last executing test programs: 2m35.636574546s ago: executing program 0 (id=746): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) socket$unix(0x1, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa}, 0x1c) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 2m34.853677199s ago: executing program 0 (id=747): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="700000001000010025bd7000fddbdf2500000012", @ANYRES32=r2, @ANYBLOB="380100005f0202002c001280110001006272696467655f736c61766500000000140005800500090000000000050008000000000008000a"], 0x70}, 0x1, 0x0, 0x0, 0x8001}, 0x40040c4) 2m33.599354948s ago: executing program 0 (id=749): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x84343, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="6000000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x60}, 0x1, 0x0, 0x0, 0x400c040}, 0x24008014) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000140)={"88a3921222b7dbb14f814ef6e7fdfc82e05ab03dba0a6e54979faa28c00b564e", 0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f00000001c0)={0x28, 0x0, 0xffffffff, @host}, 0x10) ioctl$SYNC_IOC_FILE_INFO(r1, 0xc0383e04, &(0x7f0000000740)={""/32, 0x0, 0x0, 0x6, 0x0, &(0x7f00000008c0)=[{}, {}, {}, {}, {}, {}]}) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_BULK(r3, 0xc0185502, &(0x7f00000000c0)={{{0x1, 0x1}}, 0x0, 0x180000, 0x0}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SCHED_CORE(0x21, 0x0, 0x0, 0x1, 0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000380)={{0x0, 0xfff, 0x4b, 0x8007}, 'syz0\x00', 0x3e}) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r5, 0x11c, 0x1, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r6, 0x110, 0x7, 0x0, 0x4) r7 = fsopen(&(0x7f0000000000)='omfs\x00', 0x1) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000200)) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0X#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r8, 0x28, 0x8, &(0x7f0000000140)=""/59, &(0x7f0000000000)=0x3b) r9 = socket$tipc(0x1e, 0x5, 0x0) ioctl$int_in(r9, 0x5421, &(0x7f00000000c0)=0x7fffffffffffffff) listen(r9, 0x0) accept4(r9, 0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x8cb81) r10 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r10, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="020a000902000000e4a17c45c8d2", 0xe}, {&(0x7f0000000100)="0f96", 0x2}], 0x2}, 0x0) 2m32.695091074s ago: executing program 0 (id=755): ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x4, 0x0, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x6, 0x7, 0x1, 0x9, 0x8002, 0x0, 0x5, 0x2, 0x0, 0x802, 0x9, 0x200000100, 0x3, 0xfffffffffffffff4, 0x4a, 0x1000000000005, 0x100, 0xd, 0xdd, 0x5, 0x1, 0x2a9, 0x3, 0xc39, 0x8, 0x8, 0xffff, 0x2, 0xa51, 0x8, 0x401, 0x800000000000003, 0x7, 0xfffffffffffffffa, 0x81, 0x100, 0x5, 0x931, 0x101, 0x3, 0x8001, 0x8000000000000000, 0x7, 0x1, 0x8, 0x8, 0x6aa, 0x102, 0x1, 0x83, 0x538a, 0x9, 0xfffffffffffffff7, 0x4, 0x0, 0x4, 0x5, 0x8, 0x80008000, 0x8000000000000000, 0x4, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x5bc, 0x1, 0x7fffffff, 0x4, 0x8000, 0xc9, 0x7, 0x6, 0x9, 0x82c, 0x8000, 0xe000000000000, 0xe4, 0x11, 0x0, 0x8, 0x22, 0xffffffffffffffff, 0x7, 0x1, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x6, 0x7, 0x100000002, 0x4, 0x4, 0x8, 0x7, 0x7, 0x9, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x0, 0x100000003, 0x4, 0x7, 0x406, 0x3, 0x6, 0x5, 0x0, 0x3, 0x40, 0x7fffffff, 0x8, 0x3, 0x4]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0xf06, &(0x7f00000003c0)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fbdbdf25fc0000000000000000000000000000000000000000000000000000000000000000000004000100000a0060803b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000400000000001700000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000feffffffffffffff04000000000000000000000000000000000000000000000009"], 0xb8}}, 0x50) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x4044015}, 0x40010) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0xb8}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m32.202208873s ago: executing program 0 (id=761): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) pipe2$watch_queue(&(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r3 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="8e", 0x1, 0xffffffffffffffff) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r1, 0x400000000000007c) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r2, 0x47) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r2, 0xe1) close_range(r0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$audion(&(0x7f0000000040), 0x1ff, 0x800) ioctl$BTRFS_IOC_SNAP_DESTROY(r5, 0x5000940f, &(0x7f0000000480)={{r2}, "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"}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r6 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), r5) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="04002cbd7000fddbdf250000000014000b00c462664aaa1325000000000000000000000000000000010800080002000000182005000a", @ANYRES32=r2, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x20002000}, 0x4000880) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003600)=ANY=[@ANYBLOB="340000003e0007010300a4fb00000003047c00000400428011000100686df33329f3"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 2m31.703259304s ago: executing program 0 (id=764): socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x80, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x12}, 0x8, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0}) connect$unix(r0, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_clone3(&(0x7f0000000600)={0x2000000, &(0x7f0000000140), &(0x7f0000000240), &(0x7f00000002c0), {0x20}, 0x0, 0x0, &(0x7f0000000580)=""/87, &(0x7f0000000300)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x5}, 0x58) ptrace$cont(0x20, r3, 0x40, 0x1) syz_usb_connect(0x0, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x3}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00'], 0x2c}}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xe, &(0x7f00000004c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d821}, 0x24000000) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0600000004000000101000008900000000080100", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/24, @ANYRES32, @ANYBLOB="d57cdc1433259922e1b464188902b582c59aa6e8678dfe871fc6409ddbb71f88674c0e"], 0x50) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000740)={0x800, 0x7, 0x7, 0x7, '\x00', '\x00', '\x00', 0x1000000, 0xff, 0x7fffffff, 0x5, "76d289644b4f0fbeacd51052a9d99133"}) r7 = socket(0x10, 0x80002, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)={'#! ', './file0'}, 0xb) r8 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r8, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r8, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 2m16.554084733s ago: executing program 32 (id=764): socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x80, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x12}, 0x8, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0}) connect$unix(r0, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_clone3(&(0x7f0000000600)={0x2000000, &(0x7f0000000140), &(0x7f0000000240), &(0x7f00000002c0), {0x20}, 0x0, 0x0, &(0x7f0000000580)=""/87, &(0x7f0000000300)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x5}, 0x58) ptrace$cont(0x20, r3, 0x40, 0x1) syz_usb_connect(0x0, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x3}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00'], 0x2c}}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xe, &(0x7f00000004c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d821}, 0x24000000) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0600000004000000101000008900000000080100", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/24, @ANYRES32, @ANYBLOB="d57cdc1433259922e1b464188902b582c59aa6e8678dfe871fc6409ddbb71f88674c0e"], 0x50) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000740)={0x800, 0x7, 0x7, 0x7, '\x00', '\x00', '\x00', 0x1000000, 0xff, 0x7fffffff, 0x5, "76d289644b4f0fbeacd51052a9d99133"}) r7 = socket(0x10, 0x80002, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)={'#! ', './file0'}, 0xb) r8 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r8, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r8, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 1m57.328620463s ago: executing program 2 (id=861): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000000000)) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000003100)=@newtfilter={0xe84, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {}, {0x7, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x2000000, 0x9, 0x0, 0x8e, 0x9}, 0x2}, [{0x10001, 0x2, 0x2, 0x1, 0x3, 0x6}, {0x8, 0x5, 0x7, 0x1, 0xc, 0x1}, {0x10, 0x22, 0x6, 0x9, 0xf, 0x1ff}, {0x6, 0x4, 0x0, 0x9, 0x4, 0x7}, {0x1, 0x9, 0x8, 0x0, 0x10, 0x8}, {0x2, 0x5, 0x4, 0x57, 0x10, 0x21fb}, {0x1, 0x0, 0x0, 0x8, 0x4a9, 0x6}, {0x400, 0x8000, 0x0, 0x4, 0x0, 0x7}, {0x5a5, 0x8, 0xfffffff7, 0x4, 0x8, 0x7ff}, {0x2, 0x4, 0x5, 0x2, 0x80000000, 0x7f}, {0x6, 0xfffffffc, 0x0, 0x0, 0x400, 0x2}, {0x7, 0x8, 0x8, 0x0, 0x1, 0x4}, {0x8, 0x0, 0x4554, 0x3, 0x79a, 0xc}, {0x8, 0x876, 0x3, 0x8, 0x3, 0x8}, {0xac7a, 0xffffffff, 0x5, 0x8001, 0x0, 0x10000}, {0x6, 0x1, 0x4, 0x5, 0x66d, 0x3}, {0xe465, 0x7, 0x2005, 0x51, 0x1, 0x6c0}, {0x6, 0xd1e2, 0xffffb438, 0x0, 0x3, 0x2}, {0x80000000, 0x1, 0x8, 0x0, 0x53af1bbb, 0x8}, {0x7f, 0x7fffffff, 0xfffffff8, 0x81c, 0xcc}, {0x401, 0x4, 0x1, 0x7ff, 0x2, 0x4}, {0x7, 0x9, 0x1, 0x0, 0x4, 0x2}, {0x3, 0x0, 0x335, 0x2, 0x80, 0x8}, {0x7, 0x5, 0x5, 0x28e, 0x3, 0x8}, {0x0, 0xc, 0x8001, 0x1, 0x80000007, 0x6}, {0x56, 0x80, 0xc, 0xfffffff0, 0x3, 0x2}, {0x3, 0x2, 0x4, 0x17, 0x2, 0x3}, {0x4, 0xffffff81, 0x5, 0x8, 0xb, 0x6}, {0x8, 0x7, 0xf, 0xe, 0x1, 0x8}, {0x9ff, 0x10, 0xf71, 0x5, 0x9, 0xe17fe54}, {0xff, 0x0, 0x2, 0x6, 0x8, 0x6}, {0x3, 0x4, 0x1d4, 0x80000001, 0x0, 0x1773}, {0x4, 0x7, 0x10000007, 0x3, 0x5, 0xff}, {0x8000, 0x6fe, 0xfffffe01, 0x80, 0x8, 0x6}, {0x40, 0x58b, 0xfffffffe, 0xff, 0x101, 0xfffff679}, {0x0, 0xf8e2, 0x8, 0xffffffff, 0x0, 0x7f}, {0x0, 0x9, 0x10001, 0x8, 0x400, 0xfffff690}, {0x3, 0x570, 0xf, 0xffffb9f3, 0x5, 0x772}, {0xf6e3, 0x1, 0x85, 0x0, 0xfffffffd, 0x1000}, {0x6, 0x4, 0x0, 0x5, 0x2, 0xaa3f}, {0xffffffff, 0x1, 0x2e8, 0x7, 0x5, 0xcc184cd}, {0x9, 0xfffffff7, 0xfffffff8, 0x5, 0x7, 0x6}, {0x101, 0x7, 0x1, 0x7fff, 0x8, 0xfffffff7}, {0x10, 0x7fffffff, 0x7fffffff, 0x8, 0x2, 0xd9}, {0xbae1, 0xfdfe, 0x3, 0x4530, 0x0, 0x10000}, {0x8, 0x9, 0x1000, 0x3, 0x10, 0xd5}, {0x3, 0x80000001, 0x2, 0x5616, 0x7fff, 0x7}, {0x6, 0x9, 0x5, 0x40, 0x65f2, 0x5}, {0x6, 0x0, 0xfffffffc, 0x28d6, 0xa5a4, 0x337}, {0xffffff8d, 0x8, 0x4, 0x1ff, 0x3}, {0x0, 0x0, 0x8, 0xd726, 0xa, 0x46e4}, {0xffff, 0x401, 0x5, 0xa2, 0x5, 0x38}, {0x5, 0x200, 0x10, 0x0, 0x100, 0x9}, {0x40, 0x29, 0x1, 0x10000, 0x1, 0x3}, {0xb5, 0x3, 0x2, 0x2201ee1a, 0x9f25, 0x9}, {0x8, 0x9, 0x10000, 0x99, 0x1, 0x1ff}, {0x4, 0x2, 0xa53, 0x5, 0x239, 0xfffffffd}, {0x3, 0x0, 0x1, 0x3, 0x1, 0xa}, {0x5, 0x2, 0x0, 0x0, 0x0, 0x7}, {0xff, 0x4, 0x5, 0x0, 0x8, 0x800}, {0xfffffc00, 0x1, 0x0, 0x3d1, 0x8, 0x4}, {0x9, 0x1, 0x9, 0x100, 0x7f, 0x800}, {0xa, 0x800, 0x1, 0x5f, 0x6, 0x2}, {0x40, 0x7, 0x8000, 0x6, 0x3, 0x10001}, {0x7, 0x1, 0x5, 0x8001, 0x1, 0x5}, {0x61, 0xa, 0x2, 0x0, 0x4, 0x4}, {0x5, 0xb, 0x7a04, 0x8, 0xd, 0x9f4}, {0x7, 0xffffff81, 0x1, 0x0, 0x7, 0x9}, {0x3ff7, 0x7, 0x80, 0x3ff, 0x5, 0x6}, {0x4, 0x3, 0x9, 0x8, 0x1, 0x5}, {0x1, 0x9, 0x0, 0x4, 0x6, 0x6f04}, {0x8, 0x5, 0x2, 0x1, 0x5, 0xff}, {0xfffeffff, 0x6, 0x2, 0x1, 0x7, 0x80000001}, {0x2, 0xff, 0x8, 0x4, 0x3ff, 0x1}, {0x101, 0x5, 0xe8, 0x5, 0x8, 0x50}, {0x3, 0x800, 0x5, 0x1, 0x3, 0x1ff}, {0xdf7, 0x4, 0x4, 0x4, 0x1, 0xc2b2}, {0x40, 0x2d44, 0xa, 0xfff, 0x8, 0x4}, {0x1, 0x9, 0x8, 0x0, 0x7, 0x9}, {0xa0d, 0xcc7, 0xa, 0x4, 0x6, 0xae3}, {0x6c, 0x40, 0x2, 0x3, 0x7, 0x8}, {0x1, 0xfff, 0xa, 0xafa, 0xd8000000, 0x6}, {0x200, 0xfffffff9, 0x0, 0x1, 0x6, 0x4}, {0x2, 0x2, 0x3, 0x3, 0x4, 0xd}, {0x7, 0xfffffffc, 0x0, 0x3, 0x7fff, 0x9}, {0x5, 0x7f, 0x7, 0xfffffff9, 0x5, 0x9}, {0x8, 0x81, 0x6, 0x7, 0x4, 0xfffffd2a}, {0x9, 0x0, 0x7ff, 0x200, 0xf, 0x2df}, {0x200, 0xc3b8, 0xfffffff9, 0x80, 0xd}, {0x3, 0x0, 0x1, 0x8, 0x5, 0x7}, {0xff4, 0x8001, 0xfffff117, 0x1, 0x8368, 0xa6}, {0x4, 0x4, 0x101, 0x4, 0x80000001, 0x3}, {0x53, 0xa, 0x7, 0x4, 0x10, 0x7}, {0x3, 0x6, 0x66, 0x9, 0xffffffff, 0x6}, {0xffffffff, 0x10001, 0x0, 0x10000, 0x7f, 0x7f}, {0xfffffffb, 0x37c, 0x7, 0x5d, 0x7, 0xca}, {0x1, 0x800, 0x48000, 0x5, 0x2, 0x10000}, {0x6, 0x1, 0xfffffff9, 0x1, 0x0, 0x9}, {0x5b1ad289, 0x0, 0xe0000000, 0x3, 0x1000, 0x7fffffff}, {0x3, 0x1000, 0x5da, 0x0, 0x4, 0x1}, {0xffffffff, 0x7ff, 0x1fbd, 0x2, 0x2, 0x3}, {0x9, 0xd8, 0x9, 0x3, 0xff, 0x8}, {0x7fffffff, 0x2, 0x101, 0xd61c, 0x7, 0x3}, {0x0, 0xf2e, 0x66, 0x9e1, 0x5, 0x7}, {0x0, 0x0, 0x800, 0x5, 0x8, 0x101}, {0x5, 0x1, 0xfffffffc, 0x6, 0x7, 0xcf00000}, {0xfffffff9, 0xaa, 0x2, 0x9, 0x6, 0x4196020b}, {0x0, 0xfea, 0x9, 0x5, 0x3293, 0xffff}, {0x7, 0xfffffffa, 0x2, 0x9, 0x6, 0x7ff}, {0xee, 0xfffffffa, 0x7, 0xf, 0x10}, {0x0, 0x3, 0x1, 0x2, 0x2, 0xe}, {0x67bcd46a, 0xe8b, 0x3ff, 0xb4, 0x4, 0xa0}, {0x22b3, 0x3, 0x5, 0x78, 0x9, 0x26a5d5a4}, {0x401, 0x8005, 0x10, 0x9, 0x720, 0x8}, {0x6, 0x7f, 0x6, 0x101, 0x2, 0x3}, {0x6, 0x4, 0xff, 0xfffeffff, 0x1, 0x18000000}, {0x2, 0x7, 0xffffffff, 0xffffffff, 0x401, 0x7c}, {0x4, 0x8d, 0x1, 0x800, 0xf, 0xfffffff7}, {0x0, 0xffffffff, 0x4, 0x4b, 0x5, 0x4}, {0x1, 0x8000, 0x7, 0x9, 0x10000, 0xb6}, {0x0, 0x81, 0x9, 0x7, 0x401, 0x7}, {0x3, 0x8, 0x1400, 0x4c, 0x8, 0x7}, {0x0, 0x9, 0x9, 0x4, 0x9, 0x7}, {0x200, 0x9, 0x4, 0x1, 0x800, 0x2}, {0x7, 0x4, 0x6, 0x6, 0x400, 0x1}, {0x415, 0x8, 0x4, 0x9, 0xe}, {0x6, 0x5, 0x6, 0xfffffff8, 0x1, 0x7}, {0x0, 0x800, 0x1, 0x10000, 0xb, 0x318}], [{0x5}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x6}, {0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {0x2}, {}, {0x5, 0x1}, {0x5}, {0x2}, {}, {0x4, 0x1}, {0x3, 0x1}, {0x1}, {0x2}, {0x2}, {}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {}, {0x2}, {0x2}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x2}, {0x0, 0x1}, {}, {0x1}, {0x4}, {0x2, 0x1}, {0x5}, {0x3}, {0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x3}, {0x3}, {0x2, 0x1}, {0x2, 0x2}, {0x5}, {0x2}, {0x5}, {0x5}, {0x4, 0x1}, {0x3, 0x7a7e79f3715a24e4}, {0x3}, {0x1, 0x1}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {}, {0x3, 0x4078d3a2fbf2a5ed}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x3}, {0x4, 0x1}, {0x7a78bbe26a8b81d1}, {0x3}, {0x4, 0x1}, {0x2}, {}, {}, {0x0, 0x1}, {0x3}, {0x5}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1}, {0x358bac3bb0c51439, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x6, 0x1}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0xe84}, 0x1, 0x0, 0x0, 0x80}, 0x800) 1m56.797378816s ago: executing program 2 (id=863): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_GET_HW_INFO(r2, 0x3b8a, &(0x7f00000003c0)={0x28, 0x0, r4, 0xffffffd3, 0x0}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r6, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_HWPT_ALLOC$NONE(r1, 0x3b89, &(0x7f0000000140)={0x28, 0x0, r4, r6, 0x0, 0x0, 0x0, 0x8d, &(0x7f0000000040)="03ea6553b695aa93fd552feddbe8baba3fb4250accfefd30aee353af322a37e0035874fdeaf3a26ff84eed1404a3d9addff9869c59d89de5512cca4abb3e6b20e7501c3472b0ee5c876bd09b7ab6b856685103dfb53f9a7e0c922366d1ee32485bd179182800f54ecdd06349189a31b87eb9b12973c5f992c7412f949f67decd3eb67d6ab9c271ea8165ccdd21"}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x2c, 0x10, 0x4, 0x70bd25, 0x2ddfdbfb, {0x0, 0x0, 0x0, 0x0, 0x67037, 0x2021}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x8000042) 1m56.453281246s ago: executing program 5 (id=865): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="08040000000000000100000001"], 0x408}}], 0x2, 0x40840) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)=[@dstopts_2292={{0xc8, 0x29, 0x4, {0x4, 0x16, '\x00', [@calipso={0x7, 0x8, {0x1, 0x0, 0x9, 0x9f}}, @generic={0xfe, 0x72, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5"}, @generic={0x80, 0x14, "09e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad"}, @calipso={0x7, 0x8, {0x1, 0x0, 0x7a, 0x8001}}, @pad1, @ra={0x5, 0x2, 0xbf4}, @generic={0x93, 0x9, "e80ee304ecb784ec46"}]}}}, @hoplimit={{0x14}}, @hopopts={{0xa0, 0x29, 0x36, {0x5e, 0x10, '\x00', [@pad1, @pad1, @generic={0x5, 0x30, "08d29ae43e83d852a5141138d796cb633cd4e825b06dc2e05f56d0d49987fdcb2108ccf692d8593ec424ef2b5e4a94a2"}, @calipso={0x7, 0x30, {0x3, 0xa, 0x0, 0xfff, [0x2, 0x966, 0xfffffffffffffff7, 0x1, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8}, @generic={0x1, 0x3, "2bdb86"}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}], 0x1b8}}], 0x1, 0x810) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000280)={0x4c, 0x5f, 0x6, 0x2, 0x9, "0fda0800000000000000000000000f00", 0x6, 0x8}) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000000300)={0xd, {"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", 0x1000}}, 0x1006) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x80, 0x40, 0x4, 0x8001, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x65, 0x0, 0x8, 0x29, 0x0, @remote, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000240)={'gre0\x00', 0x0, 0x80, 0x20, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x25, 0x14, 0x0, 0x0, 0x1, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @empty}}}}) r7 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 1m56.309192718s ago: executing program 2 (id=866): r0 = socket$nl_rdma(0x10, 0x3, 0x14) getpeername$netlink(r0, &(0x7f0000000000), &(0x7f00000000c0)=0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000ab4000000060a01040000000000000000030000010900010073797a31000000004c000480340001800b000100746172676574000024000280080003009ac4200008000240000000000d000100434c41535349465900000000140001800b00010064796e7365740000040002800900020073797a32000000003c000580080001400000890d080001400000001c080002"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) capset(0x0, 0x0) socket$unix(0x1, 0x5, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000086a82, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r5, 0x3554000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) fadvise64(r5, 0x85f5, 0x4000000005, 0x4) 1m54.616522747s ago: executing program 5 (id=869): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc010000190001000000000010000000e00000010000000000000000000000000a0101000000000000000700000000004e22000bffff00000a00808000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x1fc}}, 0x80c4) 1m54.250257966s ago: executing program 5 (id=871): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x8, 0xb0}, @exit], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x1010000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 1m53.605042574s ago: executing program 5 (id=873): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) socket$unix(0x1, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x7fffe, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xb, 0xb}, {0x0, 0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x1, 0x9, 0x1, 0x8}, 0xb, 0x0, 0x32, 0x5, 0x9, 0x7, 0x9, 0x1d, 0x1, 0xffffff5c, {0xffff1c72, 0x23, 0x3, 0x1008, 0xfffffffe, 0x7583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x404c800}, 0x400c000) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000100)={@local, 0x4a, r2}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) r4 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa}, 0x1c) io_uring_enter(r4, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 1m52.361655957s ago: executing program 5 (id=876): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x3) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x3e82, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000004100)={0x2020}, 0x2020) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@o_path={&(0x7f00000000c0)='./file0\x00', r2, 0x4000, r2}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sync() sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYRES32=0x0, @ANYBLOB="a7ffa88800000000200012800900010069706970000000fa0f000280040013000500090000000008f33a5798cb485f3a9776f093ab3e544599d87862ad961fa67f7215b55c42d37b9a100eb2ec063287898534c013c8f11d376156badd398f094e0e3b0cae09b813a27158392211de2312f2526854a5a004cb08dad59319ee0f21d26b"], 0x40}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRESHEX], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x5, 0x4, 0x7, 0x9, r4}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0xffff, r5}, 0x38) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x2b) r7 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[], 0x38}}, 0x4) syz_usb_control_io$uac1(r7, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0xb}, 0x94) syz_usb_control_io$uac2(r7, 0x0, 0x0) 1m52.104768475s ago: executing program 3 (id=877): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async, rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98000000", @ANYRES16=r6, @ANYBLOB="2503feffffff0000000016000000140001"], 0x98}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x24040084) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xca7, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x4, 0x5}, {}, {0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0x1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000804}, 0x40080) (async) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r3, @ANYRESHEX=r2], 0x18}, 0x1, 0x0, 0x0, 0x4004}, 0x1) 1m50.751656253s ago: executing program 2 (id=878): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fcff8000030000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 1m50.57728152s ago: executing program 3 (id=879): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) sendmmsg(r1, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) (fail_nth: 86) r2 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) close(0x3) 1m50.288425581s ago: executing program 2 (id=881): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x2, 0x60b924, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, {0x3}, {0x6, 0xb}, {0xa, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048060}, 0x20004080) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0xe00, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002e00090027097000000000220441000008000c"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 1m49.609182238s ago: executing program 3 (id=882): ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x4, 0x0, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x6, 0x7, 0x1, 0x9, 0x8002, 0x0, 0x5, 0x2, 0x0, 0x802, 0x9, 0x200000100, 0x3, 0xfffffffffffffff4, 0x4a, 0x1000000000005, 0x100, 0xd, 0xdd, 0x5, 0x1, 0x2a9, 0x3, 0xc39, 0x8, 0x8, 0xffff, 0x2, 0xa51, 0x8, 0x401, 0x800000000000003, 0x7, 0xfffffffffffffffa, 0x81, 0x100, 0x5, 0x931, 0x101, 0x3, 0x8001, 0x8000000000000000, 0x7, 0x1, 0x8, 0x8, 0x6aa, 0x102, 0x1, 0x83, 0x538a, 0x9, 0xfffffffffffffff7, 0x4, 0x0, 0x4, 0x5, 0x8, 0x80008000, 0x8000000000000000, 0x4, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x5bc, 0x1, 0x7fffffff, 0x4, 0x8000, 0xc9, 0x7, 0x6, 0x9, 0x82c, 0x8000, 0xe000000000000, 0xe4, 0x11, 0x0, 0x8, 0x22, 0xffffffffffffffff, 0x7, 0x1, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x6, 0x7, 0x100000002, 0x4, 0x4, 0x8, 0x7, 0x7, 0x9, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x0, 0x100000003, 0x4, 0x7, 0x406, 0x3, 0x6, 0x5, 0x0, 0x3, 0x40, 0x7fffffff, 0x8, 0x3, 0x4]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0xf06, &(0x7f00000003c0)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fbdbdf25fc0000000000000000000000000000000000000000000000000000000000000000000004000100000a0060803b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000400000000001700000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000feffffffffffffff04000000000000000000000000000000000000000000000009"], 0xb8}}, 0x50) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x4044015}, 0x40010) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100"/52], 0xb8}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m49.182329297s ago: executing program 3 (id=883): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010004000000fedbdf250e00000008000300", @ANYRES32, @ANYBLOB="0c00990000000000fd77ebff15000e001c"], 