x7, 0x1, 0x101, 0x800}, 0x8f, 0xfffff800, 0x8}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x4a2a, 0xfff, 0x1, 0x55ed, 0x700, 0xd, 0x98, 0x6, 0x9, 0x400, 0x3, 0x3c1, 0x1, 0x4, 0x7, 0x5, 0x13b231df, 0x3, 0x5, 0x2, 0x3, 0x1, 0x8, 0x4, 0x8, 0x401, 0x3, 0x1000, 0x3, 0xa, 0xfffffff7, 0x6, 0xf41, 0xeea4, 0x7, 0x5, 0x2, 0x10, 0x8, 0xfffffff7, 0x42e7, 0x4, 0x1f, 0xfff, 0xb, 0xb1, 0x7, 0x401, 0x2, 0x0, 0x3, 0xacb, 0x4, 0x81, 0xd, 0x80000000, 0x9, 0xe, 0x4, 0x24, 0x9, 0x80000001, 0x9, 0x4, 0x2, 0x3, 0xba, 0xfffffff9, 0x6, 0x7, 0x5104, 0x5, 0xb, 0x2, 0xf, 0x0, 0x0, 0x7, 0x46, 0x40, 0xc, 0x2, 0x7, 0x4, 0x3, 0x7, 0x2add, 0x9, 0xbf7, 0xfffffffd, 0x2, 0x8, 0x44265c61, 0x9, 0xc9, 0x200, 0x80000000, 0x5, 0x4, 0x5, 0x4, 0x3, 0x80000000, 0x3, 0x401, 0x8000, 0x1, 0x1, 0xbc, 0x5, 0x2, 0x800, 0x281e, 0x0, 0xa, 0xf1, 0x7, 0x2, 0x400, 0x6, 0x2, 0x2, 0x98, 0x6, 0xae1, 0x80000000, 0x7, 0x8, 0x1ff, 0x11df, 0x5, 0x1000, 0x116, 0x8, 0x3eae, 0x3, 0x2, 0x7, 0x3e601135, 0xd5, 0xab8, 0x5, 0x8080000, 0x4, 0x36, 0xe5a2, 0x437, 0x5, 0x7, 0x2, 0x3cf, 0x9, 0x7fffffff, 0x1, 0x5, 0x8, 0x4, 0x48ab, 0x55e1, 0x7, 0xa, 0x3, 0x7, 0x8, 0xb, 0x0, 0xffff460b, 0x6, 0x9, 0x1, 0xfffffff7, 0x7f, 0x0, 0x42b, 0x6, 0x7, 0xd, 0x1, 0x1, 0x0, 0x7ff, 0x306, 0x0, 0xffff, 0x4, 0x31f, 0x8, 0x6, 0x2, 0x5, 0x7a7f, 0x9c, 0x401, 0x2068, 0x1, 0x5, 0x9, 0x7, 0x2d7, 0x8, 0x8, 0x7, 0x3, 0x5, 0x2, 0x7, 0x108e, 0x47, 0x0, 0x2a, 0x0, 0xa60, 0xb8, 0x2a, 0x2, 0x4, 0x6, 0x9, 0x897, 0x9, 0x95, 0xcf5, 0x7, 0x4, 0x2, 0xac34, 0x0, 0x3, 0xfffffffd, 0x0, 0x6, 0xa7bf, 0xffff, 0xfffffff7, 0x8e06, 0x6, 0xa, 0xec52, 0x1, 0x7ff, 0x0, 0x7, 0x7, 0x73c, 0x1, 0x0, 0x4a, 0x3, 0xb, 0xf, 0x1, 0x2, 0xf5, 0x100, 0xffffffff]}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x1, 0x7fff, 0x3, 0x10, 0x2b0, 0x80000000, 0x80000000, 0x1, 0x0, 0xa00000, 0x9, 0x2, 0x0, 0x8, 0x8, 0x8001, 0xfffffffb, 0x5, 0xa, 0x401, 0x81, 0x1, 0x1, 0x6, 0xfffffff9, 0x40, 0x5, 0x77d1, 0x200, 0x7f, 0x401, 0x1, 0x800, 0x1ff, 0x31b, 0x8, 0xb, 0x4, 0x6, 0x5, 0x3, 0x1, 0xfffffffa, 0x86e, 0x1, 0xa36c, 0x2, 0x1, 0x8, 0x9, 0x1, 0x5, 0x3, 0x1, 0x9, 0x4, 0x5, 0x3, 0x8, 0x8, 0x0, 0x98, 0x4, 0x9, 0x3, 0x2, 0x5, 0x80, 0xd, 0x1, 0x4, 0x6, 0xc465, 0x7fffffff, 0x0, 0xfffffff5, 0xee1d, 0x88, 0x3, 0x4, 0x0, 0x62, 0x6, 0x8000, 0x9, 0x3, 0x0, 0xf, 0x2, 0xf, 0x0, 0x1, 0x9, 0x2e0, 0xd72, 0x4, 0x200, 0xf, 0x0, 0x10000, 0x8, 0x40, 0x3, 0x3, 0x1, 0x1, 0x9, 0x9f, 0x80, 0xfffffffc, 0x7fffffff, 0x3, 0xa, 0x0, 0xd3b, 0x42cb, 0x3a34, 0x0, 0x8000, 0x2, 0x5, 0x0, 0x7, 0x8, 0x8000, 0x8, 0x5, 0x7, 0x7fffffff, 0x72e4, 0x4, 0xb1, 0x1, 0xd, 0xf, 0xf, 0x7f, 0x885e, 0x3ff, 0x1ff, 0x7, 0x3, 0x9, 0x800000, 0x7, 0x2a2, 0x9, 0x2, 0x8, 0x2, 0x1, 0x6, 0x2, 0x8, 0x9, 0x0, 0x0, 0x4, 0xfffffff8, 0x800, 0x8, 0x3, 0x8, 0x2, 0xa, 0x40, 0x0, 0x3, 0x4, 0xfffffbff, 0x7, 0x3, 0x7, 0x8001, 0x1, 0x1, 0x8001, 0x5, 0x1, 0x7, 0x4000000, 0xe, 0x45be835a, 0x0, 0x4, 0x4, 0x3ff, 0x6, 0x4, 0x7ff, 0xfffffc00, 0x0, 0x72b, 0x3ff, 0x8, 0x9, 0xfff, 0x209f, 0x6, 0x40, 0x37a, 0x4, 0xffffffcd, 0x10001, 0x800000, 0xd4, 0xfff, 0x42, 0x2, 0x80000000, 0x80000000, 0x10001, 0x8, 0x6, 0x1, 0x5, 0x3, 0x0, 0x5c, 0x8, 0x1, 0x81800000, 0xa, 0x4, 0x8000, 0xfffffff0, 0xd8d, 0x1, 0x56c, 0x0, 0x1f, 0x3, 0x8001, 0xac7, 0x8, 0x5, 0xfff, 0x1, 0x5, 0x2, 0x1, 0x1, 0x1, 0x2, 0x7, 0x1, 0x169, 0x9, 0x5, 0x9, 0xc, 0x7, 0x8, 0x9]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x3, 0x600, 0xe, 0x5049d79a, {0x8, 0x0, 0x1, 0x1950, 0x9, 0x3}, {0x9, 0x1, 0x8, 0xc, 0x6, 0x7}, 0x7, 0x6, 0xfffffffb}}]}]}}]}, 0xb54}}, 0x2000c800) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 54.228725ms ago: executing program 0 (id=5823): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000000ffff16bf3900000008000300", @ANYRES32=0x0, @ANYBLOB="04000d80"], 0x20}, 0x1, 0x0, 0x0, 0x4000065}, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f00000000c0)=0x9, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x1000000010, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0xb2}, 0x9c) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r5, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x7c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xa7}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xfffffffffffffff8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_FD={0x8, 0x17, @udp6}, @L2TP_ATTR_MRU={0x6}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0xc051) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='team_slave_1\x00', 0x10) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x1a0, 0x2b8, 0x25c, 0x1a0, 0x7, 0x268, 0x3a8, 0x3a8, 0x268, 0x3a8, 0x7fffffe, 0x0, {[{{@uncond, 0x16c, 0x138, 0x1a0, 0xa010000, {}, [@common=@unspec=@physdev={{0x68}, {'vxcan1\x00', {0xff}, 'bridge_slave_1\x00', {0xff}, 0x13, 0x2}}, @common=@inet=@socket3={{0x28, 'socket\x00', 0x2}, 0xe}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x9, 0x0, 0x0, 0x14, 'syz1\x00', 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [], [], 'sit0\x00', 'ipvlan0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x42000000) 52.610963ms ago: executing program 1 (id=5824): r0 = syz_open_dev$media(&(0x7f00000001c0), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000700)={0x0, 0x0, 0x0, &(0x7f0000000480), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$kcm(0xa, 0x5, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_smc(0x2b, 0x1, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCCONS(r3, 0x541d) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x34, 0x70, 0x9d, 0x40, 0x55f, 0xc230, 0xb6ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf2, 0xa7, 0xcc}}]}}]}}, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) inotify_init() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES64=r4, @ANYBLOB="e0ff8b0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x41}, 0x24040040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001d"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x4000004) 384.416µs ago: executing program 3 (id=5825): r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000040)=@overlay={0x9, 0x2, 0x4, 0x8, 0x413, {}, {0x4, 0x0, 0x81, 0xf6, 0x28, 0x1, "7a89c908"}, 0x101, 0x3, {}, 0x2}) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) acct(0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) gettid() setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000000)=""/59, 0x312000, 0x2000, 0x0, 0x5}, 0x20) ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000007000010000000000f6aa6ad642000000", @ANYRES32=r5, @ANYBLOB="0c00018008000100000003000c0001800800010000000400"], 0x30}}, 0x0) socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r9], 0xfff0) 0s ago: executing program 5 (id=5826): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x963b01) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x31}, 0x94) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfff9, {0x0, 0x201}, {0x50, 0x2}, @cond=[{0x1ff, 0x5, 0x6f5, 0x800, 0xc7, 0xffff}, {0xffff, 0x5, 0x1, 0x46, 0xcb, 0xfd}]}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_DEFRAG_RANGE(r2, 0x40309410, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x487c, &(0x7f0000000400)={0x0, 0xd503, 0xc000, 0x4001, 0x253}) r4 = socket$inet(0x2, 0x80001, 0x84) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106, 0x6}}, 0x20) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000240)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000180)=[@decrefs], 0x0, 0x0, 0x0}) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000140)=""/99) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000280)={'ip6gre0\x00', @ifru_data=&(0x7f0000000580)="77629e9ffe408b0e43366c56b77e81b935d7e1584378dc9ed7c6ed9be933cd1f"}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) kernel console output (not intermixed with test programs): 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1447.714063][T25746] RSP: 002b:00007fbc0f84e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1447.714075][T25746] RAX: ffffffffffffffda RBX: 00007fbc0ebe5fa0 RCX: 00007fbc0e98f749 [ 1447.714083][T25746] RDX: 0000000000000000 RSI: 0000200000000700 RDI: 0000000000000006 [ 1447.714090][T25746] RBP: 00007fbc0f84e090 R08: 0000000000000000 R09: 0000000000000000 [ 1447.714097][T25746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1447.714103][T25746] R13: 00007fbc0ebe6038 R14: 00007fbc0ebe5fa0 R15: 00007fbc0ed0fa28 [ 1447.714119][T25746] [ 1448.875672][ T5876] usb 4-1: new full-speed USB device number 115 using dummy_hcd [ 1448.887838][T25767] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5189'. [ 1449.068483][ T5876] usb 4-1: config 0 has an invalid interface number: 113 but max is 0 [ 1449.077036][ T5876] usb 4-1: config 0 has no interface number 0 [ 1449.092142][ T5876] usb 4-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 1449.225694][T25769] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5190'. [ 1449.315396][ T5876] usb 4-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1449.370016][ T5876] usb 4-1: config 0 interface 113 has no altsetting 0 [ 1449.466530][ T5876] usb 4-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 1449.494591][ T5876] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1449.514584][ T5876] usb 4-1: Product: syz [ 1449.532642][ T5876] usb 4-1: Manufacturer: syz [ 1449.565391][ T5876] usb 4-1: SerialNumber: syz [ 1449.600013][ T5876] usb 4-1: config 0 descriptor?? [ 1449.652271][ C1] usb 4-1: NFC: Urb failure (status -71) [ 1449.672050][ T5876] usb 4-1: NFC: Unable to get FW version [ 1449.707949][ T5876] pn533_usb 4-1:0.113: probe with driver pn533_usb failed with error -90 [ 1450.199655][ T5829] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 1450.214745][T25790] vlan0: entered promiscuous mode [ 1450.220189][T25790] mac80211_hwsim hwsim18 wlan0: entered promiscuous mode [ 1450.407613][ T5829] usb 1-1: config index 0 descriptor too short (expected 804, got 36) [ 1450.416253][ T5829] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1450.443697][ T5829] usb 1-1: config 2 has no interfaces? [ 1450.458557][ T5829] usb 1-1: New USB device found, idVendor=17ef, idProduct=6147, bcdDevice= 0.00 [ 1450.554133][ T5829] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1450.577367][T25792] FAULT_INJECTION: forcing a failure. [ 1450.577367][T25792] name failslab, interval 1, probability 0, space 0, times 0 [ 1450.608701][T25792] CPU: 1 UID: 0 PID: 25792 Comm: syz.1.5199 Tainted: G L syzkaller #0 PREEMPT(full) [ 1450.608736][T25792] Tainted: [L]=SOFTLOCKUP [ 1450.608743][T25792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1450.608757][T25792] Call Trace: [ 1450.608766][T25792] [ 1450.608775][T25792] dump_stack_lvl+0xe8/0x150 [ 1450.608805][T25792] should_fail_ex+0x414/0x560 [ 1450.608840][T25792] should_failslab+0xa8/0x100 [ 1450.608873][T25792] kmem_cache_alloc_noprof+0x88/0x710 [ 1450.608901][T25792] ? apparmor_capable+0x137/0x1a0 [ 1450.608929][T25792] ? skb_clone+0x212/0x3a0 [ 1450.608956][T25792] skb_clone+0x212/0x3a0 [ 1450.608979][T25792] ? nfnetlink_rcv+0x4ba/0x2590 [ 1450.609003][T25792] nfnetlink_rcv+0x4ec/0x2590 [ 1450.609035][T25792] ? lockdep_hardirqs_on+0x7b/0x110 [ 1450.609055][T25792] ? __dev_queue_xmit+0x289/0x31c0 [ 1450.609080][T25792] ? __local_bh_enable_ip+0xd0/0x130 [ 1450.609099][T25792] ? __dev_queue_xmit+0x289/0x31c0 [ 1450.609123][T25792] ? __dev_queue_xmit+0x19cb/0x31c0 [ 1450.609147][T25792] ? ___sys_sendmsg+0x21f/0x2a0 [ 1450.609177][T25792] ? __dev_queue_xmit+0x289/0x31c0 [ 1450.609207][T25792] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1450.609244][T25792] ? ref_tracker_free+0x63a/0x7d0 [ 1450.609263][T25792] ? __asan_memcpy+0x40/0x70 [ 1450.609280][T25792] ? __pfx_ref_tracker_free+0x10/0x10 [ 1450.609314][T25792] ? skb_clone+0x246/0x3a0 [ 1450.609338][T25792] ? __netlink_deliver_tap+0x807/0x850 [ 1450.609367][T25792] ? netlink_deliver_tap+0x2e/0x1b0 [ 1450.609406][T25792] netlink_unicast+0x82f/0x9e0 [ 1450.609436][T25792] ? __pfx_netlink_unicast+0x10/0x10 [ 1450.609457][T25792] ? __alloc_skb+0x198/0x3a0 [ 1450.609477][T25792] ? netlink_sendmsg+0x642/0xb30 [ 1450.609500][T25792] ? skb_put+0x11b/0x210 [ 1450.609525][T25792] netlink_sendmsg+0x805/0xb30 [ 1450.609558][T25792] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1450.609669][T25792] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1450.609696][T25792] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1450.609713][T25792] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1450.609740][T25792] __sock_sendmsg+0x21c/0x270 [ 1450.609771][T25792] ____sys_sendmsg+0x505/0x820 [ 1450.609798][T25792] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1450.609828][T25792] ? import_iovec+0x74/0xa0 [ 1450.609948][T25792] ___sys_sendmsg+0x21f/0x2a0 [ 1450.609975][T25792] ? __pfx____sys_sendmsg+0x10/0x10 [ 1450.610032][T25792] ? __fget_files+0x2a/0x420 [ 1450.610073][T25792] ? __fget_files+0x3a0/0x420 [ 1450.610103][T25792] __x64_sys_sendmsg+0x19b/0x260 [ 1450.610126][T25792] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1450.610154][T25792] ? __pfx_ksys_write+0x10/0x10 [ 1450.610185][T25792] do_syscall_64+0xec/0xf80 [ 1450.610207][T25792] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1450.610226][T25792] ? trace_irq_disable+0x37/0x100 [ 1450.610262][T25792] ? clear_bhb_loop+0x60/0xb0 [ 1450.610284][T25792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1450.610303][T25792] RIP: 0033:0x7f78afb8f749 [ 1450.610321][T25792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1450.610340][T25792] RSP: 002b:00007f78b0b0c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1450.610362][T25792] RAX: ffffffffffffffda RBX: 00007f78afde5fa0 RCX: 00007f78afb8f749 [ 1450.610379][T25792] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1450.610399][T25792] RBP: 00007f78b0b0c090 R08: 0000000000000000 R09: 0000000000000000 [ 1450.610412][T25792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1450.610425][T25792] R13: 00007f78afde6038 R14: 00007f78afde5fa0 R15: 00007f78aff0fa28 [ 1450.610455][T25792] [ 1451.385180][T14792] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1451.433984][T25801] ip6gretap0: entered promiscuous mode [ 1451.449979][T25801] macsec1: entered promiscuous mode [ 1451.488057][T25801] ip6gretap0: left promiscuous mode [ 1451.509772][T25803] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5201'. [ 1451.539332][T25803] netlink: 'syz.5.5201': attribute type 18 has an invalid length. [ 1451.549827][T25803] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5201'. [ 1451.590042][T14792] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 1451.599545][T14792] usb 3-1: config 0 has no interface number 0 [ 1451.619913][T14792] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1451.630407][T14792] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1451.647379][T14792] usb 3-1: Product: syz [ 1451.667237][T14792] usb 3-1: Manufacturer: syz [ 1451.680539][T14792] usb 3-1: SerialNumber: syz [ 1451.740819][T14792] usb 3-1: config 0 descriptor?? [ 1451.770055][T14792] yurex 3-1:0.50: Could not find endpoints [ 1451.891561][ T5829] usb 4-1: USB disconnect, device number 115 [ 1451.970970][T25795] kvm: kvm [25793]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 1452.008546][T25807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1452.019246][T25807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1452.029869][T25795] kvm: kvm [25793]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 1452.163393][T25811] input: syz1 as /devices/virtual/input/input91 [ 1452.583455][T25815] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5204'. [ 1452.895556][ T5829] usb 1-1: USB disconnect, device number 115 [ 1453.622314][ T5829] usb 3-1: USB disconnect, device number 108 [ 1455.202605][T25618] peak_usb 6-1:0.29 can0: unable to request usb[type=2 value=5] err=-110 [ 1455.215168][T25618] peak_usb 6-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -110) [ 1455.424619][T25618] peak_usb 6-1:0.29: probe with driver peak_usb failed with error -110 [ 1456.090809][T25864] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5219'. [ 1456.273757][T25874] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1456.290086][T25874] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1456.299326][T25874] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1456.310760][T25874] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1456.319104][T25874] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1456.332615][T25874] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1456.343104][T25874] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1456.351832][T25874] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1456.359119][T25874] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1456.373413][T25874] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1456.525171][T25618] usb 3-1: new full-speed USB device number 109 using dummy_hcd [ 1456.607441][T25878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1456.639106][T25878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1456.659317][T25878] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1456.697406][T25618] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1456.708825][T25618] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1456.721901][T25618] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1456.732214][T25618] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1456.752077][T25618] usb 3-1: config 0 descriptor?? [ 1456.766414][T25618] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1456.773355][T25618] dvb-usb: bulk message failed: -22 (3/0) [ 1456.801746][T25618] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1456.822037][T25618] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1456.827055][T25887] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5229'. [ 1456.836046][T25618] usb 3-1: media controller created [ 1456.848379][T25618] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1456.869226][T25618] dvb-usb: bulk message failed: -22 (6/0) [ 1456.886084][T25890] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5229'. [ 