last executing test programs: 8m56.497474726s ago: executing program 4 (id=3059): ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc0f8565c, &(0x7f0000000180)={0x10001, 0x800, 0x1, {0x8, @meta={0x53353543, 0x23a599ad, 0x40d5, 0x49a9, 0x130cec4e}}, 0x8}) add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) 8m56.449748745s ago: executing program 4 (id=3060): r0 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x40) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000040)={0x1000009, 0x4c47504a, 0x140, 0xf0, 0x4, @stepwise={{0x0, 0x5}, {0x2, 0x1}, {0x0, 0x4}}}) 8m56.396059708s ago: executing program 4 (id=3062): r0 = socket(0x1e, 0x1, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) r2 = syz_usb_connect(0x5, 0xb3, &(0x7f0000000680)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a100df00008032080b00020903000009040000000e0100000d240100092700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e0010000000000000000006009001516050001"], 0x0) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$sock_buf(r4, 0x1, 0x30, &(0x7f00000014c0)=""/96, &(0x7f0000001540)=0x60) syz_usb_control_io$sierra_net(r2, 0x0, &(0x7f0000000740)={0x10, &(0x7f0000000780)=ANY=[@ANYBLOB="2015be"], 0x0, 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r6 = socket$l2tp(0x2, 0x2, 0x73) sendto$inet(r6, &(0x7f0000000000)="2e7dc7d27978f8f50baf3447ccc8e2c3411bb0aef7f13c9f713bc23f171f32340b21fc998bb0f2f1576658c63845d07b3349fed5e2874862477b012297b32cbda9ebc9b3bd2f1a022c256a45c960677162f9e410f55e1254614ff196801cb536dd8fec42426c9a765d768efbb96aabbf83ef3a7f1097ab4248ac2d1ee4b40d8e1ba379da1fec66646d0ec0392f58f1c25333024775c6b312208e0c", 0x9b, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10) syz_emit_ethernet(0x3b6, &(0x7f0000001100)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0xf8, 0x1, 0x0, [{0x5, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, '\x00'/12}, {0x5, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x5, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4610001394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "00000000000000000000000200000000000000000000000000008879e66485201a0015ca837400000000000000000000001c0000000000"}, {0xe, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) r7 = syz_usb_connect$midi(0x2, 0x91, &(0x7f0000000a80)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7f, 0x1, 0x1, 0xb6, 0x20, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x4, 0x1, 0x3, 0x20, 0x6, [@ms_header={0x7, 0x24, 0x1, 0x1, 0x7}, @midi_out_jack={0x11, 0x24, 0x3, 0x3, 0x8, 0x5, [{0x0, 0x1}, {0x5, 0x1}, {0x5, 0x8}, {0x6, 0xf}, {0x0, 0x6}]}, @midi_out_jack={0xd, 0x24, 0x3, 0x2, 0x9, 0x3, [{0x8}, {0x9, 0xa3}, {0x4, 0x6}], 0x2}], [{{0x9, 0x5, 0x3, 0x0, 0x18f, 0x1b, 0x3e, 0xda, {0x5, 0x25, 0x1, 0x1, '#'}}}, {{0x9, 0x5, 0x80, 0x8, 0x400, 0xe2, 0xb2, 0x8, {0xd, 0x25, 0x1, 0x9, "bb57518c37cb7a9af4"}}}, {{0x9, 0x5, 0xd, 0x8, 0x3ff, 0x5, 0xff, 0x9, {0x6, 0x25, 0x1, 0x2, "6de4"}}}, {{0x9, 0x5, 0x5, 0x3, 0x8, 0xe4, 0x7, 0x6, {0xc, 0x25, 0x1, 0x8, "edb946ace895af8f"}}}]}}}}}]}}, &(0x7f0000000d40)={0xa, &(0x7f0000000b40)={0xa, 0x6, 0x300, 0x9, 0x7, 0xf1, 0x80, 0xf3}, 0x39, &(0x7f0000000b80)={0x5, 0xf, 0x39, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x1, 0x8, 0xfff}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x7, 0x0, 0x1, 0xd17}, @wireless={0xb, 0x10, 0x1, 0x8, 0x1, 0x1, 0x81, 0x81, 0x30}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xf, 0x2, 0x40, 0x9}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x1, 0xd7, 0x3, 0x4}]}, 0x3, [{0xa2, &(0x7f0000000c00)=@string={0xa2, 