last executing test programs: 7m49.90570523s ago: executing program 2 (id=3318): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e8, 0x1c0, 0x111, 0x4b4, 0x8, 0xd4feffff, 0x318, 0x20a, 0x278, 0x318, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x7a, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e29d2d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @private1, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r2, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) socket$unix(0x1, 0x5, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) rmdir(&(0x7f0000000040)='./file0/../file0/file0\x00') read$FUSE(r3, &(0x7f0000008180)={0x2020, 0x0, 0x0}, 0x2020) umount2(0x0, 0x2) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, r4}, 0x50) syz_fuse_handle_req(r3, &(0x7f000000c280)="897c6500ff3035465c7acb4e06980b05687c1480c7aafe631c0543db2bf0d6f539506e8782da06c1ca018774d72e9e5a3418ab66ee78dad68457b17ec9d47bf7d8272d607c1c0a4bd906f0cee7f8451828d2458596bdd6a459ba18ebaf61b38f5d66c27fa8a024ad7832a85e58689a4c254c94cbcf7208fce6e61d9566459789d15a6f91dd7db7c54cc3a94da956fb290a8a15f849270bc459d9d9f47801be86dd5c9d18382081a993b7bfde5c28adca4c7132fd6be743b076033b5859891703eb65fa256d6f47450b6edacbd05a9bd8b372e90cfc30f32826566dac6c48e6ef001881cbc30482f9ec469e476a101da496b8c0785eaf875d3608b0c49e9d39baaa1041f903a805f0f24aa63722fa2d87b98595fa5cfaf8b79c458de43ee39904e7cac7540a934b4108957785d58807abff186949f1b94cd21b724aff34ac45c7066dcdbd68ea7b766af9d045cd7fafeafc5c5a0c3400ef4e0c71a6fdd5b8d68a6f317644cda9d2fd2c839a82b97b3d909b54c672227bef573c9de1991d65a63017f724d1f7f1575e69db53318a7fd7065b303e751518c8eef04f642dbd4dfa349040a7b5401050ffc2b4ef62803a7c8eaba99e011dfac24d81b2b61e0b0581e53bf520f623eca17f0545c5e59ff15b527475f970f589894ae589145fa4283f7225088ccfeba1d72e9128f8c223ae1840f2edae3dbcdf7e560d5cdf4f71c9ada1931c0f8312c000101b264aaddb9fab166ba8d8903d6098eca20935ca607ea79e936798b3dfb22a7e159abb234cf21f3733dbf263a8ff116092f251659108892b2e21e1b428fd225096a5040270b2d70347013eaa1fd8e452942200283aab092c4ffc5b8b427b5d691a5a773e09da20539ff0f8214331c5d84107ae8a59aeb58efe22d7a079e446f1dfb07510377799bfdc7ee59cabcd76af0fe8a427ac8258ff33bbad5a8061f1cfdfbf375d73d676cc7916d6658ce46a0b17ad6350150f98e3512b513e25ca73f5f5df0a1fb9582ace7906c493fe1fd2889d9aac0b7c29c2b6c205537627bad64df433336a5ace32ca871e51b4dab0fbb00886a1fa81a98b74de0a26cebf65723515ebb807fc3c161ed42d1a7b6b55717613577ea437f3a2967c66ce45ff85a6a35b7cd40625fc575b107d7394e3d2db51d58347276c33e21f50b5a6b5672bf9fda63139bb75aead1fe4ee9a4064af5a5958466aa39faa6d821489fa415224c8d69d3b5922236832c2b1e4f6b8863b32f9aea83fb522a2de081d674502b48f73ce6db98d84136059b4a6676bc85ac6b7626329afa9bc7d3f9f2caa3c4d872744e0a8e02d72a75c6c545b8ec8e15b6fb0fe4185bd0d154960e6fef05ba40e5fe2968eb1301dcc52a03337179e74ba1522af93d77827845f8941c69ed8bb84567e3c63f1cc378a542f1de7007b688ff0a9c69d5861f0b85402c30a2fd391c52bafbe65f8e82135fd38361d7c0b43c982b2f3e7cb09c40c7e215114f4243d670cd576bcd93c1e959345170c75d6c3cf89cf8c2c70dc792e646e7c649d4c5f36bb016c7acd466ad58473d40dfef36394e581065a8581ab852250403cf372ac0065bf757fa3f445424ac0d82aec1938a2ea116bdfd306baa1cb06c62a4a97d66ab1b9489469cb8ba842da12e310caed02c5ef05c0be1e1e8c9c8b87d6871c94c57d164d08672b205c948086a06a545b266b7ad902a908681eb188bc51b6190b5cb9d8ca59b8c4c6e7369c00d6f6119fd5d437239e3d3c89cb81e09e560fb817590106015f08e7b09f1e1e65bfab3b8489fa058e24081978b9e25463d9945bfbca81c08885d4b6d4c62e217bd9e19460762f36c66bc948fe31cde089626fbb310e3c78a8d3f2eac21d374d9b58d887235d3a95721168e4b9475849071d60ecfe7ea5d6c4bf60da3747612ef59bb651270f326c0af31bc8c71361f851de34ccb3c8071b96f1128d7ee79b41246e566edd0272dbd3ccfe472b38e5e03d3ef83218bd498e6de8b4d92cb6f82716449ede7ba845028eccdb9137be8a622ac88ac53118fbc39637fa7a93cd3abc6f7671c7804420d66e94720acbcac916950f9baca77fef4217155ccc2cd0507339a0486f9f468eb28772986ee768c63eba671bf8c52e48a2a5dc2cc24fe925368706c2d712dd1064692b0fb2a32ddfbd4a0ffcf9c2abcedaae6e527bc1d42637aff2a275b76a7a7f010e42e1cc1d27141f6c3585a2bf58c6c5789ce61551d10118a000e3764631ec0b7f4b1a6f22a678133a30940b79dc76f863dd9f6e0d7776300898c97cef286c731c2050928c492439256e481652bff0d202db3cfdc54c9816ceea7895357bfa0362fad79afd09ed55189294d6ead7e898ac091cddbe7efcedb314bc02a18dd5bbddc42e089124758bb491fd1536aab27c5c124567bc325e7028bced5a179a011d1cb9a5ffb61d7af863e91ec8e60495561188b74d158ba1418228d44e92915a22eb1c166ef7d6179e84381ed950ffd747f13e24172942d922ca3109fb8b1e4e6264fa4a4eec75ad0d0e22579d90f45d6cd157300e38ae665eb56457202e25a8dd5877ba99725de288660badd2704345d9bad208c903ba27ea167dd45a77f77b6502b525b2973270582858183c784c324c1366fbba8d410c38bf75b41e067f6a9a017c56595161db4fc5639393fdafb1f148d3f416c1adc5fe1ab9cebe4689855c9b4bda6dcba5d5fa858a1b87d2ad23cdf54dbdf4d14aa4462da0b6f1107f4afa0091c2643508861a4d9f133ba77751941bb8fb756abf1a104205b80d47a3b4a59724d959c8b5833da4f56fb6613231f230a9378c9af741e94fd2c7213ac1d7625559b3f032f6c8df3ab441929720fe43d7c548cc661eed5b3c62b3c61f538ea3228376e2a18c6da2ad906322f64fb4865cde8e1889a8e5237fd6a39bbd6662f1dedc22fbd74e4376fa610cd710703dbd3924a38beae69783d1d5abf36122cbb87129ba719042748f060f4303a3199c5891c5040fd8cdb9761b006bf64cdcb65e5cc50a29994b8c1c34b83760ece12ed9ed7c3d2a7f8911cdf23a1afe0d7db1bf342aa0123dd5cd31339f5c8e160c4efef882602b3eccbe76fb690162b8bfb8a31910bcdf9a4a5dde76c2ac2fcd8678add7a000cfdcab398eb2171c026313eb6eb56b4b87bf8ef93f7f8a1c0bcc3775b681d4229ea561cb52281d8ba4315c3694ed08433596884d5a7ce3a8b1f82359846b7136726e2fe37bf4f7b7e2206cdcdb0705ced9f0dcaaa2ed3a78ea70d2cfeab668eb321400fc955e9aeb7bbcf86cd03f02dd443503a1480d9d9f899f53bd747a95293786798fc59fceb09e686a9328da4f929b6201841bbbefaffcf3386abdf69540e3b46a643ec10f0acf21f27c0053dc13f18485dbc898729dfbeaaa4887b58cd442d7ffa941808cd9658595be8650a815b088621278d89f0d8a4252566b923df3a3cd65c0e4af08fad385927251b31d35f75eaf25e6cf13a579aeeb0bcc0a14ca4a20a6831d532be0b2af3821792a2df95131b7fafef245aa19b214053342aa820c35858d13f84e496294529411015c41ed447b5b51dc44a45d52552a2be1abfc157f3ace7bfa32d5b931421d5a152dd66b7bf549311b08325e5a7201f793037b38990bedeca8a647c08d2478670f8fc2b4e8983ea18bcd514daeeeeb9d7a778f783c76edf01bd4beda4b77b612cd2e865c2e4f58ca7ae06147bf66ae6aee221cf9b9505dc07e6fb6cf4f82dc8c406c78e270210c11cf2531011ed678d9dfe1f49c9a69a95a9f3b0e5b624d9c2664d787ab911b75a4a38d63e9d6c353f8aaf433ff961fe5e34d84936ead0d0bc7954caf84e541f5c6f3f20c9eed21eb0316b82c0dc5182540e63a0af25565496792153d6395adc2b8d68b8bcd93dd110ff5685879db4384ec390d44b89663d43a5de3bdc0e103b7c1b355dc5f6fe3518c93628780ba03f156badea65d1d0af8433c9e8a975fdd19453da662a33fa9f0f5fa15fdb216b483fb48370a967246e0b763df8b3bc7924a6c76c4b114f803dbfa3b312e6815b4eb67be167283a9e482d9a5beac250089d069d4c386b7fda5fc228404a0f58b12ca4dc131c381b49b42b570bcfc0dd663f24afaf65a26a21f6d92f52c9f8de36cb76bacbaa0eef98ba6b7dbbc2629a03bb2b6f83fc5adaf20c217bc8d0f0d2421e01472532bcb546aeb2d483c8f95011a3ba1d2fd8086a717cb015dd53064ef4a80b6d6fdc12d9069223fdf2aa9b192a0e0bdb38436f49d9eedfef3665815633fee4344aff11162526362b70b18e1dbedbb5d8c4698860beccf667851878a25a1e766caae2861f2e23404aac859e62fdfeac06a6057554828d7035806e8ab3ee2fa6d711e5811db61231a22f4672f6a11b27641f350bcab78792362e6ebc1c054a643bbbf2746678c14dc567d1f73e37005c8ab6374c4d8d3106384a2d32c5fcf05cb9ba97cb7fa1aff11505a701bead543e555f3901ef3b693d5b9ebf49518c3509af042b7e84b1b867c22b7e08725220e4338fd074edce428212e6a3563a08e2ccd8ab71910256532904542e93d5c7deb5bf5d49beb3202d4da4f643649e55edbb91188cdcf0883a40c6ed6b8a086fb5c50dc08fee00308420121d4c7431b3cfb80f9c1e099423ac451d67b12e930d9e391d0a799c7d4b54a0d56ea0aae00c1d009e21fb5459416b464b227d66ccc1a68da59d64c1583dee54bbcd7d61ffe541fd0fb7452adba91906918966a7d58019ad1f8fdebeceeed7018837b6e4272eefeec8385abe7207fb2d7061fa6cdc478165a98971f9729b818a73edefed976d5c7c0a651c091cfd1174c020e39330a79144271fe4cbc61ea0ffa274d0d87d06dd08c1d5f8a0364d46ef7b54426bc286330c75fa257afeb2715c2ae511ff53b1189cc59ab80b1325fbdcedfdb8f36ed71f70091116e16b52188b794e637755027caac8db8554f8674b844964c710cacd7a9d6b06baf6fef76159a380e639b0d3e66080a7cf7f86baac01dbe47fe687fcef2f3bfbf6f8fba045181dee688360a11ee56e5fc73ed31c0e2924ae57f0cc93c63a30662a65c5d5f17123ae28cc5b74dd13ed81b03dc7fa61dc575668868c0df12d3553269f04ba79084d070abcdbd4745de80e90e4e3e524f27249b5c4a2f2d4c8b331b0cb6d4efe62a298daacc6eacdfe008c1f912795dbdc37098c42db860953120fda709baa6d46f52eaba781505e68561ca0f281e850532ef8e7c779883e312806e1c357bdef8d0dda005e710cfa6eb8686e8bf3bff036b3fcdc4036541d93530ce6f598442c24170b307ef05f23c93aa0ec96831b532d8120402214a940d1fa01ed649061a4a71308be189cffd729a196754fb8a75f23851189589be1b819f0612cad3dc94ccee88f4ab9ef6ac9c7daad8cf94f5ed9496c4c824e5b4f66ce32a80e7a6ef069a32f6812e656aa5f5742bd432afdf026c86e8f28212c1139dad47d7fc07e5c1a83e993daaa4a4bb5f0c9435ccab2a10f867ffe259dba7a1d9168619b1e3048860a5122e4a5d0b00372eaae861a0cc88549852fffa76e6d78739b654d67df15ea97a9a46b7c382d83191a673aa619b4a10ec05bc681379b0d6df824cb6fe158e9d89ae5dd1ef66976f67972b553db52eb6feef836dca6026293f83a61e117754a7424a3da63bd82d017f87f0603e2a9b8fc550aae611681935ae91f7ca2b5341b05a25208bd28f1a202a7f2a213b1d7411ffb557470aec00c4d13c70163f22a038a189710dd19a47e8db4a87c3fd329a63abca172a9810edad2d8e19ef85b57ea4287cfb3d740d7ea3fa9c80d06e1aa84b317f678ddb3c147ba5e0db432125f59ca4944c8e9050281ca82a3ecf67b2a5df678697a52a7297af1ecb03c586af7b91d74e881964ed95f7be12fa07e2a4e71aab8b913a13996fa33e915144bf00e49b8e7adec5b2c4b8165f54ba3155230e241ee023af77a295ab87c40f63f6092ccee05cb08a265abe8f57c9919bf45064b6c2240ba8011db223a283a4e2292d9b59df8c9a4fdc763f0631007db9976f351717db0e6b5f9c6e5f227c2efa1ae5fe0be1af0b22fc164f9f9678a01fe8b059749fe8a2972455732da1989c609d191544ef9fbb3e58da93ec4a582430523f260b776e4d747312747d18a9bae14740f5dcd35fd1072f8a4d81573b5882203be856b62d7e1d87081a9e431872c9d68864197bbc61f15dd8aeae950d34d6ce97182deebd2ad64cabd1c723baf512acfc7e94675b31369bd60e155af79b97bb734312569f736dcd5b5a78223ffaa0f7e93e1a112cb9f6a5b88fe3cf12c30024c16c6b8380fdf086c662665d3751c11617cc4dbd5b8bc7543301a23fbc90ba8d060193cdc2b68c31c734d516707b759f7db009c8f06e69b40154e1cd8ae444afb28134acdf871136b4fd78bd86d7faaaf618afb25e92d1ee37cdff0595278f9565f5eb109e181e9cacec2f22e32e9f34774ee223fdb992febcc5dbc5cceeda16cbcf1434730d859e7e03d36ff17636a7a7e66956b515894da114f3040909f90ce3cfbb2d7d46e37049c0fb124e0683d662eb427cd7b851ada229451e6e3aaee64b9964ced3036bde5d9d80eb062474f96ecfb9b65fcafc719494ac12ab7df245475f2a5e7f85ca4789833ca373e6214d39176c8f51dde87a4cfe5414a20f68bb9f34709979b99533ba3435c4aa56e525195e10ffd00f8e41aee30a909c07b973bbf733d45500b539ebe2206d438216690998d9e256db1b7ac6bef3e810785e1986985c945a2b820323a592721fcfa444934d0faf8aa439d5efca5dcd77b72d1eb91b3790d50d0a7483e354c415f81d99c133d648c1293e795b3c43f9b47e23ef982e10072ea5baafb0df675e69af1807b225afa0cec3eafbde8535d3ecaa0ea6ddbffe4465207425bb003670320324df0aeeb16b38a043f9c0e85673b36def332fd68b2b1e6edda621d0cadebbced8c7fc8f890489115b457249e8d8103676b3207a472804d33e0fe511ac56cd8dc5333b2333892f87b455940ada78fcf5075c358fce990e6f65f095eb416d876ce6f120b8b02cfa6b176ee269c942f881247c3e464cce2aa65c39137607c585aeb4b5f24f5f8e058c9c8b48003c1809da3e8aad1bee7955c3a976d43fe132e2b16f4758a0a9884e51d13b930675a4361ff366b0fed190ad7b2a00385528951e39cd44ea06d8921b9d613d7626221154cf86249a550198fe4e5b05ad3052b474291da0a0a2f701759859bc0392adf243ad5eca89e6d18e28dff99ef95743bcabe75504be8c715cd6360facf3bb06cb97c29989d4f6ff5083573cefe6ef0b39a252a2678112fa88e5b06c9a6bfc9597cc96e5a49710c4fc120fb0da4945b9d94e46de1e9989d0fc3d8d20df23d815b660c799a903f651b0d013f7fe158f1d297f7fcb6a48780ca5525f1d081ada0aafa83552318b848783306549750b6254cf676c7b934cf7fdab992717f0cdc089b34278f3fb151cadde14d0d3250e85a4b0ff2a2778a219aa40563d3ef575285484424b6d0e7cc8392342e4848c6fc8cb20fa1b450cc4c1fea19f3bbdd9e342e6c49cd7ac893b1eda2e93d1d74d20969465946b398fbc733757741ac822c4a118632cd242a439fc37512cf79b7c629504ccc1e7f2f11798955c3262b5e9695625ba74d8050e20f51d4769e1ab938f487f1bc4b55b5abcaa3ec079c2d0972b2ae9bfb7c5423b959119292ea05f1d79d35afe47e49d97c946b193bffc0a8f607f18a6845cecbbdd98cd351db2b2dce05a4848ba84a6a497b4618950130cb7e76c03d0976eb2fb41d3a42a1430063ed8e5b8c67e80fd4fc1148911958babbcbff33a6505de209b0d9320017fd736fd027a16564008ab2e1f48a6dd66c9256730e9fda0a606875d0871b2b9b0bc2ed4e1b696dbf0283c8dc72cf4338e595266f5390bc3a21f988353118f2948fc75d050ea076b73508d9ed89bade0ba305c1f4e5daf9d40d2f5e7ababed8d1b1d919c61a6d3fb149c1a9b44e38585a2fe322f83d73a3aecb44da3f0e82942d75d62ed3f91eb44f3411df014f88839e4cb1e21b9b259d4eb4adaf6b0be433d0ed4c87ec77dde5ee9d566e3dd8d928fc1875c63af26c59daba5ae267d9bd5da72b99a03e6a33cc48ed961ab484ff4a46c2d5fa597e626e00b530d7b9a9705e4e08d03f3a7f2a5a5233ad6340e3b5c89db81ca713b6d7d855c6324955f85109b204566f50178cd88abe3fcba25de905e8ea0b75ad51831761ed9b1af2470f976f05ec73bf74d137c207270cfd614170518cdc449aeeb663e114359c8124eaf2499d8cf5dc84a0872301db2e57b50bd285060ec4390d99d4ae3674ca3bb8679c1b08e566ba4f30daec8684a980055eb43cb5a1306c4b52a154682aa96637e06c869278aa2f74ef7345632c11265ef8ac97e953745302556881ba0cb590fef271c0abb193fb84d18ee3f24d9976ae816b857d6f68d1fdfe10b312c799fe014debf875d04bff8b4f387859e97c6bf13f7083c28a2045a0b5eb09c94e781a165965e8617c0efed1701ea9667aeca26d9577ea7b1242e1d91b25d6a66756cc627648a293b9f4345966bc469fafaeddc1118d0972bd5c7751a1f51e5989fd952f314ae10417c97b41e60ebfbc47e496486fa4a89fd16aea7fa1eabebd26eb2a37a3e2b351e0c9d2f67b2e5be0f921adc9b6045b045948e5103af0e5050b9c0799b513c00865deebda730de538f956ceb6164e08bd6f58655a294b4b44fc65309b30f9c00f92ef5bd5b911a3d830f72c258b19521bb8e80db02129954efb61423f518d2c5f36587303890cad9a93fa4f4bcd0e24c67db679c67ea59c1350b8442577632d5e8735833f3daf5a74bc7bd82659a81beba8c889632efe03cd24187aee856cf659e16e195464f52f2b984fc7a299e7b2aa53979a147ebed35705d5e89691666536f2febacfcef9b32d14952f958b72512869e4f6a0a34176918217888b1eb8b89322ebb6bb1dead2b4744e728479880db70e6147edaff6c3f083f18e0696bdbd78cf0bda14d9f42e5c1077ced00041aadff90470aacec0e48e2a5f2a0ed37818a173b96061e8c5bf24c0bde9e09f9e0ddb8e13306ef1d4eb8043ebadde5d7553e5212ecd4691eb426251f9d6720b8276ac543dde02399a35d974b22c1727d4b6df01957cae47443b706d43165e01d6932b136f561ce837431254cfb2a6e7d8070a2d3805aaa15b3c10ccd0cda2e9b418ce9ef380e5d08217752e12b3b892d03a9495c83d78d674612fde5a67738b2d4649ce44606ecce6bf3bd1293eca246a83643e4f1c7ba362b110e07c8479f216e3d4afc4fcb8d0820c8ab702a66d8183e83174597035e92b9b500dee08c80b927b42c3689c7c9617b4112c9e54cbfa51e989b5fd42b80c595d3edd265f138e8128cfbbb0e4f53aa0aa95a2ecda4518b2e564c42d5de7671560843d08103b9bdceac5fdeb0b1266f72f491265dd2b2b80a225a50955167da1812364ea340d82f61535401bae6f3140a8795d7c318a64cee4676627244930957b2f0b227be21b72d90027e6a5a7af3c59470c74dcdb71d1ef090a0f49c91acd604c792385c8f4e085765292822ee5eca03885fd6bfeaca9b3bbbdeac939f7846a487c5a483ed1e4fbf37c93886ea27bb35c812089b900b77c7c924147e97b6a71533610750bc84921012aa8158b213f7601d934a20bdd1f757b0a33042a683af6b9069f3900059d7f80f9fdcc9f33ece8cf7888dc9e24f1fc6ca0ecccf161c5334c60f440feb3acfc3d115011c176dfa05314c5bcf089e3c82bbe7680a3eefdcdbf3ac27265b779db4f49bade0128eda6e29bc5933ef454601db1b49628fd39ab938794fa46a33937a086ece7050d31a21524e2f0cacb307ed4412a2078636f9cc8e11c5c31cc0f9edd7be6d1e31a1513a58e25215f5a24245cb988589e6d5e5119f4f6557c697fad7d1c3a7e3bae064db4382701e33e48c5b6a52fe9141a385ef2325c6f7781134607e98bfd02c43d6deefaa861700388b40d98e941cfb2ddec209f977e8b9f93d29fdbf85e3010ce7cd622e8c75ce3df535e392052b6d65d5042d2a6e78bbfe5ee146e8b18d4bc7fb024dbba57cbe0402205593766a313950cb719d00c67bb6b3bcaa1015b89e820f11475afce655947113a7c3dcbb52427f090df994fbf076db867e0ab3f6125fb8884c1d13ff3e99fab5fa8b9f0b72cb44db4d0a48d9ec17f9733764e213c40a15ad821ec60e4a88cb2fd9dd9a4f35e6a708f4b74067f4be3f03a95261f6b191df53fa5bb5164e4a164630ad9ce39087aa950ad9e60cd2c44fa2237c49abf858c97737fd21180fd0b9542767150fbed3f39a29e6c3484d9437e15d2439f2a54b2a1ac7e63e6c436658abc3f1dd52d984f6c6901768a8cf2ec98ebf44e90e0fc0c24f8957c62e05d8eacecaf25b178fd710af609a8a1bc4d7955b5f0cb4f48a37685e6304ea5843573a1abff37b5106916c83c8f23f939a0dc43aea8d196191ed6e18dd793990d1f37d7de0bf8fac6f469843724eaab86be8a483be281b8ecf4aa29d9c571951cde8cd8c2aaf4d597ac2cb48f23fad145916920a55d655924940573b64dbd42a280cddc4810434f930183fdbbdc72db1491a4c9d44daf9b1bc2fecd855508648063040faeb125da0e68e6cd2002181118eecff0be1dd8eae726af5d451630cd65119c52abd6dded97f931202f186a18c4ba34bc2c3f6d765e2d8f445e959f26ffb55827cf3ff2cc0289f17b82c8caa5a2d3d54306a300f0ef42bbe4ea9e32c5d4b1173942745cdcfe4f5d1619eefaf8dc600afbc9171d516f7f4b35331d0b9be005132ffad5e9df59710278b842afb626a78b8b8b37fc3a894dc705b2d4e0940cb264e9dc87eaa148e6faf78125462f28a0f1d7b3c65a291b85713fa71ffc478f6601e8716c35489f4a54ed0c70bcfd5502cc91374dc3c982075c5180398bc6b195b36e79dcc4087cb990cc9d964a150e0dcc887d496bdd27c3f298736b9ad8345ba2df46021964cf43c38f9d2e94b77bee2b7bf059e0870ff9f17b9ef1320c0aa88a2fa9781e9017ab64643de9a3df9ed4b8cfd8fa080a2e494409520b795eb1517d224a05e450c4c8ae0e9fd29c0e72d3a592cce55f6dd5107f21214e1a3f9a5448384de06149f959ec0c92790f0ff229ab4971171f1c528ae6d095ec007bf5e7f55d623a68194e9ea8edc3af418075338328f24e7504341c22bef72c2963fc9c3237ba990d29c2c8aa3007395f6d96e95b40ee1b18dbad550bf39d0d98268cb74dde76d987c3169c9067495fb1b88508bbb7e94cbb7dfc15c03b1d5b163132c8a468906f02d422a8cf98d0b432b5779dd962074b72dd27439b2e94312f573435e5aa84664432c1914839cd6e172186ce93eeb1d7cb0659696d9d550eb3b185f8c6ee16e53f78233cbe709f99d2879d63d93f7d0ed133241d2f1ab1eb2c56605ca0f0e01c39ab0ba2370fe5c4e68de0561b517ff9a10023c386236398372c7176e35443e2cf5dd6cbed9f23395f231e6a54f65626cb5860a8b72122c34664119e7c47204ef4a70583a00", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x90, 0x0, 0x0, {0x4, 0x400, 0x0, 0x0, 0x1, 0x4, {0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x4000, 0xfffffffc}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000004140)="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", 0x2000, &(0x7f0000001880)={&(0x7f00000010c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) close(r6) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000080)=r8, 0x4) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000780)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea6f464160af36514001ac00800060004000200060000000364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r9 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r10, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x400000ff, 0x0, 0x2b34988d}]}) setsockopt$inet6_tcp_int(r1, 0x6, 0x6, &(0x7f0000000180)=0x801, 0x4) socket$alg(0x26, 0x5, 0x0) 7m49.457999141s ago: executing program 2 (id=3320): socketpair$unix(0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) write$sndseq(r2, &(0x7f0000001080)=[{0x41, 0x9, 0x3, 0xfd, @time={0x0, 0x1}, {0x46, 0x1}, {0xf}, @quote={{0xf, 0x6}, 0x8}}], 0x1c) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x2500, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r3, 0x40047440, &(0x7f0000001200)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002600)='/proc/bus/input/devices\x00', 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000040)=r6, 0x4) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0xc0241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) read$FUSE(r4, &(0x7f00000001c0)={0x2020}, 0x1906) accept$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) connect(0xffffffffffffffff, 0x0, 0x0) write$UHID_CREATE2(r4, &(0x7f0000002640)=ANY=[@ANYBLOB="0b00000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000053037421bb79d2eeaec3334780ad00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000020001feffff00080000010000004000000032bd3af4712b1e68209a997b30243eb244217034b5ddcd69a3ee0628c4d8b287c699d010d767cf4152305fd32bbfa19adcd48fffa4c3359c92377b5ec8ce9678c2961a150b3acd5c3a895befcba2b85e731ce5687d36a6489349a23305b961"], 0x148) socket$nl_generic(0x10, 0x3, 0x10) 7m46.265233304s ago: executing program 2 (id=3332): timer_create(0x0, &(0x7f0000000100)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000027c0)=[{{&(0x7f0000001c80)={0xa, 0x4e23, 0x83, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xffff}, 0x1c, 0x0}}], 0x1, 0x48040) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000280)="a73b0bc93bfb797e5c542761747f2ee9b1f119020956a038fc082fc8d81695304626d4fb940881d1034863c8e53c058b011328c49867ad0f4e655f7d768cb59f54500337ff4aeeec57e7bad23bd0", 0x4e}], 0x1}, 0x810) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000200)={0x203, 0xa, 0x2}) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000500)=@userptr={0x6, 0xa, 0x4, 0x1, 0x0, {0x0, 0x2710}, {0x1, 0xc, 0xd2, 0x6, 0x77, 0x6, "0080ca6f"}, 0xff, 0x2, {&(0x7f00000002c0)}, 0x6, 0x54500337}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20004000) close(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x492492492492846, 0x0) 7m45.984043573s ago: executing program 2 (id=3334): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f00000000c0)='msdos\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000b00)='\xbf%#\x00', 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r5, &(0x7f0000000100)='.\x00', r4, &(0x7f0000000180)='./file0\x00', 0x35) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x4, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f00000001c0)=0x2) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_READ_FIXED={0x4, 0x40, 0x6000, @fd_index=0x1, 0x0, 0x90d, 0x4, 0x1, 0x0, {0x0, r10}}) io_uring_enter(r7, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) 7m44.89478183s ago: executing program 2 (id=3337): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20000000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x10, 0x4, 0x3cc}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r5, 0x80, &(0x7f00000000c0)=@in6={0xa, 0x4e21, 0x200052, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x8}}) io_uring_enter(r2, 0x3514, 0x9141, 0x69, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000000c0)={0x2, 0x0, 0x4004, 0xffffffffffffffff}) socket$pppoe(0x18, 0x1, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x20301, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x5}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a400000001a0a01180000000000000000020000010c00044000000000000000030900010073797a30000000000900010073797a30000000000800024000000001140000001100010000000080000000000000000a6c"], 0x68}}, 0x40880) timer_settime(r6, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) 7m44.509845939s ago: executing program 2 (id=3338): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = dup2(r0, r0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(r1, 0x0, 0x0) write$vhost_msg_v2(r1, &(0x7f0000000380)={0x2, 0x0, {&(0x7f0000000140)=""/116, 0xfccf, 0x0, 0x1, 0x2}}, 0x48) 7m43.797161415s ago: executing program 32 (id=3338): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = dup2(r0, r0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(r1, 0x0, 0x0) write$vhost_msg_v2(r1, &(0x7f0000000380)={0x2, 0x0, {&(0x7f0000000140)=""/116, 0xfccf, 0x0, 0x1, 0x2}}, 0x48) 3m4.726134034s ago: executing program 4 (id=4378): openat$mixer(0xffffffffffffff9c, &(0x7f0000001640), 0x121040, 0x0) openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0x4) signalfd(r0, &(0x7f00000000c0)={[0x5]}, 0x8) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket(0x2, 0x3, 0x67) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) sendto$unix(r3, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x7, 0xd0000e0}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1c1840, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$unix(0x1, 0x2, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x50, r7, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000200)={0x48}) 3m2.819587512s ago: executing program 4 (id=4384): r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, 0x0, &(0x7f0000000640)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="79dcea4c54010000100001000000000000000000fc010000000000000000000000000000000090b25899dadd692d886f4cca0f00000000000000fffc000000000000000000000004000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac14142a0000000000000000000000000000000032000000fc0100000000000000000000000000000000000000000000ff01000000000000000000000000000000000000000000000000000000000000ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200020000000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017000000000000000000000000002abd70000000000000000000"], 0x154}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000006000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000009140000001100010000000000000000000000000a"], 0x64}}, 0x0) 3m2.425866421s ago: executing program 4 (id=4386): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TIOCSERGETLSR(r1, 0x5459, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r3, 0x400, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) sendmsg$inet6(r0, &(0x7f0000000d80)={&(0x7f0000000540)={0xa, 0x4e22, 0x3ff, @private1, 0x1}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1400000000000000290000003e000000010000000000000011000000000000002900000037"], 0x30}, 0x20044084) 3m2.188539617s ago: executing program 4 (id=4387): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000240)={@local, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000080)={{@local}, @local, 0x5, 0xfffffffffffffffd, 0x2, 0x5, 0x0, 0x8000000, 0xff}) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000080)={{@local}, @local, 0x5, 0xfffffffffffffffd, 0x2, 0x5, 0x0, 0x8000000, 0xff}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) (async) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x19) (async) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x19) ioctl$KVM_XEN_HVM_CONFIG(r4, 0x4038ae7a, &(0x7f0000000100)={0x1, 