1456.888026][T25618] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1456.913197][T25618] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input92 [ 1456.943154][T25618] dvb-usb: schedule remote query interval to 150 msecs. [ 1456.957364][T25618] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1457.115615][T23877] dvb-usb: bulk message failed: -22 (1/0) [ 1457.124680][T23877] dvb-usb: error while querying for an remote control event. [ 1457.140643][T25618] usb 3-1: USB disconnect, device number 109 [ 1457.203648][T25618] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1457.569084][T25901] kvm: emulating exchange as write [ 1457.579754][T25901] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5232'. [ 1458.060827][T25922] netlink: 'syz.1.5238': attribute type 13 has an invalid length. [ 1458.115252][T25919] kvm: requested 182704 ns i8254 timer period limited to 200000 ns [ 1458.160874][T25919] kvm: requested 132419 ns i8254 timer period limited to 200000 ns [ 1458.259357][T25919] kvm: requested 52800 ns i8254 timer period limited to 200000 ns [ 1458.371550][T25919] kvm: requested 130742 ns i8254 timer period limited to 200000 ns [ 1458.861623][T25932] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1458.975734][T14792] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1459.209128][T25942] FAULT_INJECTION: forcing a failure. [ 1459.209128][T25942] name failslab, interval 1, probability 0, space 0, times 0 [ 1459.253707][T25942] CPU: 1 UID: 0 PID: 25942 Comm: syz.2.5244 Tainted: G L syzkaller #0 PREEMPT(full) [ 1459.253727][T25942] Tainted: [L]=SOFTLOCKUP [ 1459.253731][T25942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1459.253738][T25942] Call Trace: [ 1459.253744][T25942] [ 1459.253750][T25942] dump_stack_lvl+0xe8/0x150 [ 1459.253769][T25942] should_fail_ex+0x414/0x560 [ 1459.253789][T25942] should_failslab+0xa8/0x100 [ 1459.253804][T25942] __kmalloc_noprof+0xdf/0x800 [ 1459.253815][T25942] ? kfree+0x4d/0x660 [ 1459.253829][T25942] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1459.253847][T25942] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1459.253868][T25942] tomoyo_check_open_permission+0x1c1/0x3b0 [ 1459.253881][T25942] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 1459.253892][T25942] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1459.253926][T25942] security_file_open+0xb1/0x270 [ 1459.253937][T25942] do_dentry_open+0x34e/0x1420 [ 1459.253960][T25942] vfs_open+0x3b/0x340 [ 1459.253972][T25942] ? path_openat+0x33f3/0x3dd0 [ 1459.253983][T25942] path_openat+0x340e/0x3dd0 [ 1459.253999][T25942] ? __pfx_stack_trace_save+0x10/0x10 [ 1459.254022][T25942] ? kmem_cache_alloc_noprof+0x37d/0x710 [ 1459.254037][T25942] ? getname_flags+0xb8/0x540 [ 1459.254050][T25942] ? __pfx_path_openat+0x10/0x10 [ 1459.254060][T25942] ? __lock_acquire+0x6b6/0x2cf0 [ 1459.254078][T25942] do_filp_open+0x1fa/0x410 [ 1459.254089][T25942] ? __pfx_do_filp_open+0x10/0x10 [ 1459.254103][T25942] ? __pfx_kfree_link+0x10/0x10 [ 1459.254121][T25942] ? _raw_spin_unlock+0x28/0x50 [ 1459.254136][T25942] ? alloc_fd+0x64c/0x6c0 [ 1459.254155][T25942] do_sys_openat2+0x121/0x200 [ 1459.254170][T25942] ? __pfx_do_sys_openat2+0x10/0x10 [ 1459.254184][T25942] ? ksys_write+0x22a/0x250 [ 1459.254195][T25942] ? __pfx_ksys_write+0x10/0x10 [ 1459.254212][T25942] __x64_sys_openat+0x138/0x170 [ 1459.254232][T25942] do_syscall_64+0xec/0xf80 [ 1459.254243][T25942] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1459.254253][T25942] ? trace_irq_disable+0x37/0x100 [ 1459.254267][T25942] ? clear_bhb_loop+0x60/0xb0 [ 1459.254279][T25942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1459.254290][T25942] RIP: 0033:0x7f54b658df90 [ 1459.254301][T25942] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 1459.254310][T25942] RSP: 002b:00007f54b73cff10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1459.254322][T25942] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f54b658df90 [ 1459.254330][T25942] RDX: 0000000000000000 RSI: 00007f54b73cffa0 RDI: 00000000ffffff9c [ 1459.254337][T25942] RBP: 00007f54b73cffa0 R08: 0000000000000000 R09: 0000000000000000 [ 1459.254344][T25942] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1459.254350][T25942] R13: 00007f54b67e6038 R14: 00007f54b67e5fa0 R15: 00007f54b690fa28 [ 1459.254366][T25942] [ 1459.616265][T25943] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5243'. [ 1459.807259][ T5876] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1459.816809][ T5876] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1459.824383][ T5876] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1459.832616][ T5876] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1459.843481][T25382] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1459.875589][T25942] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1460.043916][T25949] bridge_slave_0: left allmulticast mode [ 1460.061866][ T5876] rtc rtc0: __rtc_set_alarm: err=-22 [ 1460.083471][T25949] bridge_slave_0: left promiscuous mode [ 1460.097265][T25949] bridge0: port 1(bridge_slave_0) entered disabled state [ 1460.121154][T25949] bridge_slave_1: left allmulticast mode [ 1460.135290][T25949] bridge_slave_1: left promiscuous mode [ 1460.141859][T25949] bridge0: port 2(bridge_slave_1) entered disabled state [ 1460.159525][T25949] bond0: (slave bond_slave_0): Releasing backup interface [ 1460.174142][T25949] bond0: (slave bond_slave_1): Releasing backup interface [ 1460.206971][T25949] team0: Port device team_slave_0 removed [ 1460.234880][T25949] team0: Port device team_slave_1 removed [ 1460.250627][T25949] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1460.272829][T25949] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1460.287367][T25949] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1460.294830][T25949] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1460.545149][ T5876] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 1460.682743][T25975] binder_alloc: binder_alloc_mmap_handler: 25973 200000ffd000-200000fff000 already mapped failed -16 [ 1460.910521][ T5876] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1460.919135][ T5876] usb 1-1: config 0 has no interface number 0 [ 1460.928464][ T5876] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1460.938967][ T5876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1460.948439][ T5876] usb 1-1: Product: syz [ 1460.952881][ T5876] usb 1-1: Manufacturer: syz [ 1461.007608][ T5876] usb 1-1: SerialNumber: syz [ 1461.025903][ T5876] usb 1-1: config 0 descriptor?? [ 1461.270314][ T5876] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state [ 1461.293488][ T5876] usb 1-1: Direct firmware load for dvb-usb-ec168.fw failed with error -2 [ 1461.321922][ T5876] usb 1-1: Falling back to sysfs fallback for: dvb-usb-ec168.fw [ 1461.781022][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 1461.781034][ T30] audit: type=1326 audit(1767240179.829:3096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25992 comm="syz.2.5260" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f54b658f749 code=0x0 [ 1462.131522][T26008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1462.180563][T26008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1463.033776][T26018] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5267'. [ 1463.368826][T26027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5269'. [ 1464.955372][T25618] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1465.115291][T25618] usb 3-1: Using ep0 maxpacket: 16 [ 1465.162764][T25618] usb 3-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 1465.181673][T25618] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1465.284355][T25618] usb 3-1: Product: syz [ 1465.298970][T26048] fuse: Bad value for 'fd' [ 1465.307622][T25618] usb 3-1: Manufacturer: syz [ 1465.340788][T25618] usb 3-1: SerialNumber: syz [ 1465.380838][T26051] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5276'. [ 1465.434193][T26055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1465.596218][T26055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1467.105890][T23877] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 1467.268919][T23877] usb 4-1: Using ep0 maxpacket: 32 [ 1467.278777][T23877] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1467.322373][T23877] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1467.356956][T23877] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 1467.397364][T23877] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 1467.432598][T23877] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1467.545963][T23877] usb 4-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1467.628557][T23877] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 1467.666474][T23877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 1467.685139][T23877] usb 4-1: Product: syz [ 1467.696946][T23877] usb 4-1: Manufacturer: syz [ 1467.701615][T23877] usb 4-1: SerialNumber: syz [ 1467.770391][T23877] usb 4-1: config 0 descriptor?? [ 1467.832415][T23877] usb 4-1: no audio or video endpoints found [ 1468.052012][T18363] usb 4-1: USB disconnect, device number 116 [ 1468.159726][T25618] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1468.260664][T25618] snd-usb-audio 3-1:218.0: probe with driver snd-usb-audio failed with error -71 [ 1468.299365][T25618] usb 3-1: USB disconnect, device number 110 [ 1468.341908][ T6179] udevd[6179]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:218.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1468.925307][T25619] usb 3-1: new full-speed USB device number 111 using dummy_hcd [ 1469.093334][T25619] usb 3-1: device descriptor read/64, error -71 [ 1469.243226][T26110] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5296'. [ 1469.306966][T10738] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1469.316408][T10738] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1469.325116][T25382] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 1469.375275][T25619] usb 3-1: new full-speed USB device number 112 using dummy_hcd [ 1469.388192][T26116] netlink: 'syz.0.5297': attribute type 2 has an invalid length. [ 1469.473196][T10738] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1469.486267][T25382] usb 4-1: Using ep0 maxpacket: 8 [ 1469.504982][T25382] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 1469.518647][T10738] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1469.530417][T25382] usb 4-1: config 0 has no interface number 0 [ 1469.557168][T25619] usb 3-1: device descriptor read/64, error -71 [ 1469.580476][T25382] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1469.592728][T25382] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1469.622848][T25382] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1469.645585][T25382] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1469.676349][T25382] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1469.690430][T25619] usb usb3-port1: attempt power cycle [ 1469.705243][T25382] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1469.727513][T25382] usb 4-1: config 0 descriptor?? [ 1469.752716][T25382] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1470.051814][T25619] usb 3-1: new full-speed USB device number 113 using dummy_hcd [ 1470.092850][T25619] usb 3-1: device descriptor read/8, error -71 [ 1470.360605][T25619] usb 3-1: new full-speed USB device number 114 using dummy_hcd [ 1470.386896][T25619] usb 3-1: device descriptor read/8, error -71 [ 1470.506209][T25619] usb usb3-port1: unable to enumerate USB device [ 1471.815897][ T30] audit: type=1326 audit(1767240189.859:3097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26136 comm="syz.2.5303" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f54b658f749 code=0x0 [ 1471.982783][T26140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5303'. [ 1472.434799][T26143] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(12) [ 1472.441639][T26143] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1472.576943][T26143] vhci_hcd vhci_hcd.0: Device attached [ 1472.604573][T26145] vhci_hcd: connection closed [ 1472.604834][ T1133] vhci_hcd vhci_hcd.5: stop threads [ 1472.632169][ T1133] vhci_hcd vhci_hcd.5: release socket [ 1472.652725][ T1133] vhci_hcd vhci_hcd.5: disconnect device [ 1472.952029][T25619] usb 4-1: USB disconnect, device number 117 [ 1473.001349][T25619] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 1473.274485][T26166] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5310'. [ 1473.758458][T25619] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 1474.115163][T25619] usb 4-1: Using ep0 maxpacket: 32 [ 1474.124255][T25619] usb 4-1: config 0 has an invalid interface number: 209 but max is 0 [ 1474.135279][T25619] usb 4-1: config 0 has no interface number 0 [ 1474.142061][T25619] usb 4-1: config 0 interface 209 has no altsetting 0 [ 1474.152273][T25619] usb 4-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=1b.23 [ 1474.164313][T25619] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1474.177808][T25619] usb 4-1: Product: syz [ 1474.284953][T25619] usb 4-1: Manufacturer: syz [ 1474.299536][T25619] usb 4-1: SerialNumber: syz [ 1474.322506][T25619] usb 4-1: config 0 descriptor?? [ 1474.584939][T14792] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1474.617759][T25619] usb 4-1: USB disconnect, device number 118 [ 1474.835165][T14792] usb 2-1: Using ep0 maxpacket: 8 [ 1474.916652][T14792] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 1474.935125][T14792] usb 2-1: config 0 has no interface number 0 [ 1474.941518][T14792] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1474.983021][T14792] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1475.030761][T14792] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1475.194683][T26189] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5317'. [ 1475.206861][T14792] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1475.265135][T14792] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1475.334239][T14792] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1475.373132][T14792] usb 2-1: config 0 descriptor?? [ 1475.534283][T14792] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1476.656699][ T30] audit: type=1400 audit(1767240194.709:3098): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="\" pid=26206 comm="syz.0.5324" [ 1477.254297][T14792] usb 2-1: USB disconnect, device number 84 [ 1477.262221][T14792] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 1477.322931][T26217] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5327'. [ 1477.865178][T14792] usb 2-1: new full-speed USB device number 85 using dummy_hcd [ 1478.029097][T14792] usb 2-1: config 7 has an invalid interface number: 192 but max is 0 [ 1478.040567][T14792] usb 2-1: config 7 has no interface number 0 [ 1478.065211][T14792] usb 2-1: config 7 interface 192 has no altsetting 0 [ 1478.097627][T14792] usb 2-1: New USB device found, idVendor=09fb, idProduct=ebbe, bcdDevice=d4.8d [ 1478.107113][T14792] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1478.115473][T14792] usb 2-1: Product: syz [ 1478.119853][T14792] usb 2-1: Manufacturer: syz [ 1478.124448][T14792] usb 2-1: SerialNumber: syz [ 1478.803642][T26231] tipc: Enabled bearer , priority 0 [ 1478.824880][T26231] syzkaller0: entered promiscuous mode [ 1478.842869][T26231] syzkaller0: entered allmulticast mode [ 1478.885318][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1479.115358][T14792] usb 2-1: USB disconnect, device number 85 [ 1479.190478][T26239] netlink: 4344 bytes leftover after parsing attributes in process `syz.1.5333'. [ 1479.236283][T26241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1479.278138][T26241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1479.433526][T26231] tipc: Resetting bearer [ 1479.675746][T26250] tipc: Enabled bearer , priority 0 [ 1479.697208][T26252] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5336'. [ 1479.768055][T26251] tipc: Resetting bearer [ 1480.394179][T26270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1480.413271][T26270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1480.715709][T23877] usb 3-1: new low-speed USB device number 115 using dummy_hcd [ 1480.855245][T23877] usb 3-1: device descriptor read/64, error -71 [ 1481.095354][T23877] usb 3-1: new low-speed USB device number 116 using dummy_hcd [ 1481.177442][T26284] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5348'. [ 1481.245336][T23877] usb 3-1: device descriptor read/64, error -71 [ 1481.401565][T23877] usb usb3-port1: attempt power cycle [ 1481.725168][T25618] usb 4-1: new full-speed USB device number 119 using dummy_hcd [ 1481.745135][T23877] usb 3-1: new low-speed USB device number 117 using dummy_hcd [ 1481.765967][T23877] usb 3-1: device descriptor read/8, error -71 [ 1481.865513][T25618] usb 4-1: device descriptor read/64, error -71 [ 1482.005239][T23877] usb 3-1: new low-speed USB device number 118 using dummy_hcd [ 1482.025656][T23877] usb 3-1: device descriptor read/8, error -71 [ 1482.115252][T25618] usb 4-1: new full-speed USB device number 120 using dummy_hcd [ 1482.135448][T23877] usb usb3-port1: unable to enumerate USB device [ 1482.245237][T25618] usb 4-1: device descriptor read/64, error -71 [ 1482.356041][T25618] usb usb4-port1: attempt power cycle [ 1482.695191][T25618] usb 4-1: new full-speed USB device number 121 using dummy_hcd [ 1482.717256][T25618] usb 4-1: device descriptor read/8, error -71 [ 1482.956849][T25618] usb 4-1: new full-speed USB device number 122 using dummy_hcd [ 1482.996788][T25618] usb 4-1: device descriptor read/8, error -71 [ 1483.106529][T25618] usb usb4-port1: unable to enumerate USB device [ 1484.640538][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.647419][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1486.074081][T25619] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1486.245373][T25619] usb 4-1: Using ep0 maxpacket: 32 [ 1486.254570][T25619] usb 4-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 