0x3, "2dfa7b83b3d3aaaf0008adce57e9ab69b5f66ad9acc6175b2b170ba1dab5d4e1bab5cef713fbb1cfb3f8ecd78246e900eb12f1265cd2aa7edc92c23da62531a026f6b4340734bc698a427d8226cca1e5a1db8f9d42b0bb8c40ba904201ee2abc2c9c1e451b2052e5ef3bc56aa8e5a0ad4957a66e86ee97a3a5870d205aa367307511b7ff4f39909f476ff416f15db11926da283409537a70315023359346c6e9"}}, {0x4, &(0x7f0000000cc0)=@lang_id={0x4, 0x3, 0x500a}}, {0x3e, &(0x7f0000000d00)=@string={0x3e, 0x3, "ef16ff47fe350ead889cc6d819a3f8fcc4533530dff8ec9f5c876c91ea7be3048fbcd8d3775c17ed0e956fba82ac340c5869ca5c845f55a23c180795"}}]}) syz_usb_control_io$lan78xx(r7, &(0x7f0000000e80)={0xc, &(0x7f0000000d80)={0x40, 0x4, 0x77, {0x77, 0x23, "de7817238d32adf38a18de938bf83ec57f4f41bfc82e0c9a65fac205667adf3d90acbc5fff5b8fb42603a9a285d56c86e33bfcf5eaa6a1fc74a84d49372d5dc1cf7de9f14ce8a716dfca23aa1e43c9b63e788eab7354d4a4e124be9562fc89eb7f70bb06f19555563618564c622578cca09ceeb67c"}}, &(0x7f0000000e00)={0x0, 0x3, 0x6e, @string={0x6e, 0x3, "1531cdd48e46d0564a66ea0e3b3376789f5c6fd44581b0e75b3f8906f3bca2d95da4c25ab53d164a4e466be43d8f7cab435970fa25ef2eec32aa77228723e9e671a24d08b1dde08d5e6cb0abf494ebeb812cc4bac16edbfb1dc39062639849764545be26b5548e573225a7ec"}}}, &(0x7f00000010c0)={0x1c, &(0x7f0000000ec0)={0x0, 0x31}, &(0x7f0000000f80)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000fc0)={0x0, 0x8, 0x1, 0x1f}, &(0x7f0000001000)={0xc0, 0xa1, 0x4, 0x1}, &(0x7f0000001040)={0x40, 0xa0, 0x4, 0x9}, &(0x7f0000001080)={0xc0, 0xa2, 0x2f, "2fe97d75ab654c44508505b6be6d5b96cd1c53c914954ba2de4292f0b2b252651463093e1e34c9940e5a2e4495f8b7"}}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="d3a24845fed3b644db111f6660fcd399052be391b829c18141634298ceeb56ee051e22d30dbb5f2c5ab2078c2c8cf5b9a0385ac162b836c7957ec2752acb894b12c965ca0e6ef3be0e26d7ce463ba7d45d493070046ee8bf617e890cd5321ff6387b3c061c485ebc22948c0292c94d7463b0a2daf8dd3e66c957e3aef3a4b95f4935d34e1bcbc49fc30eb919f98f0c8eeedbb598bc77f0ea766d13268eb19b0cfd6d9624efc20e49f72912e99e06f832a5d6a336636bcef1293071e0a88f8453d9f9759e0c09e456844131b87ca896fd8a", 0xd1, 0xffffffffffffffff) r10 = add_key$user(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)="f9", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000440)={r10, r9, r10}, &(0x7f0000000480)=""/68, 0x44, &(0x7f0000000500)={&(0x7f0000000540)={'sha3-512\x00'}}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000001580)={0xb, {{0xa, 0x4e23, 0x3ff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}}}, 0x84) syz_usb_control_io$rtl8150(r2, &(0x7f00000008c0)={0xc, &(0x7f0000000800)={0x0, 0x5, 0x40, {0x40, 0x30, "3b13f1fd7061e48d3d8325c8fca9d9b56c2808c92b523729cc991cc004f2ca18a71f13c4e11e49ff3dcc2c78a60d414b1e74717338eeb6e47981c9fb37fc"}}, &(0x7f0000000880)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc07}}}, &(0x7f0000000a40)={0x18, &(0x7f0000000900)={0x20, 0x0, 0x18, "a26422ac97266852901fa38a883bad3f6690940e52a9226a"}, &(0x7f0000000940)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000980)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000009c0)={0xc0, 0x5, 0x3, "eb876f"}, &(0x7f0000000a00)={0x40, 0x5, 0x6, "1324e22d4945"}}) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000001c00010029bd7000ffdbdf2507000000", @ANYRES32=r11, @ANYBLOB="80007f0a0a000200ffffffffffff000004000e0008000f"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) 8m54.433683492s ago: executing program 4 (id=3070): ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc0f8565c, &(0x7f0000000180)={0x10001, 0x800, 0x1, {0x8, @meta={0x53353543, 0x23a599ad, 0x40d5, 0x49a9, 0x130cec4e}}, 0x8}) add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, &(0x7f0000000040), 0x0, 0xfffffffffffffffe) 8m54.299723625s ago: executing program 4 (id=3072): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x44, 0x2, 0x200, "4649f6441214bdf0c12f00007f9d0000310fa145d5dbff7fff00", 0x32314d56}) timer_create(0x0, 