0x34b, &(0x7f0000000180)="3f794df191a8e3a4600039f8e20d0dd0d7c1080f429ebf5431153b166265270e8f0ea15f6812aed332325f0fe10ba4c6e33c4ebe6851f587c834295aea61f88c401ade2f8ed73b9364219940196623", &(0x7f0000000440)="c3891815e4b280418efe8a93ca57473caed5093ddf90bfd7f7674c349dccf2c8ef0bc1543e5b452033b70c380bad76157b6a74f96dffb82d1ad3c5964ed62c8ba4c46ed13f5c05c4e30a4036c3717f674229a1f33db80ae37694947f5515aa5dd14c5ae30f2dc704577cd32edc81e6a5875165be612eb09eceb93625a6f35cceafa1f146ae0cfd85d1617ae7c56f2383f6f275428f3ffe953ce25e74d01b8283bf891310a7e804f8e8dc3dcfc8dcca2cf211ca2100a2518b6c07a33a5aceeff1e1ed49c40a2f3216eec4", 0x4f, 0xca}) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) (async) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r6, r6, &(0x7f0000000000)=0x2eb4, 0x2000007ff) (async) sendfile(r6, r6, &(0x7f0000000000)=0x2eb4, 0x2000007ff) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix={0x3, 0x4, 0x52424752, 0x6, 0x7, 0x3ff, 0x0, 0x1, 0x1, 0x6, 0x2, 0x5}}) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix={0x3, 0x4, 0x52424752, 0x6, 0x7, 0x3ff, 0x0, 0x1, 0x1, 0x6, 0x2, 0x5}}) 3m1.9571396s ago: executing program 4 (id=4388): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r2, &(0x7f00000000c0)={0x2c, 0x4, 0x0, {0x0, 0xc000000000000, 0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}}, 0x2c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000035c0)='./binderfs/custom0\x00', 0x0, 0x0) r6 = syz_clone(0x92000400, &(0x7f0000003600)="29e1c08c6363a968293105dbab844e4576958da7336734745aaa510738bc6805db636fa5bb2dd6f664c95019d63a24116c8cd9df1a5d7ccfb609d34d75fe9dfe47262cad7a8942916b3c3365098dbe9a97ceec6ee5ccba948a3fff6febf69a5026fe8079b71e6f373495ec56dbec5bcb0cee1999ed6f4cfde3de2001b8636403dbc5ab241cfe15c67f97b2bd93f6e6b87af14ccc513dafcd1e41c3bda755a5b7e0a265b0bdd68029bbcab3cd299ade1eaf855b4f9e5a57ea75aecc0552521822ed333de63803f15b39d7f4", 0xcb, &(0x7f0000003700), &(0x7f0000003740), &(0x7f0000003780)="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") ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000004780)={{0x1, 0x1, 0x18, r3, {0x0, 0xee00}}, './file0\x00'}) lstat(&(0x7f00000047c0)='./file0\x00', &(0x7f0000004800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat(0xffffffffffffffff, &(0x7f0000004880)='./file0\x00', 0xa4000, 0xb) r10 = memfd_secret(0x80000) r11 = getpid() syz_pidfd_open(r11, 0x0) write$P9_RGETLOCK(r10, &(0x7f0000000140)=ANY=[@ANYBLOB="2b00000037ebff0181000000000000000100000000000000884c252b", @ANYRES32=r11, @ANYBLOB='\r\x00/dev/net/tun\x00'], 0x2b) r12 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) read$FUSE(r12, &(0x7f0000008340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r12, &(0x7f0000006300)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x130, 0x0, 0x3, {0x1, 0x7, 0x0, '\x00', {0x1, 0x7, 0xadf, 0x806, 0x0, r14, 0x6000, '\x00', 0x1, 0x6, 0x2ff, 0x5, {0x8, 0x8}, {0x4000000000006}, {0x8, 0xfffffffc}, {0x1000000000007fd, 0xa00}, 0x3, 0x8, 0xffffffff, 0x806}}}}) read$FUSE(r2, &(0x7f00000048c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r16 = syz_clone(0x3000, &(0x7f0000006900)="0e9323bff4858194337f0940643bb2e6502d0aec72e6392c1b9fde46965c56eaaf89e6078a7239900c4aca55923e919de607799ec394f9e1d32bf1e3d2183339fb429b38309648f92a2c99", 0x4b, &(0x7f0000006980), &(0x7f00000069c0), &(0x7f0000006a00)="f8f07d9568540c3c495a2aafef926d292364efaca4ec60181d1964b50dc43f370b8cfef104acbfdcbaa767236deeb56949960e471771209930a5f72e6e70b2080cfb4b4403baaece7a830f0675f78a3d9b0b98b30d57f9c6ed2a2718129bfc18bcba0928b2eb32886021ad57e2a94c84c7256188e80c5cac8469441263ff2c807f8f71f16d74f0a43bb12e1bc662299ef6802ae937c442187c698d") sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006bc0)=[{{&(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000280)="5bedcc459b4d4bfcd6399c64586fa9266b3f865079c146a9997b3624caed2f46afa6b4692fbbae69d199fad3782f6b37b5e698eafa665d2f9956e31468647639f498f8bc6ab8196e8f1e0e5a223b80b2eaf9c59d8c26aa990a9b8fb58fba0492cb9f9cd2b9105b774d73986f5989c595f4f8b6947ec011606ee6067bcfc6f82e8a9d71cf1d501b17ca3fbefb6de3beb9371912d1566df0bc76f03044", 0x9c}, {&(0x7f00000001c0)="e441234b85082ea0eb723c5dc989956cedf2b706ba34dcf58b16e020a6e5bdb4", 0x20}], 0x2, &(0x7f0000000500)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000038000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r1, @ANYRES32=r2, @ANYRESHEX=r9, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r3, @ANYRES32=r1, @ANYRES32=r4, @ANYBLOB="30000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r4, @ANYRES32, @ANYRES32=r0, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000042000000f11801340361ef837586cee137d1896abe2655f44fa580a9de39a2b6221b3685349550a3fd6fcc38aa928b6abf941044091cf486fbdccc84043c8d17bafcd6d8e77450b0f4368df29054b5543e0f0ee8d22fc29a23bb395d58c2ccf20ccdbd4b1ccd048dc53f934e74e9cb619862a9cb2c4e737c007d242005654161b300"/174, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32=r3, @ANYBLOB="38000000000000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r3], 0x130, 0x4}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000740)="db797a49b67f92497da1841cb5623e6157e2d84119370f08896d8bd2cdee3d4041ea76a7d2bcec9ade86fe1d72e17599607797c9e81fa18eec018e4f3285f402fd2874abbad6168655bac35f0f53ab4b84100c9931b3f5a1cdd1076c08d01efdd81516e7cf5222ab1c666d417278eac89175ad98c8757981fbda8dbb9ac25e1b30403a02d74acd915726fd192e053d2c7b55bf605b86e40f2f779b3881502c4ccc6a0260f11df24d8e74b69545a27c39920fb3a19389524b319b", 0xba}, {&(0x7f0000000800)="d1afc816c51f94d718e03ee9c17a533b7f6f50572c3129c71d2139e908260ccb58bd7e2802df3fcb8ff9e2b4247aa42236eb7f085ac3792ac24b4d45bad0b89b16ac9e39a93a912e9ca3dda1135405f1188af46617972547d939cefbbf7b0da5592e5a6f9c69d5bb810c5e09329cfb0939235a8192b5a74cef160d93", 0x7c}, {&(0x7f0000000880)="703c1b565c1cdafc4b8b33e553e09474d10787b0c9f1a44568240609c5432becb309e2a7ac8a1e0350e7f9a714e24aff12259a5e472ad4019894089dbe7016362dd62912c362b988e13d298e52ff984b2b3126f7d141f270165c7b44489dda1da35c3614dee3fcaa03dc06c03ff58022ee9d33e6f2bee4f62bc2cc6e64a30e878290fcdc82ebfaddb65d20e79c1fdc46a60893ba257955e7464e399c80d60e374c65b029c1b0497c50110e7ed4b7a436d9e27a7d22dc81144127c20c0010", 0xbe}, {&(0x7f0000000940)="2ce8fa6f8b2775bba1b2d48792a2dad37674be03e00b715d25e913e89b770d47d3c18d8c8cc1c869699be692548cac80cc18a0d7b74c33b84e9be0fe0800fdc01476cd970f166d6df7619e8896c1275682b8f172026450d4202ea7af61efaaf027c1622a433b5bc5fa6d83aa495fe04ff26b398a85cc373a60ef8314a0b417ed5066db48bed1a7be852ee723bc8d8918a37089895b2ba2a882cb1590e04ecbd01f33232045edad472de2d1fe0bfde9714ea8bb24eb7c2d5ef87ed392466288f30c9a0bfb09a6b4484d6ee9d4d2e580006d598e523083c35330de1cc229db76080524c3fb607c2d3214df90c37ef0", 0xee}, {&(0x7f0000000a40)="922b7e8010a50334213df66ff02587052f46e7253c733233755181b6a5fe396a667a09222dbbff0eece46fc20b1fac823f8b842374e2893e64d2d463eeb38db72419babdb688e68ba285efb86058043d4b41a3b7f718c3b230500579ac2333ac937e275a884030b944a658594e5d3d0321f29bac9392ec78fed0bb0467e0c37a1c287ac1688234fec8", 0x89}, {&(0x7f0000000480)="57053a7e4cdad6f35b87b846bff9b5b09cbe5110abe76efd651e96d492c2c32a7afdc533f9cd", 0x26}, {&(0x7f0000000b00)="772edb671ef5245520d257d0fd14c48b55d14d37a8142af8b0f354f6544543eecd1558a093b6dc4574ae8d6be136d00a3f4851eb2c59eb091257297f1cf00bb865007cbf301c5a7406a72efdf505edd0928aad58282e9d", 0x57}, {&(0x7f0000000b80)="749e700e7a2a148209f560337792dec3bbeb2105cc1c6835fea1daf58f3e288e3547e8660400e41820f689044c08b127403d6405da0abb31c3dae5a9e29a3b183de0e5c9043a069af40a773c94ef393b7fbb6d1d24cb384086bf3060bd0f9b4f1ca6020a4fd044e2e38dcc39fb3321d3b2c224d2a61df0b8d58ce66b3212afb48408a8b43b8ad2ebd0e55abecfd2d7d1531e2392232713d554", 0x99}, {&(0x7f0000000c40)="b6", 0x1}], 0x9, &(0x7f0000001280)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32=r3, @ANYRES32=r3, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r4, @ANYBLOB="5b0f0800d60e3040bbbd42bfa7b87739a0545f8b6707cfc6bf7330bb7f080caffe5911dd716c53f2e312e93f06e1605ad551ac80e74e835e3386ee4a0fbfe449e311b56a0ef90de628d7b15839b7818f13c7f13f90bcba01c186f9417c6ba2fb0f18f1b50eeadae6dc80e27c4662629c34444e941661f3b9c22a2cf062c4b9b25c0d0b4b2c8e2446bd5d2def4e6ee69cc3eb9d78a6f936aa765eccfd9be54b725711e8f13dbf2809e6338281c0"], 0xe8, 0x2000c090}}, {{&(0x7f0000001140)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001240)=[{&(0x7f00000011c0)="3b47756c2406348f78edf1e501a96fed0b9e6562ce5faefa2ddbcb28c5336f8f864affde7aa7b4e76772eb490768366439253863198f12a7d84024c32a7c071d25b0995140fc6b6f7b744eb82492fcd6d6125ffa73b5a5d8509fd022804aa1147d5d36b20914371ebf4613677c37701c8ea4c9383c8a35", 0x77}], 0x1, &(0x7f0000000d40)=ANY=[@ANYBLOB="30000000000000000100000001000000", @ANYRES32, @ANYRES32=r3, @ANYRES32=r10, @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r4, @ANYBLOB="30000000000000000100000001000000", @ANYRES32, @ANYRES32=r4, @ANYRES32=r4, @ANYRES32, @ANYRES32=r3, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="38000000000000007ab23b2c0100000056db976f6ac26e4967bebccd05892d5ba3b29bbeefe28bded0e8ad8cb5a9458fc7166e834610fdea2727ed25b14ea3d293f361a2883b151fd9f321a4c9d9209892aeddd5a1f9bc5cccef5f4265c3446434bcda1cb949606fec765c665bac0c34979523579b43e81f4370910492254f84724682609d0b458959cb00cbf960cde2b4cbee3b3a1055810e267cf20712cfa0eecdbab78b92b90367306551aaaf89b2d9fd926b67c7322cc46c944c8409c872bd8e59e966af1991411165765ce1f5fa31d64ab1fe38ce61e81d29f3cec75d52d8e55daf64f7d383e49e3089babb4c3c324965f4", @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r4, @ANYRES32=r2, @ANYRES32, @ANYRES32=r3, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r4, @ANYRES32], 0x98, 0x20000801}}, {{&(0x7f0000001440)=@file={0x4765abc7d12df9d1, './file0\x00'}, 0x6e, &(0x7f0000002780)=[{&(0x7f00000014c0)="05fc75516b3aae186365aaa36746dea9178f192edd2bc44f9f963450088c69a6cad1d17c334b22b978c89f8efe839d79523ef5a74012d36603d3038524373a335475334897c0f0a7efc306109067ae43e6408df71b6efa0c50da1a4c17ae0eb101def782bef737ac9ae8caa30c5b81cafb9bcbd2a8c246e7c2f140d2acd8e1eb95431ecea30b9c9ff9103d79f70c22ec672f2a3897ed16173d93d26fc87d013c73999ed5", 0xa4}, {&(0x7f0000001580)="6fdc7ac93302c34d342be391245fbea1661be4318335fd198afaccbb1b67f9c105b7b6faa3ba165285efc21afc3b9fb1362bf8", 0x33}, {&(0x7f00000015c0)="c4f413a7dcbbb7653c2b5e1db093e8dea6f866126e79ad9e24b3409f5fc9ec5aa0a65b60ca3e70936e8e750e07468e96ab743aa3cdb44bbb648f04ddb4ddfdd7fc69914985fa971449bf868a8f8f367feedc59c324123de159441cd8fc3b75cdfbdc9c81cd7107e375c52fc0bf1aa4d7c09fd523c736fea1c8", 0x79}, {&(0x7f0000001640)="f30ba84ae042267e2eb5fa1b22a389843eccff4ec01efcbca0445a501ea532d976b4f2693fcb1150459baa4d50762e4e35dd8ada140e4625ba7b81e8321e4478393401a373133f1217c97b7994588593b2e18a945b7ad81386f99849423f0cbf7b4aecb4", 0x64}, {&(0x7f00000016c0)="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", 0x1000}, {&(0x7f00000026c0)="5cfd6a783ad5203c2179f8dab39f33040488d7468d9d6776021a2418ecf741c074a512a77e02966d35f09058188fa7dc96772da90f60d49eb433f800e378419fa5ba0748cebf178d65ef6b15ca8d725a7750ba466c944743ccaf62f6ba5ff57a429fd5a72e5b7477e5310428639196b23f2b1cbfda4a289f9c7aa46fd8ff7aabfcb3ee883fd578b083ebbc745e46d13981e79cb9", 0x94}], 0x6, &(0x7f0000002980)=[@cred={{0x1c}}], 0x20, 0x40000}}, {{0x0, 0x0, &(0x7f0000003080), 0x0, 0x0, 0x0, 0x4000004}}, {{0x0, 0x0, &(0x7f00000032c0)=[{&(0x7f0000003140)="eff1118cfaef303e4383105cd2a11f0b67bdb0cd5d285700e34ab19a646e233d94729731a462a62fa1b21371b5fae23b9d2599ffe6678f8ebd47e34a2543829fad0b46a8b99c0945494bb4804bbe0dae5f7e7cf66cb9c4dd554e5c046d7cf52d9260634a65142cad3061e7dccb01bc1606af6778bfdbf2cd14ed4a", 0x7b}, {&(0x7f00000031c0)="6a298e557ec3549d7fe50f49a738db69cce4acc15b13a9261712db0bccfd6037b3c46503c1076af7d51e680dcfcee57adaf8f384d11401279b12c87a6a2d8f3e93ae4092da6f1f6a1cca42a257104876293a57a2487739384776b154350a03204f7f1d086b3b5a53c0360f777c96568d13627b8dc38af1786f8d06f215a207690b1928777e2dddbccf", 0x89}, {&(0x7f0000003280)}], 0x3, 0x0, 0x0, 0x1}}, {{&(0x7f0000003300)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003580)=[{&(0x7f0000003380)}, {&(0x7f00000033c0)="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", 0xfe}, {&(0x7f00000034c0)="4d148eaa3ae1f27900a6e1770e7bc31c77fd8575d94596ceb8aa728cd5637ed38d56d82eec155bfaf8c29d33a5ef2059f6f15d0d0163a9bdb53e5ca1f9de7693097cac6ad1b1e7599b269c2ab10cffca0202bb6eacaa294735e5e283b0a2c42c52ae1f8929823274617d79e7b9816b15e515a91a47e66c9d72d26ceaf60d01efe3", 0x81}], 0x3, &(0x7f0000006ac0)=[@rights={{0x20, 0x1, 0x1, [r3, r3, r4, r3]}}, @rights={{0x18, 0x1, 0x1, [r5, r4]}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}, @rights={{0x24, 0x1, 0x1, [r3, r1, r9, r4, r2]}}, @rights={{0x38, 0x1, 0x1, [r0, r1, r2, r1, r3, r0, r4, r3, r1, r4]}}, @cred={{0x1c, 0x1, 0x2, {r11, r13, r15}}}, @cred={{0x1c, 0x1, 0x2, {r16, 0xffffffffffffffff}}}], 0xf8, 0x40804}}], 0x7, 0x4004031) ioctl$TUNSETDEBUG(r1, 0x400454c9, &(0x7f0000000100)=0xa) write$cgroup_devices(r1, &(0x7f0000000280)=ANY=[], 0xffdd) 3m1.289616303s ago: executing program 4 (id=4390): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x34, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xffe0}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4040004) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=@delchain={0x34, 0x2c, 0xf31, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x8}, {0xfff2, 0xffff}, {0xffff, 0xffe0}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) r9 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r11 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r11, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r10, &(0x7f0000000340)={0x2, 0x4e22, @multicast2}, 0x10) sendmmsg(r11, &(0x7f0000007fc0), 0x800001d, 0x1c) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x13, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xb}}}, 0x24}}, 0x0) 3m0.509199248s ago: executing program 33 (id=4390): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x34, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xffe0}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4040004) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=@delchain={0x34, 0x2c, 0xf31, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x8}, {0xfff2, 0xffff}, {0xffff, 0xffe0}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) r9 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r11 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r11, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r10, &(0x7f0000000340)={0x2, 0x4e22, @multicast2}, 0x10) sendmmsg(r11, &(0x7f0000007fc0), 0x800001d, 0x1c) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x13, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xb}}}, 0x24}}, 0x0) 6.984676368s ago: executing program 1 (id=5148): fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xfdf7, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="ef00000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r1], 0x4c}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) syz_open_dev$dri(0x0, 0x3, 0x8000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) epoll_create1(0x80000) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x81, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r6 = syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x79b2, 0x3180, 0x1, 0x283}, 0x0, &(0x7f0000000040)=0x0) process_vm_readv(0x0, &(0x7f0000000300), 0x0, &(0x7f0000000700), 0x0, 0x0) recvfrom$rxrpc(0xffffffffffffffff, &(0x7f0000000300)=""/125, 0x7d, 0x40000002, &(0x7f0000000100)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e23, @broadcast}}, 0x24) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80}, 0x10) syz_io_uring_submit(0x0, r7, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x48, 0x4007, @fd_index=0x3, 0x22, 0x0, 0x0, 0x6, 0x1}) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_load={'load ', 'default', 0x20, 'user:', '{', 0x20, 0x400}, 0x2a, 0x0) io_uring_enter(r6, 0x627, 0x104c1, 0x51, 0x0, 0x0) pread64(r4, &(0x7f0000000380)=""/128, 0x80, 0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x44, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x5}, @NFTA_BITWISE_DATA={0x10, 0x7, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x5, 0x1, ','}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x110}}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r8, 0x1, 0x4800, 0x0, {{0x8}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0xffff0000) 6.257058938s ago: executing program 3 (id=5159): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, 0x0, &(0x7f0000000240)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) 5.745417157s ago: executing program 1 (id=5160): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000000)={0x7, {"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", 0x1000}}, 0x1006) (async) r2 = syz_open_dev$dvb_frontend(&(0x7f0000001040), 0x3, 0x8000) ioctl$FE_GET_PROPERTY(r2, 0x80106f53, &(0x7f00000011c0)={0x1b, &(0x7f0000001080)=[{0x16, '\x00', @st={0x4, [{0x3, @uvalue=0x3}, {0x0, @svalue=0x3}, {0x2, @uvalue=0x8}, {0x0, @uvalue=0xb}]}, 0x4}, {0x13, '\x00', @buffer={"bc98f6a0641c0e1b222b12c7efd3e1dcb5f1aa2e3ff112510d4b4bd2a9ceacb9", 0x20}, 0xffff}, {0x9, '\x00', @st={0x4, [{0x3, @uvalue=0x66e}, {0x3, @uvalue=0x2}, {0x0, @svalue=0x3}, {0x2, @uvalue=0x9}]}, 0x1}, {0x33, '\x00', @data=0x7, 0x2cf}]}) 5.743127123s ago: executing program 3 (id=5161): prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, 0x0, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x28}, 0x0) 4.897233912s ago: executing program 1 (id=5163): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x8, 0x2c, 0x0, @dev, @mcast2, {[], @echo_reply}}}}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdc03, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x1}, @TCA_TBF_PARMS={0x28, 0x1, {{0x40, 0x2, 0xad60, 0x9, 0x1}, {0x0, 0x2, 0x8000, 0x5, 0xe}, 0x1, 0x100, 0x15a5}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40488c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xfff3, 0x10}, {0x10, 0xffe0}}, [@TCA_RATE={0x0, 0x5, {0x0, 0x6}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4008c90) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x10003e}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000840)="8b", 0x1}], 0x1}, 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB='@'], 0x40}], 0x1, 0x0, 0x0, 0x40065}, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000480)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000100)=[{0x0}], 0x1}}], 0x1, 0x24088804) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000a00)) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) 4.619144979s ago: executing program 3 (id=5164): clock_nanosleep(0x1, 0x1, &(0x7f0000000f40)={0x0, 0x3938700}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/fib_trie\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/188, 0xbc}], 0x1, 0x7ff, 0x3) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x2, 0xb49, 0x9, 0x8, 0x6, 0xfff}, 0x0) fsetxattr$security_capability(r2, &(0x7f00000001c0), &(0x7f0000000140)=@v2={0x2000000, [{0x2}, {0x28, 0x80000004}]}, 0x14, 0x2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000280)={0x2, &(0x7f00000002c0)=[{0xff, 0xd, 0x1, 0x6}, {0x7, 0x31, 0x7, 0x6}]}) dup3(r3, r0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x40202, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r5, 0x40045010, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SETTRIGGER(r5, 0x40045010, &(0x7f00000004c0)=0x4) close_range(r4, 0xffffffffffffffff, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x24, 0x0, 0x0, 0xe1, 0xffff, 0x1, 0x1, 0x0, 0x0, 0x80}}, 0x50) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x2, 0x3, 0x3, 0x0, 0x1}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r7 = accept4$alg(r6, 0x0, 0x0, 0x0) sendmmsg$sock(r7, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336bef1be8a68a628452b83a7", 0x9f}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46493862d9eb11d188464208592330ac482436286448", 0x20}], 0x2}}], 0x1, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="120110019bde521023398a71d7d80102030109022400010509401909047b07022d51d5980905eb02200002020509050412"], 0x0) 4.365247481s ago: executing program 1 (id=5165): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x185202, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r3, 0x2000) sendto$inet(r3, &(0x7f0000000200)="54c96adbf8a98be7bd7fa4212de52397c782ee98796379bd1fbddb234824687e0000000016250e9e0000000000", 0x2d, 0x4040004, &(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd86) keyctl$describe(0x6, r0, &(0x7f0000000140)=""/143, 0x8f) 4.283337879s ago: executing program 1 (id=5166): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$AUTOFS_IOC_READY(r2, 0x541b, 0x20000001) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) syz_io_uring_setup(0x4955, &(0x7f0000000300)={0x0, 0xe1d6, 0x2, 0x2, 0x144}, 0x0, &(0x7f0000000380)) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000f80)=@mangle={'mangle\x00', 0x2, 0x6, 0x5c0, 0x0, 0x190, 0x260, 0x420, 0x260, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {0xff}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0xff000000, 0xffffffff, 0x0, 0xffffff00], [], 0x0, 0x10}}, @common=@inet=@dccp={{0x30}, {[0x4e21, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x5}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'sit0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@empty, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x50, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') rename(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) r4 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcda) r5 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000280)={0x7, @vbi={0xa, 0xffffffff, 0x6, 0x34325241, [0x7, 0x6], [0x4, 0x80], 0x2}}) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) faccessat(r4, &(0x7f0000000000)='./file0\x00', 0x5) getpid() r6 = socket(0x2b, 0x1, 0x1) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x18) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) 3.785996959s ago: executing program 6 (id=5168): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x240000, 0x0) ioctl$KIOCSOUND(r0, 0x4b2f, 0x7) sched_setattr(0x0, &(0x7f0000000400)={0x38, 0x5, 0x0, 0x6, 0x0, 0x0, 0x2, 0xfffffffffffffffe}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xcfa42, 0x0) sendfile(r1, r1, 0x0, 0x200000) 3.693120497s ago: executing program 0 (id=5170): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020fe29817a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000400704000000000000b7040000100000206a0700fe000000008500000005000000b70000000a00000095000000000000000000c2c62f6004ad13aa957e2af5e49a53c2868f0399d909a63796c113a80c19aab9d607000000b6c9483be3f0d3253730e714c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae18c3d1a1fbe96dc86035b44174f7c0620254ab6d285e6b343185089a0f119e31975e551558050800000000000000125d67857f290870093f38153608561a2128a79cce912d1f05de330800a9f5422bee8ca49166f6a587f2f593775afcd071efc5a972f757521b7b38ec273c2ad3e406f8c124f7dc1c4553229a69df4b2780e6da4420d71489fe383e0b5ce08b750502f2b8add8d2dddde19ac050537e973782b4053150580035fb2c579e1b2100000033d1ee8cab6d236f05b1f7b9f78fd5abfe033eb79f7a0b498366f5edfe311258016fbf47d9c85bf5325bf61419372be377022433e20900a262b20bb8b36de7b0e6c5ebfc5baec1ebe58d4af587d33e2935ad68da6e0fea5c21301f5d002b51a5b60fc741cb2c5d4cd5e896774f9293a6435558795043404ac6eafc8310fbcacca7f971b260fd06d4590ded8429fcd1c9a8dbbdedb32675388df363c0bc536e00448208b72405ebf27ddb402e5a2d675aaad92e183cef1eadc1661140fb567b55c72907a1aca75277a5f0022b1e957ba737f10f1161c5ae6e2cc64072ff3b4e76084922242e63d4b7806e30f786cff147e4bc819060678319a0e5534f5a0db52526c30000000000000000000000a63705b1a60525620acca06d57c055059df7651768310c9085c5f86be6ab819506961ad51f18b35fdc3fd4d0a0dbbdcd494ef168931f27748787bee95d739fef7ee67dd21c34647de82707e41d7db6d981a4fcf0bbd3d38ebb7a2489e28c6b28c0f70092ffb016b7766399555f3e6b538c2c862d17e53eaeb2036f9f0ab6e95e71bda4b5bbf53344264ad93bac1207b31d6e9c78181c7fe204c0b7582d1c762857f2a2e0c60f4a4855591a4f70f94df9629e470701103c40c8f6d3a3068091d62b58999e0a046f9509cb8ddc2a9ad4e0f1f85e5f076218b4b931acdff0c34fc5bdbad17ec481f1c9b17727c14e053e315d0d8d03c24ddaba65c5ce5b1aa04d1f767e25662b155d49460ec720d54044ac2856c11407835f341e2614bcae270000000001000000df7f736aab5d713240b2f40ec7be8251eba969686b2670ddc1a84df6ab12ab3e0cf8747837062233935704ebbd943ef0c5fef29513c7c1d6d2611796dccb45bdfd9e6533ad3574be5b9ea70e0c3b41a32067c03f5f8ed147cd0655c90d656f66eaed18a3c284c4f19417b5d91431759356db5d45ea40c9866957105b6252b0c028c672049ce163126f143f5758faf2a43f4c4f45a69b4e9113f85ae531085c11c75edbdee5af454757cdaff396c15ab9b210c202ffaea96d1bac60c6d6c56a4babc659858789bd479334e13e1c7876f95429431e61400815788c1397b260600d78e7513c58d9ac9474d392cc06f789753e1e7ebf5f1b55e2a64b9150c6580bf48e7bff763034801cccf403108d127b959ffc425a563ea2b90fbe779fd7d2ebfe94"], &(0x7f0000000280)='GPL\x00'}, 0x48) r4 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000000)=r3, 0x4) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r5, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @multicast2}}}], 0x20}, 0x0) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xff, 0x6}, 0xff}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000200)=0x1, 0x4) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000180)=[{0x2, 0x1, {0x0, 0x1, 0x1}, {0x2, 0xf0, 0x4}, 0x0, 0x1}, {0x2, 0x2, {0x0, 0xff, 0x2}, {0x1, 0x1, 0x1}, 0x1}], 0x40) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000040)={0x6, 0x6, 0x3, 0x0, 