124, changing to 10 [ 1486.320766][T25619] usb 4-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1486.354013][T25619] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1486.380185][T25619] usb 4-1: New USB device found, idVendor=05ac, idProduct=0243, bcdDevice= 0.40 [ 1486.390362][T25619] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1486.399606][T25619] usb 4-1: Product: syz [ 1486.406590][T25619] usb 4-1: Manufacturer: syz [ 1486.428724][T25619] usb 4-1: SerialNumber: syz [ 1486.800030][T25619] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input94 [ 1486.855695][ T5188] bcm5974 4-1:1.0: could not read from device [ 1486.871611][ T5188] bcm5974 4-1:1.0: could not read from device [ 1486.881430][T25619] usb 4-1: USB disconnect, device number 123 [ 1487.165318][T25618] usb 3-1: new full-speed USB device number 119 using dummy_hcd [ 1487.296879][T25618] usb 3-1: device descriptor read/64, error -71 [ 1487.557785][T25618] usb 3-1: new full-speed USB device number 120 using dummy_hcd [ 1487.692358][T26366] lo: Caught tx_queue_len zero misconfig [ 1487.725426][T25618] usb 3-1: device descriptor read/64, error -71 [ 1487.838320][T25618] usb usb3-port1: attempt power cycle [ 1488.114909][T26369] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5374'. [ 1488.196180][T25618] usb 3-1: new full-speed USB device number 121 using dummy_hcd [ 1488.225868][T25618] usb 3-1: device descriptor read/8, error -71 [ 1488.513643][T25618] usb 3-1: new full-speed USB device number 122 using dummy_hcd [ 1488.540813][T25618] usb 3-1: device descriptor read/8, error -71 [ 1488.685393][T25618] usb usb3-port1: unable to enumerate USB device [ 1489.313540][T26380] binder: 26379:26380 ioctl c018620b 0 returned -14 [ 1489.494439][T26382] syz.3.5380 (26382): drop_caches: 2 [ 1489.959812][T26387] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5381'. [ 1490.364267][T26398] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5384'. [ 1491.276426][T26413] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5387'. [ 1491.291827][T26413] net_ratelimit: 29 callbacks suppressed [ 1491.291848][T26413] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 1492.841664][T26438] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5396'. [ 1493.045690][T26445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1493.063432][T26445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1493.095128][T25618] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 1493.246666][T25618] usb 4-1: config 0 has no interfaces? [ 1493.252223][T25618] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1493.285832][T25618] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1493.297452][T25618] usb 4-1: config 0 descriptor?? [ 1493.772280][T26456] FAULT_INJECTION: forcing a failure. [ 1493.772280][T26456] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1493.807156][T26456] CPU: 1 UID: 0 PID: 26456 Comm: syz.2.5402 Tainted: G L syzkaller #0 PREEMPT(full) [ 1493.807188][T26456] Tainted: [L]=SOFTLOCKUP [ 1493.807196][T26456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1493.807208][T26456] Call Trace: [ 1493.807217][T26456] [ 1493.807226][T26456] dump_stack_lvl+0xe8/0x150 [ 1493.807256][T26456] should_fail_ex+0x414/0x560 [ 1493.807289][T26456] _copy_to_user+0x31/0xb0 [ 1493.807314][T26456] simple_read_from_buffer+0xe1/0x170 [ 1493.807342][T26456] proc_fail_nth_read+0x1b3/0x220 [ 1493.807366][T26456] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1493.807390][T26456] ? rw_verify_area+0x2a6/0x4d0 [ 1493.807408][T26456] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1493.807435][T26456] vfs_read+0x200/0xa30 [ 1493.807452][T26456] ? fdget_pos+0x247/0x320 [ 1493.807491][T26456] ? __pfx___mutex_lock+0x10/0x10 [ 1493.807512][T26456] ? __pfx_vfs_read+0x10/0x10 [ 1493.807531][T26456] ? __fget_files+0x2a/0x420 [ 1493.807556][T26456] ? __fget_files+0x3a0/0x420 [ 1493.807577][T26456] ? __fget_files+0x2a/0x420 [ 1493.807608][T26456] ksys_read+0x145/0x250 [ 1493.807628][T26456] ? __pfx_ksys_read+0x10/0x10 [ 1493.807658][T26456] do_syscall_64+0xec/0xf80 [ 1493.807678][T26456] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1493.807698][T26456] ? trace_irq_disable+0x37/0x100 [ 1493.807723][T26456] ? clear_bhb_loop+0x60/0xb0 [ 1493.807746][T26456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1493.807773][T26456] RIP: 0033:0x7f54b658e15c [ 1493.807791][T26456] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1493.807807][T26456] RSP: 002b:00007f54b73d0030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1493.807828][T26456] RAX: ffffffffffffffda RBX: 00007f54b67e5fa0 RCX: 00007f54b658e15c [ 1493.807844][T26456] RDX: 000000000000000f RSI: 00007f54b73d00a0 RDI: 0000000000000004 [ 1493.807857][T26456] RBP: 00007f54b73d0090 R08: 0000000000000000 R09: 0000000000000000 [ 1493.807870][T26456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1493.807882][T26456] R13: 00007f54b67e6038 R14: 00007f54b67e5fa0 R15: 00007f54b690fa28 [ 1493.807909][T26456] [ 1494.756790][T26464] FAULT_INJECTION: forcing a failure. [ 1494.756790][T26464] name failslab, interval 1, probability 0, space 0, times 0 [ 1494.769844][T26464] CPU: 1 UID: 0 PID: 26464 Comm: syz.2.5403 Tainted: G L syzkaller #0 PREEMPT(full) [ 1494.769873][T26464] Tainted: [L]=SOFTLOCKUP [ 1494.769881][T26464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1494.769893][T26464] Call Trace: [ 1494.769901][T26464] [ 1494.769910][T26464] dump_stack_lvl+0xe8/0x150 [ 1494.769940][T26464] should_fail_ex+0x414/0x560 [ 1494.769975][T26464] should_failslab+0xa8/0x100 [ 1494.770001][T26464] __kmalloc_noprof+0xdf/0x800 [ 1494.770020][T26464] ? tomoyo_encode+0x28b/0x550 [ 1494.770051][T26464] tomoyo_encode+0x28b/0x550 [ 1494.770081][T26464] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1494.770118][T26464] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1494.770140][T26464] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1494.770164][T26464] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1494.770186][T26464] ? __lock_acquire+0x6b6/0x2cf0 [ 1494.770220][T26464] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 1494.770262][T26464] ? __fget_files+0x2a/0x420 [ 1494.770287][T26464] ? __fget_files+0x2a/0x420 [ 1494.770308][T26464] ? __fget_files+0x3a0/0x420 [ 1494.770330][T26464] ? __fget_files+0x2a/0x420 [ 1494.770354][T26464] security_file_ioctl+0xcb/0x2d0 [ 1494.770378][T26464] __se_sys_ioctl+0x47/0x170 [ 1494.770398][T26464] do_syscall_64+0xec/0xf80 [ 1494.770418][T26464] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1494.770437][T26464] ? trace_irq_disable+0x37/0x100 [ 1494.770463][T26464] ? clear_bhb_loop+0x60/0xb0 [ 1494.770483][T26464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1494.770500][T26464] RIP: 0033:0x7f54b658f749 [ 1494.770516][T26464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1494.770533][T26464] RSP: 002b:00007f54b73d0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1494.770554][T26464] RAX: ffffffffffffffda RBX: 00007f54b67e5fa0 RCX: 00007f54b658f749 [ 1494.770568][T26464] RDX: 0000200000000240 RSI: 00000000c040565e RDI: 0000000000000003 [ 1494.770580][T26464] RBP: 00007f54b73d0090 R08: 0000000000000000 R09: 0000000000000000 [ 1494.770592][T26464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1494.770610][T26464] R13: 00007f54b67e6038 R14: 00007f54b67e5fa0 R15: 00007f54b690fa28 [ 1494.770640][T26464] [ 1494.770669][T26464] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1495.528064][T26477] FAULT_INJECTION: forcing a failure. [ 1495.528064][T26477] name failslab, interval 1, probability 0, space 0, times 0 [ 1495.541829][T26477] CPU: 0 UID: 0 PID: 26477 Comm: syz.5.5408 Tainted: G L syzkaller #0 PREEMPT(full) [ 1495.541861][T26477] Tainted: [L]=SOFTLOCKUP [ 1495.541869][T26477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1495.541880][T26477] Call Trace: [ 1495.541888][T26477] [ 1495.541896][T26477] dump_stack_lvl+0xe8/0x150 [ 1495.541924][T26477] should_fail_ex+0x414/0x560 [ 1495.541957][T26477] should_failslab+0xa8/0x100 [ 1495.541977][T26477] __kmalloc_noprof+0xdf/0x800 [ 1495.541988][T26477] ? ___neigh_create+0x6d5/0x2230 [ 1495.542008][T26477] ___neigh_create+0x6d5/0x2230 [ 1495.542028][T26477] ? ip6_neigh_lookup+0x14e/0x470 [ 1495.542046][T26477] ? ip6_neigh_lookup+0x14e/0x470 [ 1495.542062][T26477] ? ip6_neigh_lookup+0x14e/0x470 [ 1495.542077][T26477] ip6_neigh_lookup+0x3b7/0x470 [ 1495.542093][T26477] ? __pfx_ip6_neigh_lookup+0x10/0x10 [ 1495.542111][T26477] ? ip6_dst_neigh_lookup+0x74/0xf0 [ 1495.542127][T26477] addr_resolve+0x146f/0x1f70 [ 1495.542142][T26477] ? addr_resolve+0xe9/0x1f70 [ 1495.542160][T26477] ? __pfx_addr_resolve+0x10/0x10 [ 1495.542183][T26477] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1495.542201][T26477] ? timer_init_key+0x161/0x2b0 [ 1495.542220][T26477] rdma_resolve_ip+0x444/0x840 [ 1495.542238][T26477] rdma_resolve_addr+0x7a7/0x2030 [ 1495.542259][T26477] ? __pfx_rdma_resolve_addr+0x10/0x10 [ 1495.542272][T26477] ? __mutex_lock+0x335/0x1350 [ 1495.542289][T26477] ? ucma_resolve_ip+0x1a5/0x280 [ 1495.542319][T26477] ucma_resolve_ip+0x1db/0x280 [ 1495.542334][T26477] ? __pfx_ucma_resolve_ip+0x10/0x10 [ 1495.542380][T26477] ucma_write+0x249/0x2e0 [ 1495.542402][T26477] ? __pfx_ucma_write+0x10/0x10 [ 1495.542413][T26477] ? security_file_permission+0x75/0x290 [ 1495.542425][T26477] ? rw_verify_area+0x255/0x4d0 [ 1495.542437][T26477] vfs_writev+0x4b6/0x960 [ 1495.542452][T26477] ? __pfx_ucma_write+0x10/0x10 [ 1495.542464][T26477] ? __pfx_vfs_writev+0x10/0x10 [ 1495.542484][T26477] ? __fget_files+0x2a/0x420 [ 1495.542499][T26477] ? __fget_files+0x3a0/0x420 [ 1495.542511][T26477] ? __fget_files+0x2a/0x420 [ 1495.542528][T26477] do_writev+0x14d/0x2d0 [ 1495.542542][T26477] ? __pfx_do_writev+0x10/0x10 [ 1495.542560][T26477] do_syscall_64+0xec/0xf80 [ 1495.542573][T26477] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1495.542583][T26477] ? trace_irq_disable+0x37/0x100 [ 1495.542597][T26477] ? clear_bhb_loop+0x60/0xb0 [ 1495.542609][T26477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1495.542619][T26477] RIP: 0033:0x7f0e3a58f749 [ 1495.542631][T26477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1495.542640][T26477] RSP: 002b:00007f0e3b4c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1495.542652][T26477] RAX: ffffffffffffffda RBX: 00007f0e3a7e5fa0 RCX: 00007f0e3a58f749 [ 1495.542660][T26477] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000009 [ 1495.542667][T26477] RBP: 00007f0e3b4c7090 R08: 0000000000000000 R09: 0000000000000000 [ 1495.542674][T26477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1495.542680][T26477] R13: 00007f0e3a7e6038 R14: 00007f0e3a7e5fa0 R15: 00007f0e3a90fa28 [ 1495.542696][T26477] [ 1495.883930][T25382] usb 4-1: USB disconnect, device number 124 [ 1495.925676][T25618] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1496.077939][T25618] usb 3-1: Using ep0 maxpacket: 8 [ 1496.084916][T25618] usb 3-1: config index 0 descriptor too short (expected 65535, got 36) [ 1496.093963][T25618] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1496.104338][T25618] usb 3-1: config 0 has no interfaces? [ 1496.111122][T25618] usb 3-1: config index 1 descriptor too short (expected 65535, got 36) [ 1496.119807][T25618] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1496.130078][T25618] usb 3-1: config 0 has no interfaces? [ 1496.200884][T25618] usb 3-1: config index 2 descriptor too short (expected 65535, got 36) [ 1496.210531][T25618] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1496.225008][T25618] usb 3-1: config 0 has no interfaces? [ 1496.234624][T25618] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1496.243896][T25618] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1496.252667][T25618] usb 3-1: Product: syz [ 1496.258793][T25618] usb 3-1: Manufacturer: syz [ 1496.270581][T25618] usb 3-1: SerialNumber: syz [ 1496.276608][T26488] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5412'. [ 1496.279236][T25382] usb 2-1: new low-speed USB device number 86 using dummy_hcd [ 1496.311880][T25618] usb 3-1: config 0 descriptor?? [ 1496.467068][T25382] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 1496.476127][T25382] usb 2-1: config 0 has no interface number 0 [ 1496.484246][T25382] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1496.496629][T25382] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1496.512601][T25382] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1496.545405][T25382] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1496.565137][T14792] usb 3-1: USB disconnect, device number 123 [ 1496.605170][T25382] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1496.670161][T25382] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1496.684064][T25382] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1496.742388][T25382] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1496.775488][T25382] usb 2-1: config 0 descriptor?? [ 1496.791607][T26483] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1496.808299][T26483] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1496.822885][T25382] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1497.034734][T25618] usb 2-1: USB disconnect, device number 86 [ 1497.043803][T25618] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 1498.831441][T26525] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5423'. [ 1498.904739][T26531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1498.943975][T26531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1499.375145][T14792] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1499.525206][T14792] usb 3-1: Using ep0 maxpacket: 32 [ 1499.533514][T14792] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1499.543621][T14792] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1499.557530][T14792] usb 3-1: config 0 descriptor?? [ 1499.572433][T14792] as10x_usb: device has been detected [ 1499.580908][T14792] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1499.628939][T14792] usb 3-1: DVB: registering adapter 2 frontend 0 (nBox DVB-T Dongle)... [ 1499.652684][T14792] as10x_usb: error during firmware upload part1 [ 1499.660302][T14792] Registered device nBox DVB-T Dongle [ 1500.262291][T26548] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5425'. [ 1501.739611][T26555] syzkaller1: entered promiscuous mode [ 1501.745690][T26555] syzkaller1: entered allmulticast mode [ 1501.753589][T26555] fuse: Unknown parameter 'rBtmo000000000-00000040000' [ 1501.943293][T26560] fuse: Bad value for 'user_id' [ 1501.948296][T26560] fuse: Bad value for 'user_id' [ 1502.025259][T26564] FAULT_INJECTION: forcing a failure. [ 1502.025259][T26564] name failslab, interval 1, probability 0, space 0, times 0 [ 1502.124020][T25382] IPVS: starting estimator thread 0... [ 1502.158321][T26564] CPU: 1 UID: 0 PID: 26564 Comm: syz.5.5434 Tainted: G L syzkaller #0 PREEMPT(full) [ 1502.158353][T26564] Tainted: [L]=SOFTLOCKUP [ 1502.158360][T26564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1502.158372][T26564] Call Trace: [ 1502.158381][T26564] [ 1502.158390][T26564] dump_stack_lvl+0xe8/0x150 [ 1502.158419][T26564] should_fail_ex+0x414/0x560 [ 1502.158451][T26564] should_failslab+0xa8/0x100 [ 1502.158476][T26564] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 1502.158504][T26564] ? __alloc_skb+0x198/0x3a0 [ 1502.158522][T26564] ? __alloc_skb+0x1dc/0x3a0 [ 1502.158538][T26564] ? __local_bh_enable_ip+0xd0/0x130 [ 1502.158559][T26564] ? __alloc_skb+0x198/0x3a0 [ 1502.158579][T26564] __alloc_skb+0x1dc/0x3a0 [ 1502.158603][T26564] netlink_ack+0x146/0xa50 [ 1502.158632][T26564] ? __kmalloc_cache_noprof+0x3e2/0x700 [ 1502.158659][T26564] nfnetlink_rcv+0x2309/0x2590 [ 1502.158712][T26564] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1502.158747][T26564] ? ref_tracker_free+0x63a/0x7d0 [ 1502.158790][T26564] ? __netlink_deliver_tap+0x807/0x850 [ 1502.158811][T26564] ? netlink_deliver_tap+0x2e/0x1b0 [ 1502.158850][T26564] netlink_unicast+0x82f/0x9e0 [ 1502.158879][T26564] ? __pfx_netlink_unicast+0x10/0x10 [ 1502.158911][T26564] ? __alloc_skb+0x198/0x3a0 [ 1502.158932][T26564] ? netlink_sendmsg+0x642/0xb30 [ 1502.158955][T26564] ? skb_put+0x11b/0x210 [ 1502.158979][T26564] netlink_sendmsg+0x805/0xb30 [ 1502.159012][T26564] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1502.159039][T26564] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1502.159065][T26564] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1502.159084][T26564] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1502.159110][T26564] __sock_sendmsg+0x21c/0x270 [ 1502.159139][T26564] ____sys_sendmsg+0x505/0x820 [ 1502.159166][T26564] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1502.159194][T26564] ? import_iovec+0x74/0xa0 [ 1502.159219][T26564] ___sys_sendmsg+0x21f/0x2a0 [ 1502.159242][T26564] ? __pfx____sys_sendmsg+0x10/0x10 [ 1502.159294][T26564] ? __fget_files+0x2a/0x420 [ 1502.159317][T26564] ? __fget_files+0x3a0/0x420 [ 1502.159349][T26564] __x64_sys_sendmsg+0x19b/0x260 [ 1502.159373][T26564] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1502.159404][T26564] ? __pfx_ksys_write+0x10/0x10 [ 1502.159434][T26564] do_syscall_64+0xec/0xf80 [ 1502.159453][T26564] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1502.159471][T26564] ? trace_irq_disable+0x37/0x100 [ 1502.159493][T26564] ? clear_bhb_loop+0x60/0xb0 [ 1502.159513][T26564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1502.159532][T26564] RIP: 0033:0x7f0e3a58f749 [ 1502.159549][T26564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1502.159566][T26564] RSP: 002b:00007f0e3b4c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1502.159588][T26564] RAX: ffffffffffffffda RBX: 00007f0e3a7e5fa0 RCX: 00007f0e3a58f749 [ 1502.159604][T26564] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1502.159618][T26564] RBP: 00007f0e3b4c7090 R08: 0000000000000000 R09: 0000000000000000 [ 1502.159631][T26564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1502.159643][T26564] R13: 