0x4c}}, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xe) ioctl$TIOCSLCKTRMIOS(r1, 0x80047437, &(0x7f00000010c0)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x58) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) preadv2(0xffffffffffffffff, &(0x7f0000001800)=[{0x0}, {0x0}, {0x0}], 0x3, 0x7f, 0x30, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 1m48.5178805s ago: executing program 2 (id=886): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0x5e}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r4, 0x0, 0x0, 0x20004041, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2663}, 0x0) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}, 0x1c) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r6) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000740)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) sendmmsg$inet(r2, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000640)=@get={0x1, &(0x7f0000000680)=""/68, 0x401}) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet(r2, &(0x7f00000000c0)="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", 0xffe3, 0x6000000000000000, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000700), 0x9, 0x0) unshare(0x62040200) 1m48.333975216s ago: executing program 5 (id=887): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004044}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000009e40)=@newtfilter={0x40, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0xfff3}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x11}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="27032400000214000e00002fb96dffff1144ee163cddcb000000800000827600000005000005", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x8}], 0x2}, 0x5) 1m48.098583124s ago: executing program 3 (id=889): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x4c, 0x0, &(0x7f0000000600)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x300, 0x68, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x23}, @fda={0x66646185, 0x5, 0x0, 0x3}, @fda={0x66646185, 0x3, 0x2, 0x1f}}, &(0x7f0000000380)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 1m47.734099875s ago: executing program 3 (id=890): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000040)={0x6afc2, 0x180, 0x2e}, 0x18) mlock(&(0x7f0000490000/0x2000)=nil, 0x2000) mlock2(&(0x7f00007a4000/0x2000)=nil, 0x2000, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1451c2, 0x0) ftruncate(r5, 0x8800000) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000000140)=0x0) getpgid(r6) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r8, &(0x7f00000034c0)=[{{0x0, 0xfffffe57, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000240)={0x13, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0xf2ff}}, 0x18) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRES8], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) getresgid(&(0x7f0000002800), &(0x7f0000002840), &(0x7f0000002880)) r9 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r9, 0xc0285700, &(0x7f0000000080)={0x0, "4fcb813dd28b42bee2b094a3de6dbfd30a74457bcd1cfd5feffe5c019f45d57f"}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001e00010d000000000000000007000000", @ANYRES32=0x0, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendfile(r7, r5, 0x0, 0x578410eb) mmap(&(0x7f0000491000/0x4000)=nil, 0x4000, 0x27ffff3, 0x13, r1, 0x8572000) 1m32.927884472s ago: executing program 33 (id=887): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004044}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000009e40)=@newtfilter={0x40, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0xfff3}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x11}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="27032400000214000e00002fb96dffff1144ee163cddcb000000800000827600000005000005", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x8}], 0x2}, 0x5) 1m32.782071247s ago: executing program 34 (id=886): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0x5e}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r4, 0x0, 0x0, 0x20004041, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2663}, 0x0) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}, 0x1c) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r6) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000740)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) sendmmsg$inet(r2, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000640)=@get={0x1, &(0x7f0000000680)=""/68, 0x401}) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet(r2, &(0x7f00000000c0)="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", 0xffe3, 0x6000000000000000, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000700), 0x9, 0x0) unshare(0x62040200) 1m32.416823589s ago: executing program 35 (id=890): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000040)={0x6afc2, 0x180, 0x2e}, 0x18) mlock(&(0x7f0000490000/0x2000)=nil, 0x2000) mlock2(&(0x7f00007a4000/0x2000)=nil, 0x2000, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1451c2, 0x0) ftruncate(r5, 0x8800000) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000000140)=0x0) getpgid(r6) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r8, &(0x7f00000034c0)=[{{0x0, 0xfffffe57, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000240)={0x13, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0xf2ff}}, 0x18) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRES8], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) getresgid(&(0x7f0000002800), &(0x7f0000002840), &(0x7f0000002880)) r9 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r9, 0xc0285700, &(0x7f0000000080)={0x0, "4fcb813dd28b42bee2b094a3de6dbfd30a74457bcd1cfd5feffe5c019f45d57f"}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001e00010d000000000000000007000000", @ANYRES32=0x0, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendfile(r7, r5, 0x0, 0x578410eb) mmap(&(0x7f0000491000/0x4000)=nil, 0x4000, 0x27ffff3, 0x13, r1, 0x8572000) 49.394186753s ago: executing program 4 (id=935): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x1ff, 0x0, 0x8009}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000020000fe0200000800040001000000", 0x24) 46.549071336s ago: executing program 4 (id=936): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB="4800000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="017200000000000220001280080001006774700014000280080003003a32000005000500000000000800", @ANYRES64=r0], 0x48}, 0x1, 0x0, 0x0, 0x48010}, 0x0) 46.172999366s ago: executing program 4 (id=938): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x268, 0x0, 0x11, 0x148, 0x0, 0x0, 0x1d0, 0x2a8, 0x2a8, 0x1d0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x8, 0x2000000}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x5, 0x0, 0x6, 0x20, 0x11], 0x4, 0x5}, {0xffffffffffffffff, [0x56, 0x7], 0x0, 0x4}}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x5, 0x2, 0x7fffffff, 0x3, 'netbios-ns\x00', 'syz1\x00', {0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) 45.564172069s ago: executing program 4 (id=939): creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4c) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xa9525000) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) link(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='./file0\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) 42.589035604s ago: executing program 8 (id=900): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x42, 0x4, 0x390, 0xffffffff, 0x140, 0x140, 0x1f8, 0xffffffff, 0xffffffff, 0x2f8, 0x2f8, 0x2f8, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr=0x40, @loopback, 0x0, 0x0, 'vxcan1\x00', 'wlan0\x00', {}, {}, 0x73}, 0x0, 0xe0, 0x140, 0x0, {0x100000002000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @common=@set={{0x40}, {{0x1, [0x5, 0x3, 0x2, 0x6, 0x3], 0x0, 0x2}}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x1, 0x1, [0xd, 0x22, 0x39, 0x3, 0x2c, 0x4, 0x27, 0x2f, 0x3e, 0x34, 0x20, 0xc, 0xc, 0x2a, 0x3, 0x1a], 0x3, 0x7, 0x2}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xe, 'syz1\x00', {0x8}}}}, {{@ip={@private, @rand_addr=0x64010101, 0x0, 0x0, 'veth1_virt_wifi\x00', 'dvmrp0\x00'}, 0x0, 0xc0, 0x100, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) 42.191864785s ago: executing program 4 (id=941): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r2 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x4, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x4000006, 0x1, 0x4}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0x1, @win={{0x0, 0x0, 0x4}, 0x6, 0x6, 0x0, 0x0, 0x0, 0x9}}}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x8083) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) r8 = mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000004a40)={0x58, 0x0, &(0x7f0000000800)=[@free_buffer={0x40086303, r8}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000600)={@flat=@binder={0x73622a85, 0x1001, 0x2}, @fda={0x66646185, 0x4, 0x1, 0x34}, @ptr={0x70742a85, 0x0, &(0x7f0000000500)=""/255, 0xff, 0x1, 0x11}}, &(0x7f0000000680)={0x0, 0x18, 0x38}}, 0x1000}], 0x0, 0x0, 0x0}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r9, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x1, 0x3, 0x67a7}}, 0x30) 42.095648904s ago: executing program 8 (id=942): syz_clone(0x40022080, &(0x7f00000000c0)="8af7d157", 0x4, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff3, 0x1}}}, 0x24}}, 0x20040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) sendmsg$inet6(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1}, 0x20000010) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0xa4}], {0x95, 0x0, 0x201}}, &(0x7f0000000040)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$NILFS_IOCTL_GET_SUINFO(r4, 0x80186e84, &(0x7f0000000200)={&(0x7f0000000080)=[{0x5, 0x1, 0x2}], 0x1, 0x10, 0xb, 0x8}) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000003400)=@nat={'nat\x00', 0x62, 0x5, 0x1bd0, 0x1170, 0x1170, 0xffffffff, 0x10c8, 0x0, 0x1b38, 0x1b38, 0xffffffff, 0x1b38, 0x1b38, 0x5, 0x0, {[{{@uncond, 0x0, 0x10a0, 0x10c8, 0x0, {0x22e}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x1, 0x0, './cgroup.net/syz0\x00', 0x9, {0x100000001}}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x6}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x1, @empty, @rand_addr=0x64010100, @gre_key=0x76e, @icmp_id=0x66}}}}, {{@ip={@broadcast, @rand_addr=0x64010100, 0x0, 0x0, 'veth1_to_team\x00', 'syzkaller1\x00', {}, {}, 0x2f, 0x3}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @private=0xa010102, @gre_key, @icmp_id}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'pimreg1\x00', 'veth1_macvtap\x00', {0xff}}, 0x0, 0x878, 0x8b0, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x4}, {0x0, 0x1}, {0x1}, {0xf, 0x2}, {0x40, 0x2}, {0xffff85e6, 0x2}, {0x2}, {0x10001, 0x1}, {0x1, 0x2}, {0x5}, {0x6, 0x3}], [{0x200, 0x7c6}, {0x9, 0x7}, {0x8, 0xffff}, {0xfffffffb, 0x7}, {0x0, 0x9}, {0x3, 0x1}, {0x1, 0x4}, {0x800}, {0x0, 0x8}, {0x8, 0x746d}, {0x49, 0x1fc0}], 0x7, 0x8}, {[{0x8001}, {0x4, 0x3}, {0x84, 0x3}, {0x4}, {0x7}, {0xffff, 0x2}, {0x10001, 0x1}, {}, {0x17, 0x2}, {0x8, 0x3}, {0x4, 0x1}], [{0x1c77, 0x5}, {0x9, 0x4}, {0x9, 0xe}, {0xe, 0xffff}, {0x46, 0x401}, {0xcbd, 0xf6}, {0x9, 0x9}, {0x6d, 0xffffffff}, {0x1, 0x6}, {0xf0000000, 0x5}, {0x4, 0x69}], 0x2, 0x5}, {[{0x3, 0x2}, {0xe46b, 0x3}, {0x1ff, 0x3}, {0x0, 0x1}, {0xfff, 0x1}, {0x4, 0x3}, {0x633, 0x1}, {0x8, 0x3}, {0x2, 0x3}, {0xe, 0x1}, {0x426, 0x2}], [{0x0, 0x5}, {0x8, 0x9}, {0x45a46d11, 0x10001}, {0x4, 0x800}, {0xffffd61b, 0x7f}, {0xfffff800, 0x2}, {0x2, 0x80000000}, {0xfffffffe, 0x7}, {0x8, 0x6}, {0x200, 0x8001}, {0x589c, 0x7fff}], 0x7, 0x3}, {[{0x9, 0x3}, {0x9, 0x3}, {0x9d, 0x1}, {0x10000, 0x3}, {0x2}, {0x7, 0x3}, {0x10001, 0x1}, {0x8, 0x1}, {0x10001, 0x1}, {0x8}, {0x3831294d, 0x1}], [{0x6, 0x7}, {0x5, 0xfd}, {0x100, 0xd}, {0x9, 0x6}, {0x9, 0x7ff}, {0x1, 0x12bf}, {0x80000001, 0x7}, {0x1, 0x7}, {0xfffffffc, 0x3f9}, {0x4, 0x8000}, {0xd546, 0xee18}], 0x4, 0xb}, {[{0x4, 0x3}, {0x85, 0x1}, {0x6}, {0xffff2d0f, 0x2}, {0x1, 0x3}, {0x1, 0x1}, {0x2, 0x1}, {0x4}, {0x6d}, {0x3, 0x2}, {0x2, 0x3}], [{0x0, 0x6}, {0x65, 0x2}, {0x3, 0xffffffff}, {0x8}, {0x8001, 0x156}, {0x6, 0x2}, {0x1, 0x101}, {0x1, 0x3}, {0x1ff, 0x9}, {0x1, 0x7}, {0x0, 0x2}], 0x0, 0x3}, {[{0xe, 0x2}, {0xc8}, {}, {0x7ff}, {0x8, 0x3}, {0xb, 0x2}, {0x0, 0x1}, {0x6}, {0xfffffffd, 0x2}, {0x2, 0x2}, {0x7, 0x2}], [{0x1, 0x5}, {0x2, 0xc04}, {0x0, 0x7}, {0x10001, 0x80000001}, {0x2, 0x3}, {0x3, 0xfffffff8}, {0x6, 0xc5}, {0x3, 0xfffffbff}, {0x3, 0x8}, {0x0, 0x8}, {0x0, 0xa}], 0x1, 0xa}, {[{0x8, 0x3}, {0x6, 0x1}, {0xb8000000, 0x1}, {0x9, 0x2}, {0x7fffffff, 0x1}, {0x8000, 0x3}, {0x1, 0x3}, {0xab1f}, {0x9, 0x1}, {0x8, 0x1}, {0x7f}], [{0x80000001, 0xffffffff}, {0x6, 0x7}, {0xfff, 0x9}, {0x67, 0x2}, {0x846, 0xc6}, {0xcb}, {0x4, 0x4}, {0x6, 0x544d}, {0xd, 0x4}, {0x6, 0x4f2436ac}, {0x8, 0x1}], 0x7, 0x1}, {[{0x3, 0x3}, {0xff, 0x1}, {0x4, 0x1}, {0x1b, 0x2}, {0x8, 0x3}, {0x268, 0x3}, {0x9, 0x3}, {0x8}, {0x4, 0x3}, {0xff, 0x1}, {0x4, 0x3}], [{0x200, 0x4}, {0x1, 0x2}, {0x7, 0x100}, {0x6, 0x3ff}, {0x5}, {0x8001, 0x5}, {0xa5d, 0x800}, {0x7, 0xfffffff0}, {0xfffffff8, 0x5d7fc3bf}, {0xfffffffb}, {0xf7a, 0x2}], 0x8, 0x2}, {[{0xd6, 0x1}, {0xa, 0x1}, {0x2, 0x1}, {0x9, 0x2}, {0x2, 0x3}, {0x200, 0x1}, {0x2}, {0x4, 0x2}, {0x1}, {0x6, 0x2}, {0x400, 0x3}], [{0x9, 0x3}, {0x2, 0x6}, {0x8, 0x6}, {0x4, 0x100}, {0x3, 0x3}, {0x8c, 0x3}, {0x5, 0x3ff}, {0x8, 0x88}, {0x8000, 0x800}, {0x7f, 0x4}, {0x87, 0x9}], 0x3, 0x5}, {[{0x7}, {0xffffffff}, {0x5}, {0x3, 0x2}, {0xfffffffb, 0x1}, {0xf, 0x3}, {0x5, 0x3}, {0x0, 0x1}, {0x4, 0x3}, {0xffffffff, 0x2}, {0xf770}], [{0x693, 0xf75}, {0x1, 0x6c}, {0x1000, 0x9}, {0x7fff, 0x2ef}, {0x6, 0x3}, {0x7, 0x10001}, {0x0, 0x1}, {0x7, 0x2}, {0xfffff001, 0xef}, {0x80000001, 0x8}, {0x6, 0x3}], 0x9, 0x2}, {[{0x88}, {0xfffffff7, 0x1}, {0xff, 0x3}, {0x6, 0x1}, {0x9}, {0xf, 0x2}, {0xb, 0x3}, {0x200}, {0x2, 0x1}, {0x4, 0x1}, {0x6, 0x3}], [{0x10001, 0x6}, {0x9, 0x9fa}, {0x1, 0xfffffff9}, {0x0, 0x27}, {0x9, 0x2}, {0x9}, {0x5, 0xffffffff}, {0x8}, {0xff, 0xaaae}, {0x4, 0x8}, {0x7, 0x4e24b56e}], 0x7, 0x1}], 0x2, 0x1}}, @common=@icmp={{0x28}, {0x0, "6e82"}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @broadcast, @gre_key=0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1c30) write$char_usb(r5, &(0x7f0000000100), 0x0) 40.690763511s ago: executing program 7 (id=899): mprotect(&(0x7f0000ae1000/0x4000)=nil, 0x4000, 0x1000002) syz_open_dev$hiddev(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) file_setattr(0xffffffffffffffff, 0x0, 0x0, 0x1700, 0x100) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, '\x00', "ec094e36a7e3970f8c35c47e5804000300", "c700", "fffffffffffffffd"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x52c1, 0x8, 0xfffffffe, 0xc}) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0xfffffffe, @empty}}}, 0x48) write$RDMA_USER_CM_CMD_QUERY(r3, 0x0, 0x0) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r6, 0x1, 0x70bd2a, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7000fbdbdf2505000000200001800d0001007564703a73797a32000000000c0002800800040002400000"], 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r7, 0x84, 0x7, 0x0, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="044029bd70000600000002001400058008000100756470000800010075667000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x44840) 39.50167657s ago: executing program 8 (id=944): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000002400)={0xc, {"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", 0x1000}}, 0x1006) 38.479087534s ago: executing program 8 (id=945): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e"], 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0x0, 0x0}}, './file1\x00'}) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x40d82, 0x0) socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000140)) (async) socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002500010125bd7000fdffffff550000000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x20004840}, 0x28000) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, 0x0, 0x28000) close(r1) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) r8 = socket$can_bcm(0x1d, 0x2, 0x2) r9 = socket$inet(0xa, 0x801, 0x84) connect$inet(r9, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) connect$inet(r9, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r9, 0xfffffffd) (async) listen(r9, 0xfffffffd) r10 = accept4(r5, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r10, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r10, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe) ioctl$sock_inet_sctp_SIOCINQ(r10, 0x541b, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r8, &(0x7f00000000c0)={0x1d, r11}, 0x10) (async) connect$can_bcm(r8, &(0x7f00000000c0)={0x1d, r11}, 0x10) sendmsg$can_bcm(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYRES8=r0, @ANYRESDEC=r2, @ANYRESDEC=r3, @ANYRES64=r4, @ANYRES64=r2, @ANYBLOB="000000007b1b3e56bf820000000000f9ffffffffffffff00", @ANYRESDEC=0x0], 0x48}, 0x1, 0x0, 0x0, 0x4040040}, 0x45) sendmsg$can_bcm(r8, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40000) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) 37.857303211s ago: executing program 4 (id=946): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004044}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000009e40)=@newtfilter={0x40, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0xfff3}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x11}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="27032400000214000e00002fb96dffff1144ee163cddcb000000800000827600000005000004", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x8}], 0x2}, 0x5) 36.888981034s ago: executing program 7 (id=947): syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220f000000540b4550182195f56584"], 0x0}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x24000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c2) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x1, 0x12) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) write$tun(r3, &(0x7f0000000580)={@val={0x6f01, 0x800}, @val={0x1, 0x3, 0x27, 0x2, 0x27}, @mpls={[], @generic="0bec06dd02e840921a6692df53120d6e0a43ca3cd1b7e587157b1b4840ff958782a2cea8112c34c4d9bd5cfbd232fa08000000ba35b32fb7611f5a39e8bcd6fe1a9b724264c85365b950f830bcaadaf8c10000000000004489916de26967f5fa47a30c6faccb0ce8c8e61fd61f767887c82fa5584888"}}, 0x84) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = inotify_init1(0x0) r6 = inotify_add_watch(r5, &(0x7f0000000200)='.\x00', 0x44000160) r7 = dup(r5) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e22, 0x3, @private1, 0x81}}}, &(0x7f00000003c0)=0x84) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newlink={0x58, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x3, 0x0, 0x0, 0x0, 0x2020}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x2b}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0xfffffcc8}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x58}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000500)={r8, 0x8c, &(0x7f0000000640)=[@in6={0xa, 0x4e21, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0xe}, 0x6}, @in6={0xa, 0x4e23, 0x9, @rand_addr=' \x01\x00', 0x6}, @in6={0xa, 0x4e26, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x32}, 0x3106}, @in6={0xa, 0x4e23, 0x8, @loopback, 0xfff7ffff}, @in6={0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x39}, 0xc}]}, &(0x7f0000000540)=0x10) r11 = socket$alg(0x26, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, r11, {0x401, 0xc}}, './file0\x00'}) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r7, 0x84, 0x23, &(0x7f0000000040)={r10, 0xe3}, 0x8) inotify_rm_watch(r7, r6) ioctl$sock_inet6_tcp_SIOCINQ(r7, 0x541b, &(0x7f0000000280)) writev(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x11) 36.637861386s ago: executing program 8 (id=948): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8940, &(0x7f0000002280)={'syzkaller0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x400) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r6, 0xc0045540, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200080000002, 0x7, 0x8, 0x3}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010700000000fedbdf256700000008000300", @ANYRES32=0x0, @ANYBLOB="03003eeda2cb25f7397828117b3f7f66c300b0740a0800"], 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="000425bd7000fddbdf25320000000800030025c7bb84ee9d8a3908199422c1b68eebd4643a7a9b61c7bbcd51864b3b38b4953e2fa1220ef5954c3bea2e9771aea82cafff024d024722c1f1f10dd37a88dad48619cb88db8c69e9f953287bf9cd86a45f090186a7bc9792bf2bb91c18d156654f0ed48333cdb0bc6c3dc75e6d2735995e56a072534a5856b6c91204d8f06db1cd463fbc97e9889c48a9e0bf8221ab433f15fca3f98cacec5e1bfdc0437daae2c16a6fc79915ce7e5f31a336f16b5c57beb0480f350903f34d18cb181e82e949d7590f5e61", @ANYRES32=r9, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r10 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) ioctl$SG_IO(r10, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x1, @buffer={0x300, 0x56, &(0x7f0000000440)=""/86}, &(0x7f0000000380)="259374c94982", 0x0, 0x0, 0x14, 0x0, 0x0}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000c00)=@filter={'filter\x00', 0x42, 0x4, 0x298, 0xffffffff, 0x98, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x200, 0x200, 0x200, 0xffffffff, 0x5, 0x0, {[{{@ip={@empty, @dev, 0x0, 0x0, 'batadv_slave_0\x00', 'nr0\x00', {}, {0xff}}, 0x3127, 0x70, 0x98, 0x1ba, {0x46010000}}, @REJECT={0x28}}, {{@uncond, 0x287, 0x70, 0xd0, 0x0, {0x0, 0x4}}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x6, 0xc, 0x0, 0x4, 0x4], 0x1, 0x1}, {0x0, [0x4, 0x0, 0x5, 0x1, 0x5, 0x4], 0x4, 0x3}}}}, {{@ip={@multicast1, @broadcast, 0x0, 0x0, 'lo\x00', 'virt_wifi0\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) dup2(0xffffffffffffffff, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f00000001c0)={0x6, 0x2fc, &(0x7f00000009c0)="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", &(0x7f0000000640), 0xbe8}) r11 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000980)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r11, &(0x7f0000000240)='asymmetric\x00', 0x0) request_key(&(0x7f0000000280)='logon\x00', &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000200)='/vekiB(\x00\x00', 0x0) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000000)=0x3) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 22.704164896s ago: executing program 36 (id=946): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004044}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000009e40)=@newtfilter={0x40, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0xfff3}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x11}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="27032400000214000e00002fb96dffff1144ee163cddcb000000800000827600000005000004", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x8}], 0x2}, 0x5) 21.489842929s ago: executing program 37 (id=947): syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220f000000540b4550182195f56584"], 0x0}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x24000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c2) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x1, 0x12) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) write$tun(r3, &(0x7f0000000580)={@val={0x6f01, 0x800}, @val={0x1, 0x3, 0x27, 0x2, 0x27}, @mpls={[], @generic="0bec06dd02e840921a6692df53120d6e0a43ca3cd1b7e587157b1b4840ff958782a2cea8112c34c4d9bd5cfbd232fa08000000ba35b32fb7611f5a39e8bcd6fe1a9b724264c85365b950f830bcaadaf8c10000000000004489916de26967f5fa47a30c6faccb0ce8c8e61fd61f767887c82fa5584888"}}, 0x84) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = inotify_init1(0x0) r6 = inotify_add_watch(r5, &(0x7f0000000200)='.