0x97}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000e00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x530, 0x1d8, 0x370, 0x270, 0x108, 0x1d8, 0x498, 0x498, 0x498, 0x498, 0x498, 0x6, &(0x7f0000000400), {[{{@uncond, 0x0, 0x98, 0x108, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0x7f}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x5, 0x8, 0xa, 0x0, 0x0, "2a1d3faf8f52987923fe689d04e06df1c4557d3e178a8e67b29adae5a4ac1bf54c7aaed22c045416ba4224687c484b3584352bb3d7333fc509952c0e346616c7"}}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x1, 0x0, 0x1200000, 0xfffffff9, 0x2, {0xf836d1a}}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x11, 0xb}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x60, 0x8}}}, {{@ip={@broadcast, @private=0xa010101, 0xffffffff, 0xff, 'netdevsim0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0x2, 0x8}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0xc4f, 0x9], 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x6, 0x2, 0x4, 0x1, 0x0, 0x2], 0x5, 0x5}, {0x2, [0x1, 0x0, 0x2, 0x1, 0x4], 0x6}}}}, {{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}, @common=@unspec=@realm={{0x30}, {0xcc, 0x1, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @local, 0x1000, 0xb, [0xf, 0x3a, 0x3f, 0x3a, 0xa, 0x1e, 0x28, 0x19, 0xa, 0x3, 0x4, 0x38, 0x19, 0x1c, 0x2f, 0x12], 0x1, 0x40000, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x590) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) socket$nl_route(0x10, 0x3, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) (async) socket$kcm(0x11, 0x2, 0x300) (async) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000000)=r3, 0x4) (async) socket$kcm(0x2, 0x1000000000000002, 0x0) (async) sendmsg$inet(r5, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @multicast2}}}], 0x20}, 0x0) (async) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xff, 0x6}, 0xff}, 0x18) (async) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (async) setsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000200)=0x1, 0x4) (async) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000180)=[{0x2, 0x1, {0x0, 0x1, 0x1}, {0x2, 0xf0, 0x4}, 0x0, 0x1}, {0x2, 0x2, {0x0, 0xff, 0x2}, {0x1, 0x1, 0x1}, 0x1}], 0x40) (async) syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) (async) ioctl$VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000040)={0x6, 0x6, 0x3, 0x0, 0x97}) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000e00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x530, 0x1d8, 0x370, 0x270, 0x108, 0x1d8, 0x498, 0x498, 0x498, 0x498, 0x498, 0x6, &(0x7f0000000400), {[{{@uncond, 0x0, 0x98, 0x108, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0x7f}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x5, 0x8, 0xa, 0x0, 0x0, "2a1d3faf8f52987923fe689d04e06df1c4557d3e178a8e67b29adae5a4ac1bf54c7aaed22c045416ba4224687c484b3584352bb3d7333fc509952c0e346616c7"}}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x1, 0x0, 0x1200000, 0xfffffff9, 0x2, {0xf836d1a}}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x11, 0xb}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x60, 0x8}}}, {{@ip={@broadcast, @private=0xa010101, 0xffffffff, 0xff, 'netdevsim0\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x2, 0x2, 0x8}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0xc4f, 0x9], 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x6, 0x2, 0x4, 0x1, 0x0, 0x2], 0x5, 0x5}, {0x2, [0x1, 0x0, 0x2, 0x1, 0x4], 0x6}}}}, {{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}, @common=@unspec=@realm={{0x30}, {0xcc, 0x1, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @local, 0x1000, 0xb, [0xf, 0x3a, 0x3f, 0x3a, 0xa, 0x1e, 0x28, 0x19, 0xa, 0x3, 0x4, 0x38, 0x19, 0x1c, 0x2f, 0x12], 0x1, 0x40000, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x590) (async) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) (async) 3.462161926s ago: executing program 6 (id=5172): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYRESOCT], 0x4c}, 0x1, 0x0, 0x0, 0x6004881}, 0x4000080) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 3.24211078s ago: executing program 0 (id=5173): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000033c0), 0x0, 0x881) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xc, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20000, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x150}, 0x1, 0x0, 0x0, 0x612fc0b6c779297b}, 0x0) io_uring_setup(0x3eaf, &(0x7f0000000340)={0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffe}) r4 = openat$vim2m(0xffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc0f8565c, &(0x7f0000000000)={0x10000, 0xbd5, 0x2, {0x2, @pix_mp={0x8, 0x10001, 0x585452c9, 0x2, 0x1, [{0x4, 0x1}, {0x8, 0x9}, {0x7, 0x1000}, {0x6, 0xa}, {0x100, 0x3}, {0x2, 0x4}, {0x1000101, 0x81}, {0xc}], 0x10, 0x7e, 0x1, 0x0, 0x3}}}) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], 0x0, 0x3, r6}) ioctl$DRM_IOCTL_MODE_SETPLANE(r5, 0xc03064b7, &(0x7f00000000c0)={r6, r7, 0x0, 0x8, 0x852, 0x6, 0x4, 0x4, 0x10, 0x821, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000500)={0x200, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000580)=[r8], &(0x7f0000000280), 0x0, 0xddffffffffffffff}) 3.138036504s ago: executing program 5 (id=5174): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000002000)=0x1000004) r1 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x3416, 0x13100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000140)={0xe47, 0x3ff, 0x2080060c, 0xffffbffe, 0x12, "1c6b0010000000000000000000000100"}) 3.132876564s ago: executing program 6 (id=5175): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x8, 0x2c, 0x0, @dev, @mcast2, {[], @echo_reply}}}}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdc03, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x1}, @TCA_TBF_PARMS={0x28, 0x1, {{0x40, 0x2, 0xad60, 0x9, 0x1}, {0x0, 0x2, 0x8000, 0x5, 0xe}, 0x1, 0x100, 0x15a5}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40488c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xfff3, 0x10}, {0x10, 0xffe0}}, [@TCA_RATE={0x0, 0x5, {0x0, 0x6}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4008c90) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x10003e}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000840)="8b", 0x1}], 0x1}, 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB='@'], 0x40}], 0x1, 0x0, 0x0, 0x40065}, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000480)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000100)=[{0x0}], 0x1}}], 0x1, 0x24088804) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000a00)) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) 2.904544052s ago: executing program 5 (id=5176): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x185202, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r3, 0x2000) r4 = dup(r1) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd86) keyctl$describe(0x6, r0, &(0x7f0000000140)=""/143, 0x8f) 2.64214677s ago: executing program 6 (id=5177): socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0x10, 0xfff3}, {}, {0xa, 0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @mcast1}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}]}}]}, 0x50}}, 0x40040) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r7 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000600), 0x8002, 0x0) ioctl$TCSETSW(r7, 0x5403, &(0x7f00000027c0)={0xab6, 0x3, 0xffffffc0, 0x80, 0x1, "e625b7fcf9fe176d572f93d8e16b493ad3f282"}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0xffffffffffffffa4, &(0x7f00000000c0)={&(0x7f0000000300)={0x34, 0x0, 0x309, 0x70bd2b, 0x0, {0x1d}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x40000) add_key$keyring(&(0x7f0000000380), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x331002, 0x0) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r8, 0x4601, &(0x7f0000000100)={0x60, 0xf0, 0x60, 0x0, 0x0, 0x4db, 0x8, 0x0, {0x5, 0x40}, {0x0, 0x1}, {0x8000, 0x0, 0x3f00}, {0x3, 0x0, 0x1}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffc00, 0x0, 0x400, 0x0, 0x0, 0x21, 0x0, 0x0, 0x7}) socket$nl_generic(0x10, 0x3, 0x10) 2.543135892s ago: executing program 5 (id=5178): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x8800) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}}}, 0xb8}}, 0x0) 2.31264072s ago: executing program 5 (id=5179): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000d80)={&(0x7f0000000540)={0xa, 0x4e22, 0x3ff, @private1, 0x1}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1400000000000000290000003e000000010000000000000011000000000000002900000004"], 0x30, 0x12}, 0x20044084) 1.573962534s ago: executing program 5 (id=5180): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2000000002) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x9, 0xa1d, 0x8, 0x5, 0x0, 0x3, 0x5], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x2000, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x3, 0x0, 0x7f, 0x6, 0xfd}, {0xffff1000, 0x10000, 0xc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0xfd}, {0x0, 0x8287002, 0xb, 0x4, 0x7, 0xc4, 0x0, 0x0, 0x8, 0x3, 0x0, 0xbc}, {0x0, 0xd000, 0x18592cbc7c573fc6, 0x9, 0x1, 0x0, 0x9, 0x0, 0x8, 0x1, 0x4, 0x2}, {0x80a0000, 0x6000, 0xe, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x6}, {0x100000, 0x0, 0x0, 0x7, 0x80, 0x1, 0x2, 0x0, 0x0, 0xff, 0x1}, {0x0, 0xeeee0000, 0x9, 0x4, 0x1, 0x0, 0xa1, 0x20, 0x0, 0xff, 0x8}, {0x2, 0x6000, 0xc, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x8cc}, {0x1000}, 0xddf8ffda, 0x0, 0xeeeac800, 0x110, 0xd, 0xf801, 0x0, [0x80000001, 0x0, 0xfffffffffffffffc, 0x1]}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000240)=@file={0x0, './file1\x00'}, 0x6e) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close(r5) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x4, &(0x7f0000000300)=ANY=[@ANYRES32=r4, @ANYRESDEC=r3, @ANYRESDEC=r5], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xbe, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x2}, 0x10}, 0x94) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) (async) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="400100001a000100feffffff00010000ac1e0101000000000000000000000000fc010000000000000000000000000001000107174e2300050a0000203a0000000082df0b7aabda08844767597ac2fe5df71767d16c573a67bb6ba0f485100b92af5e1a5563acc4fe48decac6ef29acbf3ac36b2a6cb487acb675d87269422fbf2a3f3c373f81814292eca9347f23880716e02e95ce47a11b648b156cfe204619ffc6679da7f248d3a60525ae7478d20439255aee2b7b79f082d07d33ce4528e62f1f1a8ab8d4343fa4c0fc3f611216959ec18d23b30b2be09b9f86a466edd2234ffcb8ce7abf22bb748f0d654d97ee89c79e34449110a8ac514ede118a2c29e43a8897d4c3ca443ddc9e22b62647", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc02000000000000000000000000000103000000000000009201000000000010a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0400000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffefffffffc030000000000007e00000005350000020001002000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0002000000"], 0x140}}, 0x844) ioctl$VIDIOC_S_PARM(r7, 0xc0cc5616, &(0x7f0000000100)={0x8, @output={0x0, 0x1, {0xd731c000, 0x7}, 0x3, 0x2}}) (async) mknodat(0xffffffffffffffff, &(0x7f00000012c0)='./file1\x00', 0x8000, 0x2) (async) fchdir(0xffffffffffffffff) (async) r10 = open(&(0x7f0000000000)='./file1\x00', 0x80242, 0x8) write$FUSE_CREATE_OPEN(r10, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0xff, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) (async) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) 1.488287635s ago: executing program 3 (id=5181): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x48, 0x0, 0x0, 0x1, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) (async) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x7f) r3 = getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000100)={0x2, r3}) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000140), 0x100) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r4) fcntl$notify(r2, 0x402, 0x5) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, 0x0) ioctl$IOMMU_IOAS_UNMAP$ALL(r4, 0x3b86, &(0x7f00000012c0)={0x18}) (async) r5 = fsopen(0x0, 0x1) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) (async) r6 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r6, 0x40305652, &(0x7f00000000c0)={0x0, 0x1, 0x1000000, 0x0, 0xffffffff, 0xfa000, 0x1a5e00}) (async, rerun: 32) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) (async) r9 = syz_open_dev$vim2m(&(0x7f0000005680), 0x7d, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r9, 0xc0405602, &(0x7f0000000040)={0xc, 0x1, 0x0, "268100ba7af9819e79b058d9f2a15b8c4800000000010011000000000200", 0x32314d56}) (async) close_range(r5, r1, 0x0) (async) r10 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r10, 0x2285, &(0x7f00000005c0)={0x53, 0xffffffffffffffff, 0x6, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f00000000c0)="930b7633ecb5", 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) socket$nl_rdma(0x10, 0x3, 0x14) (rerun: 32) 1.467153732s ago: executing program 0 (id=5182): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x64}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x200000) 1.346357915s ago: executing program 1 (id=5183): r0 = socket$key(0xf, 0x3, 0x2) syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203f3021600000000000000200000000200090008000000e9000000000000000300060000000000020000000000000000000000000000000200010000000000000003fcff000020030018000000000002000000041414aa00000000000000000a0008"], 0xb0}, 0x1, 0x7}, 0x0) 1.169766507s ago: executing program 5 (id=5184): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r2, &(0x7f0000000140)="d4", 0x1, 0x20000800, &(0x7f0000000240)={0xa, 0x4a20, 0x7fffffff, @local, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000200)={0x48}) openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x101800, 0x0) r4 = memfd_create(&(0x7f0000000840)='\x01\x00\x00\x00\x00\x00\x00\x00\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06F\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\x82\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xc0L\x1d\x98Zq\xce\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1j$S\xfc\xb1[N\x8d\xcfI\xc8\x91\x87\x1fuYG7}%)\xb9\x00\x00\x00\x00\x00\x00\x00\x80W\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]^\x88\xecif\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1f2\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x9e\x035\x8a@\xd4\x1c\xe0\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\x00\x00\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d\xf5s\x03\x1a=\xcc\xd1\xa7\'\xa0\xaf\xf7\xec\xaf}\x0e\a\x00\x91U\xf9\x8e_f\x8e\x00\xc3r*\xc7\xaf\xe2\'\xe0f9\xde\n,\x8c8Y26\xa6u<\xca@H\xdc\xf1\xb0\xb8\x9f\xc2o\x0f\x02I\xb6\xc3xH\xc3\x88(\xb6\x97~\xea)\'\xa3:\x8d\xebc>z\xae*\xc2\x14\xe9\x89#\xe2)\x9a\xb0hR\xffa\xf8\xde\xf7q4\xcfV\xbb\xc3t\xfa\xa9\x05>\xaea\x12\xce\x1cY\a\xb16\xb9\x12v\x1dN\xe1,_3\xa9\xa36\xaa.Cj\xd4\ah\x92j\x86\xe1\x1f\xec1\xb9!lI\xc7\xbf\x85\xdd\x03\xbd\xeb\xec\xf9\xf3\xaf\xe02AzX\x9aO\x93y;\xa7,\xbb\x11\xe6\x8fn\xa0m\xf8\xcf\x92\x19\xba,\x0e\x04\xbe\xbb\xdd\x00\xb1\xb6Enr\x17\xa4\xc5)\xcc}*yN\xdc\xc3\xe0\xf2\x10\xe00x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15010000000000002800128009000100766c616e000000001800028006000100fe0f00000c000200110000001300000008000500", @ANYRES32=r8, @ANYBLOB="52377a608f284d34a20edbb7f33918e4bb716999e0387a"], 0x50}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r9, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0x31, "2a161d2d7137f20a8f1597f02515fcead4e153309c703be3a0d6416f3528fe1da7e47629e5d7afc1f95c9cf965056b4c89"}}) 1.168979737s ago: executing program 3 (id=5185): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x1}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0x10b}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r6 = mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000004a40)={0x58, 0x0, &(0x7f0000000800)=[@free_buffer={0x40086303, r6}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000880)={@fd={0x66642a85, 0x0, r4}, @flat=@handle={0x73682a85, 0x1000, 0x3}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x19}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x90, 0x0, &(0x7f0000000900)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000740)={@flat=@binder={0x73622a85, 0x1000, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/58, 0x3a, 0x1, 0x2e}, @ptr={0x70742a85, 0x0, &(0x7f00000006c0)=""/97, 0x61, 0x1, 0xb}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}}, @decrefs={0x40046307, 0x1}, @acquire_done={0x40106309, 0x3}, @release={0x40046306, 0x1}, @acquire={0x40046305, 0x3}, @register_looper, @decrefs={0x40046307, 0x1}, @free_buffer={0x40086303, r6}], 0x0, 0x0, 0x0}) r7 = dup3(r1, r0, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000440)={0x0, 0x1000000, 0x0, 0x1, 0xa00, &(0x7f00000005c0)="c6"}) 1.145214606s ago: executing program 0 (id=5186): ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000500)=@userptr={0x6, 0xa, 0x4, 0x1, 0x0, {0x0, 0x2710}, {0x1, 0xc, 0xd2, 0x6, 0x77, 0x6, "0080ca6f"}, 0xff, 0x2, {0x0}, 0x6}) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f00000004c0), 0x48, 0x820b, 0x0) (fail_nth: 3) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 734.556778ms ago: executing program 6 (id=5187): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x8, 0x2c, 0x0, @dev, @mcast2, {[], @echo_reply}}}}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdc03, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x1}, @TCA_TBF_PARMS={0x28, 0x1, {{0x40, 0x2, 0xad60, 0x9, 0x1}, {0x0, 0x2, 0x8000, 0x5, 0xe}, 0x1, 0x100, 0x15a5}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40488c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xfff3, 0x10}, {0x10, 0xffe0}}, [@TCA_RATE={0x0, 0x5, {0x0, 0x6}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4008c90) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x10003e}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000840)="8b", 0x1}], 0x1}, 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB='@'], 0x40}], 0x1, 0x0, 0x0, 0x40065}, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000480)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000100)=[{0x0}], 0x1}}], 0x1, 0x24088804) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000a00)) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) 542.688794ms ago: executing program 0 (id=5188): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES16=r0], 0x21c}}, 0x0) 527.760002ms ago: executing program 0 (id=5189): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000000040)=0x2, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0xa, 0x6, @multicast}, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48, 0x83, 0x0, 0x7ffffffe}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400"/15], 0x14}}, 0x0) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) chmod(0x0, 0x100) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) fcntl$setstatus(r5, 0x4, 0xc00) read$char_usb(r5, &(0x7f00000000c0)=""/30, 0x1e) read$char_usb(r5, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x78) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x204080, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1e00000009000000070000000b64b26645000400", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="6e409c868c7b6df800000000000000"], 0x50) 272.020204ms ago: executing program 3 (id=5190): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x1) ioctl$UI_DEV_CREATE(r0, 0x5501) (fail_nth: 19) 0s ago: executing program 6 (id=5191): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2b02, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000000414040226bd7000fbdbdf25b702575c1e379f26"], 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x1) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000180)={0x8, 0x8, '\x00', 0x0, &(0x7f0000000140)=[0x0]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$NS_GET_OWNER_UID(r0, 0xb704, 0x0) quotactl_fd$Q_GETFMT(r1, 0xffffffff80000401, 0x0, &(0x7f0000000300)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000a80)={{0x5, 0x6, 0x401, 0xb, 'syz1\x00', 0x81}, 0x1, [0x6, 0x7fffffff, 0x95, 0x907a, 0xffffffff, 0x60, 0x1, 0xf, 0x1, 0x4, 0xfffffffffffffffd, 0x63, 0xfff, 0x100000006, 0xfffffffffffffffa, 0xc8, 0xb6da, 0x80000a5, 0xb7, 0xb6, 0x8000000000000002, 0x4000000008, 0x7, 0xfff, 0x6, 0xfb, 0x1, 0x4f51, 0x0, 0x37c7, 0xc, 0xbb33, 0x0, 0x8, 0x4, 0x4, 0x8, 0xffffffffffff7fff, 0x6, 0x8, 0x5, 0x0, 0x8, 0x401, 0x3, 0xc1be, 0xffffffff, 0x8000000000000003, 0x5, 0x0, 0x7, 0x72, 0x9, 0x2000000002, 0x6a44d0ea, 0xffffffffffffffff, 0x9, 0x5f0, 0xfffffffffffff2e2, 0x4, 0x6, 0xfffffffffffffffd, 0x9, 0xf1, 0xfffffffffffffffe, 0x2, 0x2, 0x5, 0x2, 0xfffffffffffffffd, 0x9, 0x7, 0xdffffffffffffd, 0xd, 0x81, 0x8, 0x7fff, 0x6, 0xe, 0x3ff, 0xffffffffffffcc1c, 0x10000, 0xfffffffffffffffb, 0x6, 0x2, 0x1, 0xf, 0x79d, 0xfffffffffffff000, 0x8d6, 0x0, 0x5, 0x4, 0xafae, 0x1, 0xf, 0x6, 0xb, 0x1, 0x10003, 0x1, 0x10000, 0x1ff, 0x6, 0x0, 0x7, 0x7, 0x0, 0xfc0, 0x7, 0xaad, 0x8000000000007, 0x2, 0x8, 0x200e2, 0x6, 0x6, 0x8, 0xa, 0x0, 0x9, 0x5, 0x40, 0x8000, 0x83d0, 0xf0, 0x100000000]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "000000010b020400"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) kernel console output (not intermixed with test programs): T5891] usb 6-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1395.661939][ T5891] usb 6-1: config 251 interface 202 has no altsetting 0 [ 1395.712898][ T5891] usb 6-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 1395.722425][ T5891] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1395.742524][ T5891] usb 6-1: Product: syz [ 1395.747993][ T5891] usb 6-1: SerialNumber: syz [ 1395.777733][ T1145] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1395.788652][T23713] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1395.905364][T16525] usb 2-1: USB disconnect, device number 44 [ 1396.202249][T23713] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1396.316980][T23727] netlink: 'syz.0.4717': attribute type 2 has an invalid length. [ 1398.116873][ T5891] cxacru_cm: 64 callbacks suppressed [ 1398.116903][ T5891] cxacru 6-1:251.202: submit of write urb for cm 0x90 failed (-90) [ 1398.146044][ T5891] cxacru 6-1:251.202: usbatm_usb_probe: invalid endpoint 02! [ 1398.154769][ T5891] cxacru 6-1:251.202: probe with driver cxacru failed with error -22 [ 1398.191015][ T5891] usb 6-1: USB disconnect, device number 35 [ 1398.704623][T23738] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4720'. [ 1399.610154][T23726] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4715'. [ 1399.632300][T23729] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4715'. [ 1399.781298][T23741] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4721'. [ 1400.367270][T16524] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 1400.610846][T16524] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1400.622779][T16524] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 1400.643086][T16524] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 8960, setting to 64 [ 1400.671485][T16524] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1400.702500][T16524] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1400.727744][T16524] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1400.755669][T16524] usb 2-1: Product: syz [ 1400.764513][T16524] usb 2-1: Manufacturer: syz [ 1400.775658][T16524] usb 2-1: SerialNumber: syz [ 1400.804388][T16524] usb 2-1: config 0 descriptor?? [ 1400.823768][T23780] SET target dimension over the limit! [ 1401.187858][T23784] mac80211_hwsim hwsim29 syzkaller0: left promiscuous mode [ 1401.195162][T23784] mac80211_hwsim hwsim29 syzkaller0: left allmulticast mode [ 1401.200285][T23786] ALSA: mixer_oss: invalid OSS volume '' [ 1401.229999][T23788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4737'. [ 1401.668778][T23797] netlink: 'syz.6.4739': attribute type 2 has an invalid length. [ 1401.684293][T23797] !: entered promiscuous mode [ 1401.712808][T23800] netlink: 'syz.0.4740': attribute type 2 has an invalid length. [ 1402.464625][T16525] usb 4-1: new low-speed USB device number 29 using dummy_hcd [ 1402.842833][T16525] usb 4-1: No LPM exit latency info found, disabling LPM. [ 1402.962209][T16525] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 1402.982518][T16525] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 1403.024865][T16525] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1403.041810][T16525] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1403.042579][T19478] usb 2-1: USB disconnect, device number 45 [ 1403.051913][T16525] usb 4-1: Manufacturer: ➰⢴堳榘厮ʮ浺몪䋛┧뉢∠ [ 1403.064082][T16525] usb 4-1: SerialNumber: ⮴靆㔯鹡瞓썥⠹긑߳湤꽖ࢦ陶ȳ൷粐豫櫞햽츔 [ 1403.199595][T23809] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4743'. [ 1403.421976][ T30] audit: type=1800 audit(1773627670.967:3356): pid=23805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4741" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 [ 1403.495817][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1403.547761][T23813] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4745'. [ 1403.563052][T23813] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4745'. [ 1403.680367][T23813] bridge0: entered promiscuous