00007f0e3a7e6038 R14: 00007f0e3a7e5fa0 R15: 00007f0e3a90fa28 [ 1502.159672][T26564] [ 1502.733458][T26571] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5435'. [ 1502.759055][ T30] audit: type=1326 audit(1767240220.809:3099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26572 comm="syz.5.5437" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0e3a58f749 code=0x0 [ 1502.781021][T26567] IPVS: using max 39 ests per chain, 93600 per kthread [ 1503.093531][T25382] usb 3-1: USB disconnect, device number 124 [ 1503.142725][T25382] Unregistered device nBox DVB-T Dongle [ 1503.143770][T25382] as10x_usb: device has been disconnected [ 1503.198809][T26584] tipc: Enabling of bearer rejected, failed to enable media [ 1503.257489][T26588] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5440'. [ 1503.708247][T25618] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1503.867191][T25618] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1503.885778][T25618] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1503.914383][T25618] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1503.938084][T25618] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1503.962841][T26598] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1503.980937][T25618] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1504.473541][T26610] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5448'. [ 1504.945209][T25382] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1504.965559][T26622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1504.980477][T26622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1504.991061][T26622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1505.003705][T26622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1505.029260][T26622] xfrm1: entered allmulticast mode [ 1505.048939][T14792] usb 3-1: USB disconnect, device number 125 [ 1505.197427][T25382] usb 4-1: config 0 has no interfaces? [ 1505.205782][T25382] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1505.261254][T25382] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1505.276227][T25382] usb 4-1: Product: syz [ 1505.282131][T25382] usb 4-1: Manufacturer: syz [ 1505.290586][T25382] usb 4-1: SerialNumber: syz [ 1505.305736][T25382] usb 4-1: config 0 descriptor?? [ 1505.485118][T25382] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1505.528570][T14792] usb 4-1: USB disconnect, device number 125 [ 1505.655186][T25382] usb 2-1: Using ep0 maxpacket: 16 [ 1505.662451][T25382] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1505.694263][T25382] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1505.722703][T25382] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1505.748832][T25382] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1505.791734][T25382] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1505.814532][T25382] usb 2-1: config 0 descriptor?? [ 1506.038891][T26627] netlink: 6032 bytes leftover after parsing attributes in process `syz.1.5453'. [ 1506.049332][T26627] openvswitch: netlink: Flow key attribute not present in set flow. [ 1506.057584][T25619] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1506.066921][T25382] microsoft 0003:045E:07DA.0041: unknown main item tag 0x0 [ 1506.074143][T25382] microsoft 0003:045E:07DA.0041: unknown main item tag 0x0 [ 1506.083519][T25382] microsoft 0003:045E:07DA.0041: unknown main item tag 0x0 [ 1506.096879][T25382] microsoft 0003:045E:07DA.0041: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 1506.113148][T25382] microsoft 0003:045E:07DA.0041: no inputs found [ 1506.125204][T25382] microsoft 0003:045E:07DA.0041: could not initialize ff, continuing anyway [ 1506.228607][T25619] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1506.243230][T25619] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1506.255653][T25619] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1506.268867][T25619] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1506.286585][T25619] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1506.312789][T25619] usb 3-1: config 0 descriptor?? [ 1506.646775][T26642] netlink: 'syz.3.5457': attribute type 66 has an invalid length. [ 1506.727743][T25619] plantronics 0003:047F:FFFF.0042: reserved main item tag 0xd [ 1506.768637][T25619] plantronics 0003:047F:FFFF.0042: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1507.644451][T26656] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5460'. [ 1508.247028][T25618] usb 2-1: USB disconnect, device number 87 [ 1508.438507][T26675] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5469'. [ 1508.715618][T25618] usb 3-1: reset high-speed USB device number 126 using dummy_hcd [ 1508.773859][T26680] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5471'. [ 1508.895181][T25618] usb 3-1: device descriptor read/64, error -32 [ 1509.165483][T25618] usb 3-1: reset high-speed USB device number 126 using dummy_hcd [ 1509.326159][T25618] usb 3-1: device descriptor read/64, error -32 [ 1509.565189][T25618] usb 3-1: reset high-speed USB device number 126 using dummy_hcd [ 1509.658659][T25618] usb 3-1: device descriptor read/8, error -32 [ 1509.825399][T25382] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1509.899960][T25618] usb 3-1: reset high-speed USB device number 126 using dummy_hcd [ 1509.935249][T25618] usb 3-1: device descriptor read/8, error -32 [ 1510.032779][T26703] binder: BINDER_SET_CONTEXT_MGR already set [ 1510.042264][T26703] binder: 26698:26703 ioctl 4018620d 200000000040 returned -16 [ 1510.050031][T25618] raw-gadget.3 gadget.2: failed to queue suspend event [ 1510.065722][T23877] usb 3-1: USB disconnect, device number 126 [ 1510.085298][T25382] usb 2-1: Using ep0 maxpacket: 8 [ 1510.191244][T25382] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1510.201578][T25382] usb 2-1: config 7 has an invalid interface number: 142 but max is 0 [ 1510.251669][T25382] usb 2-1: config 7 has no interface number 0 [ 1510.253974][T23877] raw-gadget.3 gadget.2: failed to queue reset event [ 1510.321002][T25382] usb 2-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=dd.6d [ 1510.331510][T25382] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1510.351917][T25382] usb 2-1: Product: syz [ 1510.362145][T23877] raw-gadget.3 gadget.2: failed to queue resume event [ 1510.386085][T25382] usb 2-1: Manufacturer: syz [ 1510.413987][T25382] usb 2-1: SerialNumber: syz [ 1510.465231][T23877] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1510.492570][ C0] raw-gadget.3 gadget.2: ignoring, device is not running [ 1510.515235][T23877] raw-gadget.3 gadget.2: failed to queue reset event [ 1510.615253][T23877] raw-gadget.3 gadget.2: failed to queue resume event [ 1510.746755][T23877] usb 3-1: device descriptor read/64, error -32 [ 1510.991361][T26708] netlink: 1363 bytes leftover after parsing attributes in process `syz.3.5479'. [ 1511.012062][T23877] raw-gadget.3 gadget.2: failed to queue suspend event [ 1511.022586][T26697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1511.033117][T26703] syz.0.5476 (26703): drop_caches: 2 [ 1511.054126][T23877] raw-gadget.3 gadget.2: failed to queue reset event [ 1511.055183][T26697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1511.135427][T23877] raw-gadget.3 gadget.2: failed to queue resume event [ 1511.137452][T26712] FAULT_INJECTION: forcing a failure. [ 1511.137452][T26712] name failslab, interval 1, probability 0, space 0, times 0 [ 1511.207338][T26712] CPU: 1 UID: 0 PID: 26712 Comm: syz.5.5478 Tainted: G L syzkaller #0 PREEMPT(full) [ 1511.207367][T26712] Tainted: [L]=SOFTLOCKUP [ 1511.207373][T26712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1511.207385][T26712] Call Trace: [ 1511.207393][T26712] [ 1511.207405][T26712] dump_stack_lvl+0xe8/0x150 [ 1511.207433][T26712] should_fail_ex+0x414/0x560 [ 1511.207465][T26712] should_failslab+0xa8/0x100 [ 1511.207489][T26712] __kmalloc_cache_noprof+0x84/0x700 [ 1511.207507][T26712] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 1511.207534][T26712] ? sctp_add_bind_addr+0x8c/0x370 [ 1511.207563][T26712] sctp_add_bind_addr+0x8c/0x370 [ 1511.207592][T26712] sctp_copy_local_addr_list+0x30b/0x4e0 [ 1511.207618][T26712] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 1511.207642][T26712] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1511.207665][T26712] ? sctp_v6_is_any+0x64/0x80 [ 1511.207692][T26712] ? sctp_copy_one_addr+0x93/0x360 [ 1511.207721][T26712] sctp_bind_addr_copy+0xb3/0x3c0 [ 1511.207747][T26712] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1511.207770][T26712] sctp_connect_new_asoc+0x2e0/0x690 [ 1511.207790][T26712] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1511.207813][T26712] ? __local_bh_enable_ip+0xd0/0x130 [ 1511.207832][T26712] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1511.207852][T26712] ? security_sctp_bind_connect+0x7e/0x2e0 [ 1511.207874][T26712] sctp_sendmsg+0x155c/0x2840 [ 1511.207904][T26712] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1511.207921][T26712] ? aa_sk_perm+0x15f/0x920 [ 1511.207945][T26712] ? aa_sk_perm+0x7ee/0x920 [ 1511.207971][T26712] ? __pfx_aa_sk_perm+0x10/0x10 [ 1511.207997][T26712] ? sock_rps_record_flow+0x19/0x410 [ 1511.208023][T26712] ? inet_sendmsg+0x2f4/0x370 [ 1511.208058][T26712] __sock_sendmsg+0x19c/0x270 [ 1511.208088][T26712] __sys_sendto+0x3bd/0x520 [ 1511.208107][T26712] ? __pfx___sys_sendto+0x10/0x10 [ 1511.208124][T26712] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 1511.208154][T26712] ? __fget_files+0x3a0/0x420 [ 1511.208184][T26712] ? ksys_write+0x22a/0x250 [ 1511.208201][T26712] ? __pfx_ksys_write+0x10/0x10 [ 1511.208218][T26712] __x64_sys_sendto+0xde/0x100 [ 1511.208236][T26712] do_syscall_64+0xec/0xf80 [ 1511.208252][T26712] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1511.208272][T26712] ? clear_bhb_loop+0x60/0xb0 [ 1511.208296][T26712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1511.208315][T26712] RIP: 0033:0x7f0e3a58f749 [ 1511.208333][T26712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1511.208350][T26712] RSP: 002b:00007f0e3b4a6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1511.208371][T26712] RAX: ffffffffffffffda RBX: 00007f0e3a7e6090 RCX: 00007f0e3a58f749 [ 1511.208385][T26712] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000006 [ 1511.208397][T26712] RBP: 00007f0e3b4a6090 R08: 000020000005ffe4 R09: 000000000000001c [ 1511.208410][T26712] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002 [ 1511.208422][T26712] R13: 00007f0e3a7e6128 R14: 00007f0e3a7e6090 R15: 00007f0e3a90fa28 [ 1511.208450][T26712] [ 1511.517392][T23877] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1511.525737][ C0] raw-gadget.3 gadget.2: ignoring, device is not running [ 1511.918934][T23877] raw-gadget.3 gadget.2: failed to queue reset event [ 1512.077740][T23877] raw-gadget.3 gadget.2: failed to queue resume event [ 1512.187305][T23877] usb 3-1: device descriptor read/64, error -32 [ 1512.270574][T26724] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5482'. [ 1512.315397][T23877] raw-gadget.3 gadget.2: failed to queue suspend event [ 1512.327191][T23877] usb usb3-port1: attempt power cycle [ 1512.333103][T23877] raw-gadget.3 gadget.2: failed to queue disconnect event [ 1512.342465][T23877] raw-gadget.3 gadget.2: failed to queue reset event [ 1512.421958][T23877] raw-gadget.3 gadget.2: failed to queue resume event [ 1512.433937][T23877] raw-gadget.3 gadget.2: failed to queue reset event [ 1512.814487][T23877] raw-gadget.3 gadget.2: failed to queue resume event [ 1512.875204][T23877] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1512.895458][ C0] raw-gadget.3 gadget.2: ignoring, device is not running [ 1512.902851][T23877] usb 3-1: device descriptor read/8, error -32 [ 1513.040168][T26732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1513.045258][T23877] raw-gadget.3 gadget.2: failed to queue suspend event [ 1513.071655][T26732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1513.072294][T23877] raw-gadget.3 gadget.2: failed to queue reset event [ 1513.123016][T18363] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1513.261725][T25382] usb 2-1: USB disconnect, device number 88 [ 1513.267915][T23877] raw-gadget.3 gadget.2: failed to queue resume event [ 1513.315188][T18363] usb 4-1: Using ep0 maxpacket: 16 [ 1513.325275][T23877] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1513.335179][T18363] usb 4-1: config 0 has an invalid interface number: 115 but max is 0 [ 1513.355581][ C0] raw-gadget.3 gadget.2: ignoring, device is not running [ 1513.362782][T23877] usb 3-1: device descriptor read/8, error -32 [ 1513.432886][T18363] usb 4-1: config 0 has no interface number 0 [ 1513.440397][T18363] usb 4-1: config 0 interface 115 has no altsetting 0 [ 1513.499068][T23877] raw-gadget.3 gadget.2: failed to queue suspend event [ 1513.512126][T23877] usb usb3-port1: unable to enumerate USB device [ 1513.541961][T18363] usb 4-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=fb.74 [ 1513.578309][T18363] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1513.595110][T18363] usb 4-1: Product: syz [ 1513.615091][T18363] usb 4-1: Manufacturer: syz [ 1513.622720][T18363] usb 4-1: SerialNumber: syz [ 1513.645755][T18363] usb 4-1: config 0 descriptor?? [ 1513.786955][T26738] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5488'. [ 1513.919141][T25382] usb 4-1: USB disconnect, device number 126 [ 1516.525602][T26789] FAULT_INJECTION: forcing a failure. [ 1516.525602][T26789] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1516.554948][T26789] CPU: 0 UID: 0 PID: 26789 Comm: syz.5.5501 Tainted: G L syzkaller #0 PREEMPT(full) [ 1516.554968][T26789] Tainted: [L]=SOFTLOCKUP [ 1516.554973][T26789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1516.554980][T26789] Call Trace: [ 1516.554988][T26789] [ 1516.554995][T26789] dump_stack_lvl+0xe8/0x150 [ 1516.555015][T26789] should_fail_ex+0x414/0x560 [ 1516.555046][T26789] _copy_from_user+0x2d/0xb0 [ 1516.555071][T26789] copy_from_sockptr+0x5e/0xa0 [ 1516.555103][T26789] packet_setsockopt+0x928/0x12c0 [ 1516.555122][T26789] ? __pfx_packet_setsockopt+0x10/0x10 [ 1516.555143][T26789] ? aa_sk_perm+0x7ee/0x920 [ 1516.555158][T26789] ? __pfx_aa_sk_perm+0x10/0x10 [ 1516.555171][T26789] ? __fget_files+0x2a/0x420 [ 1516.555190][T26789] ? aa_sock_opt_perm+0xff/0x1a0 [ 1516.555206][T26789] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1516.555216][T26789] ? __pfx_packet_setsockopt+0x10/0x10 [ 1516.555230][T26789] do_sock_setsockopt+0x17c/0x1b0 [ 1516.555246][T26789] __x64_sys_setsockopt+0x13f/0x1b0 [ 1516.555261][T26789] do_syscall_64+0xec/0xf80 [ 1516.555272][T26789] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1516.555281][T26789] ? trace_irq_disable+0x37/0x100 [ 1516.555296][T26789] ? clear_bhb_loop+0x60/0xb0 [ 1516.555308][T26789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1516.555318][T26789] RIP: 0033:0x7f0e3a58f749 [ 1516.555329][T26789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1516.555338][T26789] RSP: 002b:00007f0e3b4c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1516.555350][T26789] RAX: ffffffffffffffda RBX: 00007f0e3a7e5fa0 RCX: 00007f0e3a58f749 [ 1516.555358][T26789] RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000003 [ 1516.555364][T26789] RBP: 00007f0e3b4c7090 R08: 000000000000001c R09: 0000000000000000 [ 1516.555372][T26789] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 1516.555378][T26789] R13: 00007f0e3a7e6038 R14: 00007f0e3a7e5fa0 R15: 00007f0e3a90fa28 [ 1516.555395][T26789] [ 1516.795178][T26791] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1517.239834][ T30] audit: type=1326 audit(1767240235.289:3100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26800 comm="syz.3.5502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc0e98f749 code=0x7ffc0000 [ 1517.282975][ T30] audit: type=1326 audit(1767240235.319:3101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26800 comm="syz.3.5502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7fbc0e98f749 code=0x7ffc0000 [ 1517.415174][ T30] audit: type=1326 audit(1767240235.319:3102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26800 comm="syz.3.5502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc0e98f749 code=0x7ffc0000 [ 1517.484134][ T30] audit: type=1326 audit(1767240235.319:3103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26800 comm="syz.3.5502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fbc0e98f749 code=0x7ffc0000 [ 1517.735334][ T30] audit: type=1326 audit(1767240235.399:3104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26800 comm="syz.3.5502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc0e98f749 code=0x7ffc0000 [ 1517.935216][ T30] audit: type=1326 audit(1767240235.399:3105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26800 comm="syz.3.5502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc0e98f749 code=0x7ffc0000 [ 1518.035926][ T30] audit: type=1326 audit(1767240235.449:3106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26800 comm="syz.3.5502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fbc0e98f749 code=0x7ffc0000 [ 1518.119528][ T30] audit: type=1326 audit(1767240235.449:3107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26800 comm="syz.3.5502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc0e98f749 code=0x7ffc0000 [ 1518.232548][T26801] vivid-007: ================= START STATUS ================= [ 1518.236236][ T30] audit: type=1326 audit(1767240235.449:3108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26800 comm="syz.3.5502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7fbc0e98f749 code=0x7ffc0000 [ 1518.271949][T26801] vivid-007: Enable Output Cropping: true [ 1518.292316][T26801] vivid-007: Enable Output Composing: true [ 1518.303370][T26801] vivid-007: Enable Output Scaler: true [ 1518.339042][T26801] vivid-007: Tx RGB Quantization Range: [ 1518.339113][ T30] audit: type=1326 audit(1767240235.449:3109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26800 