\x00', 0x44000160) r7 = dup(r5) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e22, 0x3, @private1, 0x81}}}, &(0x7f00000003c0)=0x84) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newlink={0x58, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x3, 0x0, 0x0, 0x0, 0x2020}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x2b}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0xfffffcc8}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x58}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000500)={r8, 0x8c, &(0x7f0000000640)=[@in6={0xa, 0x4e21, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0xe}, 0x6}, @in6={0xa, 0x4e23, 0x9, @rand_addr=' \x01\x00', 0x6}, @in6={0xa, 0x4e26, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x32}, 0x3106}, @in6={0xa, 0x4e23, 0x8, @loopback, 0xfff7ffff}, @in6={0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x39}, 0xc}]}, &(0x7f0000000540)=0x10) r11 = socket$alg(0x26, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, r11, {0x401, 0xc}}, './file0\x00'}) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r7, 0x84, 0x23, &(0x7f0000000040)={r10, 0xe3}, 0x8) inotify_rm_watch(r7, r6) ioctl$sock_inet6_tcp_SIOCINQ(r7, 0x541b, &(0x7f0000000280)) writev(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x11) 21.091159464s ago: executing program 38 (id=948): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8940, &(0x7f0000002280)={'syzkaller0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x400) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r6, 0xc0045540, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200080000002, 0x7, 0x8, 0x3}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010700000000fedbdf256700000008000300", @ANYRES32=0x0, @ANYBLOB="03003eeda2cb25f7397828117b3f7f66c300b0740a0800"], 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="000425bd7000fddbdf25320000000800030025c7bb84ee9d8a3908199422c1b68eebd4643a7a9b61c7bbcd51864b3b38b4953e2fa1220ef5954c3bea2e9771aea82cafff024d024722c1f1f10dd37a88dad48619cb88db8c69e9f953287bf9cd86a45f090186a7bc9792bf2bb91c18d156654f0ed48333cdb0bc6c3dc75e6d2735995e56a072534a5856b6c91204d8f06db1cd463fbc97e9889c48a9e0bf8221ab433f15fca3f98cacec5e1bfdc0437daae2c16a6fc79915ce7e5f31a336f16b5c57beb0480f350903f34d18cb181e82e949d7590f5e61", @ANYRES32=r9, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r10 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) ioctl$SG_IO(r10, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x1, @buffer={0x300, 0x56, &(0x7f0000000440)=""/86}, &(0x7f0000000380)="259374c94982", 0x0, 0x0, 0x14, 0x0, 0x0}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000c00)=@filter={'filter\x00', 0x42, 0x4, 0x298, 0xffffffff, 0x98, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x200, 0x200, 0x200, 0xffffffff, 0x5, 0x0, {[{{@ip={@empty, @dev, 0x0, 0x0, 'batadv_slave_0\x00', 'nr0\x00', {}, {0xff}}, 0x3127, 0x70, 0x98, 0x1ba, {0x46010000}}, @REJECT={0x28}}, {{@uncond, 0x287, 0x70, 0xd0, 0x0, {0x0, 0x4}}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x6, 0xc, 0x0, 0x4, 0x4], 0x1, 0x1}, {0x0, [0x4, 0x0, 0x5, 0x1, 0x5, 0x4], 0x4, 0x3}}}}, {{@ip={@multicast1, @broadcast, 0x0, 0x0, 'lo\x00', 'virt_wifi0\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) dup2(0xffffffffffffffff, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f00000001c0)={0x6, 0x2fc, &(0x7f00000009c0)="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", &(0x7f0000000640), 0xbe8}) r11 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000980)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r11, &(0x7f0000000240)='asymmetric\x00', 0x0) request_key(&(0x7f0000000280)='logon\x00', &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000200)='/vekiB(\x00\x00', 0x0) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000000)=0x3) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 17.300876611s ago: executing program 6 (id=960): ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x4, 0x0, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x6, 0x7, 0x1, 0x9, 0x8002, 0x0, 0x5, 0x2, 0x0, 0x802, 0x9, 0x200000100, 0x3, 0xfffffffffffffff4, 0x4a, 0x1000000000005, 0x100, 0xd, 0xdd, 0x5, 0x1, 0x2a9, 0x3, 0xc39, 0x8, 0x8, 0xffff, 0x2, 0xa51, 0x8, 0x401, 0x800000000000003, 0x7, 0xfffffffffffffffa, 0x81, 0x100, 0x5, 0x931, 0x101, 0x3, 0x8001, 0x8000000000000000, 0x7, 0x1, 0x8, 0x8, 0x6aa, 0x102, 0x1, 0x83, 0x538a, 0x9, 0xfffffffffffffff7, 0x4, 0x0, 0x4, 0x5, 0x8, 0x80008000, 0x8000000000000000, 0x4, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x5bc, 0x1, 0x7fffffff, 0x4, 0x8000, 0xc9, 0x7, 0x6, 0x9, 0x82c, 0x8000, 0xe000000000000, 0xe4, 0x11, 0x0, 0x8, 0x22, 0xffffffffffffffff, 0x7, 0x1, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x6, 0x7, 0x100000002, 0x4, 0x4, 0x8, 0x7, 0x7, 0x9, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x0, 0x100000003, 0x4, 0x7, 0x406, 0x3, 0x6, 0x5, 0x0, 0x3, 0x40, 0x7fffffff, 0x8, 0x3, 0x4]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0xf06, &(0x7f00000003c0)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fbdbdf25fc0000000000000000000000000000000000000000000000000000000000000000000004000100000a0060803b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000400000000001700000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000feffffffffffffff04000000000000000000000000000000000000000000000009"], 0xb8}}, 0x50) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x4044015}, 0x40010) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x0) (fail_nth: 2) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) 16.60012942s ago: executing program 6 (id=961): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8840, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0x1, 0xffffffff, 0xef0, 0x808, 0xa, "ff00f70000e5020052c4f21c7f000000002000"}) r2 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_disconnect(r2) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r3, &(0x7f0000006800)="10", 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="030000000400000004000000010000", @ANYRESHEX], 0x50) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_CPUID(r6, 0x4008ae8a, &(0x7f00000001c0)={0x1, 0x0, [{0x1, 0x2, 0x80, 0xfffffff9, 0xeaa}]}) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x490, 0xec000000, 0x7fff}]}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, 0x0, 0x0) r9 = syz_open_pts(r1, 0x141601) write(r9, &(0x7f0000000000)="d5", 0xfffffedf) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) io_uring_setup(0x2fad, &(0x7f0000000500)={0x0, 0x9d1d, 0x40, 0x1007, 0x27}) ioctl$TCSETSF(r9, 0x5404, &(0x7f0000000100)={0x400008, 0x20000002, 0x6910, 0x3, 0x19, "680c1acfa4a5000000070000faffffff000800"}) r11 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r11, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000280)={'sit0\x00', 0x0, 0x709, 0x20, 0x0, 0x9, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x68, 0x0, 0x5, 0x2f, 0x0, @empty, @private}}}}) close_range(r0, 0xffffffffffffffff, 0x0) 11.357063413s ago: executing program 6 (id=963): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) socket$unix(0x1, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa}, 0x1c) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) (fail_nth: 1) 11.087056808s ago: executing program 1 (id=964): syz_emit_ethernet(0x5ee, &(0x7f0000000000)={@random, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x14, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @empty}}}}}}, 0x0) 10.652748587s ago: executing program 6 (id=965): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000901000000000000000005000000000800040001000000", 0x24) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, 0x0, 0x400c8dc) 10.562032555s ago: executing program 1 (id=966): r0 = socket$nl_rdma(0x10, 0x3, 0x14) getpeername$netlink(r0, &(0x7f0000000000), &(0x7f00000000c0)=0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000ab4000000060a010400000000002400000a0000010900010073797a31000000004c000480340001800b000100746172676574000024000280080003009ac4200008000240000000000d000100434c41535349465900000000140001800b00010064796e7365740000040002800900020073797a32000000003c000580080001400000890d080001400000001c080002"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) capset(0x0, 0x0) socket$unix(0x1, 0x5, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000086a82, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r5, 0x3554000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) fadvise64(r5, 0x85f5, 0x4000000005, 0x4) 6.138141394s ago: executing program 1 (id=967): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1}, 0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000040000701feffffff00000000017c0000040042801c0001800600060005a80000100004002524298d275c232f262d2b00040002"], 0x38}}, 0xc000) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r4, 0x0, 0x0, 0xf2, 0x207fff) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f00000000c0)="3b76210fb6150f209e440f20c0663503000000440f22c00fa2660fc7b2d42af30fa7d0440f20c066350d000000440f22c06767f2caab12bad004ec", 0x3b}], 0x1, 0xd, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r6, 0x4020aed2, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000240)={[0x10583a, 0x5, 0xa, 0x4000000000, 0x6, 0x2, 0x1041, 0x4, 0x7, 0x8000000000000000, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x9, 0xbe3, 0x6a], 0xeeee8000, 0x1000d6}) ioctl$KVM_RUN(r7, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x814}, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x84e81, 0x0) r8 = add_key$fscrypt_v1(0x0, &(0x7f0000000480)={'fscrypt:', @desc1}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r8, 0xffffffffffffffff, 0xee) keyctl$KEYCTL_WATCH_KEY(0x20, r8, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x1, 0xffffffff, @loopback={0xffffffffffff0000}, 0x92}, 0x1c) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x2afc0, 0x1c1, 0x6}, 0x18) 4.519654411s ago: executing program 1 (id=968): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14, r1, 0x701, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3000000040000100feffffffffdbdf25017c0000040042800c00018006000600800a00000c000280070006001d2b00007eaa6f5042c2fb66fe054bf5c8b1510acd8781308e144ae619b3db6cbd89935ce2c34adb0fd9fbf78b65b15c6503e3764028d87283dd245c4c8aa992bb7249ed23a8f69ab81cb6e03117027e4e13fcde55b981968ad1"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x1b) syz_io_uring_setup(0xcb0, &(0x7f0000000100)={0x0, 0xb601, 0x859, 0x5, 0x8032c}, 0x0, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default trusted:syz -9'], 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) write$binfmt_misc(r2, &(0x7f0000000dc0), 0x386) 4.009844929s ago: executing program 1 (id=969): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@deltaction={0x24, 0x31, 0x200, 0x70bd2d, 0x25dfdc02, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004800}, 0x4800) r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000240)=0x3, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002bc0)={&(0x7f00000004c0)=@ieee802154={0x24, @long={0x3, 0x1, {0x100}}}, 0x80, &(0x7f0000003e00)=[{&(0x7f0000000540)="a78d3d78c1fa7dbe7b108ecfd7dd133a447e3baeb98f9572bdada2d142d4747b539eac65f509485ba797e8f748479b5756a078d8d03752d631d74754c0050000004975ea02c753ffa7cbee6b96337b9547ea2b4bc562efd18fa3d384ee78e7b2ee8e8306f12b08861c99d146de0000", 0x6f}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000002600)="f7", 0x1}, {&(0x7f00000008c0)="f6ba53d46f4a3a8f16549d16e143893a9b999fe5a0c9c489205ca7adf8bec57e0ae21cadaf1660210e3cb14ffcfb70f5e5b03a5f8978e63ec8cc620abba9cb955408dd32eca2529eff0cc5b89c1ffcfe516b5d262bce807e6b36e6b25dfc89d27d7c5b11f7725c7975efb01c62f1c9bf5713b4078ae950026003c12b1517403abf70f123cc6c606e5a520f0103d978b9fcc96197cce6bd05f83233773c860bb0a0a95a57a66cff0266b825df903b1d1d5873c62c9545e6eeeb31fc98deb78b35f48493c6870171ee7cadee4f66b183047e36d091b3d74935bf7e7cd267dd9c815e5c982db1f355042ebb35fcd8608b1ec5b8a5a7d92011", 0xf7}, {&(0x7f00000009c0)="cf0c980bcfa41032194dc72f87671b379a059883fb8193c9f2d61cb6f3a82327ca80b9bd29f0d74536af713ef536e5c5a560e1d2caaa16a7b36efb1a2c59215c9f3b846bda1e2be4cac31393c6e80ded77bdbf1962298ffac3e48c7be63bbf3b10f463643b29a974fc843b3cef634d15eb09af1f20a65911705dd9d2947bd21c872840c6d9bbdb64ec1f8ea094f98ddb79b0083744b5cc428119fb7bd7fe7d0f4a35f947881227c8eb515dbc0cfc2f", 0xaf}, {&(0x7f0000002c00)="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", 0x1000}, {&(0x7f0000003c00)="3e22ec68280a50e0816c92fdc344d9c6008dfa47709643ad088d5b472bc890e901bf81fafbb6413b805400ff80d243480c926f5e423d54e9b61f22168114471613a8d8c847220a9c86649e2ec17a1111e7791b281772219223043879d15db8896258888e03dd3f51f6ba67200f07ff951d9b543bf520ead901663776a7c9479bab7700ea65612a04af783a516bf525b16bbcd319be053db53a70df4ecda623e0e333c024cdcf52e28d2afa", 0xab}, {&(0x7f0000003cc0)="7d9eb0a3ba03e9d5a2d70182020d179d75ce37676dd6424af59a16499e29c2785324039fb268ef274e970f71569c86bf1f22a142493eb1e60c1555bb8c78c792105011a9f24cf72800c84c1fb56c742d7368120e586c9022558f96a2a69c0c10aa20f798aec1df83c974c392a324d224b93d41c6a97662a3c61897f3da09f88b35ed5ec3a6f388d7bb38607a4e6914d2792ee687572cc8be4ce9a927480de163e0b0c15f445da5140dbe921ef5ba343b73ef25fa087e394b8270", 0xba}, {&(0x7f0000003d80)="956299814f615365a16d579fe5ccce750e83fe2730023a16165d5358cb9527422ba4893cada7b2c468c39a3be819539b7be8cb942c0460cad8b9e4aefbae766936cbeaa390e65f18b68e2d3241d7246da2", 0x51}], 0x9, &(0x7f0000000b40)=ANY=[], 0x518}, 0x4000040) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000ffe80a6c000000060a0104000000000000000002000000400004803c0001800c0001007061796c6f6164002c000280080004400000000008000540001c0001080003400000005508000240000000010800064000000002097a30000000c471d83bf99bfbfa000900020073797a3200000000140000001100010000000000"], 0x94}}, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x178, 0x24, 0x400, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0x0, 0xf}, {0x6}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x5, 0x5, 0xb599, 0x3, 0x6, 0x0, 0xfffffff6, 0x8, 0x5}}}}, @TCA_STAB={0x120, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x92, 0x3, 0x1, 0x0, 0x6f20, 0xf, 0x5}}, {0xe, 0x2, [0x200, 0x7f, 0x200, 0x90c, 0x6d2]}}, {{0x1c, 0x1, {0x6, 0x1, 0x8001, 0x3, 0x0, 0x2, 0xfffffff8, 0x3}}, {0xa, 0x2, [0x7, 0x11e4, 0x6]}}, {{0x1c, 0x1, {0xfe, 0x2, 0x9, 0xfffffff8, 0x2, 0xffff, 0x2, 0x3}}, {0xa, 0x2, [0x80, 0x7, 0x6]}}, {{0x1c, 0x1, {0x7, 0x0, 0x5, 0x400, 0x3, 0x7, 0x1, 0x2}}, {0x8, 0x2, [0x200, 0x8]}}, {{0x1c, 0x1, {0x5c, 0xc, 0x1, 0xdc, 0x2, 0x5, 0xbe, 0x6}}, {0x10, 0x2, [0x4, 0x4, 0x2, 0x5, 0x5, 0xd88]}}, {{0x1c, 0x1, {0x7, 0x4, 0x2, 0x20000, 0x0, 0x7, 0x7, 0x8}}, {0x14, 0x2, [0xff, 0x9, 0xfffc, 0xa0, 0x401, 0x1, 0x7c9, 0x9]}}, {{0x1c, 0x1, {0x1, 0x4, 0x5, 0xfffffffe, 0x0, 0xfffffffe, 0x1}}, {0x4}}]}]}, 0x178}}, 0x20048090) socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x482) readv(r3, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/147, 0x93}], 0x1) readv(r3, &(0x7f00000015c0)=[{&(0x7f00000001c0)=""/180, 0xb4}], 0x1) timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000006, @tid=r2}, &(0x7f0000bbdffc)) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101041, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000005c0)={0x1fe, 0x4, 0x40000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000180)=[@cr4={0x1, 0x40002}], 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000008000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f00000003c0)="0f0d51f40f01d10fc75800f30fc73600102ed5c01dc0000000008ec0640f017400aa66b9e408000066b81f6269e766ba000000000f309c0c0cb8d09bbc8966efbafc0cedba4300ba210066ed3626f00fc70d", 0x52}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80000) ppoll(&(0x7f00000000c0)=[{r7}, {r7, 0x1}], 0x2, 0x0, 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00'}) r9 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r9, 0xc0745645, &(0x7f0000000680)={0x9, [0x4, 0x9, 0x1d, 0x80, 0x120, 0x4f3b, 0x5, 0x5, 0x8, 0x0, 0x7, 0x401, 0x3, 0x3, 0x2, 0x8, 0x81, 0x20, 0x4, 0x4, 0xf4a0, 0x8000, 0x1, 0x2, 0x2, 0x7, 0x52, 0x8, 0x2, 0x8, 0x9, 0x8, 0x4, 0x7, 0x724d, 0x3, 0xfff9, 0x0, 0x8, 0x1, 0x5, 0xfffd, 0x4f7, 0x82f8, 0x1, 0xfff6, 0x9, 0x8], 0x7}) 3.687327398s ago: executing program 6 (id=970): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r2 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x4, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x4000006, 0x1, 0x4}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x1, {0x1, @win={{0x0, 0x0, 0x4}, 0x6, 0x6, 0x0, 0x0, 0x0, 0x9}}}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x8083) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) r8 = mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000004a40)={0x58, 0x0, &(0x7f0000000800)=[@free_buffer={0x40086303, r8}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000600)={@flat=@binder={0x73622a85, 0x1001, 0x2}, @fda={0x66646185, 0x4, 0x1, 0x34}, @ptr={0x70742a85, 0x0, &(0x7f0000000500)=""/255, 0xff, 0x1, 0x11}}, &(0x7f0000000680)={0x0, 0x18, 0x38}}, 0x1000}], 0x0, 0x0, 0x0}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r9, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x1, 0x3, 0x67a7}}, 0x30) 579.973435ms ago: executing program 1 (id=971): socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x21000000}) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r4) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0xd0, r7, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9609}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80c}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xc}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', 0x8, 0x1) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00}) fsopen(0x0, 0x0) socket(0x2b, 0xa, 0x3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a500000005d84b5060a010400000000000000000a0010010900010073797a310000000024000480200001800700010063740000140002800800014000000001080002400000000b090002007324797a3200000000140000001100010000000000000000000200000a"], 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r9 = dup(r8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x12, r9, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20902, 0x0) 0s ago: executing program 6 (id=972): openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040100010300000009210000000122020009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "58e1fa4f"}]}}, 0x0}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) syz_clone3(&(0x7f0000000180)={0x41288a80, 0x0, 0x0, 0x0, {}, &(0x7f0000000100), 0x0, 0x0, 0x0}, 0x58) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001600)=ANY=[@ANYBLOB="f400ae000000000000000000000000000000a26ad0137f435ef53709533d03ea81a8a9d61355f1ff9f31d98eac5ce9c53c75091f822aed7e201d85425f7908f6fa39e75ec73f3166898418526b454af8b7f38df3afb29e9c914364e7ae31b9147608651d4bf1ea7221ecbc7859"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r2, &(0x7f0000006900)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001e40)=""/4101, 0x1005}, {&(0x7f00000013c0)=""/232, 0xe8}, {&(0x7f0000001680)=""/181, 0xb5}], 0x3}, 0x5}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000001b80)=""/130, 0x82}, {&(0x7f0000003340)=""/4096, 0x1000}, {&(0x7f0000001840)=""/165, 0xa5}, {&(0x7f0000000000)=""/164, 0xa4}, {&(0x7f0000002e80)=""/251, 0xfb}, {&(0x7f0000001500)=""/245, 0xf5}, {&(0x7f0000001d40)=""/249, 0xf9}, {&(0x7f0000000200)=""/115, 0x73}, {&(0x7f00000000c0)=""/98, 0x62}, {&(0x7f0000001900)=""/94, 0x5e}, {&(0x7f0000001a80)=""/85, 0x55}], 0xb}, 0x81}], 0x4, 0x10030, 0x0) write$binfmt_script(r1, &(0x7f0000000140), 0x4) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TCXONC(r4, 0x540a, 0x2) ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f0000000000)) r5 = ioctl$TIOCGPTPEER(r4, 0x5441, 0xb3d) ioctl$TCXONC(r5, 0x540a, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000000)="3e1c1adaceb67a6f219b124f8d60f2f9", 0x10) r7 = accept4(r6, 0x0, 0x0, 0x80800) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0xf0b, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0xffff, 0xffff}}}, 0x24}}, 0xc080) sendmmsg$unix(r7, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}], 0x1, 0x40050) sendfile(r3, r1, 0x0, 0x8010002b) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0xe) syz_usb_ep_read(r0, 0x2, 0x34, &(0x7f00000000c0)=""/52) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)={0x0, 0x14, 0xd, "5e6424818327b2369deca65eb2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f00000014c0)=0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) kernel console output (not intermixed with test programs): [ 241.066826][ T7685] [ 241.066835][ T7685] dump_stack_lvl+0xe8/0x150 [ 241.066868][ T7685] should_fail_ex+0x412/0x560 [ 241.066899][ T7685] should_failslab+0xa8/0x100 [ 241.066932][ T7685] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 241.066959][ T7685] ? __alloc_skb+0x186/0x7d0 [ 241.066981][ T7685] ? __alloc_skb+0x1d0/0x7d0 [ 241.067001][ T7685] ? __local_bh_enable_ip+0xd0/0x130 [ 241.067028][ T7685] __alloc_skb+0x1d0/0x7d0 [ 241.067055][ T7685] sock_wmalloc+0xb2/0x130 [ 241.067084][ T7685] pppol2tp_sendmsg+0x183/0x5f0 [ 241.067123][ T7685] ____sys_sendmsg+0x972/0x9f0 [ 241.067148][ T7685] ? __might_fault+0xaf/0x130 [ 241.067181][ T7685] ? __pfx_____sys_sendmsg+0x10/0x10 [ 241.067216][ T7685] ? import_iovec+0x73/0xa0 [ 241.067258][ T7685] ___sys_sendmsg+0x2a5/0x360 [ 241.067282][ T7685] ? __lock_acquire+0x6b5/0x2cf0 [ 241.067309][ T7685] ? __pfx____sys_sendmsg+0x10/0x10 [ 241.067331][ T7685] ? __lock_acquire+0x6b5/0x2cf0 [ 241.067357][ T7685] ? kstrtouint+0x6e/0xe0 [ 241.067421][ T7685] __sys_sendmmsg+0x27c/0x4e0 [ 241.067451][ T7685] ? __pfx___sys_sendmmsg+0x10/0x10 [ 241.067475][ T7685] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 241.067524][ T7685] ? ksys_write+0x242/0x270 [ 241.067554][ T7685] ? __pfx_ksys_write+0x10/0x10 [ 241.067595][ T7685] __x64_sys_sendmmsg+0xa0/0xc0 [ 241.067621][ T7685] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.067643][ T7685] do_syscall_64+0x15f/0xf80 [ 241.067664][ T7685] ? trace_irq_disable+0x3b/0x140 [ 241.067694][ T7685] ? clear_bhb_loop+0x40/0x90 [ 241.067717][ T7685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.067736][ T7685] RIP: 0033:0x7f0c0b19cdd9 [ 241.067757][ T7685] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.067775][ T7685] RSP: 002b:00007f0c0c0fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 241.067798][ T7685] RAX: ffffffffffffffda RBX: 00007f0c0b415fa0 RCX: 00007f0c0b19cdd9 [ 241.067813][ T7685] RDX: 0000000000034000 RSI: 0000200000004380 RDI: 0000000000000004 [ 241.067826][ T7685] RBP: 00007f0c0c0fe090 R08: 0000000000000000 R09: 0000000000000000 [ 241.067838][ T7685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 241.067850][ T7685] R13: 00007f0c0b416038 R14: 00007f0c0b415fa0 R15: 00007f0c0b53fa48 [ 241.067882][ T7685] [ 241.655478][ T807] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14385, setting to 1024 [ 241.692472][ T807] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 241.751021][ T807] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 241.805946][ T807] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.864548][ T807] usb 1-1: config 0 descriptor?? [ 241.898510][ T7677] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 242.050407][ T7693] random: crng reseeded on system resumption [ 242.638523][ T7694] FAULT_INJECTION: forcing a failure. [ 242.638523][ T7694] name failslab, interval 1, probability 0, space 0, times 0 [ 242.710346][ T7694] CPU: 0 UID: 0 PID: 7694 Comm: syz.1.584 Tainted: G L syzkaller #0 PREEMPT(full) [ 242.710371][ T7694] Tainted: [L]=SOFTLOCKUP [ 242.710375][ T7694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 242.710383][ T7694] Call Trace: [ 242.710388][ T7694] [ 242.710394][ T7694] dump_stack_lvl+0xe8/0x150 [ 242.710414][ T7694] should_fail_ex+0x412/0x560 [ 242.710432][ T7694] should_failslab+0xa8/0x100 [ 242.710452][ T7694] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 242.710469][ T7694] ? __alloc_skb+0x186/0x7d0 [ 242.710482][ T7694] ? __alloc_skb+0x1d0/0x7d0 [ 242.710494][ T7694] ? __local_bh_enable_ip+0xd0/0x130 [ 242.710509][ T7694] __alloc_skb+0x1d0/0x7d0 [ 242.710525][ T7694] alloc_skb_with_frags+0xc8/0x760 [ 242.710539][ T7694] ? __lock_acquire+0x6b5/0x2cf0 [ 242.710557][ T7694] sock_alloc_send_pskb+0x878/0x990 [ 242.710587][ T7694] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 242.710605][ T7694] ? sock_def_readable+0xae/0x550 [ 242.710626][ T7694] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 242.710646][ T7694] unix_dgram_sendmsg+0x460/0x18d0 [ 242.710688][ T7694] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 242.710711][ T7694] ? count_memcg_event_mm+0x21/0x260 [ 242.710736][ T7694] ? aa_sock_msg_perm+0xda/0x1b0 [ 242.710765][ T7694] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 242.710788][ T7694] ____sys_sendmsg+0x972/0x9f0 [ 242.710803][ T7694] ? __might_fault+0xaf/0x130 [ 242.710821][ T7694] ? __pfx_____sys_sendmsg+0x10/0x10 [ 242.710841][ T7694] ? import_iovec+0x73/0xa0 [ 242.710860][ T7694] ___sys_sendmsg+0x2a5/0x360 [ 242.710878][ T7694] ? __pfx____sys_sendmsg+0x10/0x10 [ 242.710891][ T7694] ? __lock_acquire+0x6b5/0x2cf0 [ 242.710931][ T7694] __sys_sendmmsg+0x27c/0x4e0 [ 242.710949][ T7694] ? __pfx___sys_sendmmsg+0x10/0x10 [ 242.710963][ T7694] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 242.710992][ T7694] ? ksys_write+0x242/0x270 [ 242.711010][ T7694] ? __pfx_ksys_write+0x10/0x10 [ 242.711030][ T7694] __x64_sys_sendmmsg+0xa0/0xc0 [ 242.711045][ T7694] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.711058][ T7694] do_syscall_64+0x15f/0xf80 [ 242.711071][ T7694] ? trace_irq_disable+0x3b/0x140 [ 242.711089][ T7694] ? clear_bhb_loop+0x40/0x90 [ 242.711103][ T7694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.711115][ T7694] RIP: 0033:0x7f0c0b19cdd9 [ 242.711133][ T7694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.711144][ T7694] RSP: 002b:00007f0c0c0fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 242.711160][ T7694] RAX: ffffffffffffffda RBX: 00007f0c0b415fa0 RCX: 00007f0c0b19cdd9 [ 242.711169][ T7694] RDX: 0000000000000318 RSI: 00002000000bd000 RDI: 0000000000000004 [ 242.711177][ T7694] RBP: 00007f0c0c0fe090 R08: 0000000000000000 R09: 0000000000000000 [ 242.711184][ T7694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 242.711192][ T7694] R13: 00007f0c0b416038 R14: 00007f0c0b415fa0 R15: 00007f0c0b53fa48 [ 242.711210][ T7694] [ 243.588009][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 246.874302][ T5791] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 247.037983][ T7753] netlink: 'syz.3.603': attribute type 1 has an invalid length. [ 247.120526][ T5791] usb 3-1: Using ep0 maxpacket: 32 [ 247.158332][ T5791] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 247.221676][ T5791] usb 3-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 247.252717][ T5791] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.286520][ T5791] usb 3-1: Product: Ð [ 247.294421][ T5791] usb 3-1: Manufacturer: 鄂魡⥫蟻禫㨰㧩꣫괾겚蛩鱴阓꺶ï™ë·‹ã†¢íŸªç½éŠˆê‹žê¿¦ï²´ã°´äƒºæž‹ë¤°ì¡ä„Šë¯±á˜‹ê²´â¢ªå³Šî¨Šé½µæ»¡â€¡ì¿¨êœ¶é‘›á“–绲鳤婈찥͹ꕉഒﶸடâ½êŒíŽšâŽ¾áªœè«©â¼šì®œÖ㎗죬ꀴî±âº¤çŒ¾ï’¶ë»Šéº¨å¨¾é§¤çŒê‘¶æ¡­ç™©ï›©Ø›é¥ªæ™–䀄䈤츆蹬ຫ龰먭⛧䒨疸뗵ﯡⶨＰ駀䈶㥇áŒæ’™ß”䫬਑鯥 [ 247.423391][ T5791] usb 3-1: SerialNumber: syz [ 247.439043][ T7753] 8021q: adding VLAN 0 to HW filter on device bond2 [ 247.608754][ T7755] vlan2: entered allmulticast mode [ 247.645454][ T7755] veth0_to_bond: entered allmulticast mode [ 247.783812][ T7755] bond2: (slave vlan2): making interface the new active one [ 247.870068][ T7755] bond2: (slave vlan2): Enslaving as an active interface with an up link [ 248.010858][ T5791] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 248.104215][ T5791] usb 3-1: USB disconnect, device number 31 [ 248.995130][ T7769] netlink: 20 bytes leftover after parsing attributes in process `syz.2.606'. [ 249.117708][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 249.458607][ T7763] loop2: detected capacity change from 0 to 7 [ 250.306508][ T7763] Dev loop2: unable to read RDB block 7 [ 250.420847][ T7763] loop2: AHDI p2 p3 [ 250.527989][ T7763] loop2: partition table partially beyond EOD, truncated [ 250.863035][ T4992] Dev loop2: unable to read RDB block 7 [ 250.887815][ T4992] loop2: AHDI p2 p3 [ 250.907218][ T4992] loop2: partition table partially beyond EOD, truncated [ 251.317784][ T9] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 252.048683][ T7800] fuse: Bad value for 'fd' [ 253.244414][ T7813] binder: BINDER_SET_CONTEXT_MGR already set [ 253.295298][ T7813] binder: 7811:7813 ioctl 4018620d 200000004a80 returned -16 [ 253.367890][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 253.390948][ T7813] binder: 7811:7813 ioctl c0306201 200000004a40 returned -14 [ 253.584592][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 253.636197][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.679878][ T9] usb 2-1: Product: syz [ 253.701054][ T9] usb 2-1: Manufacturer: syz [ 253.722256][ T9] usb 2-1: SerialNumber: syz [ 254.277161][ T7828] hmó3)ó: entered promiscuous mode [ 254.294902][ T7834] FAULT_INJECTION: forcing a failure. [ 254.294902][ T7834] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 254.300373][ T9] net_ratelimit: 442 callbacks suppressed [ 254.300398][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 254.365878][ T7834] CPU: 1 UID: 0 PID: 7834 Comm: syz.4.627 Tainted: G L syzkaller #0 PREEMPT(full) [ 254.365915][ T7834] Tainted: [L]=SOFTLOCKUP [ 254.365922][ T7834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 254.365934][ T7834] Call Trace: [ 254.365942][ T7834] [ 254.365952][ T7834] dump_stack_lvl+0xe8/0x150 [ 254.365983][ T7834] should_fail_ex+0x412/0x560 [ 254.366016][ T7834] _copy_to_user+0x31/0xb0 [ 254.366047][ T7834] simple_read_from_buffer+0xe1/0x170 [ 254.366077][ T7834] proc_fail_nth_read+0x1bb/0x230 [ 254.366107][ T7834] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 254.366137][ T7834] ? rw_verify_area+0x2a6/0x4d0 [ 254.366172][ T7834] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 254.366199][ T7834] vfs_read+0x20c/0xa70 [ 254.366233][ T7834] ? __pfx___mutex_lock+0x10/0x10 [ 254.366258][ T7834] ? __pfx_vfs_read+0x10/0x10 [ 254.366287][ T7834] ? __fget_files+0x2a/0x420 [ 254.366316][ T7834] ? __fget_files+0x3a0/0x420 [ 254.366339][ T7834] ? __fget_files+0x2a/0x420 [ 254.366370][ T7834] ksys_read+0x150/0x270 [ 254.366401][ T7834] ? __pfx_ksys_read+0x10/0x10 [ 254.366437][ T7834] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.366459][ T7834] do_syscall_64+0x15f/0xf80 [ 254.366481][ T7834] ? trace_irq_disable+0x3b/0x140 [ 254.366510][ T7834] ? clear_bhb_loop+0x40/0x90 [ 254.366536][ T7834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.366556][ T7834] RIP: 0033:0x7f074895d60e [ 254.366575][ T7834] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 254.366593][ T7834] RSP: 002b:00007f07497b6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 254.366616][ T7834] RAX: ffffffffffffffda RBX: 00007f07497b76c0 RCX: 00007f074895d60e [ 254.366631][ T7834] RDX: 000000000000000f RSI: 00007f07497b70a0 RDI: 0000000000000004 [ 254.366643][ T7834] RBP: 00007f07497b7090 R08: 0000000000000000 R09: 0000000000000000 [ 254.366656][ T7834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.366668][ T7834] R13: 00007f0748c16038 R14: 00007f0748c15fa0 R15: 00007f0748d3fa48 [ 254.366701][ T7834] [ 254.397676][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 255.201704][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 255.379856][ T9] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 255.491431][ T9] usb 2-1: USB disconnect, device number 18 [ 255.790481][ T7847] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 256.020273][ T30] audit: type=1400 audit(1777341183.096:160): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=7837 comm="syz.4.628" [ 256.042174][ T7859] syzkaller0: entered promiscuous mode [ 256.061777][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.071501][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.084607][ T7859] syzkaller0: entered allmulticast mode [ 256.152313][ T7859] 0: reclassify loop, rule prio 0, protocol 800 [ 256.499514][ T7866] netlink: 'syz.3.632': attribute type 4 has an invalid length. [ 256.697743][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 257.339618][ T7873] netlink: 'syz.2.637': attribute type 2 has an invalid length. [ 257.518309][ T7868] vlan3: entered allmulticast mode [ 257.544463][ T7868] veth0_to_bond: entered allmulticast mode [ 258.096842][ T7883] tipc: Enabling of bearer rejected, failed to enable media [ 258.222838][ T7885] netlink: 20 bytes leftover after parsing attributes in process `syz.0.643'. [ 259.378497][ T7906] netlink: 64691 bytes leftover after parsing attributes in process `syz.1.648'. [ 259.655995][ T7910] raw_sendmsg: syz.1.648 forgot to set AF_INET. Fix it! [ 259.929469][ T7906] netlink: 20 bytes leftover after parsing attributes in process `syz.1.648'. [ 260.699809][ T7923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.745708][ T7923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.938019][ T29] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 261.127820][ T29] usb 3-1: Using ep0 maxpacket: 16 [ 261.152781][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 261.201461][ T29] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 261.249734][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 36816, setting to 1024 [ 261.298657][ T29] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 261.342970][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12161, setting to 1024 [ 261.377467][ T29] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 261.416574][ T29] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 261.441567][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.474063][ T29] usb 3-1: Product: syz [ 261.493207][ T29] usb 3-1: Manufacturer: syz [ 261.511886][ T29] usb 3-1: SerialNumber: syz [ 261.563000][ T29] usb 3-1: config 0 descriptor?? [ 261.586198][ T7922] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 261.614605][ T7922] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 261.765330][ C1] mcba_usb 3-1:0.0 can0: Tx URB aborted (-71) [ 261.783944][ T29] mcba_usb 3-1:0.0: Microchip CAN BUS Analyzer connected [ 261.791482][ C1] mcba_usb 3-1:0.0 can0: Tx URB aborted (-71) [ 261.868265][ T7923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.913560][ T7923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.854083][ T7932] binder: 7925:7932 ioctl 4018620d 0 returned -22 [ 263.184261][ T7940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.295692][ T7940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.398413][ T29] usb 3-1: USB disconnect, device number 33 [ 263.439889][ T29] mcba_usb 3-1:0.0 can0: device disconnected [ 264.700423][ T7959] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 265.909928][ T7977] netlink: 'syz.1.667': attribute type 1 has an invalid length. [ 266.391473][ T7977] bond1: entered promiscuous mode [ 266.400681][ T7977] 8021q: adding VLAN 0 to HW filter on device bond1 [ 266.649662][ T7994] netlink: 8 bytes leftover after parsing attributes in process `syz.0.672'. [ 266.721603][ T7986] vlan3: entered allmulticast mode [ 266.743020][ T7994] FAULT_INJECTION: forcing a failure. [ 266.743020][ T7994] name failslab, interval 1, probability 0, space 0, times 0 [ 266.787277][ T7986] bond1: entered allmulticast mode [ 266.897316][ T7994] CPU: 0 UID: 0 PID: 7994 Comm: syz.0.672 Tainted: G L syzkaller #0 PREEMPT(full) [ 266.897352][ T7994] Tainted: [L]=SOFTLOCKUP [ 266.897360][ T7994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 266.897372][ T7994] Call Trace: [ 266.897380][ T7994] [ 266.897389][ T7994] dump_stack_lvl+0xe8/0x150 [ 266.897420][ T7994] should_fail_ex+0x412/0x560 [ 266.897453][ T7994] should_failslab+0xa8/0x100 [ 266.897484][ T7994] ? skb_clone+0x212/0x3a0 [ 266.897511][ T7994] kmem_cache_alloc_noprof+0x87/0x650 [ 266.897548][ T7994] skb_clone+0x212/0x3a0 [ 266.897583][ T7994] __netlink_deliver_tap+0x404/0x850 [ 266.897620][ T7994] ? netlink_deliver_tap+0x2e/0x1b0 [ 266.897647][ T7994] netlink_deliver_tap+0x19c/0x1b0 [ 266.897672][ T7994] netlink_sendskb+0x68/0x140 [ 266.897697][ T7994] netlink_rcv_skb+0x2b6/0x4b0 [ 266.897721][ T7994] ? __pfx_genl_rcv_msg+0x10/0x10 [ 266.897751][ T7994] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 266.897794][ T7994] ? down_read+0x270/0x2e0 [ 266.897817][ T7994] ? genl_rcv+0xd/0x40 [ 266.897846][ T7994] genl_rcv+0x28/0x40 [ 266.897873][ T7994] netlink_unicast+0x75c/0x8e0 [ 266.897907][ T7994] netlink_sendmsg+0x813/0xb40 [ 266.897943][ T7994] ? __pfx_netlink_sendmsg+0x10/0x10 [ 266.897972][ T7994] ? aa_sock_msg_perm+0xf1/0x1b0 [ 266.898001][ T7994] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 266.898033][ T7994] ____sys_sendmsg+0x972/0x9f0 [ 266.898059][ T7994] ? __might_fault+0xaf/0x130 [ 266.898092][ T7994] ? __pfx_____sys_sendmsg+0x10/0x10 [ 266.898129][ T7994] ? import_iovec+0x73/0xa0 [ 266.898171][ T7994] ___sys_sendmsg+0x2a5/0x360 [ 266.898195][ T7994] ? __lock_acquire+0x6b5/0x2cf0 [ 266.898224][ T7994] ? __pfx____sys_sendmsg+0x10/0x10 [ 266.898291][ T7994] ? __fget_files+0x2a/0x420 [ 266.898314][ T7994] ? __fget_files+0x3a0/0x420 [ 266.898350][ T7994] __x64_sys_sendmsg+0x1bd/0x2a0 [ 266.898380][ T7994] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 266.898415][ T7994] ? __pfx_ksys_write+0x10/0x10 [ 266.898454][ T7994] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.898478][ T7994] do_syscall_64+0x15f/0xf80 [ 266.898499][ T7994] ? trace_irq_disable+0x3b/0x140 [ 266.898529][ T7994] ? clear_bhb_loop+0x40/0x90 [ 266.898555][ T7994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.898575][ T7994] RIP: 0033:0x7f769e99cdd9 [ 266.898595][ T7994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 266.898613][ T7994] RSP: 002b:00007f769f806028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 266.898637][ T7994] RAX: ffffffffffffffda RBX: 00007f769ec15fa0 RCX: 00007f769e99cdd9 [ 266.898652][ T7994] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 266.898665][ T7994] RBP: 00007f769f806090 R08: 0000000000000000 R09: 0000000000000000 [ 266.898678][ T7994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 266.898691][ T7994] R13: 00007f769ec16038 R14: 00007f769ec15fa0 R15: 00007f769ed3fa48 [ 266.898725][ T7994] [ 268.138435][ T8010] xt_TCPMSS: Only works on TCP SYN packets [ 268.356490][ T7988] bond1: (slave bridge1): making interface the new active one [ 268.366278][ T7988] bridge1: entered promiscuous mode [ 268.382808][ T7988] bridge1: entered allmulticast mode [ 268.410588][ T7988] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 268.739464][ T8010] sit1: entered allmulticast mode [ 268.799860][ T8024] netlink: 28 bytes leftover after parsing attributes in process `syz.1.679'. [ 270.494005][ T8045] netlink: 4 bytes leftover after parsing attributes in process `syz.0.686'. [ 271.391420][ T5791] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 271.610997][ T5791] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.685710][ T5791] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.749192][ T5791] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 271.808323][ T5791] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.880857][ T5791] usb 3-1: config 0 descriptor?? [ 272.433770][ T8065] netlink: 144 bytes leftover after parsing attributes in process `syz.4.695'. [ 272.523439][ T30] audit: type=1326 audit(1777341199.616:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8064 comm="syz.3.694" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5170f9cdd9 code=0x0 [ 273.043336][ T5791] usbhid 3-1:0.0: can't add hid device: -71 [ 273.084831][ T5791] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 273.164628][ T5791] usb 3-1: USB disconnect, device number 34 [ 273.239860][ T8069] loop4: detected capacity change from 0 to 2640 [ 273.279151][ T8069] buffer_io_error: 9 callbacks suppressed [ 273.279170][ T8069] Buffer I/O error on dev loop4, logical block 0, async page read [ 273.355204][ T8069] Buffer I/O error on dev loop4, logical block 0, async page read [ 273.397939][ T8069] Buffer I/O error on dev loop4, logical block 0, async page read [ 273.468410][ T8069] Buffer I/O error on dev loop4, logical block 0, async page read [ 273.529683][ T8069] Buffer I/O error on dev loop4, logical block 0, async page read [ 273.574066][ T8069] Buffer I/O error on dev loop4, logical block 0, async page read [ 273.611638][ T8069] Buffer I/O error on dev loop4, logical block 0, async page read [ 273.657334][ T8069] Buffer I/O error on dev loop4, logical block 0, async page read [ 273.693730][ T8069] ldm_validate_partition_table(): Disk read failed. [ 273.736318][ T8069] Buffer I/O error on dev loop4, logical block 0, async page read [ 273.786571][ T8069] Buffer I/O error on dev loop4, logical block 0, async page read [ 273.828378][ T8069] Dev loop4: unable to read RDB block 0 [ 273.862587][ T8069] loop4: unable to read partition table [ 273.911549][ T8069] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 274.419931][ T8073] netlink: zone id is out of range [ 274.458715][ T8073] netlink: zone id is out of range [ 274.489826][ T8073] netlink: zone id is out of range [ 274.525964][ T8073] netlink: zone id is out of range [ 274.564901][ T8073] netlink: zone id is out of range [ 274.593611][ T8073] netlink: zone id is out of range [ 274.630121][ T8073] netlink: zone id is out of range [ 274.659744][ T8073] netlink: zone id is out of range [ 274.686686][ T8073] netlink: zone id is out of range [ 274.716362][ T8073] netlink: zone id is out of range [ 274.847992][ T9] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 275.073777][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 275.113574][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 275.161473][ T9] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 275.188048][ T9] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 275.217515][ T9] usb 2-1: Product: syz [ 275.235330][ T9] usb 2-1: Manufacturer: syz [ 275.249993][ T9] usb 2-1: SerialNumber: syz [ 275.289565][ T9] usb 2-1: config 0 descriptor?? [ 275.330061][ T8080] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 275.378643][ T9] hub 2-1:0.0: bad descriptor, ignoring hub [ 275.433102][ T9] hub 2-1:0.0: probe with driver hub failed with error -5 [ 275.768640][ T5690] usb 2-1: USB disconnect, device number 19 [ 276.031288][ T8106] netlink: 'syz.3.708': attribute type 1 has an invalid length. [ 276.288054][ T5690] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 276.376832][ T5691] hid_parser_main: 29 callbacks suppressed [ 276.376850][ T5691] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 276.438176][ T8113] netlink: 8 bytes leftover after parsing attributes in process `syz.0.710'. [ 276.438421][ T8113] FAULT_INJECTION: forcing a failure. [ 276.438421][ T8113] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 276.438463][ T8113] CPU: 1 UID: 0 PID: 8113 Comm: syz.0.710 Tainted: G L syzkaller #0 PREEMPT(full) [ 276.438490][ T8113] Tainted: [L]=SOFTLOCKUP [ 276.438498][ T8113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 276.438509][ T8113] Call Trace: [ 276.438517][ T8113] [ 276.438525][ T8113] dump_stack_lvl+0xe8/0x150 [ 276.438555][ T8113] should_fail_ex+0x412/0x560 [ 276.438584][ T8113] _copy_to_user+0x31/0xb0 [ 276.438616][ T8113] simple_read_from_buffer+0xe1/0x170 [ 276.438645][ T8113] proc_fail_nth_read+0x1bb/0x230 [ 276.438674][ T8113] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 276.438703][ T8113] ? rw_verify_area+0x2a6/0x4d0 [ 276.438730][ T8113] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 276.438756][ T8113] vfs_read+0x20c/0xa70 [ 276.438790][ T8113] ? __pfx___mutex_lock+0x10/0x10 [ 276.438815][ T8113] ? __pfx_vfs_read+0x10/0x10 [ 276.438845][ T8113] ? __fget_files+0x2a/0x420 [ 276.438873][ T8113] ? __fget_files+0x3a0/0x420 [ 276.438896][ T8113] ? __fget_files+0x2a/0x420 [ 276.438928][ T8113] ksys_read+0x150/0x270 [ 276.438959][ T8113] ? __pfx_ksys_read+0x10/0x10 [ 276.438995][ T8113] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.439017][ T8113] do_syscall_64+0x15f/0xf80 [ 276.439049][ T8113] ? trace_irq_disable+0x3b/0x140 [ 276.439079][ T8113] ? clear_bhb_loop+0x40/0x90 [ 276.439104][ T8113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.439124][ T8113] RIP: 0033:0x7f769e95d60e [ 276.439144][ T8113] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 276.439162][ T8113] RSP: 002b:00007f769f805fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 276.439184][ T8113] RAX: ffffffffffffffda RBX: 00007f769f8066c0 RCX: 00007f769e95d60e [ 276.439199][ T8113] RDX: 000000000000000f RSI: 00007f769f8060a0 RDI: 0000000000000004 [ 276.439212][ T8113] RBP: 00007f769f806090 R08: 0000000000000000 R09: 0000000000000000 [ 276.439224][ T8113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 276.439235][ T8113] R13: 00007f769ec16038 R14: 00007f769ec15fa0 R15: 00007f769ed3fa48 [ 276.439268][ T8113] [ 276.447740][ T5690] usb 2-1: device descriptor read/64, error -71 [ 276.476349][ T5691] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 276.485780][ T8106] 8021q: adding VLAN 0 to HW filter on device bond3 [ 276.628293][ T5720] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 276.710665][ T5690] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 276.810046][ T5720] usb 3-1: descriptor type invalid, skip [ 276.810959][ T5720] usb 3-1: not running at top speed; connect to a high speed hub [ 276.833807][ T5720] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 58, changing to 4 [ 276.833853][ T5720] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023 [ 276.839453][ T5690] usb 2-1: device descriptor read/64, error -71 [ 276.846868][ T5720] usb 3-1: New USB device found, idVendor=0582, idProduct=0008, bcdDevice= 0.40 [ 276.846903][ T5720] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.846931][ T5720] usb 3-1: Product: syz [ 276.846947][ T5720] usb 3-1: Manufacturer: syz [ 276.846962][ T5720] usb 3-1: SerialNumber: syz [ 276.959172][ T5690] usb usb2-port1: attempt power cycle [ 277.264166][ T8123] netlink: 4 bytes leftover after parsing attributes in process `syz.0.713'. [ 277.317849][ T5690] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 277.350860][ T5690] usb 2-1: device descriptor read/8, error -71 [ 277.607792][ T5690] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 277.686988][ T5690] usb 2-1: device descriptor read/8, error -71 [ 277.790262][ T5690] usb usb2-port1: unable to enumerate USB device [ 278.521140][ T8104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.521665][ T8104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.295565][ T8134] FAULT_INJECTION: forcing a failure. [ 279.295565][ T8134] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 279.838199][ T8134] CPU: 0 UID: 0 PID: 8134 Comm: syz.1.717 Tainted: G L syzkaller #0 PREEMPT(full) [ 279.838240][ T8134] Tainted: [L]=SOFTLOCKUP [ 279.838247][ T8134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 279.838260][ T8134] Call Trace: [ 279.838267][ T8134] [ 279.838285][ T8134] dump_stack_lvl+0xe8/0x150 [ 279.838315][ T8134] should_fail_ex+0x412/0x560 [ 279.838347][ T8134] _copy_from_user+0x2d/0xb0 [ 279.838376][ T8134] ___sys_sendmsg+0x1c6/0x360 [ 279.838402][ T8134] ? __lock_acquire+0x6b5/0x2cf0 [ 279.838430][ T8134] ? __pfx____sys_sendmsg+0x10/0x10 [ 279.838454][ T8134] ? __lock_acquire+0x6b5/0x2cf0 [ 279.838481][ T8134] ? kstrtouint+0x6e/0xe0 [ 279.838544][ T8134] __sys_sendmmsg+0x27c/0x4e0 [ 279.838577][ T8134] ? __pfx___sys_sendmmsg+0x10/0x10 [ 279.838600][ T8134] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 279.838652][ T8134] ? ksys_write+0x242/0x270 [ 279.838683][ T8134] ? __pfx_ksys_write+0x10/0x10 [ 279.838719][ T8134] __x64_sys_sendmmsg+0xa0/0xc0 [ 279.838745][ T8134] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.838767][ T8134] do_syscall_64+0x15f/0xf80 [ 279.838788][ T8134] ? trace_irq_disable+0x3b/0x140 [ 279.838818][ T8134] ? clear_bhb_loop+0x40/0x90 [ 279.838844][ T8134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.838864][ T8134] RIP: 0033:0x7f0c0b19cdd9 [ 279.838884][ T8134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 279.838901][ T8134] RSP: 002b:00007f0c0c0fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 279.838924][ T8134] RAX: ffffffffffffffda RBX: 00007f0c0b415fa0 RCX: 00007f0c0b19cdd9 [ 279.838939][ T8134] RDX: 0000000000034000 RSI: 0000200000004380 RDI: 0000000000000004 [ 279.838952][ T8134] RBP: 00007f0c0c0fe090 R08: 0000000000000000 R09: 0000000000000000 [ 279.838965][ T8134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 279.838977][ T8134] R13: 00007f0c0b416038 R14: 00007f0c0b415fa0 R15: 00007f0c0b53fa48 [ 279.839009][ T8134] [ 280.820523][ T8139] netlink: 'syz.3.718': attribute type 1 has an invalid length. [ 281.127785][ T5791] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 281.244049][ T8139] bond4: entered promiscuous mode [ 281.280837][ T8139] 8021q: adding VLAN 0 to HW filter on device bond4 [ 281.440936][ T8146] vlan3: entered allmulticast mode [ 281.461968][ T8146] bond4: entered allmulticast mode [ 281.588960][ T8147] bond4: (slave bridge1): making interface the new active one [ 281.637891][ T8147] bridge1: entered promiscuous mode [ 281.671254][ T8147] bridge1: entered allmulticast mode [ 281.712549][ T8147] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 282.111089][ T5720] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 282.153635][ T5720] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 282.237011][ T5720] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 282.299428][ T5720] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 282.382184][ T5720] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 282.538051][ T5791] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 282.761070][ T5791] usb 2-1: config 9 has an invalid interface number: 164 but max is 1 [ 282.797867][ T5791] usb 2-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 282.844604][ T5791] usb 2-1: config 9 has 1 interface, different from the descriptor's value: 2 [ 282.856794][ T5706] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 282.917703][ T5791] usb 2-1: config 9 has no interface number 0 [ 282.919723][ T5720] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 282.961363][ T5791] usb 2-1: config 9 interface 164 altsetting 1 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 282.994668][ T5720] usb 3-1: USB disconnect, device number 35 [ 283.023207][ T5791] usb 2-1: config 9 interface 164 altsetting 1 has a duplicate endpoint with address 0xB, skipping [ 283.037962][ T5706] usb 4-1: device descriptor read/64, error -71 [ 283.085182][ T5791] usb 2-1: config 9 interface 164 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 283.087233][ T5875] udevd[5875]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 283.127728][ T5791] usb 2-1: config 9 interface 164 altsetting 1 endpoint 0x5 has invalid wMaxPacketSize 0 [ 283.158097][ T5791] usb 2-1: config 9 interface 164 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 15 [ 283.202529][ T5791] usb 2-1: config 9 interface 164 has no altsetting 0 [ 283.247206][ T5791] usb 2-1: New USB device found, idVendor=0499, idProduct=1017, bcdDevice=56.9b [ 283.276927][ T5791] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.327933][ T5706] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 283.368182][ T5791] usb 2-1: Product: syz [ 283.377879][ T5720] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 283.397713][ T5791] usb 2-1: Manufacturer: syz [ 283.425101][ T5791] usb 2-1: SerialNumber: syz [ 283.478274][ T5706] usb 4-1: device descriptor read/64, error -71 [ 283.555885][ T5720] usb 3-1: Using ep0 maxpacket: 32 [ 283.599202][ T5720] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 283.619285][ T5706] usb usb4-port1: attempt power cycle [ 283.641606][ T5720] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 283.677773][ T5720] usb 3-1: config 0 interface 0 has no altsetting 0 [ 283.723670][ T5720] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 283.732936][ T5791] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 283.774388][ T5720] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.803581][ T5720] usb 3-1: Product: syz [ 283.822439][ T5720] usb 3-1: Manufacturer: syz [ 283.839970][ T5720] usb 3-1: SerialNumber: syz [ 283.866280][ T5720] usb 3-1: config 0 descriptor?? [ 283.977832][ T5706] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 284.039865][ T5706] usb 4-1: device descriptor read/8, error -71 [ 284.059257][ T5791] snd-usb-audio 2-1:9.164: probe with driver snd-usb-audio failed with error -2 [ 284.121546][ T5791] usb 2-1: USB disconnect, device number 25 [ 284.194162][ T5875] udevd[5875]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:9.164/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 284.318626][ T5706] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 284.349062][ T5720] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 284.383800][ T5706] usb 4-1: device descriptor read/8, error -71 [ 284.525913][ T5706] usb usb4-port1: unable to enumerate USB device [ 284.838234][ T8177] netlink: 32 bytes leftover after parsing attributes in process `syz.4.730'. [ 284.877972][ T5690] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 285.058024][ T5690] usb 2-1: Using ep0 maxpacket: 8 [ 285.101856][ T5690] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 285.145585][ T5690] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 285.185993][ T5690] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.200836][ T5720] usb 3-1: USB disconnect, device number 36 [ 285.243503][ T5690] usb 2-1: Product: syz [ 285.272417][ T5690] usb 2-1: Manufacturer: syz [ 285.306473][ T5690] usb 2-1: SerialNumber: syz [ 285.394846][ T5690] usb 2-1: config 0 descriptor?? [ 285.456862][ T5690] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 285.531969][ T5690] usb 2-1: setting power ON [ 285.558930][ T5690] dvb-usb: bulk message failed: -22 (2/0) [ 285.629489][ T5690] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 285.689330][ T5690] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 285.757494][ T5690] usb 2-1: media controller created [ 285.945262][ T5690] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 286.099447][ T8194] FAULT_INJECTION: forcing a failure. [ 286.099447][ T8194] name (null), interval 1, probability 0, space 0, times 1 [ 286.206334][ T5690] usb 2-1: selecting invalid altsetting 6 [ 286.239341][ T5690] usb 2-1: digital interface selection failed (-22) [ 286.275567][ T8194] CPU: 1 UID: 0 PID: 8194 Comm: syz.2.735 Tainted: G L syzkaller #0 PREEMPT(full) [ 286.275606][ T8194] Tainted: [L]=SOFTLOCKUP [ 286.275613][ T8194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 286.275631][ T8194] Call Trace: [ 286.275639][ T8194] [ 286.275649][ T8194] dump_stack_lvl+0xe8/0x150 [ 286.275681][ T8194] should_fail_ex+0x412/0x560 [ 286.275712][ T8194] null_queue_rq+0x244/0xe30 [ 286.275756][ T8194] null_queue_rqs+0x123/0x270 [ 286.275791][ T8194] ? blk_mq_dispatch_queue_requests+0x11a/0x800 [ 286.275824][ T8194] blk_mq_dispatch_queue_requests+0x417/0x800 [ 286.275855][ T8194] ? rcu_is_watching+0x15/0xb0 [ 286.275884][ T8194] blk_mq_flush_plug_list+0x456/0x570 [ 286.275913][ T8194] ? blk_add_rq_to_plug+0x300/0x450 [ 286.275946][ T8194] ? blk_mq_submit_bio+0x1acf/0x28e0 [ 286.275975][ T8194] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 286.276017][ T8194] __blk_flush_plug+0x3ed/0x4d0 [ 286.276051][ T8194] ? gup_fast_fallback+0x1d9b/0x20d0 [ 286.276074][ T8194] ? __pfx___blk_flush_plug+0x10/0x10 [ 286.276112][ T8194] __submit_bio+0x28d/0x580 [ 286.276144][ T8194] ? __pfx___submit_bio+0x10/0x10 [ 286.276191][ T8194] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 286.276226][ T8194] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 286.276253][ T8194] ? iov_iter_extract_pages+0x3b7/0x5f0 [ 286.276301][ T8194] submit_bio_wait+0x12a/0x250 [ 286.276336][ T8194] ? __pfx_submit_bio_wait+0x10/0x10 [ 286.276382][ T8194] blkdev_direct_IO+0x10f6/0x1790 [ 286.276417][ T8194] ? __pfx_blkdev_direct_IO+0x10/0x10 [ 286.276444][ T8194] ? filemap_range_has_writeback+0x45a/0x530 [ 286.276473][ T8194] ? __pfx_bio_wait_end_io+0x10/0x10 [ 286.276505][ T8194] ? _parse_integer_limit+0x1ae/0x1f0 [ 286.276532][ T8194] ? kiocb_write_and_wait+0x13b/0x1b0 [ 286.276562][ T8194] blkdev_read_iter+0x23d/0x440 [ 286.276590][ T8194] do_iter_readv_writev+0x619/0x8c0 [ 286.276624][ T8194] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 286.276659][ T8194] ? bpf_lsm_file_permission+0x9/0x20 [ 286.276687][ T8194] ? security_file_permission+0x75/0x260 [ 286.276709][ T8194] ? rw_verify_area+0x2a6/0x4d0 [ 286.276739][ T8194] vfs_readv+0x288/0x840 [ 286.276770][ T8194] ? __pfx_vfs_readv+0x10/0x10 [ 286.276808][ T8194] ? __fget_files+0x2a/0x420 [ 286.276838][ T8194] ? __fget_files+0x3a0/0x420 [ 286.276861][ T8194] ? __fget_files+0x2a/0x420 [ 286.276894][ T8194] __se_sys_preadv2+0x184/0x2a0 [ 286.276927][ T8194] ? __pfx___se_sys_preadv2+0x10/0x10 [ 286.276964][ T8194] ? __x64_sys_preadv2+0x20/0xc0 [ 286.276993][ T8194] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.277016][ T8194] do_syscall_64+0x15f/0xf80 [ 286.277038][ T8194] ? trace_irq_disable+0x3b/0x140 [ 286.277065][ T8194] ? clear_bhb_loop+0x40/0x90 [ 286.277091][ T8194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.277112][ T8194] RIP: 0033:0x7f15fe39cdd9 [ 286.277132][ T8194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.277151][ T8194] RSP: 002b:00007f15ff2f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000147 [ 286.277174][ T8194] RAX: ffffffffffffffda RBX: 00007f15fe615fa0 RCX: 00007f15fe39cdd9 [ 286.277189][ T8194] RDX: 0000000000000001 RSI: 00002000000002c0 RDI: 0000000000000003 [ 286.277201][ T8194] RBP: 00007f15ff2f0090 R08: 0000000000000000 R09: 000000000000000c [ 286.277214][ T8194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.277226][ T8194] R13: 00007f15fe616038 R14: 00007f15fe615fa0 R15: 00007f15fe73fa48 [ 286.277258][ T8194] [ 286.638598][ T5690] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 286.949627][ T5690] usb 2-1: setting power OFF [ 286.991975][ T5690] dvb-usb: bulk message failed: -22 (2/0) [ 287.048357][ T5690] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 287.160770][ T5690] (NULL device *): no alternate interface [ 288.027837][ T5690] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 288.138562][ T5690] usb 2-1: USB disconnect, device number 26 [ 289.317942][ T5706] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 289.537770][ T5706] usb 4-1: Using ep0 maxpacket: 32 [ 289.563303][ T5706] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 289.630921][ T5706] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 289.686716][ T5706] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 289.737170][ T5706] usb 4-1: Product: syz [ 289.756915][ T5706] usb 4-1: Manufacturer: syz [ 289.789580][ T5706] usb 4-1: SerialNumber: syz [ 289.829557][ T5706] usb 4-1: config 0 descriptor?? [ 289.868625][ T8219] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 289.909979][ T5706] hub 4-1:0.0: bad descriptor, ignoring hub [ 289.960205][ T5706] hub 4-1:0.0: probe with driver hub failed with error -5 [ 290.459663][ T8239] netlink: 104 bytes leftover after parsing attributes in process `syz.1.745'. [ 290.527741][ T8219] usb 4-1: reset high-speed USB device number 22 using dummy_hcd [ 290.743324][ T8219] usb 4-1: device firmware changed [ 290.771188][ T5690] usb 4-1: USB disconnect, device number 22 [ 290.778172][ T5706] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 290.961299][ T5706] usb 2-1: unable to get BOS descriptor or descriptor too short [ 290.967804][ T5690] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 291.001336][ T5706] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 291.049876][ T5706] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 291.089836][ T5706] usb 2-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 291.139934][ T5706] usb 2-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 291.157975][ T5690] usb 4-1: Using ep0 maxpacket: 32 [ 291.184868][ T5690] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 291.196767][ T5706] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 291.240062][ T5706] usb 2-1: config 1 interface 1 has no altsetting 0 [ 291.253021][ T5690] usb 4-1: string descriptor 0 read error: -22 [ 291.284036][ T5690] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 291.290425][ T5706] usb 2-1: string descriptor 0 read error: -22 [ 291.343421][ T5690] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 291.350991][ T5706] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 291.392819][ T5690] usb 4-1: config 0 descriptor?? [ 291.415526][ T5706] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.446161][ T8233] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 291.478095][ T5690] hub 4-1:0.0: bad descriptor, ignoring hub [ 291.535476][ T5690] hub 4-1:0.0: probe with driver hub failed with error -5 [ 291.736521][ T8249] netlink: 28 bytes leftover after parsing attributes in process `syz.0.747'. [ 291.800534][ T5791] usb 4-1: USB disconnect, device number 23 [ 291.899834][ T1750] null_blk: rq ffff888027aa9c80 timed out [ 291.908878][ T1750] timeout error, dev nullb0, sector 0 op 0x0:(READ) flags 0x200800 phys_seg 2 prio class 2 [ 291.962032][ T8249] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.990588][ T8249] bridge_slave_1: left allmulticast mode [ 292.000834][ T5706] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 292.087127][ T8249] bridge_slave_1: left promiscuous mode [ 292.121285][ T5706] usb 2-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 292.184718][ T8249] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.274951][ T5706] usb 2-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 292.561804][ T5706] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 292.937943][ T5706] usb 2-1: 2:0: failed to get current value for ch 1 (-71) [ 293.002606][ T8259] netlink: 'syz.0.749': attribute type 5 has an invalid length. [ 293.083715][ T8259] usb usb8: usbfs: process 8259 (syz.0.749) did not claim interface 0 before use [ 293.122703][ T5706] usb 2-1: USB disconnect, device number 27 [ 293.164479][ T8262] input: syz0 as /devices/virtual/input/input17 [ 295.903820][ T8304] ip6gretap0: entered promiscuous mode [ 295.967453][ T8304] macvtap1: entered promiscuous mode [ 296.177520][ T8323] kvm: kvm [8313]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010003) = 0xffffffffffffffff [ 296.373124][ T8304] ip6gretap0: left promiscuous mode [ 296.956851][ T8333] Cannot find set identified by id 1 to match [ 299.057203][ T8356] netlink: 8 bytes leftover after parsing attributes in process `syz.4.781'. [ 300.729405][ T8378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.808863][ T8378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.907720][ T5720] usb 4-1: new low-speed USB device number 24 using dummy_hcd [ 300.918875][ T8376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.974127][ T8376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.121861][ T5720] usb 4-1: unable to get BOS descriptor or descriptor too short [ 301.186030][ T5720] usb 4-1: config 255 has an invalid interface number: 100 but max is 0 [ 301.253730][ T5720] usb 4-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 301.300927][ T5720] usb 4-1: config 255 has no interface number 0 [ 301.346896][ T5720] usb 4-1: config 255 interface 100 altsetting 25 has an invalid descriptor for endpoint zero, skipping [ 301.537761][ T5720] usb 4-1: config 255 interface 100 altsetting 25 has an endpoint descriptor with address 0xBF, changing to 0x8F [ 301.622431][ T5720] usb 4-1: config 255 interface 100 altsetting 25 endpoint 0x8F has an invalid bInterval 0, changing to 4 [ 301.738457][ T5720] usb 4-1: config 255 interface 100 altsetting 25 endpoint 0x8F has invalid wMaxPacketSize 0 [ 301.794297][ T5720] usb 4-1: config 255 interface 100 has no altsetting 0 [ 301.854986][ T5720] usb 4-1: string descriptor 0 read error: -22 [ 301.878034][ T5720] usb 4-1: New USB device found, idVendor=eb1a, idProduct=e357, bcdDevice=7b.ac [ 301.928469][ T5720] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.000078][ T8384] dummy0: entered allmulticast mode [ 302.187881][ T5720] usb 4-1: USB disconnect, device number 24 [ 302.390858][ T8392] vim2m vim2m.0: Fourcc format (0x42474752) invalid. [ 303.882156][ T8409] netlink: 64 bytes leftover after parsing attributes in process `syz.3.796'. [ 303.959323][ T8409] usb usb8: usbfs: process 8409 (syz.3.796) did not claim interface 0 before use [ 304.023722][ T8409] input: syz0 as /devices/virtual/input/input18 [ 304.318058][ T29] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 304.537800][ T29] usb 3-1: Using ep0 maxpacket: 32 [ 304.562813][ T29] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 304.602350][ T29] usb 3-1: config 0 has no interface number 0 [ 304.633268][ T29] usb 3-1: config 0 interface 184 has no altsetting 0 [ 304.698896][ T29] usb 3-1: New USB device found, idVendor=0424, idProduct=75fa, bcdDevice=69.ee [ 304.755804][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.807918][ T29] usb 3-1: Product: syz [ 304.839473][ T29] usb 3-1: Manufacturer: syz [ 304.878234][ T29] usb 3-1: SerialNumber: syz [ 304.934170][ T29] usb 3-1: config 0 descriptor?? [ 305.193289][ T29] usb 3-1: USB disconnect, device number 37 [ 305.226159][ T8424] netlink: 'syz.3.800': attribute type 10 has an invalid length. [ 307.570537][ T8445] vlan3: entered promiscuous mode [ 307.632740][ T8445] gretap0: entered promiscuous mode [ 308.974343][ T8461] syzkaller0: entered promiscuous mode [ 309.000212][ T8461] syzkaller0: entered allmulticast mode [ 310.563163][ T5627] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 310.576240][ T5627] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 310.587690][ T5627] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 310.596147][ T5627] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 310.606053][ T5627] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 310.653470][ T5791] usb 2-1: new low-speed USB device number 28 using dummy_hcd [ 310.697716][ T24] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 310.753376][ T8485] netlink: 60 bytes leftover after parsing attributes in process `syz.4.820'. [ 310.878146][ T5791] usb 2-1: device descriptor read/64, error -71 [ 310.941642][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 310.986054][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 311.036588][ T24] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 311.094395][ T24] usb 3-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 311.130259][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.162325][ T24] usb 3-1: Product: syz [ 311.179888][ T5791] usb 2-1: new low-speed USB device number 29 using dummy_hcd [ 311.201007][ T24] usb 3-1: Manufacturer: syz [ 311.216705][ T24] usb 3-1: SerialNumber: syz [ 311.357854][ T5791] usb 2-1: device descriptor read/64, error -71 [ 311.480215][ T5791] usb usb2-port1: attempt power cycle [ 311.837868][ T5791] usb 2-1: new low-speed USB device number 30 using dummy_hcd [ 311.878469][ T5791] usb 2-1: device descriptor read/8, error -71 [ 311.951473][ T24] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 311.988327][ T24] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 312.148190][ T5791] usb 2-1: new low-speed USB device number 31 using dummy_hcd [ 312.204014][ T5791] usb 2-1: device descriptor read/8, error -71 [ 312.354363][ T5791] usb usb2-port1: unable to enumerate USB device [ 312.379095][ T8503] netlink: 148 bytes leftover after parsing attributes in process `syz.2.821'. [ 312.472971][ T24] usb 3-1: USB disconnect, device number 38 [ 312.668676][ T5632] Bluetooth: hci5: command tx timeout [ 312.727057][ T5875] udevd[5875]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 312.814798][ T8503] netlink: 148 bytes leftover after parsing attributes in process `syz.2.821'. [ 312.837784][ T5791] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 313.013135][ T5791] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 313.071375][ T5791] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 313.139784][ T5791] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 313.179630][ T5791] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.246144][ T8510] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 313.379733][ T5791] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 313.603286][ T8510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.638665][ T8510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.704115][ T8487] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.774907][ T8487] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.832810][ T8487] bridge_slave_0: entered allmulticast mode [ 313.856316][ T8521] netlink: 'syz.2.824': attribute type 4 has an invalid length. [ 313.903193][ T8487] bridge_slave_0: entered promiscuous mode [ 313.975989][ T8510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.004358][ T8487] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.046708][ T8487] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.058638][ T8510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.101378][ T8487] bridge_slave_1: entered allmulticast mode [ 314.158404][ T8487] bridge_slave_1: entered promiscuous mode [ 314.271741][ T8510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.328559][ T8510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.408322][ T8510] netlink: 'syz.3.822': attribute type 50 has an invalid length. [ 314.478940][ T8487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.529480][ T5791] usb 4-1: USB disconnect, device number 25 [ 314.604080][ T8487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.747978][ T5632] Bluetooth: hci5: command tx timeout [ 315.112805][ T8487] team0: Port device team_slave_0 added [ 315.199781][ T8487] team0: Port device team_slave_1 added [ 315.378019][ T5706] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 315.498017][ T8546] netlink: 'syz.3.831': attribute type 5 has an invalid length. [ 315.587943][ T8546] usb usb8: usbfs: process 8546 (syz.3.831) did not claim interface 0 before use [ 315.622562][ T5706] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 315.643905][ T8487] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.678788][ T5706] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 315.702799][ T8487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 315.749427][ T5706] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 315.797596][ T5706] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 315.837720][ T8487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.848736][ T5706] usb 2-1: config 0 interface 0 has no altsetting 0 [ 315.879716][ T8546] input: syz0 as /devices/virtual/input/input19 [ 315.882933][ T5706] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 315.944068][ T5706] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 315.997079][ T5706] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 316.041575][ T8487] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.065054][ T5706] usb 2-1: config 0 interface 0 has no altsetting 0 [ 316.077207][ T8487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 316.137830][ T5706] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 316.185657][ T5706] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 316.221339][ T8487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.247779][ T5706] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 316.291986][ T5706] usb 2-1: config 0 interface 0 has no altsetting 0 [ 316.328322][ T5706] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 316.377891][ T5706] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 316.451020][ T5706] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 316.536379][ T5706] usb 2-1: config 0 interface 0 has no altsetting 0 [ 316.578454][ T5706] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 316.629400][ T5706] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 316.677893][ T5706] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 316.712954][ T5706] usb 2-1: config 0 interface 0 has no altsetting 0 [ 316.723094][ T8487] hsr_slave_0: entered promiscuous mode [ 316.736616][ T5706] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 316.762294][ T5706] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 316.790816][ T8487] hsr_slave_1: entered promiscuous mode [ 316.801330][ T5706] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 316.829089][ T5632] Bluetooth: hci5: command tx timeout [ 316.840497][ T8487] debugfs: 'hsr0' already exists in 'hsr' [ 316.868454][ T8487] Cannot create hsr debugfs directory [ 316.886250][ T5706] usb 2-1: config 0 interface 0 has no altsetting 0 [ 316.913268][ T5706] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 316.943788][ T5706] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 317.009131][ T5706] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 317.049631][ T5706] usb 2-1: config 0 interface 0 has no altsetting 0 [ 317.083592][ T5706] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 317.130828][ T5706] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 317.195079][ T5706] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 317.265206][ T5706] usb 2-1: config 0 interface 0 has no altsetting 0 [ 317.311813][ T5706] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 317.345997][ T5706] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 317.377816][ T5706] usb 2-1: Product: syz [ 317.399869][ T5706] usb 2-1: Manufacturer: syz [ 317.425565][ T5706] usb 2-1: SerialNumber: syz [ 317.471239][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.477924][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.509193][ T5706] usb 2-1: config 0 descriptor?? [ 317.559208][ T5706] yurex 2-1:0.0: Could not submitting URB [ 317.581147][ T5706] yurex 2-1:0.0: probe with driver yurex failed with error -5 [ 318.689554][ T8560] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 318.748370][ T8560] 8021q: adding VLAN 0 to HW filter on device bond1 [ 318.829309][ T8568] netlink: 4 bytes leftover after parsing attributes in process `syz.2.836'. [ 318.907814][ T5632] Bluetooth: hci5: command tx timeout [ 318.936139][ T5691] team_slave_0: entered promiscuous mode [ 318.943671][ T5691] team_slave_1: entered promiscuous mode [ 319.513861][ T5720] usb 2-1: USB disconnect, device number 32 [ 320.539984][ T5706] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 320.643729][ T8584] netlink: 4 bytes leftover after parsing attributes in process `syz.1.841'. [ 320.737915][ T5706] usb 3-1: Using ep0 maxpacket: 16 [ 320.782301][ T5706] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 320.830280][ T5706] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 320.869815][ T5706] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 320.901275][ T5706] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 320.937510][ T5706] usb 3-1: SerialNumber: syz [ 321.195642][ T5706] usb 3-1: USB disconnect, device number 39 [ 322.012044][ T8487] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 322.105682][ T8487] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 322.159269][ T8487] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 322.238771][ T8487] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 322.292957][ T8487] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 322.450662][ T8487] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 322.494144][ T8487] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 322.620023][ T8487] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 322.693596][ T8595] FAULT_INJECTION: forcing a failure. [ 322.693596][ T8595] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 322.777115][ T8595] CPU: 1 UID: 0 PID: 8595 Comm: syz.4.845 Tainted: G L syzkaller #0 PREEMPT(full) [ 322.777150][ T8595] Tainted: [L]=SOFTLOCKUP [ 322.777158][ T8595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 322.777170][ T8595] Call Trace: [ 322.777178][ T8595] [ 322.777187][ T8595] dump_stack_lvl+0xe8/0x150 [ 322.777218][ T8595] should_fail_ex+0x412/0x560 [ 322.777249][ T8595] _copy_from_user+0x2d/0xb0 [ 322.777277][ T8595] ___sys_sendmsg+0x1c6/0x360 [ 322.777303][ T8595] ? __lock_acquire+0x6b5/0x2cf0 [ 322.777330][ T8595] ? __pfx____sys_sendmsg+0x10/0x10 [ 322.777353][ T8595] ? __lock_acquire+0x6b5/0x2cf0 [ 322.777379][ T8595] ? kstrtouint+0x6e/0xe0 [ 322.777441][ T8595] __sys_sendmmsg+0x27c/0x4e0 [ 322.777474][ T8595] ? __pfx___sys_sendmmsg+0x10/0x10 [ 322.777497][ T8595] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 322.777552][ T8595] ? ksys_write+0x242/0x270 [ 322.777583][ T8595] ? __pfx_ksys_write+0x10/0x10 [ 322.777617][ T8595] __x64_sys_sendmmsg+0xa0/0xc0 [ 322.777643][ T8595] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.777663][ T8595] do_syscall_64+0x15f/0xf80 [ 322.777683][ T8595] ? trace_irq_disable+0x3b/0x140 [ 322.777712][ T8595] ? clear_bhb_loop+0x40/0x90 [ 322.777736][ T8595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.777754][ T8595] RIP: 0033:0x7f074899cdd9 [ 322.777773][ T8595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 322.777790][ T8595] RSP: 002b:00007f07497b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 322.777812][ T8595] RAX: ffffffffffffffda RBX: 00007f0748c15fa0 RCX: 00007f074899cdd9 [ 322.777827][ T8595] RDX: 0000000000034000 RSI: 0000200000004380 RDI: 0000000000000004 [ 322.777839][ T8595] RBP: 00007f07497b7090 R08: 0000000000000000 R09: 0000000000000000 [ 322.777851][ T8595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 322.777863][ T8595] R13: 00007f0748c16038 R14: 00007f0748c15fa0 R15: 00007f0748d3fa48 [ 322.777896][ T8595] [ 323.357726][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 324.703491][ T8618] fuse: Bad value for 'fd' [ 325.104719][ T8604] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 325.144007][ T8604] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 325.446909][ T8487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.525342][ T8604] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 325.539151][ T8604] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 325.652169][ T8487] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.699246][ T8604] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 325.737829][ T8604] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 325.770398][ T1155] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.777745][ T1155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.927398][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.934685][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.954021][ T8604] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 326.015191][ T8604] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 326.186657][ T8604] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 326.274702][ T8604] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 326.358611][ T8604] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 326.399941][ T8604] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 326.544201][ T8604] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 326.618792][ T8487] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 326.992719][ T8487] veth0_vlan: entered promiscuous mode [ 327.147861][ T5632] Bluetooth: hci1: command 0x0406 tx timeout [ 327.193826][ T8487] veth1_vlan: entered promiscuous mode [ 327.487805][ T8487] veth0_macvtap: entered promiscuous mode [ 327.513243][ T8487] veth1_macvtap: entered promiscuous mode [ 327.558820][ T5632] Bluetooth: hci0: command 0x0406 tx timeout [ 327.624588][ T8487] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 327.671132][ T8487] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 327.712222][ T5632] Bluetooth: hci2: command 0x0406 tx timeout [ 327.768711][ T7973] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.768932][ T57] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.769093][ T57] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.769251][ T57] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.953125][ T5632] Bluetooth: hci3: command 0x0406 tx timeout [ 328.187989][ T5632] Bluetooth: hci4: command 0x0406 tx timeout [ 328.396015][ T7973] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.438670][ T5632] Bluetooth: hci5: command 0x0c1a tx timeout [ 328.454316][ T7973] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.723147][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.769438][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.868912][ T5706] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 329.043158][ T5706] usb 4-1: device descriptor read/64, error -71 [ 329.228533][ T5632] Bluetooth: hci1: command 0x0406 tx timeout [ 329.317694][ T5706] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 329.467884][ T5706] usb 4-1: device descriptor read/64, error -71 [ 329.607169][ T8667] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 329.628060][ T5632] Bluetooth: hci0: command 0x0406 tx timeout [ 329.638302][ T5706] usb usb4-port1: attempt power cycle [ 329.788226][ T5632] Bluetooth: hci2: command 0x0406 tx timeout [ 330.000935][ T5706] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 330.027792][ T5632] Bluetooth: hci3: command 0x0406 tx timeout [ 330.078645][ T5706] usb 4-1: device descriptor read/8, error -71 [ 330.267635][ T5632] Bluetooth: hci4: command 0x0406 tx timeout [ 330.367764][ T5706] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 330.452379][ T5706] usb 4-1: device descriptor read/8, error -71 [ 330.507931][ T5632] Bluetooth: hci5: command 0x0c1a tx timeout [ 330.519881][ T8684] netlink: 12 bytes leftover after parsing attributes in process `syz.4.867'. [ 330.621012][ T5706] usb usb4-port1: unable to enumerate USB device [ 330.766512][ T8684] vlan3: entered promiscuous mode [ 330.766542][ T8684] batadv0: entered promiscuous mode [ 332.163216][ T8690] netlink: 14 bytes leftover after parsing attributes in process `syz.4.868'. [ 332.598209][ T5632] Bluetooth: hci5: command 0x0c1a tx timeout [ 332.882350][ T8690] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 333.160197][ T8690] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 333.329488][ T8690] bond0 (unregistering): Released all slaves [ 333.726178][ T36] bond2: (slave vlan2): link status definitely down, disabling slave [ 333.878360][ T36] bond2: now running without any active interface! [ 334.309806][ T8716] fuse: Bad value for 'fd' [ 334.418106][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 334.444705][ T8719] netlink: 112 bytes leftover after parsing attributes in process `syz.3.877'. [ 334.475006][ T8719] netlink: 16 bytes leftover after parsing attributes in process `syz.3.877'. [ 335.408656][ T5691] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 335.466625][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 335.617782][ T5691] usb 6-1: device descriptor read/64, error -32 [ 335.887715][ T5691] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 335.912800][ T8728] FAULT_INJECTION: forcing a failure. [ 335.912800][ T8728] name failslab, interval 1, probability 0, space 0, times 0 [ 335.989072][ T8728] CPU: 1 UID: 0 PID: 8728 Comm: syz.3.879 Tainted: G L syzkaller #0 PREEMPT(full) [ 335.989107][ T8728] Tainted: [L]=SOFTLOCKUP [ 335.989116][ T8728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 335.989128][ T8728] Call Trace: [ 335.989136][ T8728] [ 335.989145][ T8728] dump_stack_lvl+0xe8/0x150 [ 335.989177][ T8728] should_fail_ex+0x412/0x560 [ 335.989209][ T8728] should_failslab+0xa8/0x100 [ 335.989242][ T8728] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 335.989270][ T8728] ? __alloc_skb+0x186/0x7d0 [ 335.989294][ T8728] ? __alloc_skb+0x1d0/0x7d0 [ 335.989314][ T8728] ? __local_bh_enable_ip+0xd0/0x130 [ 335.989341][ T8728] __alloc_skb+0x1d0/0x7d0 [ 335.989369][ T8728] sock_wmalloc+0xb2/0x130 [ 335.989400][ T8728] pppol2tp_sendmsg+0x183/0x5f0 [ 335.989440][ T8728] ____sys_sendmsg+0x972/0x9f0 [ 335.989467][ T8728] ? __might_fault+0xaf/0x130 [ 335.989499][ T8728] ? __pfx_____sys_sendmsg+0x10/0x10 [ 335.989535][ T8728] ? import_iovec+0x73/0xa0 [ 335.989567][ T8728] ___sys_sendmsg+0x2a5/0x360 [ 335.989593][ T8728] ? __lock_acquire+0x6b5/0x2cf0 [ 335.989624][ T8728] ? __pfx____sys_sendmsg+0x10/0x10 [ 335.989648][ T8728] ? __lock_acquire+0x6b5/0x2cf0 [ 335.989673][ T8728] ? kstrtouint+0x6e/0xe0 [ 335.989730][ T8728] __sys_sendmmsg+0x27c/0x4e0 [ 335.989761][ T8728] ? __pfx___sys_sendmmsg+0x10/0x10 [ 335.989784][ T8728] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 335.989830][ T8728] ? ksys_write+0x242/0x270 [ 335.989859][ T8728] ? __pfx_ksys_write+0x10/0x10 [ 335.989893][ T8728] __x64_sys_sendmmsg+0xa0/0xc0 [ 335.989927][ T8728] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.989949][ T8728] do_syscall_64+0x15f/0xf80 [ 335.989970][ T8728] ? trace_irq_disable+0x3b/0x140 [ 335.990000][ T8728] ? clear_bhb_loop+0x40/0x90 [ 335.990025][ T8728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.990045][ T8728] RIP: 0033:0x7f5170f9cdd9 [ 335.990065][ T8728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 335.990083][ T8728] RSP: 002b:00007f5171da4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 335.990106][ T8728] RAX: ffffffffffffffda RBX: 00007f5171215fa0 RCX: 00007f5170f9cdd9 [ 335.990121][ T8728] RDX: 0000000000034000 RSI: 0000200000004380 RDI: 0000000000000004 [ 335.990134][ T8728] RBP: 00007f5171da4090 R08: 0000000000000000 R09: 0000000000000000 [ 335.990146][ T8728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 335.990159][ T8728] R13: 00007f5171216038 R14: 00007f5171215fa0 R15: 00007f517133fa48 [ 335.990191][ T8728] [ 336.390677][ T8732] netlink: 4 bytes leftover after parsing attributes in process `syz.2.881'. [ 336.670483][ T5691] usb 6-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 336.719757][ T5691] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.829587][ T5691] usb 6-1: Product: syz [ 336.861595][ T5691] usb 6-1: Manufacturer: syz [ 336.905119][ T5691] usb 6-1: SerialNumber: syz [ 337.017174][ T5691] usb 6-1: config 0 descriptor?? [ 337.891869][ T5691] usb 6-1: can't set config #0, error -71 [ 338.246606][ T5691] usb 6-1: USB disconnect, device number 3 [ 338.545224][ T8762] netlink: 'syz.2.886': attribute type 4 has an invalid length. [ 338.766490][ T8751] syzkaller0: entered promiscuous mode [ 338.829814][ T8751] syzkaller0: entered allmulticast mode [ 342.721970][ T8777] netlink: 20 bytes leftover after parsing attributes in process `syz.4.892'. [ 354.017248][ T5627] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 354.028217][ T5627] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 354.040136][ T5627] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 354.052634][ T5627] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 354.063460][ T5627] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 354.392425][ T5627] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 354.406120][ T5627] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 354.417507][ T5627] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 354.426467][ T5627] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 354.466327][ T5627] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 354.704268][ T5627] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 354.719959][ T5627] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 354.731833][ T5627] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 354.746137][ T5627] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 354.754435][ T5627] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 355.430611][ T8771] netlink: 8 bytes leftover after parsing attributes in process `syz.3.890'. [ 356.188379][ T5627] Bluetooth: hci6: command tx timeout [ 356.364744][ T29] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 356.578193][ T29] usb 2-1: Using ep0 maxpacket: 8 [ 356.597817][ T5627] Bluetooth: hci7: command tx timeout [ 356.624406][ T29] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 356.712243][ T29] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 356.837704][ T5627] Bluetooth: hci8: command tx timeout [ 356.854169][ T29] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 356.991800][ T29] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 357.056263][ T29] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 357.107207][ T29] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 357.162981][ T29] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 357.209724][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.524423][ T29] usb 2-1: GET_CAPABILITIES returned 0 [ 357.563616][ T29] usbtmc 2-1:16.0: can't read capabilities [ 357.769494][ T8806] usbtmc 2-1:16.0: send_request_dev_dep_msg_in returned -71 [ 357.893100][ T29] usb 2-1: USB disconnect, device number 33 [ 358.278545][ T5627] Bluetooth: hci6: command tx timeout [ 358.586446][ T48] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.668005][ T5627] Bluetooth: hci7: command tx timeout [ 358.907905][ T5627] Bluetooth: hci8: command tx timeout [ 359.342990][ T48] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.837333][ T48] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.348749][ T5627] Bluetooth: hci6: command tx timeout [ 360.501181][ T48] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.748070][ T5627] Bluetooth: hci7: command tx timeout [ 360.988841][ T5627] Bluetooth: hci8: command tx timeout [ 362.427871][ T5627] Bluetooth: hci6: command tx timeout [ 362.828705][ T5627] Bluetooth: hci7: command tx timeout [ 363.067984][ T5627] Bluetooth: hci8: command tx timeout [ 364.187191][ T8860] netlink: 12 bytes leftover after parsing attributes in process `syz.1.910'. [ 364.379480][ T8863] x_tables: duplicate underflow at hook 3 [ 364.498001][ T8796] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.519991][ T8796] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.547422][ T8796] bridge_slave_0: entered allmulticast mode [ 364.583438][ T8796] bridge_slave_0: entered promiscuous mode [ 364.620914][ T8800] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.665734][ T8800] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.701765][ T8800] bridge_slave_0: entered allmulticast mode [ 364.715028][ T8867] net_ratelimit: 436 callbacks suppressed [ 364.715050][ T8867] openvswitch: netlink: VXLAN extension 51 out of range max 1 [ 364.746012][ T8800] bridge_slave_0: entered promiscuous mode [ 364.798980][ T8860] vlan0: entered promiscuous mode [ 364.817887][ T8860] batadv0: entered promiscuous mode [ 364.851210][ T8867] netlink: 8 bytes leftover after parsing attributes in process `syz.4.912'. [ 364.904650][ T8802] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.952039][ T8802] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.974471][ T8802] bridge_slave_0: entered allmulticast mode [ 365.007053][ T8802] bridge_slave_0: entered promiscuous mode [ 365.038288][ T8796] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.060241][ T8796] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.087842][ T8796] bridge_slave_1: entered allmulticast mode [ 365.112496][ T8796] bridge_slave_1: entered promiscuous mode [ 365.195298][ T8800] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.217851][ T8800] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.245871][ T8800] bridge_slave_1: entered allmulticast mode [ 365.268788][ T8800] bridge_slave_1: entered promiscuous mode [ 365.320303][ T48] bridge_slave_0: left allmulticast mode [ 365.335497][ T48] bridge_slave_0: left promiscuous mode [ 365.378333][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.920734][ T8885] netlink: 20 bytes leftover after parsing attributes in process `syz.1.914'. [ 366.668560][ T48] bond4 (unregistering): (slave bridge1): Releasing backup interface [ 366.697836][ T48] bridge1 (unregistering): left promiscuous mode [ 366.717848][ T48] bridge1 (unregistering): left allmulticast mode [ 366.888363][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 366.940748][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 366.981591][ T48] bond0 (unregistering): Released all slaves [ 367.017367][ T48] bond1 (unregistering): Released all slaves [ 367.130497][ T48] bond2 (unregistering): (slave vlan2): Releasing active interface [ 367.163078][ T48] bond2 (unregistering): Released all slaves [ 367.243763][ T48] bond3 (unregistering): Released all slaves [ 367.362051][ T48] bond4 (unregistering): Released all slaves [ 367.443104][ T8802] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.460422][ T8802] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.514218][ T8802] bridge_slave_1: entered allmulticast mode [ 367.536085][ T8802] bridge_slave_1: entered promiscuous mode [ 367.885969][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 368.030360][ T8802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.078610][ T8796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.164618][ T48] hmó3)ó: left promiscuous mode [ 368.389174][ T8802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.458455][ T8796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.493360][ T8800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.539658][ T8800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.690649][ T8802] team0: Port device team_slave_0 added [ 368.996909][ T8802] team0: Port device team_slave_1 added [ 369.340101][ T8800] team0: Port device team_slave_0 added [ 369.565283][ T8796] team0: Port device team_slave_0 added [ 369.599604][ T8800] team0: Port device team_slave_1 added [ 370.083871][ T8802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.131422][ T8802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.249981][ T8802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.315442][ T8802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.356947][ T8802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.487833][ T8802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 370.549390][ T8796] team0: Port device team_slave_1 added [ 370.757212][ T8800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.792013][ T8800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.887934][ T8800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.967935][ T5720] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 371.038777][ T8800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.050881][ T8800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 371.139235][ T5720] usb 2-1: Using ep0 maxpacket: 16 [ 371.144587][ T8800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.167058][ T5720] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 371.192195][ T5720] usb 2-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 371.243670][ T5720] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 371.270200][ T8796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 371.288634][ T8796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 371.317616][ T5720] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 371.357791][ T5720] usb 2-1: config 0 interface 0 has no altsetting 0 [ 371.385942][ T5720] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 371.397861][ T8796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 371.417290][ T5720] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.437748][ T5720] usb 2-1: Product: syz [ 371.459695][ T5720] usb 2-1: Manufacturer: syz [ 371.485993][ T5720] usb 2-1: SerialNumber: syz [ 371.528349][ T5720] usb 2-1: config 0 descriptor?? [ 371.550265][ T8904] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 371.768234][ T8796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.776356][ T8904] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 371.803043][ T8796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 371.861143][ T5720] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input20 [ 371.914494][ T8796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.071982][ T29] usb 2-1: USB disconnect, device number 35 [ 372.179919][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2 [ 372.438731][ T8802] hsr_slave_0: entered promiscuous mode [ 372.461292][ T8802] hsr_slave_1: entered promiscuous mode [ 372.488850][ T8802] debugfs: 'hsr0' already exists in 'hsr' [ 372.505368][ T8802] Cannot create hsr debugfs directory [ 372.898473][ T8800] hsr_slave_0: entered promiscuous mode [ 372.926496][ T8800] hsr_slave_1: entered promiscuous mode [ 372.953403][ T8800] debugfs: 'hsr0' already exists in 'hsr' [ 372.977609][ T8800] Cannot create hsr debugfs directory [ 373.084907][ T8796] hsr_slave_0: entered promiscuous mode [ 373.115179][ T8796] hsr_slave_1: entered promiscuous mode [ 373.142747][ T8796] debugfs: 'hsr0' already exists in 'hsr' [ 373.167826][ T8796] Cannot create hsr debugfs directory [ 373.562174][ T48] hsr_slave_0: left promiscuous mode [ 373.589595][ T48] hsr_slave_1: left promiscuous mode [ 373.613064][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 373.649783][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 373.675265][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 373.701435][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 373.859175][ T48] veth1_macvtap: left promiscuous mode [ 373.889862][ T48] veth0_macvtap: left promiscuous mode [ 373.928094][ T48] veth1_vlan: left promiscuous mode [ 373.939885][ T48] veth0_vlan: left promiscuous mode [ 375.892150][ T48] team0 (unregistering): Port device team_slave_1 removed [ 375.972038][ T48] team0 (unregistering): Port device team_slave_0 removed [ 377.345737][ T8927] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 378.909795][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.919318][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.887976][ T5287] 8021q: adding VLAN 0 to HW filter on device eth3 [ 379.955719][ T8802] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 380.072070][ T8802] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 380.114408][ T8802] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 380.234288][ T8802] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 380.714453][ T8802] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 380.778865][ T8802] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 380.931992][ T8802] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 381.024514][ T8802] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 381.817770][ T8796] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 381.900652][ T8796] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 381.944638][ T8796] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 382.090958][ T8796] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 382.168308][ T8796] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 382.282703][ T8796] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 382.326287][ T8796] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 382.392305][ T8796] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 383.942288][ T8800] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 384.002688][ T8800] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 384.050646][ T8800] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 384.105524][ T8800] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 384.245813][ T8996] netlink: 'syz.1.926': attribute type 1 has an invalid length. [ 384.424747][ T48] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.566250][ T8800] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 384.613323][ T8800] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 384.681861][ T5287] 8021q: adding VLAN 0 to HW filter on device eth4 [ 384.838854][ T8996] 8021q: adding VLAN 0 to HW filter on device bond2 [ 384.952770][ T8997] vlan0: entered allmulticast mode [ 384.998312][ T8997] bond2: (slave vlan0): making interface the new active one [ 385.037714][ T8997] bond2: (slave vlan0): Enslaving as an active interface with an up link [ 385.089661][ T8800] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 385.139995][ T8800] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 385.301023][ T48] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.465426][ T8802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.468437][ T9006] loop4: detected capacity change from 0 to 2640 [ 385.526284][ T9006] buffer_io_error: 11 callbacks suppressed [ 385.526302][ T9006] Buffer I/O error on dev loop4, logical block 0, async page read [ 385.599442][ T9006] Buffer I/O error on dev loop4, logical block 0, async page read [ 385.642700][ T48] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.657802][ T9006] Buffer I/O error on dev loop4, logical block 0, async page read [ 385.690177][ T9006] Buffer I/O error on dev loop4, logical block 0, async page read [ 385.733052][ T9006] Buffer I/O error on dev loop4, logical block 0, async page read [ 385.787318][ T9006] Buffer I/O error on dev loop4, logical block 0, async page read [ 385.829200][ T9006] Buffer I/O error on dev loop4, logical block 0, async page read [ 385.868546][ T9006] Buffer I/O error on dev loop4, logical block 0, async page read [ 385.880654][ T48] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.921837][ T9006] ldm_validate_partition_table(): Disk read failed. [ 385.958044][ T9006] Buffer I/O error on dev loop4, logical block 0, async page read [ 385.982053][ T9006] Buffer I/O error on dev loop4, logical block 0, async page read [ 386.028947][ T9006] Dev loop4: unable to read RDB block 0 [ 386.051010][ T9006] loop4: unable to read partition table [ 386.060900][ T8802] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.090306][ T9006] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 386.176508][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.183900][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.277192][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.284518][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.180642][ T8796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.270438][ T48] bridge_slave_0: left allmulticast mode [ 387.291566][ T48] bridge_slave_0: left promiscuous mode [ 387.327977][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.445068][ T48] bridge_slave_1: left allmulticast mode [ 387.465588][ T48] bridge_slave_1: left promiscuous mode [ 387.498827][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.560202][ T48] bridge_slave_0: left allmulticast mode [ 387.587294][ T48] bridge_slave_0: left promiscuous mode [ 387.611498][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.692498][ T48] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 388.726661][ T48] bridge1 (unregistering): left promiscuous mode [ 388.751442][ T48] bridge1 (unregistering): left allmulticast mode [ 388.843568][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 388.897355][ T48] bond_slave_0: left promiscuous mode [ 388.924823][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 388.961198][ T48] bond_slave_1: left promiscuous mode [ 388.982500][ T48] bond0 (unregistering): Released all slaves [ 389.076647][ T48] bond1 (unregistering): Released all slaves [ 390.018226][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 390.079178][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 390.117481][ T48] bond0 (unregistering): Released all slaves [ 390.220860][ T5287] 8021q: adding VLAN 0 to HW filter on device eth5 [ 390.538264][ T8796] 8021q: adding VLAN 0 to HW filter on device team0 [ 390.864753][ T9040] netlink: 'syz.1.932': attribute type 10 has an invalid length. [ 391.026652][ T1330] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.033997][ T1330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 391.561768][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.569135][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 391.842437][ T8800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.868546][ T8802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 393.082511][ T8800] 8021q: adding VLAN 0 to HW filter on device team0 [ 393.122914][ T8796] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 393.222449][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.229871][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 393.309766][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.316941][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 394.353104][ T8796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 394.479400][ T8802] veth0_vlan: entered promiscuous mode [ 395.016341][ T8802] veth1_vlan: entered promiscuous mode [ 395.057191][ T5287] 8021q: adding VLAN 0 to HW filter on device eth6 [ 395.124921][ T48] hsr_slave_0: left promiscuous mode [ 395.160577][ T48] hsr_slave_1: left promiscuous mode [ 395.178608][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 395.239320][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 395.334150][ T48] hsr_slave_0: left promiscuous mode [ 395.361618][ T48] hsr_slave_1: left promiscuous mode [ 395.378957][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 395.407893][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 395.453707][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 395.477903][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 395.536528][ T48] veth1_macvtap: left promiscuous mode [ 395.564627][ T48] veth0_macvtap: left promiscuous mode [ 395.580548][ T48] veth1_vlan: left promiscuous mode [ 395.598265][ T48] veth0_vlan: left promiscuous mode [ 397.050027][ T48] team0 (unregistering): Port device team_slave_1 removed [ 397.123212][ T48] team0 (unregistering): Port device team_slave_0 removed [ 398.608372][ T48] team0 (unregistering): Port device team_slave_1 removed [ 398.702019][ T48] team0 (unregistering): Port device team_slave_0 removed [ 399.808491][ T8800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 400.015871][ T8796] veth0_vlan: entered promiscuous mode [ 400.095177][ T8802] veth0_macvtap: entered promiscuous mode [ 400.165503][ T8802] veth1_macvtap: entered promiscuous mode [ 400.386170][ T8796] veth1_vlan: entered promiscuous mode [ 400.678659][ T8802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 400.789416][ T8800] veth0_vlan: entered promiscuous mode [ 400.909462][ T8802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 401.113336][ T8800] veth1_vlan: entered promiscuous mode [ 401.205111][ T8796] veth0_macvtap: entered promiscuous mode [ 401.263166][ T8796] veth1_macvtap: entered promiscuous mode [ 401.445093][ T13] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.495491][ T13] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.688950][ T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.739211][ T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.884334][ T8796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 402.006077][ T8796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 402.156303][ T8800] veth0_macvtap: entered promiscuous mode [ 402.195530][ T48] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.229969][ T48] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.316290][ T5287] 8021q: adding VLAN 0 to HW filter on device eth7 [ 402.362034][ T48] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.407695][ T48] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.471916][ T8800] veth1_macvtap: entered promiscuous mode [ 402.568288][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.621199][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.700862][ T8800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 403.002689][ T8800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 403.060847][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.096436][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.232569][ T138] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.286833][ T138] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.378060][ T57] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.428835][ T57] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.646155][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.717006][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.905803][ T9102] Cannot find set identified by id 1 to match [ 404.065889][ T598] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.099739][ T29] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 404.110531][ T598] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.289321][ T29] usb 2-1: Using ep0 maxpacket: 32 [ 404.314793][ T29] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 404.330206][ T598] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.387947][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 404.430379][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 404.439611][ T598] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.537828][ T29] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 404.600281][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.682431][ T29] usb 2-1: config 0 descriptor?? [ 404.725527][ T9103] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 404.751897][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.759250][ T29] hub 2-1:0.0: USB hub found [ 404.809412][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.443490][ T9121] kvm: requested 152533 ns i8254 timer period limited to 200000 ns [ 405.532875][ T9121] kvm: requested 105600 ns i8254 timer period limited to 200000 ns [ 405.650748][ T9121] kvm: requested 106438 ns i8254 timer period limited to 200000 ns [ 405.797048][ T9121] kvm: requested 182704 ns i8254 timer period limited to 200000 ns [ 405.905733][ T9121] kvm: requested 105600 ns i8254 timer period limited to 200000 ns [ 405.976849][ T9121] kvm: requested 106438 ns i8254 timer period limited to 200000 ns [ 407.301369][ T5287] 8021q: adding VLAN 0 to HW filter on device eth8 [ 407.623764][ T29] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 408.240244][ T9140] tipc: Started in network mode [ 408.268843][ T5791] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 408.298727][ T9140] tipc: Node identity ac14140f, cluster identity 4711 [ 408.464963][ T9140] tipc: New replicast peer: 255.255.255.255 [ 408.588739][ T5791] usb 9-1: Using ep0 maxpacket: 8 [ 408.601145][ T9140] tipc: Enabled bearer , priority 10 [ 408.635092][ T5791] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 408.689473][ T5791] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 408.737994][ T5791] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 408.811658][ T5791] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 408.866400][ T5791] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 408.947743][ T5791] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 409.017013][ T5791] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.120914][ T5791] usbtmc 9-1:16.0: probe with driver usbtmc failed with error -22 [ 409.283982][ T29] usbhid 2-1:0.0: can't add hid device: -71 [ 409.323712][ T9151] syzkaller0: entered promiscuous mode [ 409.328229][ T29] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 409.369021][ T9151] syzkaller0: entered allmulticast mode [ 409.408956][ T29] usb 2-1: USB disconnect, device number 36 [ 409.586468][ T5706] usb 9-1: USB disconnect, device number 2 [ 409.718808][ T9163] netlink: 'syz.7.947': attribute type 10 has an invalid length. [ 410.033357][ T9166] netlink: 8 bytes leftover after parsing attributes in process `syz.7.947'. [ 413.611201][ T9195] netlink: 28 bytes leftover after parsing attributes in process `syz.6.952'. [ 423.240143][ T24] tipc: Node number set to 2886997007 [ 423.594299][ T9163] team0 (unregistering): Port device team_slave_0 removed [ 423.880659][ T9163] team0 (unregistering): Port device team_slave_1 removed [ 425.124610][ T9179] netlink: 8 bytes leftover after parsing attributes in process `syz.8.948'. [ 425.201125][ T5287] 8021q: adding VLAN 0 to HW filter on device eth9 [ 425.293029][ T9195] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.320513][ T9195] bridge_slave_1: left allmulticast mode [ 425.354032][ T9195] bridge_slave_1: left promiscuous mode [ 425.472123][ T9195] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.565635][ T5632] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 425.594101][ T5632] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 425.607175][ T5632] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 425.618480][ T5632] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 425.626244][ T5632] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 425.776466][ T5632] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 425.796510][ T5632] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 425.808934][ T5632] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 425.838784][ T5632] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 425.866398][ T5632] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 426.304132][ T5627] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 426.319389][ T5627] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 426.330487][ T5627] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 426.351703][ T5627] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 426.374344][ T5627] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 427.007747][ T5791] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 427.054348][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.219253][ T5791] usb 2-1: Using ep0 maxpacket: 8 [ 427.246745][ T5791] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 427.303397][ T5791] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 427.336277][ T5791] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.374874][ T5791] usb 2-1: Product: syz [ 427.392989][ T5791] usb 2-1: Manufacturer: syz [ 427.410695][ T5791] usb 2-1: SerialNumber: syz [ 427.442027][ T5791] usb 2-1: config 0 descriptor?? [ 427.476221][ T5791] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 427.528679][ T5791] usb 2-1: setting power ON [ 427.564394][ T5791] dvb-usb: bulk message failed: -22 (2/0) [ 427.673940][ T9219] dvb-usb: bulk message failed: -22 (3/0) [ 427.693151][ T5791] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 427.707678][ T5632] Bluetooth: hci0: command tx timeout [ 427.729708][ T9219] cxusb: i2c rd: len=147 is too big! [ 427.729708][ T9219] [ 427.803088][ T5791] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 427.857714][ T9225] cxusb: i2c rd: len=180 is too big! [ 427.857714][ T9225] [ 427.876709][ T5791] usb 2-1: media controller created [ 427.947871][ T5632] Bluetooth: hci2: command tx timeout [ 428.026322][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.040466][ T5791] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 428.208298][ T5791] usb 2-1: selecting invalid altsetting 6 [ 428.237065][ T5791] usb 2-1: digital interface selection failed (-22) [ 428.259066][ T5791] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 428.291702][ T5791] usb 2-1: setting power OFF [ 428.306331][ T5791] dvb-usb: bulk message failed: -22 (2/0) [ 428.330178][ T5791] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 428.360648][ T5791] (NULL device *): no alternate interface [ 428.429538][ T5632] Bluetooth: hci4: command tx timeout [ 428.645698][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.121940][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.126661][ T9231] FAULT_INJECTION: forcing a failure. [ 429.126661][ T9231] name failslab, interval 1, probability 0, space 0, times 0 [ 429.204949][ T9231] CPU: 0 UID: 0 PID: 9231 Comm: syz.6.960 Tainted: G L syzkaller #0 PREEMPT(full) [ 429.204985][ T9231] Tainted: [L]=SOFTLOCKUP [ 429.204992][ T9231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 429.205004][ T9231] Call Trace: [ 429.205012][ T9231] [ 429.205021][ T9231] dump_stack_lvl+0xe8/0x150 [ 429.205052][ T9231] should_fail_ex+0x412/0x560 [ 429.205083][ T9231] should_failslab+0xa8/0x100 [ 429.205117][ T9231] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 429.205144][ T9231] ? __alloc_skb+0x186/0x7d0 [ 429.205166][ T9231] ? __alloc_skb+0x1d0/0x7d0 [ 429.205186][ T9231] ? __local_bh_enable_ip+0xd0/0x130 [ 429.205213][ T9231] __alloc_skb+0x1d0/0x7d0 [ 429.205240][ T9231] netlink_sendmsg+0x5d4/0xb40 [ 429.205275][ T9231] ? __pfx_netlink_sendmsg+0x10/0x10 [ 429.205303][ T9231] ? aa_sock_msg_perm+0xf1/0x1b0 [ 429.205331][ T9231] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 429.205362][ T9231] ____sys_sendmsg+0x972/0x9f0 [ 429.205395][ T9231] ? __might_fault+0xaf/0x130 [ 429.205427][ T9231] ? __pfx_____sys_sendmsg+0x10/0x10 [ 429.205462][ T9231] ? import_iovec+0x73/0xa0 [ 429.205493][ T9231] ___sys_sendmsg+0x2a5/0x360 [ 429.205518][ T9231] ? __lock_acquire+0x6b5/0x2cf0 [ 429.205545][ T9231] ? __pfx____sys_sendmsg+0x10/0x10 [ 429.205602][ T9231] ? __fget_files+0x2a/0x420 [ 429.205626][ T9231] ? __fget_files+0x3a0/0x420 [ 429.205660][ T9231] __x64_sys_sendmsg+0x1bd/0x2a0 [ 429.205687][ T9231] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 429.205722][ T9231] ? __pfx_ksys_write+0x10/0x10 [ 429.205759][ T9231] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.205781][ T9231] do_syscall_64+0x15f/0xf80 [ 429.205803][ T9231] ? trace_irq_disable+0x3b/0x140 [ 429.205831][ T9231] ? clear_bhb_loop+0x40/0x90 [ 429.205855][ T9231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.205876][ T9231] RIP: 0033:0x7ff90959cdd9 [ 429.205895][ T9231] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 429.205913][ T9231] RSP: 002b:00007ff9077f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 429.205936][ T9231] RAX: ffffffffffffffda RBX: 00007ff909815fa0 RCX: 00007ff90959cdd9 [ 429.205951][ T9231] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000006 [ 429.205969][ T9231] RBP: 00007ff9077f6090 R08: 0000000000000000 R09: 0000000000000000 [ 429.205981][ T9231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 429.205992][ T9231] R13: 00007ff909816038 R14: 00007ff909815fa0 R15: 00007ff90993fa48 [ 429.206022][ T9231] [ 429.787697][ T5632] Bluetooth: hci0: command tx timeout [ 430.039085][ T5632] Bluetooth: hci2: command tx timeout [ 430.228185][ T29] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 430.362120][ T5791] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 430.412693][ T5791] usb 2-1: USB disconnect, device number 37 [ 430.419360][ T29] usb 7-1: Using ep0 maxpacket: 32 [ 430.432675][ T29] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 430.460821][ T29] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 430.508779][ T5632] Bluetooth: hci4: command tx timeout [ 430.540209][ T29] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 430.586318][ T29] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 430.637322][ T29] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 430.657961][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.680003][ T29] usb 7-1: Product: syz [ 430.698520][ T29] usb 7-1: Manufacturer: syz [ 430.708684][ T29] usb 7-1: SerialNumber: syz [ 430.759199][ C1] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 430.826563][ T29] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/input/input21 [ 430.917722][ T5791] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 431.018768][ T29] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 431.052134][ T29] (id 0x00) [ 431.089702][ T5791] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.152561][ T5791] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 431.226370][ T5791] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 431.301449][ T5791] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.370686][ T29] rc_core: IR keymap rc-imon-pad not found [ 431.397594][ T29] Registered IR keymap rc-empty [ 431.424712][ T29] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 431.447981][ T5791] usb 2-1: config 0 descriptor?? [ 431.492630][ T29] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 431.562985][ T29] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0 [ 431.675518][ T29] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0/input22 [ 431.813880][ T29] imon 7-1:155.0: iMON device (15c2:ffdc, intf0) on usb<7:2> initialized [ 431.869074][ T5632] Bluetooth: hci0: command tx timeout [ 432.107706][ T5632] Bluetooth: hci2: command tx timeout [ 432.150324][ T29] usb 7-1: USB disconnect, device number 2 [ 432.163454][ T9234] imon:send_packet: packet tx failed (-71) [ 432.290090][ T9234] imon:vfd_write: send packet #0 failed [ 432.396998][ T5791] hid-steam 0003:28DE:1142.0012: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 432.541151][ T5791] hid-steam 0003:28DE:1142.0012: Steam wireless receiver connected [ 432.598332][ T5632] Bluetooth: hci4: command tx timeout [ 432.746420][ T12] bridge_slave_1: left allmulticast mode [ 432.781421][ T12] bridge_slave_1: left promiscuous mode [ 432.802633][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.882887][ T12] bridge_slave_0: left allmulticast mode [ 432.913895][ T5791] hid-steam 0003:28DE:1142.0013: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 432.918158][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.051561][ T12] dvmrp0: left allmulticast mode [ 433.767946][ T29] usb 2-1: reset high-speed USB device number 38 using dummy_hcd [ 433.948987][ T5632] Bluetooth: hci0: command tx timeout [ 434.187765][ T5632] Bluetooth: hci2: command tx timeout [ 434.328762][ T12] bond1 (unregistering): Released all slaves [ 434.459732][ T12] bond2 (unregistering): (slave vlan2): Releasing active interface [ 434.501399][ T12] bond2 (unregistering): Released all slaves [ 434.670352][ T5632] Bluetooth: hci4: command tx timeout [ 434.971370][ T9260] netlink: 'syz.1.962': attribute type 29 has an invalid length. [ 434.998799][ T5287] 8021q: adding VLAN 0 to HW filter on device eth10 [ 435.218664][ T9275] FAULT_INJECTION: forcing a failure. [ 435.218664][ T9275] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 435.327904][ T9275] CPU: 0 UID: 0 PID: 9275 Comm: syz.6.963 Tainted: G L syzkaller #0 PREEMPT(full) [ 435.327941][ T9275] Tainted: [L]=SOFTLOCKUP [ 435.327948][ T9275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 435.327960][ T9275] Call Trace: [ 435.327968][ T9275] [ 435.327978][ T9275] dump_stack_lvl+0xe8/0x150 [ 435.328009][ T9275] should_fail_ex+0x412/0x560 [ 435.328042][ T9275] _copy_to_user+0x31/0xb0 [ 435.328072][ T9275] simple_read_from_buffer+0xe1/0x170 [ 435.328104][ T9275] proc_fail_nth_read+0x1bb/0x230 [ 435.328142][ T9275] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 435.328172][ T9275] ? rw_verify_area+0x2a6/0x4d0 [ 435.328200][ T9275] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 435.328227][ T9275] vfs_read+0x20c/0xa70 [ 435.328261][ T9275] ? __pfx___mutex_lock+0x10/0x10 [ 435.328287][ T9275] ? __pfx_vfs_read+0x10/0x10 [ 435.328316][ T9275] ? __fget_files+0x2a/0x420 [ 435.328345][ T9275] ? __fget_files+0x3a0/0x420 [ 435.328367][ T9275] ? __fget_files+0x2a/0x420 [ 435.328399][ T9275] ksys_read+0x150/0x270 [ 435.328428][ T9275] ? __pfx_ksys_read+0x10/0x10 [ 435.328463][ T9275] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.328486][ T9275] do_syscall_64+0x15f/0xf80 [ 435.328508][ T9275] ? trace_irq_disable+0x3b/0x140 [ 435.328538][ T9275] ? clear_bhb_loop+0x40/0x90 [ 435.328563][ T9275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.328583][ T9275] RIP: 0033:0x7ff90955d60e [ 435.328603][ T9275] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 435.328621][ T9275] RSP: 002b:00007ff9077f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 435.328644][ T9275] RAX: ffffffffffffffda RBX: 00007ff9077f66c0 RCX: 00007ff90955d60e [ 435.328659][ T9275] RDX: 000000000000000f RSI: 00007ff9077f60a0 RDI: 0000000000000005 [ 435.328672][ T9275] RBP: 00007ff9077f6090 R08: 0000000000000000 R09: 0000000000000000 [ 435.328684][ T9275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 435.328696][ T9275] R13: 00007ff909816038 R14: 00007ff909815fa0 R15: 00007ff90993fa48 [ 435.328729][ T9275] [ 436.003845][ T24] usb 2-1: USB disconnect, device number 38 [ 436.026924][ T9290] netlink: 32 bytes leftover after parsing attributes in process `syz.1.966'. [ 436.103219][ T24] hid-steam 0003:28DE:1142.0012: Steam wireless receiver disconnected [ 436.725712][ T9209] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.756076][ T9209] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.800108][ T9209] bridge_slave_0: entered allmulticast mode [ 436.861816][ T9209] bridge_slave_0: entered promiscuous mode [ 437.042372][ T9207] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.083691][ T9207] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.117241][ T9207] bridge_slave_0: entered allmulticast mode [ 437.159026][ T9207] bridge_slave_0: entered promiscuous mode [ 437.192168][ T9207] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.231676][ T9207] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.264315][ T9207] bridge_slave_1: entered allmulticast mode [ 437.294797][ T9207] bridge_slave_1: entered promiscuous mode [ 437.435171][ T9209] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.466775][ T9209] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.501695][ T9209] bridge_slave_1: entered allmulticast mode [ 437.542273][ T9209] bridge_slave_1: entered promiscuous mode [ 438.280364][ T9209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 438.616638][ T9216] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.645984][ T9216] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.680561][ T9216] bridge_slave_0: entered allmulticast mode [ 438.709723][ T9216] bridge_slave_0: entered promiscuous mode [ 438.751106][ T9209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 438.808171][ T9207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 438.841199][ T9216] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.867801][ T9216] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.896491][ T9216] bridge_slave_1: entered allmulticast mode [ 438.920148][ T9216] bridge_slave_1: entered promiscuous mode [ 439.020537][ T12] hsr_slave_0: left promiscuous mode [ 439.049040][ T12] hsr_slave_1: left promiscuous mode [ 439.077869][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 439.106125][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 439.130095][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 439.155171][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 439.207479][ T12] veth1_macvtap: left promiscuous mode [ 439.228190][ T12] veth0_macvtap: left promiscuous mode [ 439.247750][ T12] veth1_vlan: left promiscuous mode [ 439.264497][ T12] veth0_vlan: left promiscuous mode [ 440.258643][ T9312] openvswitch: netlink: EtherType 5a8 is less than min 600 [ 440.350625][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.357066][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.724804][ T12] team0 (unregistering): Port device team_slave_1 removed [ 440.832928][ T12] team0 (unregistering): Port device team_slave_0 removed [ 441.388766][ T9207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 441.976229][ T9321] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 441.976486][ T9209] team0: Port device team_slave_0 added [ 442.061759][ T9207] team0: Port device team_slave_0 added [ 442.116821][ T9207] team0: Port device team_slave_1 added [ 442.172372][ T9216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 442.239399][ T9216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 442.313167][ T9209] team0: Port device team_slave_1 added [ 442.738632][ T5719] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 442.952097][ T5719] usb 2-1: Using ep0 maxpacket: 8 [ 442.974605][ T9207] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 442.993886][ T5719] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 443.012943][ T9207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 443.081573][ T5719] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 443.120010][ T5719] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.147971][ T9207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 443.161187][ T5719] usb 2-1: Product: syz [ 443.177875][ T5719] usb 2-1: Manufacturer: syz [ 443.197766][ T5719] usb 2-1: SerialNumber: syz [ 443.224471][ T9216] team0: Port device team_slave_0 added [ 443.238826][ T5719] usb 2-1: config 0 descriptor?? [ 443.263551][ T9216] team0: Port device team_slave_1 added [ 443.272578][ T5719] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 443.301296][ T9209] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 443.317766][ T5719] usb 2-1: setting power ON [ 443.328385][ T9209] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 443.362385][ T5719] dvb-usb: bulk message failed: -22 (2/0) [ 443.399859][ T5719] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 443.448304][ T5719] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 443.460737][ T9209] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 443.475116][ T9327] dvb-usb: bulk message failed: -22 (3/0) [ 443.497803][ T5719] usb 2-1: media controller created [ 443.513683][ T9327] cxusb: i2c rd: len=147 is too big! [ 443.513683][ T9327] [ 443.533247][ T9209] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 443.558201][ T9339] cxusb: i2c rd: len=180 is too big! [ 443.558201][ T9339] [ 443.567775][ T9209] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 443.622369][ T5719] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 443.712488][ T9209] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 443.759807][ T5719] usb 2-1: selecting invalid altsetting 6 [ 443.792664][ T9207] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 443.806305][ T5719] usb 2-1: digital interface selection failed (-22) [ 443.837255][ T9207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 443.870347][ T5719] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 443.913676][ T5719] usb 2-1: setting power OFF [ 443.943907][ T5719] dvb-usb: bulk message failed: -22 (2/0) [ 443.994814][ T5719] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 444.015164][ T9207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 444.036302][ T5719] (NULL device *): no alternate interface [ 444.229895][ T5287] 8021q: adding VLAN 0 to HW filter on device eth11 [ 444.310686][ T9216] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 444.336796][ T9216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.423159][ T9216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 444.516671][ T9216] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 444.538904][ T9216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.623250][ T9216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 445.045857][ T9209] hsr_slave_0: entered promiscuous mode [ 445.072022][ T9209] hsr_slave_1: entered promiscuous mode [ 445.098059][ T9209] debugfs: 'hsr0' already exists in 'hsr' [ 445.124194][ T9209] Cannot create hsr debugfs directory [ 445.207065][ T9207] hsr_slave_0: entered promiscuous mode [ 445.236149][ T9207] hsr_slave_1: entered promiscuous mode [ 445.262549][ T9207] debugfs: 'hsr0' already exists in 'hsr' [ 445.283313][ T9207] Cannot create hsr debugfs directory [ 445.653688][ T5719] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 445.722286][ T5719] usb 2-1: USB disconnect, device number 39 [ 445.907472][ T12] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.307385][ T9216] hsr_slave_0: entered promiscuous mode [ 446.399981][ T9216] hsr_slave_1: entered promiscuous mode [ 446.451639][ T9216] debugfs: 'hsr0' already exists in 'hsr' [ 446.510878][ T9216] Cannot create hsr debugfs directory [ 446.736394][ T12] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.828884][ T5691] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 447.078410][ T5691] usb 7-1: Using ep0 maxpacket: 32 [ 447.116628][ T5691] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 447.154337][ T5691] usb 7-1: config 0 has no interface number 0 [ 447.197280][ T5691] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 447.256153][ T5691] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 447.300989][ T5691] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 447.336596][ T5691] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.389612][ T31] INFO: task syz.0.764:8301 blocked for more than 143 seconds. [ 447.415569][ T31] Tainted: G L syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 447.452573][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 447.490059][ T5691] usb 7-1: config 0 descriptor?? [ 447.508658][ T31] task:syz.0.764 state:D stack:28120 pid:8301 tgid:8300 ppid:5640 task_flags:0x400140 flags:0x00080002 [ 447.557038][ T31] Call Trace: [ 447.572234][ T31] [ 447.586697][ T31] __schedule+0x17b4/0x5680 [ 447.597617][ T31] ? __pfx___schedule+0x10/0x10 [ 447.620736][ T31] ? schedule+0x90/0x360 [ 447.637764][ T31] schedule+0x164/0x360 [ 447.655914][ T31] schedule_preempt_disabled+0x13/0x30 [ 447.684909][ T31] __mutex_lock+0x7f7/0x1550 [ 447.713431][ T31] ? __mutex_lock+0x608/0x1550 [ 447.769652][ T31] ? usbdev_open+0x182/0x770 [ 447.817470][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 447.859167][ T31] ? bus_find_device+0x27d/0x2d0 [ 447.891275][ T31] ? __pfx_bus_find_device+0x10/0x10 [ 447.910395][ T31] ? usbdev_open+0xa7/0x770 [ 447.927678][ T31] ? __kmalloc_cache_noprof+0x15b/0x660 [ 447.957253][ T31] usbdev_open+0x182/0x770 [ 448.010284][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 448.035207][ T31] ? __pfx_usbdev_open+0x10/0x10 [ 448.055714][ T31] ? do_raw_spin_unlock+0xf5/0x210 [ 448.079498][ T31] chrdev_open+0x4cd/0x5e0 [ 448.145919][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 448.161678][ T31] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 448.184985][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 448.205433][ T31] do_dentry_open+0x785/0x14e0 [ 448.229350][ T31] vfs_open+0x3b/0x340 [ 448.237425][ T31] ? path_openat+0x2df0/0x3860 [ 448.258216][ T31] path_openat+0x2e08/0x3860 [ 448.279643][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 448.298822][ T31] ? stack_depot_save_flags+0x33/0x810 [ 448.318408][ T31] ? __pfx_path_openat+0x10/0x10 [ 448.336837][ T31] ? __x64_sys_openat+0x138/0x170 [ 448.357656][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 448.377255][ T31] do_file_open+0x23e/0x4a0 [ 448.397671][ T31] ? __pfx_do_file_open+0x10/0x10 [ 448.417842][ T31] ? _raw_spin_unlock+0x28/0x50 [ 448.437655][ T31] ? alloc_fd+0x64b/0x6c0 [ 448.458858][ T31] do_sys_openat2+0x113/0x200 [ 448.479964][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 448.499941][ T31] ? exc_page_fault+0x6a/0xc0 [ 448.518250][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 448.537817][ T31] __x64_sys_openat+0x138/0x170 [ 448.557685][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.576048][ T31] do_syscall_64+0x15f/0xf80 [ 448.593327][ T31] ? trace_irq_disable+0x3b/0x140 [ 448.611710][ T31] ? clear_bhb_loop+0x40/0x90 [ 448.637783][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.652803][ T31] RIP: 0033:0x7f769e95d60e [ 448.668732][ T31] RSP: 002b:00007f769f805b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 448.697697][ T31] RAX: ffffffffffffffda RBX: 00007f769f8066c0 RCX: 00007f769e95d60e [ 448.727775][ T31] RDX: 0000000000001501 RSI: 00007f769f805c00 RDI: ffffffffffffff9c [ 448.751700][ T31] RBP: 00007f769f805c00 R08: 0000000000000000 R09: 0000000000000000 [ 448.779656][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 448.811781][ T31] R13: 00007f769ec16038 R14: 00007f769ec15fa0 R15: 00007f769ed3fa48 [ 448.847736][ T31] [ 448.852173][ T31] [ 448.852173][ T31] Showing all locks held in the system: [ 448.865425][ T12] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.897917][ T31] 7 locks held by kworker/u8:0/12: [ 448.922125][ T31] 1 lock held by khungtaskd/31: [ 448.952978][ T31] #0: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 448.997556][ T31] 7 locks held by kworker/0:2/807: [ 449.029082][ T31] 6 locks held by kworker/1:2/1221: [ 449.050738][ T31] 3 locks held by kworker/u8:8/1330: [ 449.076865][ T31] #0: ffff88801ae84140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 449.133442][ T31] #1: ffffc90005bafc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 449.191134][ T31] #2: ffffffff8fdce940 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 449.239521][ T31] 2 locks held by dhcpcd/5287: [ 449.264320][ T31] #0: ffff88807c2096e8 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 449.319401][ T31] #1: ffffffff8fdce940 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x92/0x200 [ 449.367775][ T31] 2 locks held by getty/5382: [ 449.387747][ T31] #0: ffff8880369ae0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 449.437817][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 449.494493][ T31] 5 locks held by kworker/0:4/5691: [ 449.521985][ T31] #0: ffff888020693140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 449.587746][ T31] #1: ffffc90003c47c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 449.639898][ T31] #2: ffff88802aa961d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 449.679339][ T31] #3: ffff88805a6e81d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 449.713987][ T31] #4: ffff88807c6121a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 449.757563][ T31] 1 lock held by syz.0.764/8301: [ 449.781065][ T31] #0: ffff88802a7ba1d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x182/0x770 [ 449.817613][ T31] 2 locks held by kworker/0:7/9077: [ 449.842242][ T31] #0: ffff88813fe43140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 449.881591][ T31] #1: ffffc90020947c40 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 449.928874][ T31] 2 locks held by syz-executor/9207: [ 449.953631][ T31] #0: ffffffff8f53f148 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 449.997889][ T31] #1: ffffffff8fdce940 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 450.018017][ T31] 2 locks held by syz-executor/9209: [ 450.037720][ T31] #0: ffffffff90329c48 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 450.067735][ T31] #1: ffffffff8fdce940 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 450.097798][ T31] 2 locks held by syz-executor/9216: [ 450.117751][ T31] #0: ffffffff8f616928 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 450.157582][ T31] #1: ffffffff8fdce940 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 450.188178][ T31] 2 locks held by syz.1.971/9352: [ 450.206821][ T31] #0: ffff8880b863aea0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb6/0x150 [ 450.239841][ T31] #1: ffff8880b8624588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 450.268131][ T31] 4 locks held by syz.6.972/9358: [ 450.287581][ T31] #0: ffff88807b4a8ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0 [ 450.317687][ T31] #1: ffff88807b4a80b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0 [ 450.349981][ T31] #2: ffffffff8ff51780 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 450.387719][ T31] #3: ffff888058888af8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x92/0x570 [ 450.417984][ T31] 2 locks held by dhcpcd/9363: [ 450.427602][ T31] #0: ffff888078104a40 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 450.467563][ T31] #1: ffffffff8e963068 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 450.496161][ T31] 2 locks held by dhcpcd/9365: [ 450.517676][ T31] #0: ffff8880780eb840 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 450.557703][ T31] #1: ffffffff8e963068 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 450.589938][ T31] 1 lock held by dhcpcd/9366: [ 450.617733][ T31] #0: ffff888078107a40 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 450.657590][ T31] 1 lock held by dhcpcd/9367: [ 450.688149][ T31] #0: ffff88805ae3ca40 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 450.731000][ T31] 1 lock held by dhcpcd/9368: [ 450.747789][ T31] #0: ffff88805ae3b840 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 450.787686][ T31] 1 lock held by dhcpcd/9369: [ 450.800697][ T31] #0: ffff8880780aac40 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 450.830366][ T31] [ 450.878011][ T31] ============================================= [ 450.878011][ T31] [ 450.942086][ T31] NMI backtrace for cpu 1 [ 450.942112][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 450.942139][ T31] Tainted: [L]=SOFTLOCKUP [ 450.942146][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 450.942158][ T31] Call Trace: [ 450.942165][ T31] [ 450.942175][ T31] dump_stack_lvl+0xe8/0x150 [ 450.942205][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 450.942235][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 450.942260][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 450.942290][ T31] sys_info+0x135/0x170 [ 450.942315][ T31] watchdog+0xfd3/0x1030 [ 450.942351][ T31] ? watchdog+0x1c9/0x1030 [ 450.942385][ T31] kthread+0x388/0x470 [ 450.942411][ T31] ? __pfx_watchdog+0x10/0x10 [ 450.942436][ T31] ? __pfx_kthread+0x10/0x10 [ 450.942462][ T31] ret_from_fork+0x514/0xb70 [ 450.942487][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 450.942508][ T31] ? __switch_to+0xc79/0x1410 [ 450.942545][ T31] ? __pfx_kthread+0x10/0x10 [ 450.942573][ T31] ret_from_fork_asm+0x1a/0x30 [ 450.942611][ T31] [ 450.942632][ T31] Sending NMI from CPU 1 to CPUs 0: [ 451.065043][ C0] NMI backtrace for cpu 0 [ 451.065071][ C0] CPU: 0 UID: 0 PID: 34 Comm: kcompactd0 Tainted: G L syzkaller #0 PREEMPT(full) [ 451.065095][ C0] Tainted: [L]=SOFTLOCKUP [ 451.065101][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 451.065112][ C0] RIP: 0010:lock_release+0xbd/0x3c0 [ 451.065136][ C0] Code: 5b fa 48 c7 c7 81 d3 fb 8d e8 9f 01 06 0a 65 ff 05 e8 45 97 11 c7 44 24 24 01 00 00 00 83 3d e9 f9 8e 0e 00 0f 84 90 01 00 00 <41> 8b 87 88 0b 00 00 85 c0 0f 84 17 01 00 00 4c 89 6c 24 18 48 89 [ 451.065150][ C0] RSP: 0018:ffffc90000aa7938 EFLAGS: 00000002 [ 451.065167][ C0] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 0000000080000001 [ 451.065178][ C0] RDX: 0000000000000000 RSI: ffffffff8dfbd381 RDI: ffffffff8c28aa60 [ 451.065189][ C0] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 451.065199][ C0] R10: dffffc0000000000 R11: fffff52000154f24 R12: ffffc90000aa7a48 [ 451.065211][ C0] R13: ffffffff81b1c9d4 R14: ffff8880b8726118 R15: ffff8880202f3d80 [ 451.065223][ C0] FS: 0000000000000000(0000) GS:ffff888125293000(0000) knlGS:0000000000000000 [ 451.065236][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 451.065248][ C0] CR2: 0000561dcc284660 CR3: 000000000e74a000 CR4: 00000000003526f0 [ 451.065265][ C0] Call Trace: [ 451.065273][ C0] [ 451.065281][ C0] ? rcu_is_watching+0x15/0xb0 [ 451.065302][ C0] _raw_spin_unlock_irqrestore+0x1b/0x80 [ 451.065321][ C0] __timer_delete_sync+0x4a4/0x520 [ 451.065339][ C0] schedule_timeout+0x160/0x2c0 [ 451.065362][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 451.065384][ C0] ? __pfx_process_timeout+0x10/0x10 [ 451.065406][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 451.065421][ C0] ? prepare_to_wait_event+0x436/0x480 [ 451.065446][ C0] kcompactd+0x416/0x12e0 [ 451.065470][ C0] ? __pfx_kcompactd+0x10/0x10 [ 451.065490][ C0] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 451.065510][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 451.065529][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 451.065549][ C0] ? lock_acquire+0x106/0x350 [ 451.065569][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 451.065591][ C0] ? __kthread_parkme+0x7a/0x1f0 [ 451.065612][ C0] kthread+0x388/0x470 [ 451.065632][ C0] ? __pfx_kcompactd+0x10/0x10 [ 451.065648][ C0] ? __pfx_kthread+0x10/0x10 [ 451.065667][ C0] ret_from_fork+0x514/0xb70 [ 451.065685][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 451.065701][ C0] ? __switch_to+0xc79/0x1410 [ 451.065723][ C0] ? __pfx_kthread+0x10/0x10 [ 451.065742][ C0] ret_from_fork_asm+0x1a/0x30 [ 451.065766][ C0] [ 451.557550][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 451.667563][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 451.737541][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 452.111739][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 452.118760][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 452.129564][ T31] Tainted: [L]=SOFTLOCKUP [ 452.134093][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 452.144164][ T31] Call Trace: [ 452.147715][ T31] [ 452.150743][ T31] vpanic+0x56c/0xa60 [ 452.154740][ T31] ? __pfx___schedule+0x10/0x10 [ 452.159969][ T31] ? __pfx_vpanic+0x10/0x10 [ 452.164485][ T31] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 452.170685][ T31] panic+0xc5/0xd0 [ 452.174420][ T31] ? __pfx_panic+0x10/0x10 [ 452.178934][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 452.184387][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 452.190575][ T31] watchdog+0x102c/0x1030 [ 452.195026][ T31] ? watchdog+0x1c9/0x1030 [ 452.199510][ T31] kthread+0x388/0x470 [ 452.203616][ T31] ? __pfx_watchdog+0x10/0x10 [ 452.208305][ T31] ? __pfx_kthread+0x10/0x10 [ 452.212916][ T31] ret_from_fork+0x514/0xb70 [ 452.217533][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 452.222761][ T31] ? __switch_to+0xc79/0x1410 [ 452.227570][ T31] ? __pfx_kthread+0x10/0x10 [ 452.232302][ T31] ret_from_fork_asm+0x1a/0x30 [ 452.237272][ T31] [ 452.241517][ T31] Kernel Offset: disabled [ 452.245852][ T31] Rebooting in 86400 seconds..