mode [ 1403.696263][T23813] ip6gretap0: entered promiscuous mode [ 1403.710570][T23813] debugfs: 'hsr1' already exists in 'hsr' [ 1403.730051][T23813] Cannot create hsr debugfs directory [ 1403.855765][T19478] usb 2-1: new low-speed USB device number 46 using dummy_hcd [ 1403.907458][T23821] l2tp_ppp: sess 2/0: no socket in recv [ 1403.983285][ T36] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1404.073825][T19478] usb 2-1: No LPM exit latency info found, disabling LPM. [ 1404.135470][T19478] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 1404.173147][T19478] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 1404.264643][T19478] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1404.284226][T19478] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1404.317531][T19478] usb 2-1: Product: ⮴靆㔯鹡瞓썥⠹긑߳湤꽖ࢦ陶ȳ൷粐豫櫞햽츔 [ 1404.365784][T19478] usb 2-1: Manufacturer: ➰⢴堳榘厮ʮ浺몪䋛┧뉢∠ [ 1404.404074][T19478] usb 2-1: SerialNumber: ᩗ [ 1404.714002][ T30] audit: type=1800 audit(1773627672.237:3357): pid=23811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4742" name="SYSV00000000" dev="hugetlbfs" ino=9 res=0 errno=0 [ 1404.799575][T16525] cdc_ncm 4-1:1.0: bind() failure [ 1404.825838][ T5891] usb 6-1: new low-speed USB device number 36 using dummy_hcd [ 1404.849141][T16525] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1404.877021][T16525] cdc_ncm 4-1:1.1: bind() failure [ 1404.966107][ T5891] usb 6-1: device descriptor read/64, error -71 [ 1404.980863][T16525] usb 4-1: USB disconnect, device number 29 [ 1405.002617][T23832] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4750'. [ 1405.235886][ T5891] usb 6-1: new low-speed USB device number 37 using dummy_hcd [ 1405.369054][ T5891] usb 6-1: device descriptor read/64, error -71 [ 1405.486477][ T5891] usb usb6-port1: attempt power cycle [ 1405.650209][T23841] xt_nfacct: accounting object `syz1' does not exist [ 1405.875806][ T5891] usb 6-1: new low-speed USB device number 38 using dummy_hcd [ 1405.901854][ T5891] usb 6-1: device descriptor read/8, error -71 [ 1406.048459][T23847] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4755'. [ 1406.206129][ T5891] usb 6-1: new low-speed USB device number 39 using dummy_hcd [ 1406.227265][ T5891] usb 6-1: device descriptor read/8, error -71 [ 1406.359317][ T5891] usb usb6-port1: unable to enumerate USB device [ 1406.441103][T19478] cdc_ncm 2-1:1.0: bind() failure [ 1406.499802][T19478] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 1406.529346][T19478] cdc_ncm 2-1:1.1: bind() failure [ 1406.655312][T19478] usb 2-1: USB disconnect, device number 46 [ 1406.694126][T23853] loop2: detected capacity change from 0 to 7 [ 1406.719645][T23853] Dev loop2: unable to read RDB block 7 [ 1406.753109][T23853] loop2: unable to read partition table [ 1406.796102][T23853] loop2: partition table beyond EOD, truncated [ 1406.804113][T23853] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1406.959800][T23858] FAULT_INJECTION: forcing a failure. [ 1406.959800][T23858] name failslab, interval 1, probability 0, space 0, times 0 [ 1406.972932][T23858] CPU: 1 UID: 0 PID: 23858 Comm: syz.3.4759 Tainted: G L syzkaller #0 PREEMPT(full) [ 1406.972954][T23858] Tainted: [L]=SOFTLOCKUP [ 1406.972959][T23858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1406.972966][T23858] Call Trace: [ 1406.972974][T23858] [ 1406.972980][T23858] dump_stack_lvl+0xe8/0x150 [ 1406.973002][T23858] should_fail_ex+0x412/0x560 [ 1406.973022][T23858] should_failslab+0xa8/0x100 [ 1406.973036][T23858] ? security_file_alloc+0x34/0x310 [ 1406.973051][T23858] kmem_cache_alloc_noprof+0x87/0x650 [ 1406.973063][T23858] ? rcu_is_watching+0x15/0xb0 [ 1406.973079][T23858] ? trace_kmem_cache_alloc+0x29/0xf0 [ 1406.973092][T23858] security_file_alloc+0x34/0x310 [ 1406.973107][T23858] init_file+0x90/0x2b0 [ 1406.973124][T23858] alloc_empty_file+0x6e/0x1d0 [ 1406.973140][T23858] alloc_file_pseudo+0x155/0x240 [ 1406.973155][T23858] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 1406.973167][T23858] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1406.973182][T23858] ? evm_inode_alloc_security+0x40/0xb0 [ 1406.973194][T23858] ? security_inode_alloc+0xd5/0x310 [ 1406.973217][T23858] sock_alloc_file+0xb8/0x2e0 [ 1406.973234][T23858] do_accept+0x3a0/0x760 [ 1406.973254][T23858] ? __pfx_do_accept+0x10/0x10 [ 1406.973282][T23858] io_accept+0x310/0x7a0 [ 1406.973298][T23858] ? __io_arm_poll_handler+0x559/0xc10 [ 1406.973318][T23858] ? __pfx_io_accept+0x10/0x10 [ 1406.973335][T23858] ? __fget_files+0x2a/0x420 [ 1406.973350][T23858] ? __fget_files+0x3a0/0x420 [ 1406.973366][T23858] __io_issue_sqe+0x180/0x4b0 [ 1406.973378][T23858] ? io_file_get_normal+0xe9/0x310 [ 1406.973394][T23858] io_issue_sqe+0x164/0xf90 [ 1406.973411][T23858] io_submit_sqes+0xcb1/0x2400 [ 1406.973440][T23858] __se_sys_io_uring_enter+0x2cc/0x18c0 [ 1406.973453][T23858] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1406.973469][T23858] ? __fget_files+0x3a0/0x420 [ 1406.973487][T23858] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 1406.973499][T23858] ? fput+0xa0/0xd0 [ 1406.973514][T23858] ? ksys_write+0x242/0x270 [ 1406.973528][T23858] ? __pfx_ksys_write+0x10/0x10 [ 1406.973543][T23858] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 1406.973557][T23858] do_syscall_64+0x14d/0xf80 [ 1406.973569][T23858] ? trace_irq_disable+0x3b/0x150 [ 1406.973584][T23858] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1406.973596][T23858] ? clear_bhb_loop+0x40/0x90 [ 1406.973610][T23858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1406.973621][T23858] RIP: 0033:0x7fd747f9c799 [ 1406.973633][T23858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1406.973652][T23858] RSP: 002b:00007fd748daf028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1406.973666][T23858] RAX: ffffffffffffffda RBX: 00007fd748215fa0 RCX: 00007fd747f9c799 [ 1406.973675][T23858] RDX: 0000000000000000 RSI: 00000000000047ba RDI: 0000000000000004 [ 1406.973682][T23858] RBP: 00007fd748daf090 R08: 0000000000000000 R09: 0000000000000000 [ 1406.973690][T23858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1406.973697][T23858] R13: 00007fd748216038 R14: 00007fd748215fa0 R15: 00007fd74833fa48 [ 1406.973714][T23858] [ 1407.236074][T19478] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1407.470426][T19478] usb 2-1: Using ep0 maxpacket: 16 [ 1407.498121][T19478] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1407.510851][T23866] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4762'. [ 1407.527454][T19478] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1407.542628][T23864] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1407.558058][T19478] usb 2-1: Product: syz [ 1407.578343][T19478] usb 2-1: Manufacturer: syz [ 1407.624920][T19478] usb 2-1: SerialNumber: syz [ 1407.641304][T19478] usb 2-1: config 0 descriptor?? [ 1407.984665][T19478] usb 2-1: USB disconnect, device number 47 [ 1407.994261][T23874] netlink: 'syz.0.4764': attribute type 2 has an invalid length. [ 1408.608212][T23880] Invalid logical block size (199600449) [ 1409.020860][T23888] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4770'. [ 1409.045946][T19478] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1409.058088][T23888] dlm: non-version read from control device 0 [ 1409.254893][T23882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1409.274879][T23882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1409.294738][T19478] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1409.313396][T19478] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1409.328957][T19478] usb 2-1: can't read configurations, error -71 [ 1409.857037][T23901] mac80211_hwsim hwsim21 syzkaller0: entered promiscuous mode [ 1409.865120][T23901] mac80211_hwsim hwsim21 syzkaller0: entered allmulticast mode [ 1409.873502][T23900] tipc: Enabling of bearer rejected, already enabled [ 1409.884993][T23903] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4774'. [ 1410.499335][T23925] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4782'. [ 1410.585706][ T5891] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 1410.750899][ T5891] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1410.761772][ T5891] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 1410.773924][ T5891] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 1410.784485][ T5891] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1410.801115][ T5891] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 1410.810587][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1410.813393][ T30] audit: type=1326 audit(1773627678.387:3358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23926 comm="syz.5.4783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1822f9c799 code=0x7ffc0000 [ 1410.843697][ T5891] usb 2-1: Product: syz [ 1410.857284][ T30] audit: type=1326 audit(1773627678.427:3359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23926 comm="syz.5.4783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f1822f9c799 code=0x7ffc0000 [ 1410.857613][ T5891] usb 2-1: Manufacturer: syz [ 1410.880661][ T30] audit: type=1326 audit(1773627678.427:3360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23926 comm="syz.5.4783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1822f9c799 code=0x7ffc0000 [ 1410.909164][ T5891] usb 2-1: SerialNumber: syz [ 1410.916799][ T5891] usb 2-1: config 0 descriptor?? [ 1410.924528][ T5891] xbox_remote_probe: Unexpected endpoint_in [ 1410.929408][ T30] audit: type=1326 audit(1773627678.427:3361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23926 comm="syz.5.4783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f1822f9c799 code=0x7ffc0000 [ 1410.956222][ T30] audit: type=1326 audit(1773627678.427:3362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23926 comm="syz.5.4783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1822f9c799 code=0x7ffc0000 [ 1410.979351][ T30] audit: type=1326 audit(1773627678.427:3363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23926 comm="syz.5.4783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f1822f9c799 code=0x7ffc0000 [ 1411.002286][ T30] audit: type=1326 audit(1773627678.427:3364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23926 comm="syz.5.4783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1822f9c799 code=0x7ffc0000 [ 1411.027056][ T30] audit: type=1326 audit(1773627678.427:3365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23926 comm="syz.5.4783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1822f9c799 code=0x7ffc0000 [ 1411.050861][ T30] audit: type=1326 audit(1773627678.427:3366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23926 comm="syz.5.4783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1822f9c799 code=0x7ffc0000 [ 1411.073822][ T30] audit: type=1326 audit(1773627678.427:3367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23926 comm="syz.5.4783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1822f9c799 code=0x7ffc0000 [ 1411.145166][ T5891] usb 2-1: USB disconnect, device number 50 [ 1411.538740][T19478] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1411.707956][T19478] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1411.745764][T19478] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1411.796684][T19478] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1411.817848][T19478] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1411.946028][T19478] usb 4-1: Product: syz [ 1411.960438][T19478] usb 4-1: Manufacturer: syz [ 1411.967896][T23946] tipc: Enabling of bearer rejected, already enabled [ 1411.985742][T19478] usb 4-1: SerialNumber: syz [ 1412.000450][T19478] rtl8150 4-1:1.0: couldn't find required endpoints [ 1412.024503][T19478] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 1412.505533][ T796] usb 4-1: USB disconnect, device number 30 [ 1412.594130][T23952] netlink: 88 bytes leftover after parsing attributes in process `syz.1.4791'. [ 1412.783263][T23957] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1412.895184][T23959] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4793'. [ 1413.585739][ T5891] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1413.634940][ T796] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1413.788857][ T5891] usb 6-1: Using ep0 maxpacket: 32 [ 1413.802240][ T5891] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 1413.815879][ T5891] usb 6-1: config 0 has no interface number 0 [ 1413.838276][ T5891] usb 6-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1413.872862][ T5891] usb 6-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1413.901947][ T5891] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1413.912466][ T5891] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1414.110860][ T5891] usb 6-1: Product: syz [ 1414.117552][ T796] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1414.128024][ T796] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1414.140118][ T796] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1414.151842][ T796] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1414.161307][ T796] usb 4-1: SerialNumber: syz [ 1414.179307][ T5891] usb 6-1: Manufacturer: syz [ 1414.199547][ T5891] usb 6-1: SerialNumber: syz [ 1414.248724][ T5891] usb 6-1: config 0 descriptor?? [ 1414.472592][ T5891] radio-si470x 6-1:0.35: this is not a si470x device. [ 1414.527319][ T796] usb 4-1: 0:2 : does not exist [ 1414.638234][T23986] FAULT_INJECTION: forcing a failure. [ 1414.638234][T23986] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1414.652093][T23986] CPU: 1 UID: 0 PID: 23986 Comm: syz.0.4801 Tainted: G L syzkaller #0 PREEMPT(full) [ 1414.652124][T23986] Tainted: [L]=SOFTLOCKUP [ 1414.652131][T23986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1414.652142][T23986] Call Trace: [ 1414.652151][T23986] [ 1414.652160][T23986] dump_stack_lvl+0xe8/0x150 [ 1414.652199][T23986] should_fail_ex+0x412/0x560 [ 1414.652233][T23986] strncpy_from_user+0x36/0x2b0 [ 1414.652265][T23986] do_getname+0x77/0x250 [ 1414.652317][T23986] __se_sys_renameat2+0x34/0x2c0 [ 1414.652349][T23986] do_syscall_64+0x14d/0xf80 [ 1414.652380][T23986] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1414.652401][T23986] ? clear_bhb_loop+0x40/0x90 [ 1414.652425][T23986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1414.652444][T23986] RIP: 0033:0x7fdcd6f9c799 [ 1414.652464][T23986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1414.652480][T23986] RSP: 002b:00007fdcd7e4c028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 1414.652503][T23986] RAX: ffffffffffffffda RBX: 00007fdcd7216180 RCX: 00007fdcd6f9c799 [ 1414.652517][T23986] RDX: ffffffffffffff9c RSI: 0000200000000480 RDI: ffffffffffffff9c [ 1414.652530][T23986] RBP: 00007fdcd7e4c090 R08: 0000000000000002 R09: 0000000000000000 [ 1414.652542][T23986] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000001 [ 1414.652555][T23986] R13: 00007fdcd7216218 R14: 00007fdcd7216180 R15: 00007fdcd733fa48 [ 1414.652586][T23986] [ 1414.653549][T23986] netlink: 'syz.0.4801': attribute type 1 has an invalid length. [ 1414.824556][ T5891] radio-raremono 6-1:0.35: this is not Thanko's Raremono. [ 1414.836827][T23986] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 1414.882901][ T796] usb 4-1: USB disconnect, device number 31 [ 1414.970048][T15726] udevd[15726]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1415.247335][T23974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1415.272954][T23974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1415.302232][T16525] usb 6-1: USB disconnect, device number 40 [ 1415.655710][ T796] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 1415.807039][T24005] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4807'. [ 1415.946000][ T796] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1415.965099][T24009] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1415.972172][ T796] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 1415.972208][ T796] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 8960, setting to 64 [ 1415.972238][ T796] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1416.023810][ T796] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1416.035218][ T796] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1416.065711][ T796] usb 2-1: Product: syz [ 1416.070051][ T796] usb 2-1: Manufacturer: syz [ 1416.080944][ T796] usb 2-1: SerialNumber: syz [ 1416.095906][ T796] usb 2-1: config 0 descriptor?? [ 1416.950624][T24028] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1418.459062][ T5891] usb 2-1: USB disconnect, device number 51 [ 1419.094983][T24068] netlink: 'syz.5.4819': attribute type 2 has an invalid length. [ 1419.120369][T24068] !: entered promiscuous mode [ 1419.207783][ T5891] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1419.365680][ T5891] usb 2-1: Using ep0 maxpacket: 32 [ 1419.372792][ T5891] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1419.390756][ T5891] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1419.409433][ T796] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1419.425406][ T5891] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1419.439227][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1419.452935][ T5891] usb 2-1: Product: syz [ 1419.459938][ T5891] usb 2-1: Manufacturer: syz [ 1419.467715][ T5891] usb 2-1: SerialNumber: syz [ 1419.490555][ T5891] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input45 [ 1419.576568][ T796] usb 4-1: Using ep0 maxpacket: 8 [ 1419.587768][ T796] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1419.615371][ T796] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1419.643437][ T796] usb 4-1: Product: syz [ 1419.650390][ T796] usb 4-1: Manufacturer: syz [ 1419.667913][ T796] usb 4-1: SerialNumber: syz [ 1419.681115][ T796] usb 4-1: config 0 descriptor?? [ 1419.722471][ T5891] usb 2-1: USB disconnect, device number 52 [ 1419.744978][ T5891] appletouch 2-1:1.0: input: appletouch disconnected [ 1419.945751][ T796] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1420.208007][T24074] input: syz0 as /devices/virtual/input/input46 [ 1420.384457][ T796] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1420.446004][ T796] usb 4-1: USB disconnect, device number 32 [ 1421.415910][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1421.863756][T24108] Invalid logical block size (218103808) [ 1422.021518][ T796] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 1422.223500][ T796] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1422.373518][ T796] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 1422.394466][ T796] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 8960, setting to 64 [ 1422.415786][ T796] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1422.433381][T24117] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4831'. [ 1422.458899][ T796] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1422.488868][ T796] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1422.510982][ T796] usb 2-1: Product: syz [ 1422.515286][ T796] usb 2-1: Manufacturer: syz [ 1422.546874][ T796] usb 2-1: SerialNumber: syz [ 1422.563778][ T796] usb 2-1: config 0 descriptor?? [ 1423.342131][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.348618][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1424.716229][ T5891] usb 2-1: USB disconnect, device number 53 [ 1425.060463][T16525] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1425.355728][T16525] usb 4-1: Using ep0 maxpacket: 16 [ 1425.363753][T16525] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1425.375958][T16525] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1425.388102][T16525] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1425.398358][T16525] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1425.408903][T16525] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1425.416396][T24163] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4846'. [ 1425.424010][T16525] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1425.441810][T16525] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1425.450369][T16525] usb 4-1: Manufacturer: syz [ 1425.464034][T16525] usb 4-1: config 0 descriptor?? [ 1425.903254][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 1425.903278][ T30] audit: type=1326 audit(1773627693.297:3378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24168 comm="syz.5.4847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1822f9c799 code=0x7ffc0000 [ 1425.963430][ T30] audit: type=1326 audit(1773627693.297:3379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24168 comm="syz.5.4847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f1822f9c799 code=0x7ffc0000 [ 1426.011635][ T30] audit: type=1326 audit(1773627693.297:3380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24168 comm="syz.5.4847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1822f9c799 code=0x7ffc0000 [ 1426.037827][T16525] rc_core: IR keymap rc-hauppauge not found [ 1426.043875][T16525] Registered IR keymap rc-empty [ 1426.050900][T16525] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1426.059245][ T30] audit: type=1326 audit(1773627693.297:3381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24168 comm="syz.5.4847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f1822f9c799 code=0x7ffc0000 [ 1426.075863][T16525] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1426.106939][T16525] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1426.115027][ T30] audit: type=1326 audit(1773627693.297:3382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24168 comm="syz.5.4847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1822f9c799 code=0x7ffc0000 [ 1426.175075][ T30] audit: type=1326 audit(1773627693.297:3383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24168 comm="syz.5.4847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f1822f9c799 code=0x7ffc0000 [ 1426.199428][ T30] audit: type=1326 audit(1773627693.297:3384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24168 comm="syz.5.4847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1822f9c799 code=0x7ffc0000 [ 1426.206658][T16525] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input47 [ 1426.413412][T16525] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1426.436034][T16525] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1426.464113][ T30] audit: type=1326 audit(1773627693.297:3385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24168 comm="syz.5.4847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1822f9c799 code=0x7ffc0000 [ 1426.493429][T16525] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1426.525915][T16525] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1427.003348][ T30] audit: type=1326 audit(1773627693.297:3386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24168 comm="syz.5.4847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1822f9c799 code=0x7ffc0000 [ 1427.115824][T16525] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1427.145760][T16525] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1427.175913][T16525] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1427.178163][ T30] audit: type=1326 audit(1773627693.297:3387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24168 comm="syz.5.4847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1822f9c799 code=0x7ffc0000 [ 1427.206057][T16525] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1427.227618][T16525] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1427.306337][T16525] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1427.332539][T16525] mceusb 4-1:0.0: Registered $ with mce emulator interface version 1 [ 1427.341515][T16525] mceusb 4-1:0.0: 2 tx ports (0x1 cabled) and 2 rx sensors (0x0 active) [ 1427.366388][T16525] usb 4-1: USB disconnect, device number 33 [ 1429.054153][T24245] binder: 24239:24245 ioctl ae80 0 returned -22 [ 1429.240473][T24247] FAULT_INJECTION: forcing a failure. [ 1429.240473][T24247] name failslab, interval 1, probability 0, space 0, times 0 [ 1429.265865][T24247] CPU: 1 UID: 0 PID: 24247 Comm: syz.1.4872 Tainted: G L syzkaller #0 PREEMPT(full) [ 1429.265898][T24247] Tainted: [L]=SOFTLOCKUP [ 1429.265906][T24247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1429.265917][T24247] Call Trace: [ 1429.265925][T24247] [ 1429.265933][T24247] dump_stack_lvl+0xe8/0x150 [ 1429.265965][T24247] should_fail_ex+0x412/0x560 [ 1429.265997][T24247] should_failslab+0xa8/0x100 [ 1429.266021][T24247] ? __kernfs_new_node+0xe9/0x8e0 [ 1429.266047][T24247] kmem_cache_alloc_noprof+0x87/0x650 [ 1429.266066][T24247] ? kasan_save_track+0x3e/0x80 [ 1429.266084][T24247] ? __kasan_slab_alloc+0x6c/0x80 [ 1429.266104][T24247] ? __kernfs_new_node+0xe9/0x8e0 [ 1429.266129][T24247] ? kernfs_create_link+0xa7/0x200 [ 1429.266153][T24247] __kernfs_new_node+0xe9/0x8e0 [ 1429.266186][T24247] ? __pfx___kernfs_new_node+0x10/0x10 [ 1429.266213][T24247] ? kernfs_root+0x1c/0x230 [ 1429.266243][T24247] ? kernfs_root+0x1c/0x230 [ 1429.266267][T24247] ? kernfs_root+0x1c/0x230 [ 1429.266289][T24247] ? kernfs_root+0x1c/0x230 [ 1429.266317][T24247] kernfs_new_node+0x102/0x210 [ 1429.266349][T24247] __kernfs_create_file+0x4b/0x2e0 [ 