comm="syz.3.5502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc0e98f749 code=0x7ffc0000 [ 1518.374474][T26801] Automatic [ 1518.377830][T26801] vivid-007: Transmit Mode: HDMI [ 1518.397964][T26801] vivid-007: Hotplug Present: 0x00000000 [ 1518.410569][T26801] vivid-007: RxSense Present: 0x00000000 [ 1518.416381][T26801] vivid-007: EDID Present: 0x00000000 [ 1518.440753][T26801] vivid-007: ================== END STATUS ================== [ 1518.665269][T18363] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1518.719075][T26817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5506'. [ 1518.728795][T26817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5506'. [ 1518.737901][T26817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5506'. [ 1518.747152][T26817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5506'. [ 1518.759601][T26817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5506'. [ 1518.772363][T26817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5506'. [ 1518.781707][T26817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5506'. [ 1518.791124][T26817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5506'. [ 1518.808253][T26817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5506'. [ 1518.817611][T18363] usb 2-1: config 1 has an invalid interface number: 23 but max is 3 [ 1518.818983][T26817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5506'. [ 1518.826900][T18363] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1518.834922][T26817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5506'. [ 1518.846110][T18363] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 4 [ 1518.873234][T26817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5506'. [ 1518.890220][T26817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5506'. [ 1518.900690][T18363] usb 2-1: config 1 has no interface number 0 [ 1518.900872][T26817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5506'. [ 1518.920178][T26817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5506'. [ 1518.929194][T18363] usb 2-1: config 1 interface 23 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1518.929230][T18363] usb 2-1: config 1 interface 23 has no altsetting 0 [ 1518.931556][T18363] usb 2-1: New USB device found, idVendor=0421, idProduct=0508, bcdDevice=b4.ef [ 1518.944438][T26817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5506'. [ 1518.954975][T18363] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1518.960311][T26817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5506'. [ 1518.985122][T18363] usb 2-1: Product: syz [ 1518.985697][T26817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5506'. [ 1518.989753][T18363] usb 2-1: Manufacturer: syz [ 1519.024496][T18363] usb 2-1: SerialNumber: syz [ 1519.182440][T26828] fuse: Unknown parameter '000000000000000000000x000000000000000c00000000000000000000013fd' [ 1519.240657][T18363] usb 2-1: bad CDC descriptors [ 1519.254145][T18363] usb 2-1: USB disconnect, device number 89 [ 1519.529312][T26839] syz.5.5512 (26839): drop_caches: 2 [ 1521.299839][T26877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1521.326918][T26877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1521.535151][T25382] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1521.632201][T26892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1521.632417][T26892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1521.701273][T25382] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1521.714607][T25382] usb 2-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1521.735293][T25382] usb 2-1: config 2 interface 0 has no altsetting 0 [ 1521.745403][T25382] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 1521.774993][T25382] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1521.795378][T25382] usb 2-1: Product: syz [ 1521.805899][T25382] usb 2-1: Manufacturer: syz [ 1521.811774][T25382] usb 2-1: SerialNumber: syz [ 1522.040907][T25382] usb 2-1: USB disconnect, device number 90 [ 1522.384362][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 1522.384380][ T30] audit: type=1326 audit(1767240240.429:3134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26903 comm="syz.5.5534" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0e3a58f749 code=0x0 [ 1524.359934][T26940] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1524.540560][T26945] __nla_validate_parse: 30 callbacks suppressed [ 1524.540572][T26945] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5547'. [ 1524.715681][T18363] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1524.817663][ T30] audit: type=1326 audit(1767240242.869:3135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26952 comm="syz.3.5551" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbc0e98f749 code=0x0 [ 1524.875994][T18363] usb 2-1: Using ep0 maxpacket: 16 [ 1524.886522][T18363] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1524.920276][T18363] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1524.941207][T18363] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1524.972115][T18363] usb 2-1: config 0 descriptor?? [ 1525.402991][T18363] mcp2221 0003:04D8:00DD.0043: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 1525.599338][ T5876] usb 1-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1525.615722][ T5876] dvb_usb_ec168 1-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 1525.628736][T26977] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5558'. [ 1525.725538][ T5876] usb 1-1: USB disconnect, device number 116 [ 1525.797723][T26943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1525.833885][T26943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1525.887150][T26943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1525.928896][T26943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1526.255347][T26998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1526.264582][T26998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1526.440745][T26996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1526.450345][T26996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1526.463126][T26996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1526.473292][T26996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1527.518282][T14792] usb 2-1: USB disconnect, device number 91 [ 1527.728196][T27016] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5567'. [ 1527.932466][ T30] audit: type=1326 audit(1767240245.979:3136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27023 comm="syz.0.5570" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa53678f749 code=0x0 [ 1527.961803][T27028] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5569'. [ 1528.856863][T27039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1528.866191][T27039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1529.001483][T27039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1529.054134][T27043] FAULT_INJECTION: forcing a failure. [ 1529.054134][T27043] name failslab, interval 1, probability 0, space 0, times 0 [ 1529.083072][T27043] CPU: 1 UID: 0 PID: 27043 Comm: syz.0.5574 Tainted: G L syzkaller #0 PREEMPT(full) [ 1529.083093][T27043] Tainted: [L]=SOFTLOCKUP [ 1529.083097][T27043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1529.083104][T27043] Call Trace: [ 1529.083110][T27043] [ 1529.083115][T27043] dump_stack_lvl+0xe8/0x150 [ 1529.083134][T27043] should_fail_ex+0x414/0x560 [ 1529.083154][T27043] should_failslab+0xa8/0x100 [ 1529.083168][T27043] __kmalloc_noprof+0xdf/0x800 [ 1529.083179][T27043] ? tomoyo_encode+0x28b/0x550 [ 1529.083202][T27043] tomoyo_encode+0x28b/0x550 [ 1529.083224][T27043] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1529.083243][T27043] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1529.083254][T27043] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1529.083267][T27043] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1529.083278][T27043] ? __lock_acquire+0x6b6/0x2cf0 [ 1529.083296][T27043] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 1529.083318][T27043] ? __fget_files+0x2a/0x420 [ 1529.083332][T27043] ? __fget_files+0x2a/0x420 [ 1529.083344][T27043] ? __fget_files+0x3a0/0x420 [ 1529.083356][T27043] ? __fget_files+0x2a/0x420 [ 1529.083370][T27043] security_file_ioctl+0xcb/0x2d0 [ 1529.083383][T27043] __se_sys_ioctl+0x47/0x170 [ 1529.083394][T27043] do_syscall_64+0xec/0xf80 [ 1529.083404][T27043] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1529.083414][T27043] ? trace_irq_disable+0x37/0x100 [ 1529.083428][T27043] ? clear_bhb_loop+0x60/0xb0 [ 1529.083440][T27043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1529.083450][T27043] RIP: 0033:0x7fa53678f749 [ 1529.083460][T27043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1529.083469][T27043] RSP: 002b:00007fa5376b9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1529.083482][T27043] RAX: ffffffffffffffda RBX: 00007fa5369e6090 RCX: 00007fa53678f749 [ 1529.083490][T27043] RDX: ffffffffffffffff RSI: 0000000000004c09 RDI: 0000000000000003 [ 1529.083497][T27043] RBP: 00007fa5376b9090 R08: 0000000000000000 R09: 0000000000000000 [ 1529.083504][T27043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1529.083510][T27043] R13: 00007fa5369e6128 R14: 00007fa5369e6090 R15: 00007fa536b0fa28 [ 1529.083526][T27043] [ 1529.083539][T27043] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1529.315824][T27039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1529.347164][T27039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1529.356084][T27039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1530.045364][T25618] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 1530.193469][T27051] syzkaller1: entered promiscuous mode [ 1530.199112][T27051] syzkaller1: entered allmulticast mode [ 1530.278440][T25618] usb 1-1: config 0 has no interfaces? [ 1530.284055][T25618] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1530.296604][T25618] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1530.452240][T25618] usb 1-1: config 0 descriptor?? [ 1530.461207][T27060] xt_HMARK: spi-set and port-set can't be combined [ 1530.629439][T27062] sctp: [Deprecated]: syz.3.5580 (pid 27062) Use of int in maxseg socket option. [ 1530.629439][T27062] Use struct sctp_assoc_value instead [ 1530.709473][T27064] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5581'. [ 1530.991504][T27069] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5582'. [ 1531.282992][ T30] audit: type=1326 audit(1767240249.329:3137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27073 comm="syz.1.5584" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f78afb8f749 code=0x0 [ 1531.571350][T27082] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5586'. [ 1531.828472][T27089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1531.837812][T27089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1531.849083][T27089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1531.858408][T27089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1532.265397][T14792] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 1532.313575][T27095] bond0: Caught tx_queue_len zero misconfig [ 1532.445401][T14792] usb 4-1: Using ep0 maxpacket: 32 [ 1532.457636][T14792] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1532.526530][T14792] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1532.539767][T14792] usb 4-1: config 0 descriptor?? [ 1532.553501][T14792] as10x_usb: device has been detected [ 1532.561003][T14792] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1532.592386][T14792] usb 4-1: DVB: registering adapter 2 frontend 0 (nBox DVB-T Dongle)... [ 1532.617748][T14792] as10x_usb: error during firmware upload part1 [ 1532.627206][T14792] Registered device nBox DVB-T Dongle [ 1532.672119][T14792] usb 1-1: USB disconnect, device number 117 [ 1533.237135][T27109] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5588'. [ 1533.747480][T14792] usb 4-1: USB disconnect, device number 127 [ 1533.806320][T14792] Unregistered device nBox DVB-T Dongle [ 1533.846357][T14792] as10x_usb: device has been disconnected [ 1534.749152][ T30] audit: type=1326 audit(1767240252.799:3138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27121 comm="syz.5.5599" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0e3a58f749 code=0x0 [ 1535.095237][T25618] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1535.247287][T25618] usb 2-1: Using ep0 maxpacket: 32 [ 1535.254991][T25618] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1535.270431][T25618] usb 2-1: config 40 has an invalid interface number: 241 but max is 0 [ 1535.284763][T25618] usb 2-1: config 40 has no interface number 0 [ 1535.305825][T25618] usb 2-1: config 40 interface 241 altsetting 47 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 1535.318829][T25618] usb 2-1: config 40 interface 241 altsetting 47 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 1535.346507][T25618] usb 2-1: config 40 interface 241 altsetting 47 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 1535.360638][T25618] usb 2-1: config 40 interface 241 altsetting 47 has a duplicate endpoint with address 0xE, skipping [ 1535.402966][T25618] usb 2-1: config 40 interface 241 altsetting 47 has an invalid descriptor for endpoint zero, skipping [ 1535.414199][T25618] usb 2-1: config 40 interface 241 has no altsetting 0 [ 1535.423486][T25618] usb 2-1: New USB device found, idVendor=9022, idProduct=d632, bcdDevice=8f.54 [ 1535.432951][T25618] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1535.441779][T25618] usb 2-1: Product: 溭ц賳꫟瀁㐘㶇麛톁뛬澼䉇쫇㗒ꅠ㰪鷝❪罋쳜漇츸嗀㵿쉭윰똠苶积曀垹夋뛒獦ᣱ뷮虏ṡ飙쨈넶褀஭껞뇘שׂ뾰䤫硍裂콴襤쟪욼쮆龡닖頴롶毂図꘵먉鎏㲴䕠戡ᰧ吪霎￶灂皯龷坱攕牾岒겭삖쉃琑灺ᝯ느謐㞐 [ 1535.480570][T25618] usb 2-1: Manufacturer: 譍晭咯뎽 [ 1535.488392][T25618] usb 2-1: SerialNumber: 囵鄫轒﶐벭훋椶蟴渓ᖮۖ씃汜ⶠ겈棛͈化齘붐綝껦㹢놖突盵渔ყ㘳쇤⍍岪ห톨忒컋鰄ႉ垌瓮Ắꋱ赾⃫囃溑ِ㰥덤녏胚釒⿚ᙞ∍륵쫄ʕḨ인㛋⮤찕炷작䶠㠫ᣕڂ愘櫇湽롺攬ั暭绂ు䑚ᆍṭ [ 1535.544640][T27140] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5604'. [ 1535.615118][ T5876] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 1535.677774][T27142] bond1: entered promiscuous mode [ 1535.687243][T27142] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1535.730463][T25618] dvb-usb: found a 'TeVii S632 USB' in warm state. [ 1535.749888][T25618] dw2102: su3000_power_ctrl: 1, initialized 0 [ 1535.755646][T27147] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5607'. [ 1535.767164][T25618] dvb-usb: bulk message failed: -8 (2/0) [ 1535.783614][T25618] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1535.798253][ T5876] usb 1-1: config 0 has no interfaces? [ 1535.800142][T25618] dvbdev: DVB: registering new adapter (TeVii S632 USB) [ 1535.804975][ T5876] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1535.822034][ T5876] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1535.837963][ T5876] usb 1-1: config 0 descriptor?? [ 1535.861635][T25618] usb 2-1: media controller created [ 1535.873985][T25618] dvb-usb: bulk message failed: -8 (6/0) [ 1535.880415][T25618] dw2102: i2c transfer failed. [ 1535.885495][T25618] dvb-usb: bulk message failed: -8 (6/0) [ 1535.895470][T25618] dw2102: i2c transfer failed. [ 1535.900326][T25618] dvb-usb: bulk message failed: -8 (6/0) [ 1535.917881][T25618] dw2102: i2c transfer failed. [ 1535.922804][T25618] dvb-usb: bulk message failed: -8 (6/0) [ 1535.945112][T25618] dw2102: i2c transfer failed. [ 1535.954725][T25618] dvb-usb: bulk message failed: -8 (6/0) [ 1535.961149][T25618] dw2102: i2c transfer failed. [ 1536.000225][T25618] dvb-usb: bulk message failed: -8 (6/0) [ 1536.006457][T25618] dw2102: i2c transfer failed. [ 1536.011708][T25618] dvb-usb: MAC address: 02:02:02:02:02:02 [ 1536.076837][T25618] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1536.440360][T25618] dvb-usb: bulk message failed: -8 (1/0) [ 1536.450659][T25618] dw2102: command 0x51 transfer failed. [ 1536.500302][T25618] DVB: Unable to find symbol m88rs2000_attach() [ 1536.544047][T25618] dvb-usb: no frontend was attached by 'TeVii S632 USB' [ 1536.785384][T25618] rc_core: IR keymap rc-su3000 not found [ 1536.803056][T25618] Registered IR keymap rc-empty [ 1536.814234][T25618] rc rc0: TeVii S632 USB as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 1536.842915][T25618] input: TeVii S632 USB as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input96 [ 1536.873833][T25618] dvb-usb: schedule remote query interval to 150 msecs. [ 1536.891346][T25618] dw2102: su3000_power_ctrl: 0, initialized 1 [ 1536.906906][T25618] dvb-usb: TeVii S632 USB successfully initialized and connected. [ 1536.923542][ T30] audit: type=1326 audit(1767240254.969:3139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27171 comm="syz.2.5615" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f54b658f749 code=0x0 [ 1536.988884][T25618] usb 2-1: USB disconnect, device number 92 [ 1537.088442][T25618] dvb-usb: TeVii S632 USB successfully deinitialized and disconnected. [ 1538.326618][ T5876] usb 1-1: USB disconnect, device number 118 [ 1538.670644][ T30] audit: type=1326 audit(1767240256.389:3140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27192 comm="syz.1.5618" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f78afb8f749 code=0x0 [ 1538.953290][T27197] tipc: Resetting bearer [ 1538.997293][T27197] mac80211_hwsim hwsim23 syzkaller0: left promiscuous mode [ 1539.104099][T27198] kernel read not supported for file / (pid: 27198 comm: syz.0.5620) [ 1539.124824][ T30] audit: type=1800 audit(1767240257.169:3141): pid=27198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5620" name=0D dev="mqueue" ino=124255 res=0 errno=0 [ 1539.372395][T27207] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5621'. [ 1539.773171][T27219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1539.808025][T27219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1539.836209][T27219] netlink: 'syz.1.5627': attribute type 1 has an invalid length. [ 1539.844268][T27223] netlink: 'syz.1.5627': attribute type 1 has an invalid length. [ 1539.880214][T27219] bond3: entered