0x0, &(0x7f0000000040)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000080)={0x0, 0x0, 0xfd87, 0x405}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/kexec_crash_size', 0x40901, 0x8) write$cgroup_freezer_state(r2, &(0x7f00000002c0)='THAWED\x00', 0x7) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000300)={0x400000000000000, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0xe, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4, 0x0, @empty}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@private0, @in=@broadcast}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}, @sadb_x_sec_ctx={0x1, 0x18, 0x2, 0x3f}]}, 0xa8}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r3, 0x410, &(0x7f0000000100)={0x0, 0x1, 0x1, 0xfffe}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$cont(0x20, r5, 0x5, 0xffffffffffffffff) r6 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r6, 0x0) ftruncate(r6, 0x2) linkat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1000) rename(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)='./file0\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(r1, 0x1, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x3938700}}, &(0x7f0000000480)) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000500)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000540)={0xa, 0xe22, 0x0, @empty, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000580), 0x3) 8m54.043985402s ago: executing program 0 (id=3074): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000097000000000000000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007baaf8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50005008200000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300000000b0ff8500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000070000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000001000000000000000000000000950000000000cc1b9006bf43eb560410f47f39b90000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000600)='stat\x00') read$FUSE(r1, &(0x7f0000001640)={0x2020}, 0x2020) r2 = syz_open_dev$evdev(&(0x7f00000001c0), 0x1bbc, 0x801) r3 = openat$sysfs(0xffffff9c, &(0x7f0000000200)='/sys/power/reserved_size', 0x1d5b00, 0x1ea) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) r4 = epoll_create1(0x80000) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000080)={0x20002016}) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYRESDEC=r3], 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone3(&(0x7f00000003c0)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r6}}, 0x58) write$evdev(r2, &(0x7f00000000c0)=[{{}, 0x0, 0x1, 0x3}], 0x5b) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000180)=0x5) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000040)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r8 = userfaultfd(0x80001) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000580)={0xaa, 0x77c}) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000640)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000580000/0x4000)=nil) mremap(&(0x7f0000040000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000840000/0x4000)=nil) close_range(r7, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x2, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 8m53.431538321s ago: executing program 4 (id=3077): socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec775000) r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0) prctl$PR_GET_NAME(0x10, &(0x7f0000000480)=""/231) r1 = openat2$dir(0xffffff9c, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)={0x80080, 0x41, 0x8}, 0x18) r2 = open_tree(r1, &(0x7f0000000040)='./file0\x00', 0x88901) mount_setattr(r2, &(0x7f0000000080)='.