1429.266373][T24247] sysfs_add_file_mode_ns+0x238/0x300 [ 1429.266405][T24247] internal_create_group+0x673/0x1180 [ 1429.266446][T24247] ? __pfx_internal_create_group+0x10/0x10 [ 1429.266469][T24247] ? kernfs_add_one+0x477/0x5c0 [ 1429.266500][T24247] ? up_write+0x1ab/0x410 [ 1429.266522][T24247] sysfs_create_groups+0x59/0x120 [ 1429.266551][T24247] device_add_attrs+0x13b/0x5b0 [ 1429.266586][T24247] ? __pfx_device_add_attrs+0x10/0x10 [ 1429.266606][T24247] ? kobject_put+0x516/0x560 [ 1429.266634][T24247] ? device_add_class_symlinks+0x21f/0x240 [ 1429.266658][T24247] device_add+0x496/0xb70 [ 1429.266685][T24247] input_register_device+0x9d3/0x1160 [ 1429.266713][T24247] ? input_ff_create+0x235/0x300 [ 1429.266737][T24247] uinput_create_device+0x422/0x670 [ 1429.266767][T24247] uinput_ioctl_handler+0x417/0x14a0 [ 1429.266794][T24247] ? __pfx_uinput_ioctl_handler+0x10/0x10 [ 1429.266825][T24247] ? __fget_files+0x2a/0x420 [ 1429.266850][T24247] ? __fget_files+0x3a0/0x420 [ 1429.266879][T24247] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1429.266903][T24247] ? __pfx_uinput_ioctl+0x10/0x10 [ 1429.266923][T24247] __se_sys_ioctl+0xfc/0x170 [ 1429.266948][T24247] do_syscall_64+0x14d/0xf80 [ 1429.266966][T24247] ? trace_irq_disable+0x3b/0x150 [ 1429.266981][T24247] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1429.266993][T24247] ? clear_bhb_loop+0x40/0x90 [ 1429.267008][T24247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1429.267019][T24247] RIP: 0033:0x7f494639c799 [ 1429.267032][T24247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1429.267042][T24247] RSP: 002b:00007f4947249028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1429.267056][T24247] RAX: ffffffffffffffda RBX: 00007f4946615fa0 RCX: 00007f494639c799 [ 1429.267065][T24247] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 1429.267072][T24247] RBP: 00007f4947249090 R08: 0000000000000000 R09: 0000000000000000 [ 1429.267080][T24247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1429.267087][T24247] R13: 00007f4946616038 R14: 00007f4946615fa0 R15: 00007f494673fa48 [ 1429.267105][T24247] [ 1430.355388][T24260] FAULT_INJECTION: forcing a failure. [ 1430.355388][T24260] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1430.372525][T24263] mac80211_hwsim hwsim32 syzkaller0: left promiscuous mode [ 1430.392459][T24263] mac80211_hwsim hwsim32 syzkaller0: left allmulticast mode [ 1430.405266][T24260] CPU: 1 UID: 0 PID: 24260 Comm: syz.1.4876 Tainted: G L syzkaller #0 PREEMPT(full) [ 1430.405297][T24260] Tainted: [L]=SOFTLOCKUP [ 1430.405305][T24260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1430.405316][T24260] Call Trace: [ 1430.405324][T24260] [ 1430.405333][T24260] dump_stack_lvl+0xe8/0x150 [ 1430.405367][T24260] should_fail_ex+0x412/0x560 [ 1430.405400][T24260] _copy_from_user+0x2d/0xb0 [ 1430.405420][T24260] __copy_msghdr+0x3c5/0x5b0 [ 1430.405442][T24260] ___sys_sendmsg+0x213/0x360 [ 1430.405468][T24260] ? __pfx____sys_sendmsg+0x10/0x10 [ 1430.405526][T24260] ? __fget_files+0x2a/0x420 [ 1430.405553][T24260] ? __fget_files+0x3a0/0x420 [ 1430.405641][T24260] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1430.405665][T24260] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1430.405696][T24260] ? __pfx_ksys_write+0x10/0x10 [ 1430.405730][T24260] do_syscall_64+0x14d/0xf80 [ 1430.405750][T24260] ? trace_irq_disable+0x3b/0x150 [ 1430.405777][T24260] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1430.405797][T24260] ? clear_bhb_loop+0x40/0x90 [ 1430.405820][T24260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1430.405839][T24260] RIP: 0033:0x7f494639c799 [ 1430.405859][T24260] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1430.405875][T24260] RSP: 002b:00007f4947249028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1430.405896][T24260] RAX: ffffffffffffffda RBX: 00007f4946615fa0 RCX: 00007f494639c799 [ 1430.405910][T24260] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 000000000000000a [ 1430.405922][T24260] RBP: 00007f4947249090 R08: 0000000000000000 R09: 0000000000000000 [ 1430.405934][T24260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1430.405946][T24260] R13: 00007f4946616038 R14: 00007f4946615fa0 R15: 00007f494673fa48 [ 1430.405974][T24260] [ 1430.724516][T24270] FAULT_INJECTION: forcing a failure. [ 1430.724516][T24270] name failslab, interval 1, probability 0, space 0, times 0 [ 1430.760921][T24270] CPU: 1 UID: 0 PID: 24270 Comm: syz.6.4879 Tainted: G L syzkaller #0 PREEMPT(full) [ 1430.760956][T24270] Tainted: [L]=SOFTLOCKUP [ 1430.760964][T24270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1430.760976][T24270] Call Trace: [ 1430.760984][T24270] [ 1430.760994][T24270] dump_stack_lvl+0xe8/0x150 [ 1430.761028][T24270] should_fail_ex+0x412/0x560 [ 1430.761061][T24270] should_failslab+0xa8/0x100 [ 1430.761088][T24270] __kmalloc_noprof+0xe8/0x760 [ 1430.761111][T24270] ? tomoyo_encode+0x28b/0x550 [ 1430.761151][T24270] tomoyo_encode+0x28b/0x550 [ 1430.761186][T24270] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1430.761227][T24270] ? tomoyo_path_number_perm+0x219/0x630 [ 1430.761252][T24270] tomoyo_path_number_perm+0x246/0x630 [ 1430.761281][T24270] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1430.761309][T24270] ? __lock_acquire+0x6b5/0x2cf0 [ 1430.761346][T24270] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1430.761391][T24270] ? __fget_files+0x2a/0x420 [ 1430.761422][T24270] ? __fget_files+0x2a/0x420 [ 1430.761448][T24270] ? __fget_files+0x3a0/0x420 [ 1430.761475][T24270] ? __fget_files+0x2a/0x420 [ 1430.761507][T24270] security_file_ioctl+0xc3/0x2a0 [ 1430.761534][T24270] __se_sys_ioctl+0x47/0x170 [ 1430.761560][T24270] do_syscall_64+0x14d/0xf80 [ 1430.761581][T24270] ? trace_irq_disable+0x3b/0x150 [ 1430.761607][T24270] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1430.761626][T24270] ? clear_bhb_loop+0x40/0x90 [ 1430.761659][T24270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1430.761678][T24270] RIP: 0033:0x7ff561d9c799 [ 1430.761698][T24270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1430.761714][T24270] RSP: 002b:00007ff562c39028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1430.761735][T24270] RAX: ffffffffffffffda RBX: 00007ff562015fa0 RCX: 00007ff561d9c799 [ 1430.761749][T24270] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 1430.761761][T24270] RBP: 00007ff562c39090 R08: 0000000000000000 R09: 0000000000000000 [ 1430.761772][T24270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1430.761784][T24270] R13: 00007ff562016038 R14: 00007ff562015fa0 R15: 00007ff56213fa48 [ 1430.761817][T24270] [ 1430.761875][T24270] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1431.386389][T24288] xt_nfacct: accounting object `syz1' does not exist [ 1431.484005][T24288] FAULT_INJECTION: forcing a failure. [ 1431.484005][T24288] name failslab, interval 1, probability 0, space 0, times 0 [ 1431.498435][T24288] CPU: 1 UID: 0 PID: 24288 Comm: syz.0.4884 Tainted: G L syzkaller #0 PREEMPT(full) [ 1431.498517][T24288] Tainted: [L]=SOFTLOCKUP [ 1431.498524][T24288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1431.498531][T24288] Call Trace: [ 1431.498540][T24288] [ 1431.498546][T24288] dump_stack_lvl+0xe8/0x150 [ 1431.498573][T24288] should_fail_ex+0x412/0x560 [ 1431.498593][T24288] ? __d_alloc+0x37/0x6f0 [ 1431.498606][T24288] should_failslab+0xa8/0x100 [ 1431.498622][T24288] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 1431.498647][T24288] __d_alloc+0x37/0x6f0 [ 1431.498675][T24288] d_alloc+0x4b/0x190 [ 1431.498690][T24288] ? lookup_one_qstr_excl+0xc8/0x360 [ 1431.498719][T24288] lookup_one_qstr_excl+0xdc/0x360 [ 1431.498748][T24288] filename_rmdir+0x1e0/0x520 [ 1431.498776][T24288] ? __pfx_filename_rmdir+0x10/0x10 [ 1431.498805][T24288] ? do_getname+0x151/0x250 [ 1431.498829][T24288] __se_sys_rmdir+0x2e/0x140 [ 1431.498847][T24288] do_syscall_64+0x14d/0xf80 [ 1431.498860][T24288] ? trace_irq_disable+0x3b/0x150 [ 1431.498875][T24288] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1431.498887][T24288] ? clear_bhb_loop+0x40/0x90 [ 1431.498901][T24288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1431.498912][T24288] RIP: 0033:0x7fdcd6f9c799 [ 1431.498926][T24288] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1431.498936][T24288] RSP: 002b:00007fdcd7e8e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 1431.498950][T24288] RAX: ffffffffffffffda RBX: 00007fdcd7215fa0 RCX: 00007fdcd6f9c799 [ 1431.498958][T24288] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 1431.498966][T24288] RBP: 00007fdcd7e8e090 R08: 0000000000000000 R09: 0000000000000000 [ 1431.498973][T24288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1431.498979][T24288] R13: 00007fdcd7216038 R14: 00007fdcd7215fa0 R15: 00007fdcd733fa48 [ 1431.498997][T24288] [ 1432.002133][T24294] warning: `syz.5.4886' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1432.098968][T24296] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4885'. [ 1432.304196][T24300] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4887'. [ 1433.243909][T24323] netlink: 'syz.6.4892': attribute type 2 has an invalid length. [ 1435.211065][T24347] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4899'. [ 1435.354753][T24349] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4900'. [ 1436.735758][T24372] netlink: 'syz.1.4908': attribute type 1 has an invalid length. [ 1436.737356][ T36] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1437.141595][T24384] loop5: detected capacity change from 0 to 7 [ 1437.171504][T24384] Dev loop5: unable to read RDB block 7 [ 1437.203641][T24386] mac80211_hwsim hwsim23 syzkaller0: left promiscuous mode [ 1437.211176][T24384] loop5: unable to read partition table [ 1437.226124][T24384] loop5: partition table beyond EOD, truncated [ 1437.236071][T24386] mac80211_hwsim hwsim23 syzkaller0: left allmulticast mode [ 1437.253430][T24384] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1437.372013][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 1437.372033][ T30] audit: type=1326 audit(1773627704.937:3398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24387 comm="syz.3.4914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd747f9c799 code=0x7ffc0000 [ 1437.486888][ T30] audit: type=1326 audit(1773627704.937:3399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24387 comm="syz.3.4914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fd747f9c799 code=0x7ffc0000 [ 1437.604543][ T30] audit: type=1326 audit(1773627704.937:3400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24387 comm="syz.3.4914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd747f9c799 code=0x7ffc0000 [ 1437.716861][ T30] audit: type=1326 audit(1773627704.937:3401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24387 comm="syz.3.4914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7fd747f9c799 code=0x7ffc0000 [ 1438.071808][ T30] audit: type=1326 audit(1773627704.947:3402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24387 comm="syz.3.4914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd747f9c799 code=0x7ffc0000 [ 1438.256977][T24401] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4916'. [ 1438.313428][ T30] audit: type=1326 audit(1773627704.947:3403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24387 comm="syz.3.4914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fd747f9c799 code=0x7ffc0000 [ 1438.393594][ T30] audit: type=1326 audit(1773627704.947:3404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24387 comm="syz.3.4914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd747f9c799 code=0x7ffc0000 [ 1438.421669][ T30] audit: type=1326 audit(1773627704.947:3405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24387 comm="syz.3.4914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd747f9c799 code=0x7ffc0000 [ 1438.458178][ T30] audit: type=1326 audit(1773627704.947:3406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24387 comm="syz.3.4914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd747f9c799 code=0x7ffc0000 [ 1438.541197][ T30] audit: type=1326 audit(1773627704.947:3407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24387 comm="syz.3.4914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd747f9c799 code=0x7ffc0000 [ 1438.645936][ T5913] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1438.775739][T16525] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1438.798510][T24421] netlink: 'syz.6.4922': attribute type 4 has an invalid length. [ 1438.806716][ T5913] usb 4-1: Using ep0 maxpacket: 32 [ 1438.815768][ T5913] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1438.831221][ T5913] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1438.841077][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1438.853293][ T5913] usb 4-1: Product: syz [ 1438.857839][ T5913] usb 4-1: Manufacturer: syz [ 1438.862895][ T5913] usb 4-1: SerialNumber: syz [ 1438.869324][T24422] netlink: 'syz.6.4922': attribute type 4 has an invalid length. [ 1438.885776][ T5913] usb 4-1: config 0 descriptor?? [ 1438.893356][T24410] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1438.959695][T16525] usb 6-1: Using ep0 maxpacket: 16 [ 1438.968512][T16525] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1438.993909][T16525] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1439.014051][T16525] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1439.044519][T16525] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1439.064116][T16525] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1439.077438][T16525] usb 6-1: config 0 descriptor?? [ 1439.162123][T16524] usb 4-1: USB disconnect, device number 34 [ 1439.501818][T16525] microsoft 0003:045E:07DA.0012: ignoring exceeding usage max [ 1439.510951][T16525] microsoft 0003:045E:07DA.0012: unsupported Resolution Multiplier 0 [ 1439.536110][T16525] microsoft 0003:045E:07DA.0012: implement() called with n (152) > 32! (kworker/1:9) [ 1439.649806][T24432] syzkaller0: create flow: hash 3973949129 index 1 [ 1439.699311][T24431] syzkaller0: delete flow: hash 3973949129 index 1 [ 1439.750248][T16525] microsoft 0003:045E:07DA.0012: unsupported Resolution Multiplier 0 [ 1439.771024][T16525] microsoft 0003:045E:07DA.0012: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 1439.784209][T16525] microsoft 0003:045E:07DA.0012: no inputs found [ 1439.803369][T16525] microsoft 0003:045E:07DA.0012: could not initialize ff, continuing anyway [ 1440.422945][T24444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1440.488372][T24444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1440.784333][ T5826] Bluetooth: hci2: command 0x0406 tx timeout [ 1443.091406][T16525] usb 6-1: USB disconnect, device number 41 [ 1443.236678][T24453] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1443.272311][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 1443.272331][ T30] audit: type=1326 audit(1773627710.847:3418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24454 comm="syz.5.4931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1822f9c799 code=0x7ffc0000 [ 1443.341010][ T30] audit: type=1326 audit(1773627710.847:3419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24454 comm="syz.5.4931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1822f9c799 code=0x7ffc0000 [ 1443.549741][T24455] loop5: detected capacity change from 0 to 8 [ 1443.691813][T24464] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4933'. [ 1443.704787][ T30] audit: type=1326 audit(1773627710.847:3420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24454 comm="syz.5.4931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1822f9c799 code=0x7ffc0000 [ 1443.796802][ T30] audit: type=1326 audit(1773627710.857:3421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24454 comm="syz.5.4931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1822f5cfce code=0x7ffc0000 [ 1443.840078][T24465] mac80211_hwsim hwsim29 syzkaller0: entered promiscuous mode [ 1443.848451][T24465] mac80211_hwsim hwsim29 syzkaller0: entered allmulticast mode [ 1443.851258][ T30] audit: type=1326 audit(1773627710.857:3422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24454 comm="syz.5.4931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1822f9c799 code=0x7ffc0000 [ 1443.976136][ T30] audit: type=1326 audit(1773627710.857:3423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24454 comm="syz.5.4931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1822f9c799 code=0x7ffc0000 [ 1444.000659][ T30] audit: type=1326 audit(1773627710.857:3424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24454 comm="syz.5.4931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1822f9c799 code=0x7ffc0000 [ 1444.175797][T24455] Dev loop5: unable to read RDB block 8 [ 1444.185958][T24455] loop5: unable to read partition table [ 1444.191849][T24455] loop5: partition table beyond EOD, truncated [ 1444.208666][ T30] audit: type=1326 audit(1773627710.857:3425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24454 comm="syz.5.4931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1822f9c799 code=0x7ffc0000 [ 1444.288161][T24469] netlink: 'syz.1.4935': attribute type 1 has an invalid length. [ 1444.306598][T24455] loop_reread_partitions: partition scan of loop5 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 1444.325668][ T30] audit: type=1326 audit(1773627710.857:3426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24454 comm="syz.5.4931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1822f9c799 code=0x7ffc0000 [ 1444.375876][ T30] audit: type=1326 audit(1773627710.857:3427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24454 comm="syz.5.4931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1822f9c799 code=0x7ffc0000 [ 1444.467361][T24471] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1444.565203][T24476] FAULT_INJECTION: forcing a failure. [ 1444.565203][T24476] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1444.579972][T24469] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1444.586669][T24476] CPU: 1 UID: 0 PID: 24476 Comm: syz.3.4936 Tainted: G L syzkaller #0 PREEMPT(full) [ 1444.586698][T24476] Tainted: [L]=SOFTLOCKUP [ 1444.586706][T24476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1444.586717][T24476] Call Trace: [ 1444.586725][T24476] [ 1444.586735][T24476] dump_stack_lvl+0xe8/0x150 [ 1444.586766][T24476] should_fail_ex+0x412/0x560 [ 1444.586791][T24476] strncpy_from_user+0x36/0x2b0 [ 1444.586814][T24476] do_getname+0x77/0x250 [ 1444.586837][T24476] __se_sys_renameat2+0x43/0x2c0 [ 1444.586859][T24476] do_syscall_64+0x14d/0xf80 [ 1444.586875][T24476] ? trace_irq_disable+0x3b/0x150 [ 1444.586896][T24476] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1444.586911][T24476] ? clear_bhb_loop+0x40/0x90 [ 1444.586929][T24476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1444.586944][T24476] RIP: 0033:0x7fd747f9c799 [ 1444.586959][T24476] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1444.586972][T24476] RSP: 002b:00007fd7461f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 1444.586988][T24476] RAX: ffffffffffffffda RBX: 00007fd748216180 RCX: 00007fd747f9c799 [ 1444.586999][T24476] RDX: ffffffffffffff9c RSI: 0000200000000480 RDI: ffffffffffffff9c [ 1444.587010][T24476] RBP: 00007fd7461f6090 R08: 0000000000000002 R09: 0000000000000000 [ 1444.587020][T24476] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000001 [ 1444.587030][T24476] R13: 00007fd748216218 R14: 00007fd748216180 R15: 00007fd74833fa48 [ 1444.587053][T24476] [ 1444.587724][T24476] netlink: 'syz.3.4936': attribute type 1 has an invalid length. [ 1444.613540][ T12] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1444.915754][T24469] veth1: entered promiscuous mode [ 1444.932077][T24469] bond4: (slave veth1): Enslaving as a backup interface with a down link [ 1444.979978][T24476] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1445.145866][T24489] xt_nfacct: accounting object `syz1' does not exist [ 1445.197104][T20614] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1445.315704][T16525] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1445.782699][T16525] usb 6-1: Using ep0 maxpacket: 32 [ 1445.796535][T16525] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1445.819531][T16525] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1445.828951][T16525] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1445.839004][T16525] usb 6-1: Product: syz [ 1445.843212][T16525] usb 6-1: Manufacturer: syz [ 1445.856782][T16525] usb 6-1: SerialNumber: syz [ 1445.893010][T16525] usb 6-1: config 0 descriptor?? [ 1445.900021][T24482] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1445.976085][ T5891] usb 2-1: new low-speed USB device number 54 using dummy_hcd [ 1446.140037][ T5891] usb 2-1: No LPM exit latency info found, disabling LPM. [ 1446.149410][ T5891] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 1446.161163][ T5891] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 1446.174954][T16525] usb 6-1: USB disconnect, device number 42 [ 1446.204391][ T5891] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1446.214053][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1446.225787][ T5891] usb 2-1: Product:  [ 1446.230000][ T5891] usb 2-1: SerialNumber: ⮴靆㔯鹡瞓썥⠹긑߳湤꽖ࢦ陶ȳ൷粐豫櫞햽츔 [ 1446.492019][T24505] binder_alloc: binder_alloc_mmap_handler: 24503 200000ffd000-200001000000 already mapped failed -16 [ 1446.599435][T24504] binder: BINDER_SET_CONTEXT_MGR already set [ 1446.609620][T24504] binder: 24503:24504 ioctl 4018620d 200000000040 returned -16 [ 1446.648822][T24504] binder_alloc: 24503: binder_alloc_buf, no vma [ 1446.870932][T24511] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1514) ! [ 1446.881821][T24511] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4946'. [ 1446.902013][T24511] mac80211_hwsim hwsim32 syzkaller0: entered promiscuous mode [ 1446.922746][T24511] mac80211_hwsim hwsim32 syzkaller0: entered allmulticast mode [ 1446.977483][T20614] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1448.267101][T24516] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4947'. [ 1448.389262][ T5891] cdc_ncm 2-1:1.0: bind() failure [ 1448.445358][ T5891] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 1448.463485][ T5891] cdc_ncm 2-1:1.1: bind() failure [ 1448.526301][ T5891] usb 2-1: USB disconnect, device number 54 [ 1448.653058][T24527] program syz.6.4952 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1449.918342][T24552] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4960'. [ 1449.987830][T19478] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1450.148659][T19478] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1450.172599][T19478] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1450.213985][T19478] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1450.236914][T19478] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1450.294952][T19478] usb 2-1: Product: syz [ 1450.302625][T19478] usb 2-1: Manufacturer: syz [ 1450.309787][T19478] usb 2-1: SerialNumber: syz [ 1450.347811][T24563] loop5: detected capacity change from 0 to 7 [ 1450.358828][T24561] FAULT_INJECTION: forcing a failure. [ 1450.358828][T24561] name failslab, interval 1, probability 0, space 0, times 0 [ 1450.372286][T24563] Dev loop5: unable to read RDB block 7 [ 1450.378110][T24563] loop5: unable to read partition table [ 1450.386428][T24563] loop5: partition table beyond EOD, truncated [ 1450.392938][T24561] CPU: 0 UID: 0 PID: 24561 Comm: syz.5.4962 Tainted: G L syzkaller #0 PREEMPT(full) [ 1450.392960][T24561] Tainted: [L]=SOFTLOCKUP [ 1450.392965][T24561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1450.392972][T24561] Call Trace: [ 1450.392977][T24561] [ 1450.392984][T24561] dump_stack_lvl+0xe8/0x150 [ 1450.393011][T24561] should_fail_ex+0x412/0x560 [ 1450.393031][T24561] should_failslab+0xa8/0x100 [ 1450.393046][T24561] __kmalloc_noprof+0xe8/0x760 [ 1450.393060][T24561] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 1450.393078][T24561] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 1450.393095][T24561] genl_family_rcv_msg_doit+0xd9/0x330 [ 1450.393112][T24561] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1450.393130][T24561] ? apparmor_capable+0x126/0x170 [ 1450.393143][T24561] ? bpf_lsm_capable+0x9/0x20 [ 1450.393159][T24561] ? security_capable+0x7e/0x2c0 [ 1450.393177][T24561] genl_rcv_msg+0x61c/0x7a0 [ 1450.393194][T24561] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1450.393205][T24561] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1450.393219][T24561] ? __pfx_nl80211_join_mesh+0x10/0x10 [ 1450.393234][T24561] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1450.393247][T24561] ? __lock_acquire+0x6b5/0x2cf0 [ 1450.393268][T24561] netlink_rcv_skb+0x232/0x4b0 [ 1450.393285][T24561] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1450.393299][T24561] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1450.393327][T24561] ? down_read+0x272/0x2e0 [ 1450.393340][T24561] ? genl_rcv+0xd/0x40 [ 1450.393353][T24561] genl_rcv+0x28/0x40 [ 1450.393365][T24561] netlink_unicast+0x80f/0x9b0 [ 1450.393385][T24561] ? __pfx_netlink_unicast+0x10/0x10 [ 1450.393401][T24561] ? netlink_sendmsg+0x650/0xb40 [ 1450.393416][T24561] ? skb_put+0x11b/0x210 [ 1450.393430][T24561] netlink_sendmsg+0x813/0xb40 [ 1450.393452][T24561] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1450.393470][T24561] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1450.393487][T24561] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1450.393502][T24561] ____sys_sendmsg+0x972/0x9f0 [ 1450.393520][T24561] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1450.393538][T24561] ? import_iovec+0x73/0xa0 [ 1450.393553][T24561] ___sys_sendmsg+0x2a5/0x360 [ 1450.393569][T24561] ? __pfx____sys_sendmsg+0x10/0x10 [ 1450.393608][T24561] ? __fget_files+0x2a/0x420 [ 1450.393624][T24561] ? __fget_files+0x3a0/0x420 [ 1450.393646][T24561] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1450.393661][T24561] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1450.393679][T24561] ? __pfx_ksys_write+0x10/0x10 [ 1450.393698][T24561] do_syscall_64+0x14d/0xf80 [ 1450.393710][T24561] ? trace_irq_disable+0x3b/0x150 [ 1450.393730][T24561] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1450.393748][T24561] ? clear_bhb_loop+0x40/0x90 [ 1450.393770][T24561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1450.393788][T24561] RIP: 0033:0x7f1822f9c799 [ 1450.393806][T24561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1450.393821][T24561] RSP: 002b:00007f1823df4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1450.393840][T24561] RAX: ffffffffffffffda RBX: 00007f1823215fa0 RCX: 00007f1822f9c799 [ 1450.393853][T24561] RDX: 0000000004004890 RSI: 0000200000000200 RDI: 0000000000000003 [ 1450.393864][T24561] RBP: 00007f1823df4090 R08: 0000000000000000 R09: 0000000000000000 [ 1450.393876][T24561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1450.393887][T24561] R13: 00007f1823216038 R14: 00007f1823215fa0 R15: 00007f182333fa48 [ 1450.393916][T24561] [ 1451.160397][T24563] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1451.170094][T24564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1451.186229][T24564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1451.205491][T19478] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 1451.268620][T19478] usb 2-1: USB disconnect, device number 55 [ 1451.565728][ T796] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1451.716586][ T796] usb 6-1: Using ep0 maxpacket: 16 [ 1451.729441][ T796] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1451.755088][ T796] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1451.772925][ T796] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1451.783955][ T796] usb 6-1: New USB device found, idVendor=046d, idProduct=c117, bcdDevice= 0.00 [ 1451.798770][ T796] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1451.813501][ T796] usb 6-1: config 0 descriptor?? [ 1452.033442][T24568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1452.047084][T24568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1452.057987][ T796] usb 6-1: USB disconnect, device number 43 [ 1452.456168][ T796] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1452.626011][ T796] usb 4-1: Using ep0 maxpacket: 8 [ 1452.635224][ T796] usb 4-1: config 9 has an invalid interface number: 122 but max is 0 [ 1452.658992][ T796] usb 4-1: config 9 has no interface number 0 [ 1452.660301][T24589] xt_hashlimit: size too large, truncated to 1048576 [ 1452.675246][ T796] usb 4-1: config 9 interface 122 altsetting 6 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 1452.689891][ T796] usb 4-1: config 9 interface 122 has no altsetting 0 [ 1452.705078][ T796] usb 4-1: New USB device found, idVendor=05ac, idProduct=9219, bcdDevice=f7.cd [ 1452.728610][ T796] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1452.741300][ T796] usb 4-1: Product: syz [ 1452.747407][ T796] usb 4-1: Manufacturer: syz [ 1452.752957][ T796] usb 4-1: SerialNumber: syz [ 1452.885789][T16525] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1452.996405][ T796] appledisplay 4-1:9.122: Could not find int-in endpoint [ 1453.012777][ T796] usbhid 4-1:9.122: couldn't find an input interrupt endpoint [ 1453.031379][ T796] usb 4-1: USB disconnect, device number 35 [ 1453.067824][T16525] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1453.111790][T16525] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1453.152326][T16525] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1453.165994][T16525] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1453.183560][T16525] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1453.194185][T16525] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1453.218871][T16525] usb 2-1: Manufacturer: syz [ 1453.239595][T16525] usb 2-1: config 0 descriptor?? [ 1453.387477][T24609] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4976'. [ 1453.411547][T24609] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4976'. [ 1453.431214][T24609] openvswitch: netlink: Flow actions attr not present in new flow. [ 1454.357950][T16525] usbhid 2-1:0.0: can't add hid device: -71 [ 1454.374580][T16525] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1454.420818][T16525] usb 2-1: USB disconnect, device number 56 [ 1455.331529][T16525] usb 2-1: new low-speed USB device number 57 using dummy_hcd [ 1455.700574][T24640] netlink: 'syz.3.4985': attribute type 9 has an invalid length. [ 1455.708701][T24640] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4985'. [ 1455.733492][T16525] usb 2-1: No LPM exit latency info found, disabling LPM. [ 1455.743767][T16525] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 1455.754372][T16525] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 1455.783396][T16525] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1455.815671][T16525] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1455.823716][T16525] usb 2-1: Product:  [ 1455.839107][T16525] usb 2-1: SerialNumber: ⮴靆㔯鹡瞓썥⠹긑߳湤꽖ࢦ陶ȳ൷粐豫櫞햽츔 [ 1456.105735][ T30] kauditd_printk_skb: 77 callbacks suppressed [ 1456.105760][ T30] audit: type=1800 audit(1773627723.667:3505): pid=24635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4983" name="SYSV00000000" dev="hugetlbfs" ino=13 res=0 errno=0 [ 1456.490387][T24645] xt_recent: hitcount (134217728) is larger than allowed maximum (65535) [ 1456.542585][T24647] syzkaller0: entered promiscuous mode [ 1456.569458][T24647] syzkaller0: entered allmulticast mode [ 1456.767555][T24647] tipc: Enabled bearer , priority 0 [ 1456.778640][T24655] FAULT_INJECTION: forcing a failure. [ 1456.778640][T24655] name failslab, interval 1, probability 0, space 0, times 0 [ 1456.793554][T24644] tipc: Resetting bearer [ 1456.799794][T24655] CPU: 0 UID: 0 PID: 24655 Comm: syz.5.4990 Tainted: G L syzkaller #0 PREEMPT(full) [ 1456.799826][T24655] Tainted: [L]=SOFTLOCKUP [ 1456.799834][T24655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1456.799846][T24655] Call Trace: [ 1456.799853][T24655] [ 1456.799862][T24655] dump_stack_lvl+0xe8/0x150 [ 1456.799896][T24655] should_fail_ex+0x412/0x560 [ 1456.799936][T24655] ? sock_alloc_inode+0x28/0xc0 [ 1456.799965][T24655] should_failslab+0xa8/0x100 [ 1456.799992][T24655] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 1456.800021][T24655] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1456.800046][T24655] sock_alloc_inode+0x28/0xc0 [ 1456.800072][T24655] alloc_inode+0x6a/0x1b0 [ 1456.800101][T24655] do_accept+0x13e/0x760 [ 1456.800136][T24655] ? __pfx_do_accept+0x10/0x10 [ 1456.800188][T24655] io_accept+0x310/0x7a0 [ 1456.800232][T24655] ? __pfx_io_accept+0x10/0x10 [ 1456.800262][T24655] ? __fget_files+0x2a/0x420 [ 1456.800288][T24655] ? __fget_files+0x3a0/0x420 [ 1456.800328][T24655] __io_issue_sqe+0x180/0x4b0 [ 1456.800348][T24655] ? io_file_get_normal+0xe9/0x310 [ 1456.800371][T24655] io_issue_sqe+0x164/0xf90 [ 1456.800401][T24655] io_submit_sqes+0xcb1/0x2400 [ 1456.800454][T24655] __se_sys_io_uring_enter+0x2cc/0x18c0 [ 1456.800479][T24655] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1456.800507][T24655] ? __fget_files+0x3a0/0x420 [ 1456.800539][T24655] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 1456.800559][T24655] ? fput+0xa0/0xd0 [ 1456.800584][T24655] ? ksys_write+0x242/0x270 [ 1456.800608][T24655] ? __pfx_ksys_write+0x10/0x10 [ 1456.800631][T24655] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 1456.800654][T24655] do_syscall_64+0x14d/0xf80 [ 1456.800673][T24655] ? trace_irq_disable+0x3b/0x150 [ 1456.800698][T24655] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1456.800717][T24655] ? clear_bhb_loop+0x40/0x90 [ 1456.800740][T24655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1456.800759][T24655] RIP: 0033:0x7f1822f9c799 [ 1456.800777][T24655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1456.800793][T24655] RSP: 002b:00007f1823df4028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1456.800814][T24655] RAX: ffffffffffffffda RBX: 00007f1823215fa0 RCX: 00007f1822f9c799 [ 1456.800827][T24655] RDX: 0000000000000000 RSI: 00000000000047ba RDI: 0000000000000004 [ 1456.800839][T24655] RBP: 00007f1823df4090 R08: 0000000000000000 R09: 0000000000000000 [ 1456.800850][T24655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1456.800861][T24655] R13: 00007f1823216038 R14: 00007f1823215fa0 R15: 00007f182333fa48 [ 1456.800901][T24655] [ 1457.223087][T24644] tipc: Disabling bearer [ 1457.273395][T24657] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4989'. [ 1457.636175][T16525] cdc_ncm 2-1:1.0: bind() failure [ 1457.713660][T16525] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 1457.731022][T16525] cdc_ncm 2-1:1.1: bind() failure [ 1457.772508][T16525] usb 2-1: USB disconnect, device number 57 [ 1457.905813][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1457.983305][T24678] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4994'. [ 1457.993419][T24678] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4994'. [ 1458.002962][T24678] openvswitch: netlink: Flow actions attr not present in new flow. [ 1458.306698][T24684] netlink: 'syz.3.4995': attribute type 3 has an invalid length. [ 1458.329315][T24684] netlink: 'syz.3.4995': attribute type 3 has an invalid length. [ 1458.360610][T24684] netlink: 'syz.3.4995': attribute type 3 has an invalid length. [ 1458.370233][T24684] netlink: 'syz.3.4995': attribute type 3 has an invalid length. [ 1458.385901][T24684] netlink: 'syz.3.4995': attribute type 3 has an invalid length. [ 1458.434739][T24684] netlink: 'syz.3.4995': attribute type 3 has an invalid length. [ 1458.453088][T24684] netlink: 'syz.3.4995': attribute type 3 has an invalid length. [ 1458.462298][T24684] netlink: 'syz.3.4995': attribute type 3 has an invalid length. [ 1458.473070][T24684] netlink: 'syz.3.4995': attribute type 3 has an invalid length. [ 1458.500416][T24685] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4995'. [ 1458.528880][T24684] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4995'. [ 1458.975741][T16524] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1459.127657][T16524] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1459.134903][T24697] mac80211_hwsim hwsim29 syzkaller0: left promiscuous mode [ 1459.143793][T24697] mac80211_hwsim hwsim29 syzkaller0: left allmulticast mode [ 1459.153545][T16524] usb 2-1: string descriptor 0 read error: -22 [ 1459.160017][T16524] usb 2-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice= 0.40 [ 1459.170594][T16524] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1459.625752][T16524] apple 0003:05AC:0224.0013: unknown main item tag 0x0 [ 1459.633019][T16524] apple 0003:05AC:0224.0013: unknown main item tag 0x0 [ 1459.641632][T16524] apple 0003:05AC:0224.0013: unknown main item tag 0x0 [ 1459.653040][T16524] apple 0003:05AC:0224.0013: unknown main item tag 0x0 [ 1459.661861][T16524] apple 0003:05AC:0224.0013: unknown main item tag 0x0 [ 1459.681622][T16524] apple 0003:05AC:0224.0013: unknown main item tag 0x0 [ 1459.692694][T16524] apple 0003:05AC:0224.0013: unknown main item tag 0x0 [ 1459.715172][T16524] apple 0003:05AC:0224.0013: unknown main item tag 0x0 [ 1459.760448][T16524] apple 0003:05AC:0224.0013: unknown main item tag 0x0 [ 1459.777767][T16524] apple 0003:05AC:0224.0013: unknown main item tag 0x0 [ 1459.833751][T24693] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4998'. [ 1459.907504][T19478] usb 6-1: new low-speed USB device number 44 using dummy_hcd [ 1459.946102][T16524] apple 0003:05AC:0224.0013: hidraw0: USB HID vff.7f Device [HID 05ac:0224] on usb-dummy_hcd.1-1/input0 [ 1460.025990][T16524] usb 2-1: USB disconnect, device number 58 [ 1460.069788][T19478] usb 6-1: No LPM exit latency info found, disabling LPM. [ 1460.079347][T19478] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 1460.090104][T19478] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 1460.112405][T24717] fido_id[24717]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1460.139362][T19478] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1460.149499][T19478] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1460.160183][T19478] usb 6-1: Product:  [ 1460.164442][T19478] usb 6-1: SerialNumber: ⮴靆㔯鹡瞓썥⠹긑߳湤꽖ࢦ陶ȳ൷粐豫櫞햽츔 [ 1460.429084][ T30] audit: type=1800 audit(1773627727.987:3506): pid=24711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.5004" name="SYSV00000000" dev="hugetlbfs" ino=4 res=0 errno=0 [ 1460.884115][ T30] audit: type=1326 audit(1773627728.437:3507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24726 comm="syz.0.5010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcd6f9c799 code=0x7ffc0000 [ 1460.941907][ T30] audit: type=1326 audit(1773627728.437:3508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24726 comm="syz.0.5010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fdcd6f9c799 code=0x7ffc0000 [ 1460.972202][T24733] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5008'. [ 1461.002294][T24733] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5008'. [ 1461.012264][T24733] openvswitch: netlink: Flow actions attr not present in new flow. [ 1461.148396][T24735] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1461.191440][ T30] audit: type=1326 audit(1773627728.437:3509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24726 comm="syz.0.5010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcd6f9c799 code=0x7ffc0000 [ 1461.265947][ T30] audit: type=1326 audit(1773627728.437:3510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24726 comm="syz.0.5010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7fdcd6f9c799 code=0x7ffc0000 [ 1461.327681][ T30] audit: type=1326 audit(1773627728.437:3511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24726 comm="syz.0.5010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcd6f9c799 code=0x7ffc0000 [ 1461.756740][ T30] audit: type=1326 audit(1773627728.437:3512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24726 comm="syz.0.5010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fdcd6f9c799 code=0x7ffc0000 [ 1461.821350][ T30] audit: type=1326 audit(1773627728.437:3513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24726 comm="syz.0.5010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcd6f9c799 code=0x7ffc0000 [ 1461.879118][ T30] audit: type=1326 audit(1773627728.437:3514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24726 comm="syz.0.5010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdcd6f9c799 code=0x7ffc0000 [ 1461.931991][ T30] audit: type=1326 audit(1773627728.447:3515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24726 comm="syz.0.5010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcd6f9c799 code=0x7ffc0000 [ 1461.978970][T16525] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1461.990315][ T30] audit: type=1326 audit(1773627728.447:3516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24726 comm="syz.0.5010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fdcd6f9c799 code=0x7ffc0000 [ 1462.057116][ T30] audit: type=1326 audit(1773627728.447:3517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24726 comm="syz.0.5010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcd6f9c799 code=0x7ffc0000 [ 1462.098619][ T30] audit: type=1326 audit(1773627728.447:3518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24726 comm="syz.0.5010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdcd6f9c799 code=0x7ffc0000 [ 1462.139990][T16525] usb 4-1: config 36 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 192, changing to 11 [ 1462.152353][T20614] wlan0: Trigger new scan to find an IBSS to join [ 1462.170876][T16525] usb 4-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1462.181268][T16525] usb 4-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1462.202934][T16525] usb 4-1: Manufacturer: syz [ 1462.213387][T16525] usb 4-1: SerialNumber: syz [ 1462.442211][T24745] netlink: 192 bytes leftover after parsing attributes in process `syz.3.5015'. [ 1462.668688][T24749] netlink: 64 bytes leftover after parsing attributes in process `syz.6.5017'. [ 1462.679824][T19478] cdc_ncm 6-1:1.0: bind() failure [ 1462.711163][T19478] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 1462.743717][T19478] cdc_ncm 6-1:1.1: bind() failure [ 1462.787802][T19478] usb 6-1: USB disconnect, device number 44 [ 1463.004642][T16525] usbhid 4-1:36.0: couldn't find an input interrupt endpoint [ 1463.036388][T16525] usb 4-1: USB disconnect, device number 36 [ 1463.135721][T19478] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1463.252052][T24763] FAULT_INJECTION: forcing a failure. [ 1463.252052][T24763] name failslab, interval 1, probability 0, space 0, times 0 [ 1463.276448][T24763] CPU: 0 UID: 0 PID: 24763 Comm: syz.1.5022 Tainted: G L syzkaller #0 PREEMPT(full) [ 1463.276483][T24763] Tainted: [L]=SOFTLOCKUP [ 1463.276490][T24763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1463.276502][T24763] Call Trace: [ 1463.276511][T24763] [ 1463.276520][T24763] dump_stack_lvl+0xe8/0x150 [ 1463.276553][T24763] should_fail_ex+0x412/0x560 [ 1463.276587][T24763] should_failslab+0xa8/0x100 [ 1463.276613][T24763] __kmalloc_cache_noprof+0x88/0x660 [ 1463.276637][T24763] ? ovs_ct_limit_cmd_set+0x2f7/0xb00 [ 1463.276660][T24763] ? __kmalloc_cache_noprof+0x15b/0x660 [ 1463.276686][T24763] ovs_ct_limit_cmd_set+0x2f7/0xb00 [ 1463.276725][T24763] genl_family_rcv_msg_doit+0x22a/0x330 [ 1463.276757][T24763] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1463.276793][T24763] ? bpf_lsm_capable+0x9/0x20 [ 1463.276819][T24763] ? security_capable+0x7e/0x2c0 [ 1463.276853][T24763] genl_rcv_msg+0x61c/0x7a0 [ 1463.276883][T24763] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1463.276904][T24763] ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10 [ 1463.276928][T24763] ? __lock_acquire+0x6b5/0x2cf0 [ 1463.276966][T24763] netlink_rcv_skb+0x232/0x4b0 [ 1463.276994][T24763] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1463.277019][T24763] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1463.277066][T24763] ? down_read+0x272/0x2e0 [ 1463.277087][T24763] ? genl_rcv+0xd/0x40 [ 1463.277111][T24763] genl_rcv+0x28/0x40 [ 1463.277131][T24763] netlink_unicast+0x80f/0x9b0 [ 1463.277166][T24763] ? __pfx_netlink_unicast+0x10/0x10 [ 1463.277195][T24763] ? netlink_sendmsg+0x650/0xb40 [ 1463.277227][T24763] ? skb_put+0x11b/0x210 [ 1463.277251][T24763] netlink_sendmsg+0x813/0xb40 [ 1463.277289][T24763] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1463.277322][T24763] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1463.277352][T24763] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1463.277378][T24763] ____sys_sendmsg+0x972/0x9f0 [ 1463.277410][T24763] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1463.277450][T24763] ? import_iovec+0x73/0xa0 [ 1463.277475][T24763] ___sys_sendmsg+0x2a5/0x360 [ 1463.277502][T24763] ? __pfx____sys_sendmsg+0x10/0x10 [ 1463.277564][T24763] ? __fget_files+0x2a/0x420 [ 1463.277591][T24763] ? __fget_files+0x3a0/0x420 [ 1463.277629][T24763] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1463.277656][T24763] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1463.277687][T24763] ? __pfx_ksys_write+0x10/0x10 [ 1463.277722][T24763] do_syscall_64+0x14d/0xf80 [ 1463.277742][T24763] ? trace_irq_disable+0x3b/0x150 [ 1463.277769][T24763] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1463.277789][T24763] ? clear_bhb_loop+0x40/0x90 [ 1463.277814][T24763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1463.277833][T24763] RIP: 0033:0x7f494639c799 [ 1463.277852][T24763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1463.277870][T24763] RSP: 002b:00007f4947249028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1463.277892][T24763] RAX: ffffffffffffffda RBX: 00007f4946615fa0 RCX: 00007f494639c799 [ 1463.277907][T24763] RDX: 000000000000c000 RSI: 00002000000000c0 RDI: 0000000000000007 [ 1463.277920][T24763] RBP: 00007f4947249090 R08: 0000000000000000 R09: 0000000000000000 [ 1463.277931][T24763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1463.277944][T24763] R13: 00007f4946616038 R14: 00007f4946615fa0 R15: 00007f494673fa48 [ 1463.277977][T24763] [ 1463.640038][T20614] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1463.675356][T19478] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1463.683380][T24767] mac80211_hwsim hwsim23 syzkaller0: entered promiscuous mode [ 1463.686418][T19478] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1463.694607][T24767] mac80211_hwsim hwsim23 syzkaller0: entered allmulticast mode [ 1463.705068][T19478] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1463.705099][T19478] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1463.756132][T19478] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1463.765425][T19478] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1463.774167][T19478] usb 6-1: Manufacturer: syz [ 1463.783233][T19478] usb 6-1: config 0 descriptor?? [ 1463.916625][T24771] netlink: 348 bytes leftover after parsing attributes in process `syz.1.5025'. [ 1464.016276][T24770] validate_nla: 44 callbacks suppressed [ 1464.016299][T24770] netlink: 'syz.1.5025': attribute type 10 has an invalid length. [ 1464.055790][T24770] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5025'. [ 1464.084622][T24770] dummy0: entered promiscuous mode [ 1464.123195][T24770] bridge0: port 3(dummy0) entered blocking state [ 1464.128717][T24773] FAULT_INJECTION: forcing a failure. [ 1464.128717][T24773] name failslab, interval 1, probability 0, space 0, times 0 [ 1464.147660][T24773] CPU: 0 UID: 0 PID: 24773 Comm: syz.3.5026 Tainted: G L syzkaller #0 PREEMPT(full) [ 1464.147687][T24773] Tainted: [L]=SOFTLOCKUP [ 1464.147692][T24773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1464.147699][T24773] Call Trace: [ 1464.147705][T24773] [ 1464.147711][T24773] dump_stack_lvl+0xe8/0x150 [ 1464.147733][T24773] should_fail_ex+0x412/0x560 [ 1464.147752][T24773] should_failslab+0xa8/0x100 [ 1464.147768][T24773] __kmalloc_cache_noprof+0x88/0x660 [ 1464.147783][T24773] ? sctp_add_bind_addr+0x8c/0x370 [ 1464.147801][T24773] sctp_add_bind_addr+0x8c/0x370 [ 1464.147819][T24773] sctp_copy_local_addr_list+0x314/0x4f0 [ 1464.147837][T24773] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1464.147853][T24773] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1464.147869][T24773] ? sctp_v6_is_any+0x64/0x80 [ 1464.147887][T24773] ? sctp_copy_one_addr+0x93/0x360 [ 1464.147905][T24773] sctp_bind_addr_copy+0xb3/0x3c0 [ 1464.147920][T24773] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1464.147936][T24773] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1464.147951][T24773] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1464.147967][T24773] ? __local_bh_enable_ip+0xd0/0x130 [ 1464.147981][T24773] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1464.147995][T24773] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1464.148012][T24773] sctp_sendmsg+0x1528/0x2c10 [ 1464.148032][T24773] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1464.148046][T24773] ? aa_sk_perm+0x6d5/0x900 [ 1464.148066][T24773] ? __pfx_aa_sk_perm+0x10/0x10 [ 1464.148083][T24773] ? sock_rps_record_flow+0x19/0x400 [ 1464.148098][T24773] ? inet_sendmsg+0x2f4/0x370 [ 1464.148113][T24773] ____sys_sendmsg+0x80a/0x9f0 [ 1464.148132][T24773] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1464.148150][T24773] ? import_iovec+0x73/0xa0 [ 1464.148165][T24773] ___sys_sendmsg+0x2a5/0x360 [ 1464.148181][T24773] ? __pfx____sys_sendmsg+0x10/0x10 [ 1464.148215][T24773] ? __fget_files+0x2a/0x420 [ 1464.148231][T24773] ? __fget_files+0x3a0/0x420 [ 1464.148253][T24773] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1464.148267][T24773] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1464.148286][T24773] ? __pfx_ksys_write+0x10/0x10 [ 1464.148305][T24773] do_syscall_64+0x14d/0xf80 [ 1464.148318][T24773] ? trace_irq_disable+0x3b/0x150 [ 1464.148336][T24773] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1464.148347][T24773] ? clear_bhb_loop+0x40/0x90 [ 1464.148361][T24773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1464.148373][T24773] RIP: 0033:0x7fd747f9c799 [ 1464.148385][T24773] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1464.148395][T24773] RSP: 002b:00007fd748daf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1464.148410][T24773] RAX: ffffffffffffffda RBX: 00007fd748215fa0 RCX: 