promiscuous mode [ 1539.895984][T27219] bond3: entered allmulticast mode [ 1539.907775][T27219] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1540.022518][ T5876] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1540.030283][T14792] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1540.162837][ T30] audit: type=1326 audit(1767240258.209:3142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27227 comm="syz.0.5629" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa53678f749 code=0x0 [ 1540.225123][ T5876] usb 4-1: Using ep0 maxpacket: 8 [ 1540.244653][ T5876] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 1540.257171][ T5876] usb 4-1: config 0 has no interface number 0 [ 1540.265800][T14792] usb 2-1: Using ep0 maxpacket: 32 [ 1540.279346][T14792] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 1540.282202][T27223] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5627'. [ 1540.289536][ T5876] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1540.311649][T14792] usb 2-1: config 0 has no interface number 0 [ 1540.337158][T14792] usb 2-1: string descriptor 0 read error: -71 [ 1540.360387][T14792] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1540.382714][ T5876] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1540.396134][T14792] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1540.419605][T14792] usb 2-1: config 0 descriptor?? [ 1540.432799][ T5876] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1540.447868][T14792] usb 2-1: can't set config #0, error -71 [ 1540.458790][T14792] usb 2-1: USB disconnect, device number 93 [ 1540.472112][ T5876] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1540.509509][ T5876] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1540.525965][ T5876] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1540.561851][T27239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1540.584152][ T5876] usb 4-1: config 0 descriptor?? [ 1540.600213][ T5876] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1540.620887][T27239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1541.162102][T27245] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5633'. [ 1542.960312][T25618] usb 4-1: USB disconnect, device number 2 [ 1542.981645][T25618] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 1543.028073][ T30] audit: type=1326 audit(1767240261.079:3143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27273 comm="syz.0.5642" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa53678f749 code=0x0 [ 1543.455153][T25618] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 1543.468625][ T30] audit: type=1326 audit(1767240261.519:3144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27279 comm="syz.2.5644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54b658f749 code=0x7ffc0000 [ 1543.510864][ T30] audit: type=1326 audit(1767240261.519:3145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27279 comm="syz.2.5644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54b658f749 code=0x7ffc0000 [ 1543.537712][ T30] audit: type=1326 audit(1767240261.519:3146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27279 comm="syz.2.5644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f54b658f749 code=0x7ffc0000 [ 1543.562153][ T30] audit: type=1326 audit(1767240261.519:3147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27279 comm="syz.2.5644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54b658f749 code=0x7ffc0000 [ 1543.588068][ T30] audit: type=1326 audit(1767240261.519:3148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27279 comm="syz.2.5644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54b658f749 code=0x7ffc0000 [ 1543.672013][T25618] usb 4-1: config 0 has an invalid interface number: 113 but max is 0 [ 1543.684467][T25618] usb 4-1: config 0 has no interface number 0 [ 1543.700850][T25618] usb 4-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 1543.769916][ T30] audit: type=1326 audit(1767240261.549:3149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27279 comm="syz.2.5644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f54b658f749 code=0x7ffc0000 [ 1543.796179][T25618] usb 4-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1543.812938][T25618] usb 4-1: config 0 interface 113 has no altsetting 0 [ 1543.826204][T25618] usb 4-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 1543.836259][T25618] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1543.845882][ T30] audit: type=1326 audit(1767240261.549:3150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27279 comm="syz.2.5644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54b658f749 code=0x7ffc0000 [ 1543.886147][T25618] usb 4-1: Product: syz [ 1543.893295][T25618] usb 4-1: Manufacturer: syz [ 1543.899646][T25618] usb 4-1: SerialNumber: syz [ 1543.914085][T25618] usb 4-1: config 0 descriptor?? [ 1543.933816][ T30] audit: type=1326 audit(1767240261.549:3151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27279 comm="syz.2.5644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f54b658f749 code=0x7ffc0000 [ 1543.966494][ C0] usb 4-1: NFC: Urb failure (status -71) [ 1543.973212][T25618] usb 4-1: NFC: Unable to get FW version [ 1543.992245][T25618] pn533_usb 4-1:0.113: probe with driver pn533_usb failed with error -90 [ 1544.031686][T27290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1544.042746][T27290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1544.247200][T27296] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1^!l1*$pOcɔr$G [ 1544.551849][T27279] ALSA: mixer_oss: invalid OSS volume '' [ 1544.995960][T27304] fuse: Unknown parameter '0xffffffffffffffff' [ 1545.014717][T27304] dlm: non-version read from control device 8192 [ 1545.717521][T27316] netlink: 220 bytes leftover after parsing attributes in process `syz.1.5652'. [ 1546.084351][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.090815][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.102512][T25618] usb 4-1: USB disconnect, device number 3 [ 1546.266195][T23877] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 1546.426850][T23877] usb 1-1: config 0 has no interfaces? [ 1546.432575][T23877] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1546.442822][T23877] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1546.453851][T23877] usb 1-1: config 0 descriptor?? [ 1546.535397][T25618] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1546.697216][T25618] usb 4-1: Using ep0 maxpacket: 16 [ 1546.704111][T25618] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1546.718258][T25618] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1546.739394][T25618] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1546.751335][T25618] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1546.767037][T25618] usb 4-1: Product: syz [ 1546.773980][T25618] usb 4-1: Manufacturer: syz [ 1546.781947][T25618] usb 4-1: SerialNumber: syz [ 1546.797364][T25618] usb 4-1: config 0 descriptor?? [ 1546.807536][T25618] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1546.817444][T25618] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1547.326044][T27358] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5666'. [ 1547.555815][T25618] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1547.562490][T25618] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 1548.135254][ T5876] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1548.254442][T27369] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1548.285572][T25618] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 1548.297113][ T5876] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1548.306192][ T5876] usb 2-1: config 3 has an invalid interface number: 221 but max is 0 [ 1548.314518][ T5876] usb 2-1: config 3 has no interface number 0 [ 1548.323641][ T5876] usb 2-1: config 3 interface 221 has no altsetting 0 [ 1548.338330][ T5876] usb 2-1: New USB device found, idVendor=0921, idProduct=1200, bcdDevice=e7.b4 [ 1548.347673][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1548.355784][ T5876] usb 2-1: Product: syz [ 1548.360200][ T5876] usb 2-1: Manufacturer: syz [ 1548.364921][ T5876] usb 2-1: SerialNumber: syz [ 1548.936332][T14792] usb 1-1: USB disconnect, device number 119 [ 1549.159673][ T5876] belkin_sa 2-1:3.221: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 1549.190940][ T5876] usb 2-1: bcdDevice: e7b4, bfc: 0 [ 1549.224909][ T5876] usb 2-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0 [ 1549.268390][ T5876] usb 2-1: USB disconnect, device number 94 [ 1549.290437][ T5876] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0 [ 1549.357420][T25618] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 1549.410798][T25618] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 1549.423093][T25618] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 1549.425609][ T5876] belkin_sa 2-1:3.221: device disconnected [ 1549.492419][T25618] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 1549.504572][T25618] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 1549.599483][T27385] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5677'. [ 1549.844768][T25618] usb 4-1: USB disconnect, device number 4 [ 1550.027513][T27393] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1550.293885][T27421] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5690'. [ 1550.435981][ T5876] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 1550.655416][T14792] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1550.676199][ T5876] usb 1-1: Using ep0 maxpacket: 16 [ 1550.715341][ T5876] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 1550.734827][ T5876] usb 1-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 1550.744040][ T5876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1550.754867][ T5876] usb 1-1: Product: syz [ 1550.762244][ T5876] usb 1-1: Manufacturer: syz [ 1550.814608][ T5876] usb 1-1: SerialNumber: syz [ 1550.828555][ T5876] usb 1-1: config 0 descriptor?? [ 1550.844115][ T5876] hub 1-1:0.0: bad descriptor, ignoring hub [ 1550.854263][ T5876] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1550.882059][T14792] usb 4-1: config 0 has no interfaces? [ 1550.887715][T14792] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1550.897407][ T5876] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1550.908090][T14792] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1550.941897][T14792] usb 4-1: config 0 descriptor?? [ 1551.122769][ T5876] usb 1-1: USB disconnect, device number 120 [ 1551.195707][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1551.473339][T27447] team0: Port device vlan2 added [ 1551.606585][ T5876] usb 1-1: new full-speed USB device number 121 using dummy_hcd [ 1551.620535][T27452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1551.631941][T27453] use of bytesused == 0 is deprecated and will be removed in the future, [ 1551.640604][T27453] use the actual size instead. [ 1551.649666][T27452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1551.768169][ T5876] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 10 [ 1551.779892][ T5876] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 83, setting to 64 [ 1551.793207][ T5876] usb 1-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 1551.802775][ T5876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1551.811135][ T5876] usb 1-1: Product: syz [ 1551.815909][ T5876] usb 1-1: Manufacturer: syz [ 1551.820558][ T5876] usb 1-1: SerialNumber: syz [ 1551.830890][ T5876] usb 1-1: config 0 descriptor?? [ 1551.839906][T27440] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1551.849521][ T5876] hub 1-1:0.0: bad descriptor, ignoring hub [ 1551.855644][ T5876] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1551.868210][ T5876] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1552.076467][T27412] QAT: failed to copy from user. [ 1552.267718][T25618] usb 1-1: USB disconnect, device number 121 [ 1552.981464][T27463] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5703'. [ 1553.280192][ T5840] Bluetooth: hci4: command 0x0406 tx timeout [ 1553.370616][ T5876] usb 4-1: USB disconnect, device number 5 [ 1553.426410][T27471] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5706'. [ 1554.355971][T25618] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 1554.528588][T25618] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1554.540196][T25618] usb 1-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 1554.556470][T25618] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1554.584478][T25618] usb 1-1: config 0 descriptor?? [ 1554.963835][T27500] loop4: detected capacity change from 0 to 524287936 [ 1555.220482][T27471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1555.229458][T27471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1555.320362][T25618] usbhid 1-1:0.0: can't add hid device: -71 [ 1555.326597][T25618] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1555.367183][T25618] usb 1-1: USB disconnect, device number 122 [ 1556.657946][T27521] netlink: 'syz.0.5718': attribute type 10 has an invalid length. [ 1556.666441][T27521] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5718'. [ 1557.533367][T27535] fuse: Unknown parameter 'rootmoR8Sde' [ 1557.539974][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1557.585221][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1557.653235][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1557.712881][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1557.729011][ T5876] usb 1-1: new full-speed USB device number 123 using dummy_hcd [ 1557.830836][T27539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1557.862793][T27536] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1557.862857][T27536] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1557.866185][T27540] fuse: Unknown parameter 'user_id00000000000000000000015J&#厱:c' [ 1557.876160][T27536] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1557.876186][T27536] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1557.893146][T27539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1557.904855][T27536] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1557.904880][T27536] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1557.948460][T27536] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1557.948483][T27536] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1557.981395][ T5876] usb 1-1: config 0 has no interfaces? [ 1557.985860][ T5876] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1557.985879][ T5876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1557.985890][ T5876] usb 1-1: Product: syz [ 1557.985899][ T5876] usb 1-1: Manufacturer: syz [ 1557.985907][ T5876] usb 1-1: SerialNumber: syz [ 1557.987812][ T5876] usb 1-1: config 0 descriptor?? [ 1558.001657][T27536] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1558.001673][T27536] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1558.353362][T27533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1558.353562][T27533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1558.371937][T14792] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1558.387950][T14792] hid-generic 0000:0000:0000.0044: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1558.598038][T25619] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1558.656805][T25618] usb 1-1: USB disconnect, device number 123 [ 1558.764635][T27557] FAULT_INJECTION: forcing a failure. [ 1558.764635][T27557] name failslab, interval 1, probability 0, space 0, times 0 [ 1558.778062][T25619] usb 4-1: Using ep0 maxpacket: 8 [ 1558.784443][T27557] CPU: 1 UID: 0 PID: 27557 Comm: syz.0.5728 Tainted: G L syzkaller #0 PREEMPT(full) [ 1558.784479][T27557] Tainted: [L]=SOFTLOCKUP [ 1558.784486][T27557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1558.784499][T27557] Call Trace: [ 1558.784508][T27557] [ 1558.784517][T27557] dump_stack_lvl+0xe8/0x150 [ 1558.784547][T27557] should_fail_ex+0x414/0x560 [ 1558.784583][T27557] should_failslab+0xa8/0x100 [ 1558.784609][T27557] __kmalloc_noprof+0xdf/0x800 [ 1558.784630][T27557] ? ___neigh_create+0x6d5/0x2230 [ 1558.784665][T27557] ___neigh_create+0x6d5/0x2230 [ 1558.784701][T27557] ? ip6_neigh_lookup+0x14e/0x470 [ 1558.784734][T27557] ? ip6_neigh_lookup+0x14e/0x470 [ 1558.784764][T27557] ? ip6_neigh_lookup+0x14e/0x470 [ 1558.784792][T27557] ip6_neigh_lookup+0x3b7/0x470 [ 1558.784824][T27557] ? __pfx_ip6_neigh_lookup+0x10/0x10 [ 1558.784858][T27557] ? ip6_dst_neigh_lookup+0x74/0xf0 [ 1558.784888][T27557] addr_resolve+0x146f/0x1f70 [ 1558.784918][T27557] ? addr_resolve+0xe9/0x1f70 [ 1558.784951][T27557] ? __pfx_addr_resolve+0x10/0x10 [ 1558.784995][T27557] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1558.785026][T27557] ? timer_init_key+0x161/0x2b0 [ 1558.785056][T27557] rdma_resolve_ip+0x444/0x840 [ 1558.785088][T27557] rdma_resolve_addr+0x7a7/0x2030 [ 1558.785122][T27557] ? __pfx_rdma_resolve_addr+0x10/0x10 [ 1558.785145][T27557] ? __mutex_lock+0x335/0x1350 [ 1558.785174][T27557] ? ucma_resolve_ip+0x1a5/0x280 [ 1558.785218][T27557] ucma_resolve_ip+0x1db/0x280 [ 1558.785241][T27557] ? __pfx_ucma_resolve_ip+0x10/0x10 [ 1558.785277][T27557] ucma_write+0x249/0x2e0 [ 1558.785298][T27557] ? __pfx_ucma_write+0x10/0x10 [ 1558.785328][T27557] ? security_file_permission+0x75/0x290 [ 1558.785347][T27557] ? rw_verify_area+0x255/0x4d0 [ 1558.785369][T27557] vfs_writev+0x4b6/0x960 [ 1558.785396][T27557] ? __pfx_ucma_write+0x10/0x10 [ 1558.785417][T27557] ? __pfx_vfs_writev+0x10/0x10 [ 1558.785451][T27557] ? __fget_files+0x2a/0x420 [ 1558.785480][T27557] ? __fget_files+0x3a0/0x420 [ 1558.785503][T27557] ? __fget_files+0x2a/0x420 [ 1558.785536][T27557] do_writev+0x14d/0x2d0 [ 1558.785563][T27557] ? __pfx_do_writev+0x10/0x10 [ 1558.785599][T27557] do_syscall_64+0xec/0xf80 [ 1558.785619][T27557] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1558.785638][T27557] ? trace_irq_disable+0x37/0x100 [ 1558.785664][T27557] ? clear_bhb_loop+0x60/0xb0 [ 