00007fd747f9c799 [ 1464.148418][T24773] RDX: 0000000000008050 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1464.148426][T24773] RBP: 00007fd748daf090 R08: 0000000000000000 R09: 0000000000000000 [ 1464.148433][T24773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1464.148440][T24773] R13: 00007fd748216038 R14: 00007fd748215fa0 R15: 00007fd74833fa48 [ 1464.148458][T24773] [ 1464.485788][T24770] bridge0: port 3(dummy0) entered disabled state [ 1464.494016][T24770] dummy0: entered allmulticast mode [ 1464.559294][T19478] appleir 0003:05AC:8243.0014: item fetching failed at offset 0/1 [ 1464.567754][T19478] appleir 0003:05AC:8243.0014: parse failed [ 1464.573880][T19478] appleir 0003:05AC:8243.0014: probe with driver appleir failed with error -22 [ 1464.990485][T24784] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5027'. [ 1465.002373][T24784] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5027'. [ 1465.011576][T24784] openvswitch: netlink: Flow actions attr not present in new flow. [ 1465.179211][ T77] wlan0: Trigger new scan to find an IBSS to join [ 1465.233522][T24788] netlink: 212048 bytes leftover after parsing attributes in process `syz.0.5031'. [ 1465.313123][T16525] usb 6-1: USB disconnect, device number 45 [ 1465.349332][T24788] vlan2: entered promiscuous mode [ 1465.374345][T24788] syz_tun: entered promiscuous mode [ 1465.376114][T16524] usb 2-1: new low-speed USB device number 59 using dummy_hcd [ 1465.455170][T24790] xt_nfacct: accounting object `syz1' does not exist [ 1465.601435][T16524] usb 2-1: No LPM exit latency info found, disabling LPM. [ 1465.661447][T16524] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 1465.697828][T16524] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 1465.763945][T16524] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1465.796575][T16524] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1465.840915][T16524] usb 2-1: Product:  [ 1465.870694][T16524] usb 2-1: SerialNumber: ⮴靆㔯鹡瞓썥⠹긑߳湤꽖ࢦ陶ȳ൷粐豫櫞햽츔 [ 1466.011181][T24799] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5035'. [ 1466.212811][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 1466.212833][ T30] audit: type=1800 audit(1773627733.787:3530): pid=24786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5028" name="SYSV00000000" dev="hugetlbfs" ino=14 res=0 errno=0 [ 1466.705396][T24811] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5039'. [ 1466.768737][ T30] audit: type=1326 audit(1773627734.347:3531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24812 comm="syz.3.5040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd747f9c799 code=0x7ffc0000 [ 1466.793353][ T30] audit: type=1326 audit(1773627734.367:3532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24812 comm="syz.3.5040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd747f9c799 code=0x7ffc0000 [ 1466.849641][T24813] loop5: detected capacity change from 0 to 8 [ 1466.869864][ T30] audit: type=1326 audit(1773627734.377:3533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24812 comm="syz.3.5040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd747f9c799 code=0x7ffc0000 [ 1466.924775][ T30] audit: type=1326 audit(1773627734.397:3535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24812 comm="syz.3.5040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd747f5cfce code=0x7ffc0000 [ 1466.949133][ T30] audit: type=1326 audit(1773627734.397:3536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24812 comm="syz.3.5040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd747f9c799 code=0x7ffc0000 [ 1466.980247][ T30] audit: type=1326 audit(1773627734.397:3537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24812 comm="syz.3.5040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd747f9c799 code=0x7ffc0000 [ 1467.005884][ T30] audit: type=1326 audit(1773627734.377:3534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24812 comm="syz.3.5040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd747f9c799 code=0x7ffc0000 [ 1467.029699][T24813] Dev loop5: unable to read RDB block 8 [ 1467.035970][T24813] loop5: unable to read partition table [ 1467.041929][T24813] loop5: partition table beyond EOD, truncated [ 1467.049149][T24813] loop_reread_partitions: partition scan of loop5 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 1467.062866][ T30] audit: type=1326 audit(1773627734.427:3538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24812 comm="syz.3.5040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd747f9c799 code=0x7ffc0000 [ 1467.090777][ T30] audit: type=1326 audit(1773627734.427:3539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24812 comm="syz.3.5040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd747f9c799 code=0x7ffc0000 [ 1467.168159][T16520] usb 6-1: new full-speed USB device number 46 using dummy_hcd [ 1467.245969][ T796] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1467.328166][T16520] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1467.337367][T16520] usb 6-1: not running at top speed; connect to a high speed hub [ 1467.346911][T16520] usb 6-1: config 9 has an invalid interface number: 175 but max is 0 [ 1467.356737][T16520] usb 6-1: config 9 has no interface number 0 [ 1467.362901][T16520] usb 6-1: config 9 interface 175 has no altsetting 0 [ 1467.372086][T16520] usb 6-1: New USB device found, idVendor=05ac, idProduct=0252, bcdDevice=3b.fe [ 1467.381509][T16520] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1467.390040][T16520] usb 6-1: Product: syz [ 1467.394423][T16520] usb 6-1: Manufacturer: syz [ 1467.399248][T16520] usb 6-1: SerialNumber: syz [ 1467.414823][ T796] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1467.429006][ T796] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1467.440597][ T796] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b27, bcdDevice= 0.40 [ 1467.450585][ T796] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1467.460725][ T796] usb 4-1: Product: syz [ 1467.464935][ T796] usb 4-1: Manufacturer: syz [ 1467.470819][ T796] usb 4-1: SerialNumber: syz [ 1467.621284][T16520] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:9.175/input/input49 [ 1467.639496][ T5180] bcm5974 6-1:9.175: could not read from device [ 1467.649603][T16520] usb 6-1: USB disconnect, device number 46 [ 1467.704470][T24813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1467.716047][T24813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1467.934987][T16524] cdc_ncm 2-1:1.0: bind() failure [ 1467.952411][T16524] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 1467.959671][T16524] cdc_ncm 2-1:1.1: bind() failure [ 1467.973838][ T796] usbhid 4-1:1.0: can't add hid device: -71 [ 1467.996204][ T796] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 1468.006059][T16524] usb 2-1: USB disconnect, device number 59 [ 1468.032106][ T796] usb 4-1: USB disconnect, device number 37 [ 1468.135758][T11420] wlan0: Trigger new scan to find an IBSS to join [ 1468.189590][T24824] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5044'. [ 1468.232799][T24824] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5044'. [ 1468.251769][T24824] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5044'. [ 1468.452898][T24834] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5047'. [ 1468.463134][T24834] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5047'. [ 1468.473935][T24834] openvswitch: netlink: Flow actions attr not present in new flow. [ 1468.484375][T11420] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1468.995454][T24843] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5049'. [ 1469.236993][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1469.716193][T16520] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1469.885827][T16520] usb 6-1: Using ep0 maxpacket: 32 [ 1469.907054][T16520] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1469.922540][T16520] usb 6-1: config 0 has no interface number 0 [ 1469.936252][T16520] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1469.965365][T16520] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1469.975205][T16520] usb 6-1: Product: syz [ 1469.981427][T16520] usb 6-1: Manufacturer: syz [ 1470.005700][T16520] usb 6-1: SerialNumber: syz [ 1470.026749][T16520] usb 6-1: config 0 descriptor?? [ 1470.073423][T16520] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1470.093679][T16520] usb 6-1: selecting invalid altsetting 1 [ 1470.099932][T16520] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1470.147679][T16520] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1470.159601][T16520] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1470.177156][T16520] usb 6-1: media controller created [ 1470.201108][T16520] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1470.675705][T16525] usb 4-1: new low-speed USB device number 38 using dummy_hcd [ 1470.851475][T16525] usb 4-1: No LPM exit latency info found, disabling LPM. [ 1470.863626][T16525] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 1470.887058][T16525] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 1471.019046][T16525] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1471.028374][T16525] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1471.043456][T16525] usb 4-1: Product:  [ 1471.054456][T16525] usb 4-1: Manufacturer: ➰⢴堳榘厮ʮ [ 1471.070137][T16525] usb 4-1: SerialNumber: ⮴靆㔯鹡瞓썥⠹긑߳湤꽖ࢦ陶ȳ൷粐豫櫞햽츔 [ 1471.333893][ T30] kauditd_printk_skb: 146 callbacks suppressed [ 1471.333915][ T30] audit: type=1800 audit(1773627738.907:3686): pid=24860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5053" name="SYSV00000000" dev="hugetlbfs" ino=4 res=0 errno=0 [ 1471.382089][T16520] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1471.417566][T16520] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1471.794510][T24877] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1472.453364][ T796] usb 6-1: USB disconnect, device number 47 [ 1472.768717][T24885] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5061'. [ 1472.779363][T24885] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5061'. [ 1472.788360][T24885] openvswitch: netlink: Flow actions attr not present in new flow. [ 1473.178600][T16525] cdc_ncm 4-1:1.0: bind() failure [ 1473.228523][T16525] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1473.245953][T16525] cdc_ncm 4-1:1.1: bind() failure [ 1473.283686][T16525] usb 4-1: USB disconnect, device number 38 [ 1473.679453][ T30] audit: type=1326 audit(1773627741.237:3687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24893 comm="syz.1.5064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494639c799 code=0x7ffc0000 [ 1473.743088][ T30] audit: type=1326 audit(1773627741.237:3688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24893 comm="syz.1.5064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f494639c799 code=0x7ffc0000 [ 1473.837956][ T30] audit: type=1326 audit(1773627741.237:3689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24893 comm="syz.1.5064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494639c799 code=0x7ffc0000 [ 1473.870768][ T30] audit: type=1326 audit(1773627741.237:3690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24893 comm="syz.1.5064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494639c799 code=0x7ffc0000 [ 1473.910242][ T30] audit: type=1326 audit(1773627741.237:3691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24893 comm="syz.1.5064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f494639c799 code=0x7ffc0000 [ 1473.994360][ T30] audit: type=1326 audit(1773627741.247:3692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24893 comm="syz.1.5064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494639c799 code=0x7ffc0000 [ 1474.064754][ T30] audit: type=1326 audit(1773627741.247:3693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24893 comm="syz.1.5064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f494639c799 code=0x7ffc0000 [ 1474.129215][ T30] audit: type=1326 audit(1773627741.247:3694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24893 comm="syz.1.5064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494639c799 code=0x7ffc0000 [ 1474.159409][ T30] audit: type=1326 audit(1773627741.247:3695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24893 comm="syz.1.5064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f494639c799 code=0x7ffc0000 [ 1474.705791][T16524] usb 6-1: new full-speed USB device number 48 using dummy_hcd [ 1474.874229][T16524] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1474.895664][T16524] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 1474.915661][T16524] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 8960, setting to 64 [ 1474.941321][T16524] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1474.965788][T16524] usb 6-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1474.985726][T16524] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1475.004100][T16524] usb 6-1: Product: syz [ 1475.017897][T16524] usb 6-1: Manufacturer: syz [ 1475.028300][T16524] usb 6-1: SerialNumber: syz [ 1475.046748][T16524] usb 6-1: config 0 descriptor?? [ 1475.279401][T24931] fuse: Unknown parameter '0x000000000000000800000000000000000000' [ 1475.524900][T24938] netlink: 'syz.1.5078': attribute type 2 has an invalid length. [ 1475.542095][T24938] !: entered promiscuous mode [ 1477.384896][T16524] usb 6-1: USB disconnect, device number 48 [ 1478.236823][T24970] mac80211_hwsim hwsim21 syzkaller0: left promiscuous mode [ 1478.261717][T24970] mac80211_hwsim hwsim21 syzkaller0: left allmulticast mode [ 1478.398719][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 1478.398741][ T30] audit: type=1326 audit(1773627745.977:3712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24973 comm="syz.1.5090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494639c799 code=0x7ffc0000 [ 1478.404015][T24975] loop5: detected capacity change from 0 to 8 [ 1478.404916][ T30] audit: type=1326 audit(1773627745.977:3713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24973 comm="syz.1.5090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494639c799 code=0x7ffc0000 [ 1478.458637][ T30] audit: type=1326 audit(1773627745.977:3714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24973 comm="syz.1.5090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494639c799 code=0x7ffc0000 [ 1478.481924][ T30] audit: type=1326 audit(1773627745.977:3715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24973 comm="syz.1.5090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f494635cfce code=0x7ffc0000 [ 1478.720597][ T36] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1478.768978][T24975] Dev loop5: unable to read RDB block 8 [ 1478.769842][ T30] audit: type=1326 audit(1773627745.977:3716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24973 comm="syz.1.5090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494639c799 code=0x7ffc0000 [ 1478.798436][ T30] audit: type=1326 audit(1773627745.977:3717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24973 comm="syz.1.5090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494639c799 code=0x7ffc0000 [ 1478.824004][ T30] audit: type=1326 audit(1773627745.977:3718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24973 comm="syz.1.5090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494639c799 code=0x7ffc0000 [ 1478.846907][T24975] loop5: unable to read partition table [ 1478.847304][ T30] audit: type=1326 audit(1773627745.977:3719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24973 comm="syz.1.5090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f494639c799 code=0x7ffc0000 [ 1478.852794][T24975] loop5: partition table beyond EOD, truncated [ 1478.931017][ T30] audit: type=1326 audit(1773627745.977:3720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24973 comm="syz.1.5090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494639c799 code=0x7ffc0000 [ 1478.954031][T24975] loop_reread_partitions: partition scan of loop5 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 1479.026139][ T30] audit: type=1326 audit(1773627745.977:3721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24973 comm="syz.1.5090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494639c799 code=0x7ffc0000 [ 1479.172047][ T5195] Dev loop5: unable to read RDB block 8 [ 1479.182051][ T5195] loop5: unable to read partition table [ 1479.188149][ T5195] loop5: partition table beyond EOD, truncated [ 1479.399420][T24997] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1479.645708][T16520] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1479.939451][T16520] usb 4-1: device descriptor read/64, error -71 [ 1480.185726][T16520] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1480.318521][T25028] loop5: detected capacity change from 0 to 7 [ 1480.320602][T16520] usb 4-1: device descriptor read/64, error -71 [ 1480.335291][T25028] Dev loop5: unable to read RDB block 7 [ 1480.346043][T25028] loop5: unable to read partition table [ 1480.356193][T25028] loop5: partition table beyond EOD, truncated [ 1480.522284][T25032] netlink: 'syz.5.5110': attribute type 3 has an invalid length. [ 1480.530701][T25032] netlink: 'syz.5.5110': attribute type 3 has an invalid length. [ 1480.559028][T25032] netlink: 'syz.5.5110': attribute type 3 has an invalid length. [ 1480.566261][T16520] usb usb4-port1: attempt power cycle [ 1480.572142][T25032] netlink: 'syz.5.5110': attribute type 3 has an invalid length. [ 1480.581517][T25032] netlink: 'syz.5.5110': attribute type 3 has an invalid length. [ 1480.589496][T25032] netlink: 'syz.5.5110': attribute type 3 has an invalid length. [ 1480.598085][T25028] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1480.598754][T25032] netlink: 'syz.5.5110': attribute type 3 has an invalid length. [ 1480.775008][T25032] netlink: 'syz.5.5110': attribute type 3 has an invalid length. [ 1480.783251][T25032] netlink: 'syz.5.5110': attribute type 3 has an invalid length. [ 1480.791619][T25032] netlink: 'syz.5.5110': attribute type 3 has an invalid length. [ 1480.799974][T25032] netlink: 'syz.5.5110': attribute type 3 has an invalid length. [ 1480.855384][T25033] lo: Caught tx_queue_len zero misconfig [ 1480.898526][T25033] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5110'. [ 1480.919830][T25036] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5110'. [ 1480.996007][T16520] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1481.293689][T16520] usb 4-1: device descriptor read/8, error -71 [ 1481.631838][T25045] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1481.646835][T16520] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1481.679344][T16520] usb 4-1: device descriptor read/8, error -71 [ 1481.692373][T25045] mac80211_hwsim hwsim35 syzkaller0: entered promiscuous mode [ 1481.701107][T25045] mac80211_hwsim hwsim35 syzkaller0: entered allmulticast mode [ 1481.766825][T25045] tipc: Enabled bearer , priority 0 [ 1481.824722][T16520] usb usb4-port1: unable to enumerate USB device [ 1481.936470][T25048] mac80211_hwsim hwsim21 syzkaller0: entered promiscuous mode [ 1481.944005][T25048] mac80211_hwsim hwsim21 syzkaller0: entered allmulticast mode [ 1481.969341][T25047] tipc: Enabling of bearer rejected, already enabled [ 1482.552166][T25071] FAULT_INJECTION: forcing a failure. [ 1482.552166][T25071] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1482.565378][T25071] CPU: 0 UID: 0 PID: 25071 Comm: syz.3.5124 Tainted: G L syzkaller #0 PREEMPT(full) [ 1482.565406][T25071] Tainted: [L]=SOFTLOCKUP [ 1482.565413][T25071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1482.565424][T25071] Call Trace: [ 1482.565433][T25071] [ 1482.565441][T25071] dump_stack_lvl+0xe8/0x150 [ 1482.565467][T25071] should_fail_ex+0x412/0x560 [ 1482.565486][T25071] _copy_to_user+0x31/0xb0 [ 1482.565501][T25071] simple_read_from_buffer+0xe1/0x170 [ 1482.565520][T25071] proc_fail_nth_read+0x1bb/0x230 [ 1482.565545][T25071] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1482.565574][T25071] ? rw_verify_area+0x2a6/0x4d0 [ 1482.565593][T25071] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1482.565620][T25071] vfs_read+0x20c/0xa70 [ 1482.565638][T25071] ? fdget_pos+0x246/0x320 [ 1482.565668][T25071] ? __pfx___mutex_lock+0x10/0x10 [ 1482.565700][T25071] ? __pfx_vfs_read+0x10/0x10 [ 1482.565723][T25071] ? __fget_files+0x2a/0x420 [ 1482.565754][T25071] ? __fget_files+0x3a0/0x420 [ 1482.565780][T25071] ? __fget_files+0x2a/0x420 [ 1482.565816][T25071] ksys_read+0x150/0x270 [ 1482.565840][T25071] ? __pfx_ksys_read+0x10/0x10 [ 1482.565873][T25071] do_syscall_64+0x14d/0xf80 [ 1482.565894][T25071] ? trace_irq_disable+0x3b/0x150 [ 1482.565922][T25071] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1482.565942][T25071] ? clear_bhb_loop+0x40/0x90 [ 1482.565965][T25071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1482.565983][T25071] RIP: 0033:0x7fd747f5cfce [ 1482.566002][T25071] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1482.566019][T25071] RSP: 002b:00007fd748daefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1482.566038][T25071] RAX: ffffffffffffffda RBX: 00007fd748daf6c0 RCX: 00007fd747f5cfce [ 1482.566051][T25071] RDX: 000000000000000f RSI: 00007fd748daf0a0 RDI: 0000000000000004 [ 1482.566064][T25071] RBP: 00007fd748daf090 R08: 0000000000000000 R09: 0000000000000000 [ 1482.566076][T25071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1482.566088][T25071] R13: 00007fd748216038 R14: 00007fd748215fa0 R15: 00007fd74833fa48 [ 1482.566121][T25071] [ 1482.784864][T16520] tipc: Node number set to 845882419 [ 1482.851564][ T5913] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1483.005950][ T5913] usb 2-1: Using ep0 maxpacket: 8 [ 1483.014464][ T5913] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 1483.023799][ T5913] usb 2-1: config 0 has no interface number 0 [ 1483.032013][ T5913] usb 2-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1483.043668][ T5913] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1483.064496][ T5913] usb 2-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 1483.086028][ T5913] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1483.104164][ T5913] usb 2-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1483.134257][T25083] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1483.216374][T25084] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1483.306746][ T5913] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 1483.317035][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1483.329496][ T5913] usb 2-1: Product: syz [ 1483.340679][ T5913] usb 2-1: Manufacturer: syz [ 1483.426038][ T5913] usb 2-1: SerialNumber: syz [ 1483.462544][ T5913] usb 2-1: config 0 descriptor?? [ 1483.681679][ T5913] iowarrior 2-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 1484.058971][ T796] usb 2-1: USB disconnect, device number 60 [ 1484.543411][T25100] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5135'. [ 1484.593657][T25105] mac80211_hwsim hwsim29 syzkaller0: entered promiscuous mode [ 1484.601776][T25105] mac80211_hwsim hwsim29 syzkaller0: entered allmulticast mode [ 1484.614253][T25105] tipc: Enabling of bearer rejected, already enabled [ 1484.794322][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.804010][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.095750][T16520] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1485.206319][ T796] usb 6-1: new full-speed USB device number 49 using dummy_hcd [ 1485.305771][T16520] usb 4-1: Using ep0 maxpacket: 32 [ 1485.318799][T16520] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1485.330248][T16520] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1485.342218][T16520] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1485.359425][T16520] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1485.367377][ T796] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1485.438633][T16520] usb 4-1: config 0 descriptor?? [ 1485.468078][T16520] hub 4-1:0.0: USB hub found [ 1485.497426][T25131] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5144'. [ 1485.564292][ T796] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1485.603871][ T796] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1485.687312][T25115] netlink: 5 bytes leftover after parsing attributes in process `syz.3.5139'. [ 1485.706204][ T796] usb 6-1: config 0 descriptor?? [ 1485.718470][T25115] .30XD: renamed from gretap0 (while UP) [ 1485.749049][T25115] .30XD: entered allmulticast mode [ 1485.755090][T25115] A link change request failed with some changes committed already. Interface .30XD may have been left with an inconsistent configuration, please check. [ 1485.771915][T16520] hub 4-1:0.0: config failed, can't read hub descriptor (err -90) [ 1486.042481][T25115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1486.131101][ T796] hid_parser_main: 4007 callbacks suppressed [ 1486.131127][ T796] elan 0003:04F3:0755.0015: unknown main item tag 0x0 [ 1486.257220][ T796] elan 0003:04F3:0755.0015: unknown main item tag 0x0 [ 1486.265710][ T796] elan 0003:04F3:0755.0015: unknown main item tag 0x0 [ 1486.272627][ T796] elan 0003:04F3:0755.0015: unknown main item tag 0x0 [ 1486.279747][ T796] elan 0003:04F3:0755.0015: unknown main item tag 0x0 [ 1486.350799][ T796] elan 0003:04F3:0755.0015: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0 [ 1486.374994][T25115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1487.871267][T25148] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5148'. [ 1487.914221][T16520] usbhid 4-1:0.0: can't add hid device: -71 [ 1487.920350][T16520] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1487.991699][T16524] usb 6-1: USB disconnect, device number 49 [ 1488.076455][T16520] usb 4-1: USB disconnect, device number 43 [ 1488.355001][T25167] Invalid logical block size (1380209483) [ 1488.812521][T25179] validate_nla: 33 callbacks suppressed [ 1488.812543][T25179] netlink: 'syz.0.5158': attribute type 1 has an invalid length. [ 1488.910269][T25179] bond9: entered promiscuous mode [ 1489.001630][T25179] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1489.006610][ T30] kauditd_printk_skb: 338 callbacks suppressed [ 1489.006628][ T30] audit: type=1326 audit(1773627756.587:4060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25185 comm="syz.3.5161" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd747f9c799 code=0x0 [ 1489.057538][T25179] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5158'. [ 1489.083713][T25179] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5158'. [ 1489.793517][T25179] bond9: (slave bridge9): making interface the new active one [ 1489.793556][T25179] bridge9: entered promiscuous mode [ 1489.795043][T25179] bond9: (slave bridge9): Enslaving as an active interface with an up link [ 1490.128815][T25194] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1514) ! [ 1490.128943][T25194] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5163'. [ 1490.184750][T25190] netlink: 'syz.6.5162': attribute type 2 has an invalid length. [ 1490.465766][T16520] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 1490.581512][T25204] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1490.712199][T16520] usb 4-1: config 5 has an invalid interface number: 123 but max is 0 [ 1490.731688][T16520] usb 4-1: config 5 has no interface number 0 [ 1490.746230][T16520] usb 4-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 1490.763903][T16520] usb 4-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid maxpacket 26656, setting to 64 [ 1490.796703][T16520] usb 4-1: config 5 interface 123 has no altsetting 0 [ 1490.836047][T16520] usb 4-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 1490.848167][T16520] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1490.858369][T16520] usb 4-1: Product: syz [ 1490.867793][T16520] usb 4-1: Manufacturer: syz [ 1490.876935][T16520] usb 4-1: SerialNumber: syz [ 1491.030983][T25212] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5170'. [ 1491.041238][T25211] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5169'. [ 1491.369296][T25218] loop5: detected capacity change from 0 to 7 [ 1491.378985][T25218] Dev loop5: unable to read RDB block 7 [ 1491.393089][T25218] loop5: unable to read partition table [ 1491.406987][T25218] loop5: partition table beyond EOD, truncated [ 1491.429874][T25218] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1491.758154][T25229] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1514) ! [ 1491.797661][T25229] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5175'. [ 1492.199153][T25235] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5177'. [ 1493.256900][T16520] comedi comedi5: driver 'ni6501' has successfully auto-configured 'ni6501'. [ 1493.278664][T16520] usb 4-1: USB disconnect, device number 44 [ 1493.590113][T25257] binder: BINDER_SET_CONTEXT_MGR already set [ 1493.598088][T25257] binder: 25256:25257 ioctl 4018620d 200000000100 returned -16 [ 1493.616376][T25257] binder: BINDER_SET_CONTEXT_MGR already set [ 1493.622512][T25257] binder: 25256:25257 ioctl 4018620d 200000004a80 returned -16 [ 1493.632158][T25259] FAULT_INJECTION: forcing a failure. [ 1493.632158][T25259] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1493.663586][T25259] CPU: 0 UID: 0 PID: 25259 Comm: syz.0.5186 Tainted: G L syzkaller #0 PREEMPT(full) [ 1493.663630][T25259] Tainted: [L]=SOFTLOCKUP [ 1493.663638][T25259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1493.663649][T25259] Call Trace: [ 1493.663658][T25259] [ 1493.663667][T25259] dump_stack_lvl+0xe8/0x150 [ 1493.663701][T25259] should_fail_ex+0x412/0x560 [ 1493.663734][T25259] _copy_to_user+0x31/0xb0 [ 1493.663758][T25259] move_addr_to_user+0x118/0x1e0 [ 1493.663790][T25259] ____sys_recvmsg+0x245/0x4a0 [ 1493.663822][T25259] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1493.663860][T25259] ? import_iovec+0x73/0xa0 [ 1493.663885][T25259] ___sys_recvmsg+0x215/0x590 [ 1493.663905][T25259] ? __lock_acquire+0x6b5/0x2cf0 [ 1493.663935][T25259] ? __pfx____sys_recvmsg+0x10/0x10 [ 1493.663993][T25259] do_recvmmsg+0x334/0x800 [ 1493.664024][T25259] ? __pfx_do_recvmmsg+0x10/0x10 [ 1493.664058][T25259] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1493.664098][T25259] __x64_sys_recvmmsg+0x198/0x250 [ 1493.664123][T25259] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1493.664158][T25259] do_syscall_64+0x14d/0xf80 [ 1493.664178][T25259] ? trace_irq_disable+0x3b/0x150 [ 1493.664204][T25259] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1493.664223][T25259] ? clear_bhb_loop+0x40/0x90 [ 1493.664246][T25259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1493.664266][T25259] RIP: 0033:0x7fdcd6f9c799 [ 1493.664284][T25259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1493.664301][T25259] RSP: 002b:00007fdcd7e8e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1493.664323][T25259] RAX: ffffffffffffffda RBX: 00007fdcd7215fa0 RCX: 00007fdcd6f9c799 [ 1493.664338][T25259] RDX: 0000000000000048 RSI: 00002000000004c0 RDI: 0000000000000003 [ 1493.664351][T25259] RBP: 00007fdcd7e8e090 R08: 0000000000000000 R09: 0000000000000000 [ 1493.664362][T25259] R10: 000000000000820b R11: 0000000000000246 R12: 0000000000000001 [ 1493.664375][T25259] R13: 00007fdcd7216038 R14: 00007fdcd7215fa0 R15: 00007fdcd733fa48 [ 1493.664407][T25259] [ 1493.938488][T19478] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1493.984452][T25262] vlan2: entered promiscuous mode [ 1493.999340][T25262] bridge0: port 1(hsr0) entered blocking state [ 1494.006521][T25262] bridge0: port 1(hsr0) entered disabled state [ 1494.023294][T25262] hsr0: entered allmulticast mode [ 1494.039174][T25262] hsr_slave_0: entered allmulticast mode [ 1494.087448][T25262] hsr_slave_1: entered allmulticast mode [ 1494.133611][T25266] netlink: 'syz.0.5188': attribute type 3 has an invalid length. [ 1494.171197][T25262] hsr0: entered promiscuous mode [ 1494.188698][T19478] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1494.199563][T19478] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1494.209438][T19478] usb 2-1: Product: syz [ 1494.211633][T25262] bridge0: port 1(hsr0) entered blocking state [ 1494.215891][T19478] usb 2-1: Manufacturer: syz [ 1494.222189][T25262] bridge0: port 1(hsr0) entered forwarding state [ 1494.252520][T19478] usb 2-1: SerialNumber: syz [ 1494.256539][T25270] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1514) ! [ 1494.266103][T25264] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5187'. [ 1494.550467][T25273] FAULT_INJECTION: forcing a failure. [ 1494.550467][T25273] name failslab, interval 1, probability 0, space 0, times 0 [ 1494.578561][T19478] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1494.585845][T25273] CPU: 1 UID: 0 PID: 25273 Comm: syz.3.5190 Tainted: G L syzkaller #0 PREEMPT(full) [ 1494.585875][T25273] Tainted: [L]=SOFTLOCKUP [ 1494.585882][T25273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1494.585892][T25273] Call Trace: [ 1494.585899][T25273] [ 1494.585907][T25273] dump_stack_lvl+0xe8/0x150 [ 1494.585937][T25273] should_fail_ex+0x412/0x560 [ 1494.585967][T25273] should_failslab+0xa8/0x100 [ 1494.585988][T25273] ? __kernfs_new_node+0xe9/0x8e0 [ 1494.586013][T25273] kmem_cache_alloc_noprof+0x87/0x650 [ 1494.586029][T25273] ? __lock_acquire+0x6b5/0x2cf0 [ 1494.586058][T25273] __kernfs_new_node+0xe9/0x8e0 [ 1494.586088][T25273] ? __pfx___kernfs_new_node+0x10/0x10 [ 1494.586112][T25273] ? kernfs_root+0x1c/0x230 [ 1494.586141][T25273] ? kernfs_root+0x1c/0x230 [ 1494.586162][T25273] ? kernfs_root+0x1c/0x230 [ 1494.586183][T25273] ? kernfs_root+0x1c/0x230 [ 1494.586210][T25273] kernfs_new_node+0x102/0x210 [ 1494.586238][T25273] __kernfs_create_file+0x4b/0x2e0 [ 1494.586260][T25273] sysfs_add_file_mode_ns+0x238/0x300 [ 1494.586289][T25273] internal_create_group+0x673/0x1180 [ 1494.586326][T25273] ? __pfx_internal_create_group+0x10/0x10 [ 1494.586348][T25273] ? kernfs_add_one+0x477/0x5c0 [ 1494.586376][T25273] ? up_write+0x1ab/0x410 [ 1494.586403][T25273] sysfs_create_groups+0x59/0x120 [ 1494.586430][T25273] device_add_attrs+0x13b/0x5b0 [ 1494.586455][T25273] ? __pfx_device_add_attrs+0x10/0x10 [ 1494.586472][T25273] ? kobject_put+0x516/0x560 [ 1494.586498][T25273] ? device_add_class_symlinks+0x21f/0x240 [ 1494.586522][T25273] device_add+0x496/0xb70 [ 1494.586546][T25273] input_register_device+0x9d3/0x1160 [ 1494.586573][T25273] ? input_ff_create+0x235/0x300 [ 1494.586595][T25273] uinput_create_device+0x422/0x670 [ 1494.586624][T25273] uinput_ioctl_handler+0x417/0x14a0 [ 1494.586649][T25273] ? __pfx_uinput_ioctl_handler+0x10/0x10 [ 1494.586678][T25273] ? __fget_files+0x2a/0x420 [ 1494.586701][T25273] ? __fget_files+0x3a0/0x420 [ 1494.586729][T25273] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1494.586751][T25273] ? __pfx_uinput_ioctl+0x10/0x10 [ 1494.586769][T25273] __se_sys_ioctl+0xfc/0x170 [ 1494.586792][T25273] do_syscall_64+0x14d/0xf80 [ 1494.586810][T25273] ? trace_irq_disable+0x3b/0x150 [ 1494.586832][T25273] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1494.586850][T25273] ? clear_bhb_loop+0x40/0x90 [ 1494.586871][T25273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1494.586887][T25273] RIP: 0033:0x7fd747f9c799 [ 1494.586905][T25273] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1494.586919][T25273] RSP: 002b:00007fd748daf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1494.586939][T25273] RAX: ffffffffffffffda RBX: 00007fd748215fa0 RCX: 00007fd747f9c799 [ 1494.586952][T25273] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 1494.586963][T25273] RBP: 00007fd748daf090 R08: 0000000000000000 R09: 0000000000000000 [ 1494.586974][T25273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1494.586985][T25273] R13: 00007fd748216038 R14: 00007fd748215fa0 R15: 00007fd74833fa48 [ 1494.587014][T25273] [ 1494.780432][ C0] [ 1494.780442][ C0] ============================================ [ 1494.780448][ C0] WARNING: possible recursive locking detected [ 1494.780454][ C0] syzkaller #0 Tainted: G L [ 1494.780462][ C0] -------------------------------------------- [ 1494.780466][ C0] kworker/0:10/19478 is trying to acquire lock: [ 1494.780473][ C0] ffff88803551cf70 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 1494.780510][ C0] [ 1494.780510][ C0] but task is already holding lock: [ 1494.780515][ C0] ffff888055eb6f70 (&hsr->seqnr_lock){+.-.}-{3:3}, at: send_hsr_supervision_frame+0x380/0xcb0 [ 1494.780544][ C0] [ 1494.780544][ C0] other info that might help us debug this: [ 1494.780549][ C0] Possible unsafe locking scenario: [ 1494.780549][ C0] [ 1494.780553][ C0] CPU0 [ 1494.780556][ C0] ---- [ 1494.780559][ C0] lock(&hsr->seqnr_lock); [ 1494.780568][ C0] lock(&hsr->seqnr_lock); [ 1494.780577][ C0] [ 1494.780577][ C0] *** DEADLOCK *** [ 1494.780577][ C0] [ 1494.780580][ C0] May be due to missing lock nesting notation [ 1494.780580][ C0] [ 1494.780585][ C0] 15 locks held by kworker/0:10/19478: [ 1494.780592][ C0] #0: ffff888021ecf548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 1494.780624][ C0] #1: ffffc900035a7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 1494.780654][ C0] #2: ffff888029c88198 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 1494.780699][ C0] #3: ffff88806bb92198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 1494.780729][ C0] #4: ffff888056cdb160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 1494.780757][ C0] #5: ffffffff8e750960 (console_lock){+.+.}-{0:0}, at: dev_vprintk_emit+0x355/0x420 [ 1494.780788][ C0] #6: ffffffff8e638218 (console_srcu){....}-{0:0}, at: console_flush_all+0x123/0xb20 [ 1494.780815][ C0] #7: ffffc90000007ce0 ((&hsr->announce_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd4/0x640 [ 1494.780844][ C0] #8: ffffffff8e75e520 (rcu_read_lock){....}-{1:3}, at: hsr_announce+0x89/0x370 [ 1494.780873][ C0] #9: ffff888055eb6f70 (&hsr->seqnr_lock){+.-.}-{3:3}, at: send_hsr_supervision_frame+0x380/0xcb0 [ 1494.780904][ C0] #10: ffffffff8e75e520 (rcu_read_lock){....}-{1:3}, at: hsr_forward_skb+0xb3/0x2860 [ 1494.780936][ C0] #11: ffffffff8e75e580 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x277/0x3890 [ 1494.780965][ C0] #12: ffffffff8e75e520 (rcu_read_lock){....}-{1:3}, at: br_dev_xmit+0x193/0x1980 [ 1494.780996][ C0] #13: ffffffff8e75e580 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x277/0x3890 [ 1494.781024][ C0] #14: ffffffff8e75e520 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360 [ 1494.781053][ C0] [ 1494.781053][ C0] stack backtrace: [ 1494.781061][ C0] CPU: 0 UID: 0 PID: 19478 Comm: kworker/0:10 Tainted: G L syzkaller #0 PREEMPT(full) [ 1494.781077][ C0] Tainted: [L]=SOFTLOCKUP [ 1494.781082][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1494.781089][ C0] Workqueue: usb_hub_wq hub_event [ 1494.781102][ C0] Call Trace: [ 1494.781107][ C0] [ 1494.781112][ C0] dump_stack_lvl+0xe8/0x150 [ 1494.781127][ C0] print_deadlock_bug+0x279/0x290 [ 1494.781142][ C0] __lock_acquire+0x253f/0x2cf0 [ 1494.781157][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1494.781170][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 1494.781185][ C0] ? unwind_next_frame+0x1aaf/0x23c0 [ 1494.781200][ C0] lock_acquire+0xf0/0x2e0 [ 1494.781213][ C0] ? hsr_dev_xmit+0x237/0x360 [ 1494.781227][ C0] ? hsr_dev_xmit+0x237/0x360 [ 1494.781240][ C0] _raw_spin_lock_bh+0x36/0x50 [ 1494.781255][ C0] ? hsr_dev_xmit+0x237/0x360 [ 1494.781267][ C0] hsr_dev_xmit+0x237/0x360 [ 1494.781279][ C0] ? hsr_dev_xmit+0x2d/0x360 [ 1494.781293][ C0] dev_hard_start_xmit+0x2d8/0x870 [ 1494.781308][ C0] __dev_queue_xmit+0x16d1/0x3890 [ 1494.781322][ C0] ? __dev_queue_xmit+0x277/0x3890 [ 1494.781334][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 1494.781345][ C0] ? ebt_do_table+0x2665/0x2830 [ 1494.781359][ C0] ? ebt_do_table+0x2665/0x2830 [ 1494.781373][ C0] ? __pfx_br_multicast_rcv+0x10/0x10 [ 1494.781385][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1494.781402][ C0] ? br_nf_post_routing+0x219/0xfe0 [ 1494.781417][ C0] br_dev_queue_push_xmit+0x370/0x4a0 [ 1494.781430][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1494.781442][ C0] NF_HOOK+0x360/0x3f0 [ 1494.781454][ C0] ? NF_HOOK+0xa2/0x3f0 [ 1494.781465][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1494.781477][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1494.781491][ C0] br_forward_finish+0xd3/0x130 [ 1494.781502][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 1494.781514][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 1494.781526][ C0] NF_HOOK+0x360/0x3f0 [ 1494.781538][ C0] ? NF_HOOK+0xa2/0x3f0 [ 1494.781548][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1494.781560][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 1494.781572][ C0] ? br_flood+0x8ff/0xb80 [ 1494.781583][ C0] ? br_handle_vlan+0x61/0x530 [ 1494.781594][ C0] __br_forward+0x397/0x540 [ 1494.781606][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 1494.781618][ C0] ? br_dev_xmit+0x193/0x1980 [ 1494.781631][ C0] br_dev_xmit+0x12bd/0x1980 [ 1494.781646][ C0] ? br_dev_xmit+0x193/0x1980 [ 1494.781661][ C0] ? __pfx_br_dev_xmit+0x10/0x10 [ 1494.781675][ C0] ? __skb_get_hash_net+0x13f/0x2e0 [ 1494.781693][ C0] ? __pfx___skb_get_hash_net+0x10/0x10 [ 1494.781705][ C0] ? qdisc_pkt_len_segs_init+0x2c4/0x970 [ 1494.781718][ C0] ? skb_network_protocol+0x234/0x3f0 [ 1494.781730][ C0] ? __pfx_passthru_features_check+0x10/0x10 [ 1494.781743][ C0] dev_hard_start_xmit+0x2d8/0x870 [ 1494.781757][ C0] __dev_queue_xmit+0x16d1/0x3890 [ 1494.781769][ C0] ? handle_softirqs+0x22a/0x870 [ 1494.781782][ C0] ? console_unlock+0xd1/0x1c0 [ 1494.781797][ C0] ? __dev_queue_xmit+0x277/0x3890 [ 1494.781809][ C0] ? usb_probe_interface+0x668/0xc90 [ 1494.781822][ C0] ? __driver_probe_device+0x18c/0x320 [ 1494.781834][ C0] ? driver_probe_device+0x4f/0x240 [ 1494.781847][ C0] ? __device_attach_driver+0x279/0x430 [ 1494.781860][ C0] ? __device_attach+0x2c5/0x450 [ 1494.781871][ C0] ? device_initial_probe+0xa1/0xd0 [ 1494.781884][ C0] ? bus_probe_device+0x12a/0x220 [ 1494.781893][ C0] ? device_add+0x7b6/0xb70 [ 1494.781904][ C0] ? usb_generic_driver_probe+0x8d/0x150 [ 1494.781916][ C0] ? usb_probe_device+0x1c4/0x3b0 [ 1494.781928][ C0] ? really_probe+0x267/0xaf0 [ 1494.781941][ C0] ? __driver_probe_device+0x18c/0x320 [ 1494.781953][ C0] ? driver_probe_device+0x4f/0x240 [ 1494.781966][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1494.781978][ C0] ? bus_probe_device+0x12a/0x220 [ 1494.781987][ C0] ? device_add+0x7b6/0xb70 [ 1494.781997][ C0] ? usb_new_device+0xa08/0x16f0 [ 1494.782006][ C0] ? hub_event+0x2a1c/0x4f30 [ 1494.782017][ C0] ? process_scheduled_works+0xb6e/0x18c0 [ 1494.782029][ C0] ? worker_thread+0xa53/0xfc0 [ 1494.782042][ C0] ? kthread+0x388/0x470 [ 1494.782051][ C0] ? ret_from_fork+0x51e/0xb90 [ 1494.782063][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 1494.782079][ C0] ? __copy_skb_header+0xa3/0x4a0 [ 1494.782093][ C0] ? hsr_addr_subst_dest+0x30d/0xa90 [ 1494.782107][ C0] ? skb_clone+0x246/0x3a0 [ 1494.782119][ C0] hsr_forward_skb+0x157b/0x2860 [ 1494.782136][ C0] ? hsr_forward_skb+0xb3/0x2860 [ 1494.782151][ C0] ? __pfx_hsr_forward_skb+0x10/0x10 [ 1494.782166][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1494.782177][ C0] ? __asan_memset+0x22/0x50 [ 1494.782188][ C0] ? __skb_pad+0x405/0x610 [ 1494.782200][ C0] send_hsr_supervision_frame+0x731/0xcb0 [ 1494.782217][ C0] ? __pfx_send_hsr_supervision_frame+0x10/0x10 [ 1494.782232][ C0] hsr_announce+0x1db/0x370 [ 1494.782244][ C0] ? hsr_announce+0x89/0x370 [ 1494.782257][ C0] ? __pfx_hsr_announce+0x10/0x10 [ 1494.782272][ C0] call_timer_fn+0x192/0x640 [ 1494.782285][ C0] ? __pfx_hsr_announce+0x10/0x10 [ 1494.782298][ C0] ? call_timer_fn+0xd4/0x640 [ 1494.782310][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1494.782324][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1494.782339][ C0] ? __pfx_hsr_announce+0x10/0x10 [ 1494.782353][ C0] __run_timer_base+0x652/0x8b0 [ 1494.782364][ C0] ? ktime_get+0x45/0x200 [ 1494.782376][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 1494.782388][ C0] ? sched_clock_cpu+0x74/0x440 [ 1494.782403][ C0] run_timer_softirq+0xb7/0x170 [ 1494.782415][ C0] handle_softirqs+0x22a/0x870 [ 1494.782428][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 1494.782443][ C0] __irq_exit_rcu+0x5f/0x150 [ 1494.782455][ C0] irq_exit_rcu+0x9/0x30 [ 1494.782467][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1494.782478][ C0] [ 1494.782482][ C0] [ 1494.782486][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1494.782498][ C0] RIP: 0010:console_flush_all+0x801/0xb20 [ 1494.782510][ C0] Code: ff ff e8 a2 f0 20 00 90 0f 0b 90 e9 85 fc ff ff e8 94 f0 20 00 e8 3f 92 09 0a 48 85 db 74 c0 e8 85 f0 20 00 fb 48 8b 5c 24 08 <48> 8b 44 24 20 42 80 3c 20 00 4c 8b 74 24 18 74 08 4c 89 f7 e8 56 [ 1494.782520][ C0] RSP: 0018:ffffc900035a6620 EFLAGS: 00000287 [ 1494.782529][ C0] RAX: ffffffff81a4b05b RBX: ffffc900035a6780 RCX: 0000000000100000 [ 1494.782538][ C0] RDX: ffffc90019e51000 RSI: 000000000006b995 RDI: 000000000006b996 [ 1494.782546][ C0] RBP: ffffc900035a6730 R08: ffffffff90119ab7 R09: 1ffffffff2023356 [ 1494.782553][ C0] R10: dffffc0000000000 R11: fffffbfff2023357 R12: dffffc0000000000 [ 1494.782561][ C0] R13: 0000000000000001 R14: 0000000000000000 R15: ffffffff8f00aaa0 [ 1494.782570][ C0] ? console_flush_all+0x7fb/0xb20 [ 1494.782582][ C0] ? console_flush_all+0x123/0xb20 [ 1494.782593][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 1494.782605][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 1494.782617][ C0] console_unlock+0xd1/0x1c0 [ 1494.782632][ C0] ? __pfx_console_unlock+0x10/0x10 [ 1494.782647][ C0] ? dev_vprintk_emit+0x355/0x420 [ 1494.782662][ C0] vprintk_emit+0x485/0x560 [ 1494.782677][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 1494.782698][ C0] dev_vprintk_emit+0x355/0x420 [ 1494.782711][ C0] ? stack_depot_save_flags+0x33/0x810 [ 1494.782726][ C0] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 1494.782741][ C0] ? usb_control_msg+0x2c1/0x3e0 [ 1494.782751][ C0] ? lan78xx_read_reg+0x108/0x240 [ 1494.782763][ C0] ? lan78xx_bind+0x3ed/0xd20 [ 1494.782773][ C0] ? lan78xx_probe+0x1032/0x1c30 [ 1494.782784][ C0] dev_printk_emit+0xee/0x140 [ 1494.782797][ C0] ? usb_probe_device+0x1c4/0x3b0 [ 1494.782809][ C0] ? really_probe+0x267/0xaf0 [ 1494.782822][ C0] ? __driver_probe_device+0x18c/0x320 [ 1494.782834][ C0] ? __device_attach+0x2c5/0x450 [ 1494.782847][ C0] ? __pfx_dev_printk_emit+0x10/0x10 [ 1494.782863][ C0] __netdev_printk+0x3e1/0x480 [ 1494.782878][ C0] netdev_warn+0x11e/0x180 [ 1494.782889][ C0] ? __pfx_netdev_warn+0x10/0x10 [ 1494.782900][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1494.782916][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1494.782933][ C0] lan78xx_read_reg+0x1d5/0x240 [ 1494.782946][ C0] lan78xx_bind+0x3ed/0xd20 [ 1494.782958][ C0] lan78xx_probe+0x1032/0x1c30 [ 1494.782970][ C0] ? usb_disable_lpm+0x77/0x3e0 [ 1494.782981][ C0] usb_probe_interface+0x668/0xc90 [ 1494.782996][ C0] ? __pfx_usb_probe_interface+0x10/0x10 [ 1494.783008][ C0] really_probe+0x267/0xaf0 [ 1494.783022][ C0] __driver_probe_device+0x18c/0x320 [ 1494.783035][ C0] driver_probe_device+0x4f/0x240 [ 1494.783049][ C0] __device_attach_driver+0x279/0x430 [ 1494.783063][ C0] bus_for_each_drv+0x258/0x2f0 [ 1494.783073][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 1494.783087][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1494.783097][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 1494.783107][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1494.783123][ C0] __device_attach+0x2c5/0x450 [ 1494.783136][ C0] ? __pfx___device_attach+0x10/0x10 [ 1494.783149][ C0] ? _raw_spin_unlock+0x28/0x50 [ 1494.783164][ C0] device_initial_probe+0xa1/0xd0 [ 1494.783177][ C0] bus_probe_device+0x12a/0x220 [ 1494.783186][ C0] ? device_add+0x726/0xb70 [ 1494.783198][ C0] device_add+0x7b6/0xb70 [ 1494.783209][ C0] usb_set_configuration+0x1a87/0x2110 [ 1494.783226][ C0] usb_generic_driver_probe+0x8d/0x150 [ 1494.783239][ C0] usb_probe_device+0x1c4/0x3b0 [ 1494.783252][ C0] ? __pfx_usb_probe_device+0x10/0x10 [ 1494.783264][ C0] really_probe+0x267/0xaf0 [ 1494.783278][ C0] __driver_probe_device+0x18c/0x320 [ 1494.783291][ C0] driver_probe_device+0x4f/0x240 [ 1494.783305][ C0] __device_attach_driver+0x279/0x430 [ 1494.783319][ C0] bus_for_each_drv+0x258/0x2f0 [ 1494.783328][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 1494.783342][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1494.783352][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 1494.783362][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1494.783378][ C0] __device_attach+0x2c5/0x450 [ 1494.783390][ C0] ? __pfx___device_attach+0x10/0x10 [ 1494.783403][ C0] ? _raw_spin_unlock+0x28/0x50 [ 1494.783418][ C0] device_initial_probe+0xa1/0xd0 [ 1494.783431][ C0] bus_probe_device+0x12a/0x220 [ 1494.783440][ C0] ? device_add+0x726/0xb70 [ 1494.783451][ C0] device_add+0x7b6/0xb70 [ 1494.783469][ C0] usb_new_device+0xa08/0x16f0 [ 1494.783481][ C0] ? __pfx_usb_new_device+0x10/0x10 [ 1494.783492][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1494.783508][ C0] hub_event+0x2a1c/0x4f30 [ 1494.783529][ C0] ? __pfx_hub_event+0x10/0x10 [ 1494.783542][ C0] ? process_scheduled_works+0xa8d/0x18c0 [ 1494.783554][ C0] ? process_scheduled_works+0xa8d/0x18c0 [ 1494.783567][ C0] process_scheduled_works+0xb6e/0x18c0 [ 1494.783585][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1494.783599][ C0] ? assign_work+0x3d5/0x5e0 [ 1494.783613][ C0] worker_thread+0xa53/0xfc0 [ 1494.783631][ C0] kthread+0x388/0x470 [ 1494.783640][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1494.783653][ C0] ? __pfx_kthread+0x10/0x10 [ 1494.783663][ C0] ret_from_fork+0x51e/0xb90 [ 1494.783676][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1494.783694][ C0] ? __switch_to+0xc7d/0x1450 [ 1494.783706][ C0] ? __pfx_kthread+0x10/0x10 [ 1494.783715][ C0] ret_from_fork_asm+0x1a/0x30 [ 1494.783732][ C0] [ 1495.158874][ T36] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1495.168844][T19478] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1496.320605][T19478] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1496.344304][T19478] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 1496.368849][T19478] usb 2-1: USB disconnect, device number 61 [ 1500.227801][ T77] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1500.238438][ T36] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)