1558.785687][T27557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1558.785707][T27557] RIP: 0033:0x7fa53678f749 [ 1558.785725][T27557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1558.785743][T27557] RSP: 002b:00007fa5376da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1558.785765][T27557] RAX: ffffffffffffffda RBX: 00007fa5369e5fa0 RCX: 00007fa53678f749 [ 1558.785781][T27557] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000006 [ 1558.785794][T27557] RBP: 00007fa5376da090 R08: 0000000000000000 R09: 0000000000000000 [ 1558.785807][T27557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1558.785819][T27557] R13: 00007fa5369e6038 R14: 00007fa5369e5fa0 R15: 00007fa536b0fa28 [ 1558.785852][T27557] [ 1559.159033][T25619] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 1559.167327][T25619] usb 4-1: config 0 has no interface number 0 [ 1559.173557][T25619] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1559.184439][T25619] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1559.196980][T25619] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1559.210291][T25619] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1559.223671][T25619] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1559.234146][T25619] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1559.244685][T25619] usb 4-1: config 0 descriptor?? [ 1559.253190][T25619] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1561.175146][T25618] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1561.345210][T25618] usb 2-1: Using ep0 maxpacket: 16 [ 1561.372047][T25618] usb 2-1: New USB device found, idVendor=1a0a, idProduct=0104, bcdDevice=dd.d4 [ 1561.382465][T25618] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1561.446086][T25618] usb 2-1: Product: syz [ 1561.505296][T25618] usb 2-1: Manufacturer: syz [ 1561.509944][T25618] usb 2-1: SerialNumber: syz [ 1561.560217][T25618] usb 2-1: config 0 descriptor?? [ 1561.605424][T25618] usb_ehset_test 2-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 1561.621539][T27583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1561.646926][T18363] usb 4-1: USB disconnect, device number 6 [ 1561.654820][T18363] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 1561.668563][T27583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1561.795377][T14792] usb 2-1: USB disconnect, device number 96 [ 1561.825140][T25619] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 1562.088586][T25619] usb 1-1: Using ep0 maxpacket: 8 [ 1562.097301][T25619] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 1562.105643][T25619] usb 1-1: config 0 has no interface number 0 [ 1562.111766][T25619] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1562.244983][T25619] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1562.264472][T25619] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1562.289751][T25619] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1562.317346][T25619] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1562.340444][T25619] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1562.360453][T25619] usb 1-1: config 0 descriptor?? [ 1562.377903][T25619] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1562.567896][T27605] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1562.704864][T18363] usb 1-1: USB disconnect, device number 124 [ 1562.713907][T18363] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 1562.725715][T27605] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1562.975119][T27609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1562.984231][T27609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1563.000797][T27609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1563.010767][T27609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1563.199849][T27611] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5742'. [ 1563.908513][T27622] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5745'. [ 1563.939064][T27626] "syz.2.5747" (27626) uses obsolete ecb(arc4) skcipher [ 1563.947859][T27624] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5746'. [ 1563.978342][T27624] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5746'. [ 1564.029666][T27628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1564.082006][T27628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1564.375324][T27639] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1564.394498][T27639] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1564.405477][T27639] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1564.494145][T27639] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1564.520131][T27639] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1564.539410][T27639] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1564.557587][T27639] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1564.572174][T27639] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1564.590271][T27639] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1564.612913][T27639] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1565.405149][T14792] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1565.565149][T14792] usb 4-1: Using ep0 maxpacket: 16 [ 1565.615824][T14792] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1565.625840][T14792] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1565.639590][T14792] usb 4-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 1565.687897][T14792] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1565.704512][T14792] usb 4-1: config 0 descriptor?? [ 1565.935967][T14792] usbhid 4-1:0.0: can't add hid device: -71 [ 1565.943324][T14792] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1565.967833][T14792] usb 4-1: USB disconnect, device number 7 [ 1566.122048][T27659] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1566.720554][T27670] fuse: Bad value for 'fd' [ 1568.380751][T27710] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5768'. [ 1568.847378][T27730] program syz.0.5772 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1569.208140][T27741] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5775'. [ 1569.439373][T27744] netlink: 'syz.1.5775': attribute type 1 has an invalid length. [ 1569.693066][T27744] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1570.733546][T27762] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5779'. [ 1571.455345][ T5876] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1571.636092][ T5876] usb 2-1: Using ep0 maxpacket: 8 [ 1571.646059][ T5876] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1571.657455][ T5876] usb 2-1: config 7 has an invalid interface number: 142 but max is 0 [ 1571.671574][ T5876] usb 2-1: config 7 has no interface number 0 [ 1571.686333][ T5876] usb 2-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=dd.6d [ 1571.696276][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1571.727501][ T5876] usb 2-1: Product: syz [ 1571.833762][ T5876] usb 2-1: Manufacturer: syz [ 1571.852581][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 1571.852600][ T30] audit: type=1326 audit(1767240289.889:3186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27775 comm="syz.2.5783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54b658f749 code=0x7ffc0000 [ 1571.922573][T14792] usb 1-1: new full-speed USB device number 125 using dummy_hcd [ 1571.934709][ T5876] usb 2-1: SerialNumber: syz [ 1572.155503][T14792] usb 1-1: device descriptor read/64, error -71 [ 1572.230905][ T30] audit: type=1326 audit(1767240289.979:3187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27775 comm="syz.2.5783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f54b658f749 code=0x7ffc0000 [ 1572.299520][ T30] audit: type=1326 audit(1767240289.979:3188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27775 comm="syz.2.5783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54b658f749 code=0x7ffc0000 [ 1572.364899][T27768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1572.394902][T27768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1572.455187][T14792] usb 1-1: new full-speed USB device number 126 using dummy_hcd [ 1572.520991][ T30] audit: type=1326 audit(1767240289.979:3189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27775 comm="syz.2.5783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54b658f749 code=0x7ffc0000 [ 1572.585317][ T30] audit: type=1326 audit(1767240289.979:3190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27775 comm="syz.2.5783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f54b658f749 code=0x7ffc0000 [ 1572.638466][T14792] usb 1-1: device descriptor read/64, error -71 [ 1572.680931][ T30] audit: type=1326 audit(1767240289.979:3191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27775 comm="syz.2.5783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54b658f749 code=0x7ffc0000 [ 1572.744609][ T30] audit: type=1326 audit(1767240289.979:3192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27775 comm="syz.2.5783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f54b658f749 code=0x7ffc0000 [ 1572.779881][T14792] usb usb1-port1: attempt power cycle [ 1572.808689][ T30] audit: type=1326 audit(1767240289.979:3193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27775 comm="syz.2.5783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54b658f749 code=0x7ffc0000 [ 1572.858876][ T30] audit: type=1326 audit(1767240289.979:3194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27775 comm="syz.2.5783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f54b658f749 code=0x7ffc0000 [ 1572.890574][ T30] audit: type=1326 audit(1767240289.999:3195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27775 comm="syz.2.5783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54b658f749 code=0x7ffc0000 [ 1573.125392][T14792] usb 1-1: new full-speed USB device number 127 using dummy_hcd [ 1573.167484][T14792] usb 1-1: device descriptor read/8, error -71 [ 1573.249765][T27796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1573.266345][T25619] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1573.335021][T27796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1573.374375][T27796] FAULT_INJECTION: forcing a failure. [ 1573.374375][T27796] name failslab, interval 1, probability 0, space 0, times 0 [ 1573.391864][T27796] CPU: 0 UID: 0 PID: 27796 Comm: syz.5.5789 Tainted: G L syzkaller #0 PREEMPT(full) [ 1573.391894][T27796] Tainted: [L]=SOFTLOCKUP [ 1573.391901][T27796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1573.391913][T27796] Call Trace: [ 1573.391921][T27796] [ 1573.391930][T27796] dump_stack_lvl+0xe8/0x150 [ 1573.391960][T27796] should_fail_ex+0x414/0x560 [ 1573.391996][T27796] should_failslab+0xa8/0x100 [ 1573.392021][T27796] __kmalloc_noprof+0xdf/0x800 [ 1573.392041][T27796] ? usb_alloc_urb+0x46/0x150 [ 1573.392060][T27796] ? __kmalloc_cache_noprof+0x3e2/0x700 [ 1573.392083][T27796] usb_alloc_urb+0x46/0x150 [ 1573.392104][T27796] usb_control_msg+0x118/0x3e0 [ 1573.392132][T27796] m920x_i2c_xfer+0x1fc/0x840 [ 1573.392174][T27796] __i2c_transfer+0x79a/0x1f00 [ 1573.392197][T27796] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1573.392230][T27796] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1573.392262][T27796] ? i2c_transfer+0xc8/0x2d0 [ 1573.392284][T27796] i2c_transfer+0x1cc/0x2d0 [ 1573.392307][T27796] i2cdev_ioctl_rdwr+0x460/0x740 [ 1573.392339][T27796] i2cdev_ioctl+0x64b/0x820 [ 1573.392359][T27796] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1573.392382][T27796] ? __fget_files+0x3a0/0x420 [ 1573.392406][T27796] ? __fget_files+0x2a/0x420 [ 1573.392433][T27796] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1573.392456][T27796] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 1573.392476][T27796] __se_sys_ioctl+0xfc/0x170 [ 1573.392498][T27796] do_syscall_64+0xec/0xf80 [ 1573.392517][T27796] ? rcu_is_watching+0x15/0xb0 [ 1573.392540][T27796] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1573.392560][T27796] ? clear_bhb_loop+0x60/0xb0 [ 1573.392593][T27796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1573.392612][T27796] RIP: 0033:0x7f0e3a58f749 [ 1573.392630][T27796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1573.392648][T27796] RSP: 002b:00007f0e3b485038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1573.392670][T27796] RAX: ffffffffffffffda RBX: 00007f0e3a7e6180 RCX: 00007f0e3a58f749 [ 1573.392685][T27796] RDX: 0000200000000040 RSI: 0000000000000707 RDI: 0000000000000008 [ 1573.392699][T27796] RBP: 00007f0e3b485090 R08: 0000000000000000 R09: 0000000000000000 [ 1573.392712][T27796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1573.392723][T27796] R13: 00007f0e3a7e6218 R14: 00007f0e3a7e6180 R15: 00007f0e3a90fa28 [ 1573.392755][T27796] [ 1573.641113][T14792] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 1573.665099][T25619] usb 4-1: Using ep0 maxpacket: 8 [ 1573.680592][T25619] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1573.689814][T14792] usb 1-1: device descriptor read/8, error -71 [ 1573.698711][T25619] usb 4-1: config 7 has an invalid interface number: 142 but max is 0 [ 1573.711079][T25619] usb 4-1: config 7 has no interface number 0 [ 1573.915988][T14792] usb usb1-port1: unable to enumerate USB device [ 1573.967147][T25619] usb 4-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=dd.6d [ 1573.976656][T25619] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1573.984770][T25619] usb 4-1: Product: syz [ 1573.989419][T25619] usb 4-1: Manufacturer: syz [ 1573.994153][T25619] usb 4-1: SerialNumber: syz [ 1574.158224][T27801] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5791'. [ 1574.289428][T27792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1574.388715][T27792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1574.452567][ T5876] usb 2-1: USB disconnect, device number 97 [ 1575.143964][T27823] netlink: 'syz.0.5799': attribute type 8 has an invalid length. [ 1575.871529][T27835] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5802'. [ 1576.135156][T27842] binfmt_misc: register: failed to install interpreter file ./file0 [ 1576.160282][T27842] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5804'. [ 1576.247706][T27845] netlink: 'syz.5.5806': attribute type 13 has an invalid length. [ 1576.264682][T27845] gretap0: refused to change device tx_queue_len [ 1576.272155][T27845] net_ratelimit: 28 callbacks suppressed [ 1576.272168][T27845] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1576.570718][T25619] usb 4-1: USB disconnect, device number 8 [ 1576.874203][T27859] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5808'. [ 1577.035417][T27861] netlink: 'syz.1.5812': attribute type 3 has an invalid length. [ 1577.132129][T27866] tipc: Enabling of bearer rejected, media not registered [ 1577.153868][T27866] sctp: [Deprecated]: syz.5.5814 (pid 27866) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1577.153868][T27866] Use struct sctp_sack_info instead [ 1577.218191][T27866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1577.229337][T27866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1577.446050][T27875] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5817'. [ 1577.493391][T27875] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5817'. [ 1577.641403][T27859] snd_aloop snd_aloop.0: control 2:-2:3:syz1:2 is already present [ 1577.687147][T27884] team_slave_0: entered promiscuous mode [ 1577.693193][T27884] team_slave_1: entered promiscuous mode [ 1577.778960][T27884] vlan2: entered promiscuous mode [ 1577.812472][T27884] team0: entered promiscuous mode [ 1578.070711][T27892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1578.179741][T27892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1578.232117][T27892] delete_channel: no stack [ 1578.313416][T27891] delete_channel: no stack [ 1578.738180][T27907] [ 1578.740548][T27907] ===================================================== [ 1578.747484][T27907] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1578.754961][T27907] syzkaller #0 Tainted: G L [ 1578.760946][T27907] ----------------------------------------------------- [ 1578.767881][T27907] syz.5.5826/27907 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1578.775586][T27907] ffff888034bfb468 (&tty->flow.lock){....}-{3:3}, at: stop_tty+0x2f/0x150 [ 1578.784096][T27907] [ 1578.784096][T27907] and this task is already holding: [ 1578.791446][T27907] ffffffff8e783b98 (kbd_event_lock){..-.}-{3:3}, at: kbd_event+0xd2/0x3fa0 [ 1578.800085][T27907] which would create a new lock dependency: [ 1578.806045][T27907] (kbd_event_lock){..-.}-{3:3} -> (&tty->flow.lock){....}-{3:3} [ 1578.813822][T27907] [ 1578.813822][T27907] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1578.823278][T27907] (kbd_event_lock){..-.}-{3:3} [ 1578.823315][T27907] [ 1578.823315][T27907] ... which became SOFTIRQ-irq-safe at: [ 1578.835867][T27907] lock_acquire+0x107/0x340 [ 1578.840470][T27907] _raw_spin_lock+0x2e/0x40 [ 1578.845083][T27907] kbd_event+0xd2/0x3fa0 [ 1578.849425][T27907] input_handle_events_default+0xd4/0x1a0 [ 1578.855243][T27907] input_pass_values+0x288/0x890 [ 1578.860288][T27907] input_event_dispose+0x3e5/0x6b0 [ 1578.865502][T27907] input_event+0x89/0xe0 [ 1578.869846][T27907] hidinput_hid_event+0x145e/0x1e50 [ 1578.875147][T27907] hid_process_event+0x4be/0x620 [ 1578.880182][T27907] hid_input_array_field+0x41c/0x5f0 [ 1578.885574][T27907] hid_report_raw_event+0xdd9/0x1720 [ 1578.890959][T27907] hid_input_report+0x44b/0x580 [ 1578.895927][T27907] hid_irq_in+0x47e/0x6d0 [ 1578.900357][T27907] __usb_hcd_giveback_urb+0x376/0x540 [ 1578.905847][T27907] dummy_timer+0x85f/0x45b0 [ 1578.910455][T27907] __hrtimer_run_queues+0x51c/0xc30 [ 1578.915751][T27907] hrtimer_run_softirq+0x187/0x2b0 [ 1578.920963][T27907] handle_softirqs+0x22b/0x7c0 [ 1578.925832][T27907] __irq_exit_rcu+0x60/0x150 [ 1578.930517][T27907] irq_exit_rcu+0x9/0x30 [ 1578.934857][T27907] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1578.940583][T27907] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1578.946662][T27907] lock_release+0x2d8/0x3b0 [ 1578.951266][T27907] up_read+0x16/0x20 [ 1578.955268][T27907] validate_mm+0x246/0x4a0 [ 1578.959786][T27907] __split_vma+0x8c7/0xa00 [ 1578.964305][T27907] vms_gather_munmap_vmas+0x2e2/0x12f0 [ 1578.969871][T27907] mmap_region+0x72b/0x1d10 [ 1578.974477][T27907] do_mmap+0xc45/0x10d0 [ 1578.978842][T27907] vm_mmap_pgoff+0x2a6/0x4d0 [ 1578.983531][T27907] ksys_mmap_pgoff+0x51f/0x760 [ 1578.988399][T27907] do_syscall_64+0xec/0xf80 [ 1578.992997][T27907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1578.998968][T27907] [ 1578.998968][T27907] to a SOFTIRQ-irq-unsafe lock: [ 1579.006012][T27907] (tasklist_lock){.+.+}-{3:3} [ 1579.006042][T27907] [ 1579.006042][T27907] ... which became SOFTIRQ-irq-unsafe at: [ 1579.018649][T27907] ... [ 1579.018658][T27907] lock_acquire+0x107/0x340 [ 1579.025807][T27907] _raw_read_lock+0x36/0x50 [ 1579.030400][T27907] __do_wait+0xde/0x740 [ 1579.034639][T27907] do_wait+0x1e8/0x4f0 [ 1579.038792][T27907] kernel_wait+0xab/0x170 [ 1579.043208][T27907] call_usermodehelper_exec_work+0xbe/0x230 [ 1579.049181][T27907] process_scheduled_works+0xad1/0x1770 [ 1579.054812][T27907] worker_thread+0x8a0/0xda0 [ 1579.059484][T27907] kthread+0x711/0x8a0 [ 1579.063637][T27907] ret_from_fork+0x510/0xa50 [ 1579.068306][T27907] ret_from_fork_asm+0x1a/0x30 [ 1579.073154][T27907] [ 1579.073154][T27907] other info that might help us debug this: [ 1579.073154][T27907] [ 1579.083372][T27907] Chain exists of: [ 1579.083372][T27907] kbd_event_lock --> &tty->flow.lock --> tasklist_lock [ 1579.083372][T27907] [ 1579.096151][T27907] Possible interrupt unsafe locking scenario: [ 1579.096151][T27907] [ 1579.104463][T27907] CPU0 CPU1 [ 1579.109828][T27907] ---- ---- [ 1579.115189][T27907] lock(tasklist_lock); [ 1579.119434][T27907] local_irq_disable(); [ 1579.126201][T27907] lock(kbd_event_lock); [ 1579.133047][T27907] lock(&tty->flow.lock); [ 1579.139978][T27907] [ 1579.143417][T27907] lock(kbd_event_lock); [ 1579.147911][T27907] [ 1579.147911][T27907] *** DEADLOCK *** [ 1579.147911][T27907] [ 1579.156057][T27907] 5 locks held by syz.5.5826/27907: [ 1579.161246][T27907] #0: ffff888029f51118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480 [ 1579.170383][T27907] #1: ffff888029de9230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340 [ 1579.180512][T27907] #2: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb6/0x340 [ 1579.190286][T27907] #3: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 1579.199865][T27907] #4: ffffffff8e783b98 (kbd_event_lock){..-.}-{3:3}, at: kbd_event+0xd2/0x3fa0 [ 1579.208914][T27907] [ 1579.208914][T27907] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1579.219356][T27907] -> (kbd_event_lock){..-.}-{3:3} { [ 1579.224580][T27907] IN-SOFTIRQ-W at: [ 1579.228551][T27907] lock_acquire+0x107/0x340 [ 1579.234702][T27907] _raw_spin_lock+0x2e/0x40 [ 1579.240851][T27907] kbd_event+0xd2/0x3fa0 [ 1579.246736][T27907] input_handle_events_default+0xd4/0x1a0 [ 1579.254135][T27907] input_pass_values+0x288/0x890 [ 1579.260720][T27907] input_event_dispose+0x3e5/0x6b0 [ 1579.267481][T27907] input_event+0x89/0xe0 [ 1579.273455][T27907] hidinput_hid_event+0x145e/0x1e50 [ 1579.280305][T27907] hid_process_event+0x4be/0x620 [ 1579.286894][T27907] hid_input_array_field+0x41c/0x5f0 [ 1579.293822][T27907] hid_report_raw_event+0xdd9/0x1720 [ 1579.300747][T27907] hid_input_report+0x44b/0x580 [ 1579.307245][T27907] hid_irq_in+0x47e/0x6d0 [ 1579.313227][T27907] __usb_hcd_giveback_urb+0x376/0x540 [ 1579.320250][T27907] dummy_timer+0x85f/0x45b0 [ 1579.326403][T27907] __hrtimer_run_queues+0x51c/0xc30 [ 1579.333291][T27907] hrtimer_run_softirq+0x187/0x2b0 [ 1579.340049][T27907] handle_softirqs+0x22b/0x7c0 [ 1579.346468][T27907] __irq_exit_rcu+0x60/0x150 [ 1579.352717][T27907] irq_exit_rcu+0x9/0x30 [ 1579.358600][T27907] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1579.365873][T27907] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1579.373599][T27907] lock_release+0x2d8/0x3b0 [ 1579.379761][T27907] up_read+0x16/0x20 [ 1579.385306][T27907] validate_mm+0x246/0x4a0 [ 1579.391367][T27907] __split_vma+0x8c7/0xa00 [ 1579.397434][T27907] vms_gather_munmap_vmas+0x2e2/0x12f0 [ 1579.404642][T27907] mmap_region+0x72b/0x1d10 [ 1579.410817][T27907] do_mmap+0xc45/0x10d0 [ 1579.416650][T27907] vm_mmap_pgoff+0x2a6/0x4d0 [ 1579.422937][T27907] ksys_mmap_pgoff+0x51f/0x760 [ 1579.429352][T27907] do_syscall_64+0xec/0xf80 [ 1579.435501][T27907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1579.443039][T27907] INITIAL USE at: [ 1579.446926][T27907] lock_acquire+0x107/0x340 [ 1579.452988][T27907] _raw_spin_lock_irqsave+0x40/0x60 [ 1579.459756][T27907] vt_reset_unicode+0x2b/0x1a0 [ 1579.466076][T27907] reset_vc+0x68/0x1b0 [ 1579.471707][T27907] vc_init+0x70/0x4a0 [ 1579.477250][T27907] con_init+0x385/0x9c0 [ 1579.482972][T27907] console_init+0xfc/0x3f0 [ 1579.488951][T27907] start_kernel+0x227/0x3d0 [ 1579.495010][T27907] x86_64_start_reservations+0x24/0x30 [ 1579.502032][T27907] x86_64_start_kernel+0x143/0x1c0 [ 1579.508710][T27907] common_startup_64+0x13e/0x147 [ 1579.515211][T27907] } [ 1579.517708][T27907] ... key at: [] kbd_event_lock+0x18/0xa0 [ 1579.525515][T27907] [ 1579.525515][T27907] the dependencies between the lock to be acquired [ 1579.525526][T27907] and SOFTIRQ-irq-unsafe lock: [ 1579.539025][T27907] -> (tasklist_lock){.+.+}-{3:3} { [ 1579.544408][T27907] HARDIRQ-ON-R at: [ 1579.548641][T27907] lock_acquire+0x107/0x340 [ 1579.555312][T27907] _raw_read_lock+0x36/0x50 [ 1579.561989][T27907] __do_wait+0xde/0x740 [ 1579.568313][T27907] do_wait+0x1e8/0x4f0 [ 1579.574550][T27907] kernel_wait+0xab/0x170 [ 1579.581049][T27907] call_usermodehelper_exec_work+0xbe/0x230 [ 1579.589105][T27907] process_scheduled_works+0xad1/0x1770 [ 1579.596903][T27907] worker_thread+0x8a0/0xda0 [ 1579.603661][T27907] kthread+0x711/0x8a0 [ 1579.609904][T27907] ret_from_fork+0x510/0xa50 [ 1579.616656][T27907] ret_from_fork_asm+0x1a/0x30 [ 1579.623591][T27907] SOFTIRQ-ON-R at: [ 1579.627829][T27907] lock_acquire+0x107/0x340 [ 1579.634496][T27907] _raw_read_lock+0x36/0x50 [ 1579.641179][T27907] __do_wait+0xde/0x740 [ 1579.647509][T27907] do_wait+0x1e8/0x4f0 [ 1579.653752][T27907] kernel_wait+0xab/0x170 [ 1579.660253][T27907] call_usermodehelper_exec_work+0xbe/0x230 [ 1579.668312][T27907] process_scheduled_works+0xad1/0x1770 [ 1579.676029][T27907] worker_thread+0x8a0/0xda0 [ 1579.682785][T27907] kthread+0x711/0x8a0 [ 1579.689059][T27907] ret_from_fork+0x510/0xa50 [ 1579.695813][T27907] ret_from_fork_asm+0x1a/0x30 [ 1579.702747][T27907] INITIAL USE at: [ 1579.706896][T27907] lock_acquire+0x107/0x340 [ 1579.713484][T27907] _raw_write_lock_irq+0x3d/0x50 [ 1579.720500][T27907] copy_process+0x2185/0x3950 [ 1579.727257][T27907] kernel_clone+0x21e/0x820 [ 1579.733842][T27907] user_mode_thread+0xdd/0x140 [ 1579.740700][T27907] rest_init+0x23/0x300 [ 1579.746938][T27907] start_kernel+0x381/0x3d0 [ 1579.753604][T27907] x86_64_start_reservations+0x24/0x30 [ 1579.761144][T27907] x86_64_start_kernel+0x143/0x1c0 [ 1579.768337][T27907] common_startup_64+0x13e/0x147 [ 1579.775357][T27907] INITIAL READ USE at: [ 1579.779940][T27907] lock_acquire+0x107/0x340 [ 1579.786955][T27907] _raw_read_lock+0x36/0x50 [ 1579.793981][T27907] __do_wait+0xde/0x740 [ 1579.800653][T27907] do_wait+0x1e8/0x4f0 [ 1579.807240][T27907] kernel_wait+0xab/0x170 [ 1579.814095][T27907] call_usermodehelper_exec_work+0xbe/0x230 [ 1579.822502][T27907] process_scheduled_works+0xad1/0x1770 [ 1579.830569][T27907] worker_thread+0x8a0/0xda0 [ 1579.837682][T27907] kthread+0x711/0x8a0 [ 1579.844361][T27907] ret_from_fork+0x510/0xa50 [ 1579.851505][T27907] ret_from_fork_asm+0x1a/0x30 [ 1579.858964][T27907] } [ 1579.861712][T27907] ... key at: [] tasklist_lock+0x18/0x40 [ 1579.869683][T27907] ... acquired at: [ 1579.873735][T27907] _raw_read_lock+0x36/0x50 [ 1579.878410][T27907] send_sigurg+0x12b/0x420 [ 1579.883018][T27907] sk_send_sigurg+0x6c/0x2e0 [ 1579.887777][T27907] queue_oob+0x420/0x4f0 [ 1579.892181][T27907] unix_stream_sendmsg+0xc32/0xde0 [ 1579.897456][T27907] __sock_sendmsg+0x21c/0x270 [ 1579.902304][T27907] ____sys_sendmsg+0x52d/0x820 [ 1579.907259][T27907] ___sys_sendmsg+0x21f/0x2a0 [ 1579.912114][T27907] __sys_sendmmsg+0x227/0x430 [ 1579.916957][T27907] __x64_sys_sendmmsg+0xa0/0xc0 [ 1579.922063][T27907] do_syscall_64+0xec/0xf80 [ 1579.926735][T27907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1579.932798][T27907] [ 1579.935111][T27907] -> (&f_owner->lock){....}-{3:3} { [ 1579.940502][T27907] INITIAL USE at: [ 1579.944574][T27907] lock_acquire+0x107/0x340 [ 1579.950993][T27907] _raw_write_lock_irq+0x3d/0x50 [ 1579.957837][T27907] __f_setown+0x67/0x370 [ 1579.963992][T27907] tty_fasync+0x2dc/0x350 [ 1579.970225][T27907] do_fcntl+0x11d2/0x1a50 [ 1579.976463][T27907] __se_sys_fcntl+0xc8/0x150 [ 1579.982963][T27907] do_syscall_64+0xec/0xf80 [ 1579.989366][T27907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1579.997167][T27907] INITIAL READ USE at: [ 1580.001748][T27907] lock_acquire+0x107/0x340 [ 1580.008583][T27907] _raw_read_lock_irqsave+0x48/0x60 [ 1580.016122][T27907] send_sigio+0x38/0x370 [ 1580.022705][T27907] kill_fasync+0x24d/0x4d0 [ 1580.029462][T27907] lease_break_callback+0x26/0x30 [ 1580.036832][T27907] __break_lease+0x730/0x1620 [ 1580.043856][T27907] vfs_truncate+0x428/0x520 [ 1580.050699][T27907] do_sys_truncate+0xdb/0x190 [ 1580.057711][T27907] __x64_sys_truncate+0x5b/0x70 [ 1580.064898][T27907] do_syscall_64+0xec/0xf80 [ 1580.071760][T27907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1580.080079][T27907] } [ 1580.082740][T27907] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1580.091763][T27907] ... acquired at: [ 1580.095726][T27907] _raw_read_lock_irqsave+0x48/0x60 [ 1580.101097][T27907] send_sigio+0x38/0x370 [ 1580.105510][T27907] kill_fasync+0x24d/0x4d0 [ 1580.110095][T27907] lease_break_callback+0x26/0x30 [ 1580.115285][T27907] __break_lease+0x730/0x1620 [ 1580.120124][T27907] vfs_truncate+0x428/0x520 [ 1580.124791][T27907] do_sys_truncate+0xdb/0x190 [ 1580.129633][T27907] __x64_sys_truncate+0x5b/0x70 [ 1580.134659][T27907] do_syscall_64+0xec/0xf80 [ 1580.139416][T27907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1580.145507][T27907] [ 1580.147818][T27907] -> (&new->fa_lock){....}-{3:3} { [ 1580.153033][T27907] INITIAL USE at: [ 1580.157007][T27907] lock_acquire+0x107/0x340 [ 1580.163238][T27907] _raw_write_lock_irq+0x3d/0x50 [ 1580.169903][T27907] fasync_remove_entry+0xf1/0x1c0 [ 1580.176663][T27907] tty_fasync+0x13c/0x350 [ 1580.182724][T27907] __fput+0x8a2/0xa70 [ 1580.188436][T27907] task_work_run+0x1d4/0x260 [ 1580.194758][T27907] exit_to_user_mode_loop+0xef/0x4e0 [ 1580.201772][T27907] do_syscall_64+0x2b7/0xf80 [ 1580.208106][T27907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1580.215728][T27907] INITIAL READ USE at: [ 1580.220129][T27907] lock_acquire+0x107/0x340 [ 1580.226791][T27907] _raw_read_lock_irqsave+0x48/0x60 [ 1580.234165][T27907] kill_fasync+0x199/0x4d0 [ 1580.240768][T27907] lease_break_callback+0x26/0x30 [ 1580.247977][T27907] __break_lease+0x730/0x1620 [ 1580.254831][T27907] vfs_truncate+0x428/0x520 [ 1580.261668][T27907] do_sys_truncate+0xdb/0x190 [ 1580.268511][T27907] __x64_sys_truncate+0x5b/0x70 [ 1580.275524][T27907] do_syscall_64+0xec/0xf80 [ 1580.282188][T27907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1580.290241][T27907] } [ 1580.292815][T27907] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1580.301577][T27907] ... acquired at: [ 1580.305453][T27907] _raw_read_lock_irqsave+0x48/0x60 [ 1580.310825][T27907] kill_fasync+0x199/0x4d0 [ 1580.315416][T27907] __start_tty+0x18c/0x220 [ 1580.320004][T27907] start_tty+0x2b/0x70 [ 1580.324240][T27907] n_tty_set_termios+0xa7c/0x10c0 [ 1580.329431][T27907] tty_set_termios+0xda4/0x17e0 [ 1580.334453][T27907] set_termios+0x516/0x6c0 [ 1580.339049][T27907] tty_mode_ioctl+0x47e/0x740 [ 1580.343986][T27907] tty_ioctl+0x9c6/0xde0 [ 1580.348397][T27907] __se_sys_ioctl+0xfc/0x170 [ 1580.353159][T27907] do_syscall_64+0xec/0xf80 [ 1580.357837][T27907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1580.363896][T27907] [ 1580.366220][T27907] -> (&tty->flow.lock){....}-{3:3} { [ 1580.371537][T27907] INITIAL USE at: [ 1580.375431][T27907] lock_acquire+0x107/0x340 [ 1580.381496][T27907] _raw_spin_lock_irqsave+0x40/0x60 [ 1580.388347][T27907] start_tty+0x20/0x70 [ 1580.393982][T27907] n_tty_set_termios+0xa7c/0x10c0 [ 1580.400568][T27907] tty_set_termios+0xda4/0x17e0 [ 1580.406981][T27907] set_termios+0x516/0x6c0 [ 1580.412959][T27907] tty_mode_ioctl+0x47e/0x740 [ 1580.419195][T27907] tty_ioctl+0x9c6/0xde0 [ 1580.424990][T27907] __se_sys_ioctl+0xfc/0x170 [ 1580.431136][T27907] do_syscall_64+0xec/0xf80 [ 1580.437205][T27907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1580.444658][T27907] } [ 1580.447151][T27907] ... key at: [] alloc_tty_struct.__key.35+0x0/0x20 [ 1580.455830][T27907] ... acquired at: [ 1580.459623][T27907] _raw_spin_lock_irqsave+0x40/0x60 [ 1580.464993][T27907] stop_tty+0x2f/0x150 [ 1580.469232][T27907] kbd_event+0x2b9f/0x3fa0 [ 1580.473811][T27907] input_handle_events_default+0xd4/0x1a0 [ 1580.479697][T27907] input_pass_values+0x288/0x890 [ 1580.484808][T27907] input_event_dispose+0x330/0x6b0 [ 1580.490089][T27907] input_inject_event+0x1dd/0x340 [ 1580.495320][T27907] evdev_write+0x2fc/0x480 [ 1580.499902][T27907] vfs_write+0x27e/0xb30 [ 1580.504310][T27907] ksys_write+0x145/0x250 [ 1580.508801][T27907] do_syscall_64+0xec/0xf80 [ 1580.513467][T27907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1580.519528][T27907] [ 1580.521838][T27907] [ 1580.521838][T27907] stack backtrace: [ 1580.527715][T27907] CPU: 1 UID: 0 PID: 27907 Comm: syz.5.5826 Tainted: G L syzkaller #0 PREEMPT(full) [ 1580.527740][T27907] Tainted: [L]=SOFTLOCKUP [ 1580.527747][T27907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1580.527759][T27907] Call Trace: [ 1580.527768][T27907] [ 1580.527775][T27907] dump_stack_lvl+0xe8/0x150 [ 1580.527798][T27907] __lock_acquire+0x2a95/0x2cf0 [ 1580.527823][T27907] ? stop_tty+0x2f/0x150 [ 1580.527845][T27907] lock_acquire+0x107/0x340 [ 1580.527860][T27907] ? stop_tty+0x2f/0x150 [ 1580.527887][T27907] _raw_spin_lock_irqsave+0x40/0x60 [ 1580.527912][T27907] ? stop_tty+0x2f/0x150 [ 1580.527934][T27907] stop_tty+0x2f/0x150 [ 1580.527958][T27907] kbd_event+0x2b9f/0x3fa0 [ 1580.527975][T27907] ? __lock_acquire+0x6b6/0x2cf0 [ 1580.527991][T27907] ? __pfx_kbd_event+0x10/0x10 [ 1580.528006][T27907] ? kvm_sched_clock_read+0x11/0x20 [ 1580.528021][T27907] ? sched_clock+0x3f/0x60 [ 1580.528045][T27907] ? __lock_acquire+0x6b6/0x2cf0 [ 1580.528062][T27907] ? __lock_acquire+0x6b6/0x2cf0 [ 1580.528080][T27907] ? __lock_acquire+0x6b6/0x2cf0 [ 1580.528097][T27907] ? __lock_acquire+0x6b6/0x2cf0 [ 1580.528116][T27907] ? __lock_acquire+0x6b6/0x2cf0 [ 1580.528133][T27907] ? input_pass_values+0x8d/0x890 [ 1580.528163][T27907] ? lock_acquire+0x107/0x340 [ 1580.528178][T27907] ? input_pass_values+0x8d/0x890 [ 1580.528203][T27907] input_handle_events_default+0xd4/0x1a0 [ 1580.528223][T27907] ? input_pass_values+0x8d/0x890 [ 1580.528246][T27907] input_pass_values+0x288/0x890 [ 1580.528273][T27907] ? input_handle_event+0x70c/0xf30 [ 1580.528294][T27907] input_event_dispose+0x330/0x6b0 [ 1580.528317][T27907] input_inject_event+0x1dd/0x340 [ 1580.528338][T27907] ? input_inject_event+0xb6/0x340 [ 1580.528360][T27907] evdev_write+0x2fc/0x480 [ 1580.528377][T27907] ? __pfx_evdev_write+0x10/0x10 [ 1580.528394][T27907] ? bpf_lsm_file_permission+0x9/0x20 [ 1580.528411][T27907] ? security_file_permission+0x75/0x290 [ 1580.528428][T27907] ? rw_verify_area+0x255/0x4d0 [ 1580.528443][T27907] ? __pfx_evdev_write+0x10/0x10 [ 1580.528460][T27907] vfs_write+0x27e/0xb30 [ 1580.528478][T27907] ? __pfx_vfs_write+0x10/0x10 [ 1580.528494][T27907] ? __fget_files+0x2a/0x420 [ 1580.528514][T27907] ? __fget_files+0x2a/0x420 [ 1580.528533][T27907] ? __fget_files+0x3a0/0x420 [ 1580.528553][T27907] ? __fget_files+0x2a/0x420 [ 1580.528575][T27907] ksys_write+0x145/0x250 [ 1580.528591][T27907] ? __pfx_ksys_write+0x10/0x10 [ 1580.528610][T27907] do_syscall_64+0xec/0xf80 [ 1580.528627][T27907] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1580.528643][T27907] ? trace_irq_disable+0x37/0x100 [ 1580.528666][T27907] ? clear_bhb_loop+0x60/0xb0 [ 1580.528683][T27907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1580.528700][T27907] RIP: 0033:0x7f0e3a58f749 [ 1580.528716][T27907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1580.528732][T27907] RSP: 002b:00007f0e3b4c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1580.528750][T27907] RAX: ffffffffffffffda RBX: 00007f0e3a7e5fa0 RCX: 00007f0e3a58f749 [ 1580.528764][T27907] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000004 [ 1580.528775][T27907] RBP: 00007f0e3a613f91 R08: 0000000000000000 R09: 0000000000000000 [ 1580.528786][T27907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1580.528797][T27907] R13: 00007f0e3a7e6038 R14: 00007f0e3a7e5fa0 R15: 00007f0e3a90fa28 [ 1580.528815][T27907] [ 1580.884643][T27907] netlink: 'syz.5.5826': attribute type 1 has an invalid length. [ 1581.045503][T27907] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1581.165117][ T5876] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1581.246545][T27917] xt_socket: unknown flags 0xc [ 1581.443212][ T5876] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1581.453626][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1581.485232][ T5876] usb 2-1: Product: syz [ 1581.492862][ T5876] usb 2-1: Manufacturer: syz [ 1581.508429][ T5876] usb 2-1: SerialNumber: syz [ 1581.526593][ T5876] usb 2-1: config 0 descriptor?? [ 1581.547953][ T5876] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 1581.812950][T27911] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5824'. [ 1582.075223][ T5876] gspca_sunplus: reg_r err -110 [ 1582.080376][ T5876] sunplus 2-1:0.0: probe with driver sunplus failed with error -110 [ 1583.066450][T18363] usb 2-1: USB disconnect, device number 98