\x00', 0x8000, &(0x7f00000000c0)={0x81, 0x8a, 0x100000}, 0x20) syz_open_dev$vcsu(&(0x7f0000000100), 0x1, 0x2242) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000001c0)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfffffffd, 0x0, &(0x7f0000000200)=0x4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x359201, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r7, 0x29, 0x35, &(0x7f0000000680)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, &(0x7f00000006c0)=ANY=[], 0x8) bind$inet6(r7, &(0x7f0000000700)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r7, &(0x7f0000000740)=[{{0x0, 0x93, 0x0, 0x0, &(0x7f0000000780)=""/21, 0x15}, 0x5}], 0x1, 0x2, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, &(0x7f0000000600)=@x86={0x9, 0x16, 0x1, 0x0, 0x3, 0x8, 0x49, 0x2, 0x5, 0x4, 0xe9, 0xd5, 0x0, 0x7, 0x9, 0x0, 0xa0, 0x5, 0xd, '\x00', 0x9, 0x9}) ioctl$KVM_SET_MP_STATE(r8, 0x4004ae99, &(0x7f0000000640)=0x3) ioctl$KVM_RUN(r8, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'syztnl2\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x2f, 0x6, 0x4f, 0x6, 0x0, @private2={0xfc, 0x2, '\x00', 0x4}, @empty, 0x10, 0x95ef6a0a581e08f7, 0x201006, 0x5}}) sendto$packet(r2, &(0x7f0000000000)="fb8e7fab14f3", 0x6, 0x480c4, &(0x7f0000000400)={0x11, 0x9, r9, 0x1, 0x15, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 8m52.621505427s ago: executing program 0 (id=3084): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='blkio.bfq.io_merged\x00', 0x275a, 0x0) ftruncate(r0, 0x1ff) r1 = openat$vicodec0(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0185648, &(0x7f0000000180)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x980001, 0x9, '\x00', @string=0x0}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xc04c000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) ioctl$int_out(r0, 0x5462, &(0x7f0000000100)) mremap(&(0x7f0000a66000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000056000/0x2000)=nil) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/3002], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(0xffffffffffffffff, 0x7af, &(0x7f00000000c0)={@any, 0x1ff}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0x9, 0xc8, "0200", "2daca8", "2ea24e", "e19465", 0x81, 0x8d, 0x0, 0x7, 0x40, 0x7, 0xf, 0xffff, 0x7ffd, 0x464}}}}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) munlockall() ioctl$SNDRV_PCM_IOCTL_UNLINK(0xffffffffffffffff, 0x4161, 0x0) socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 8m51.59081583s ago: executing program 0 (id=3086): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r0, 0x0, 0x0, 0x20000080, &(0x7f0000000400)={0xa, 0xffff, 0x200, @local, 0x3}, 0x1c) 8m51.566161566s ago: executing program 0 (id=3087): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00'], 0x60}}, 0x8000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000001c0)={r2, 0x0, 0x8, 0x4, 0x5, 0xffffd414}, 0x14) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000200), 0x8002) write$binfmt_aout(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="03070000b5"], 0xc8) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000280), 0x2) write$binfmt_aout(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) listns(&(0x7f00000000c0)={0x20, 0x0, 0x7, 0x2000000, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000064c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000006500)={0x0, 0x0, &(0x7f0000006540)={&(0x7f0000006580)={0x44, r5, 0x211, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback={0xff0f000000000000}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x44}}, 0x0) 8m51.479906529s ago: executing program 0 (id=3088): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x44, 0x2, 0x200, "4649f6441214bdf0c12f00007f9d0000310fa145d5dbff7fff00", 0x32314d56}) timer_create(0x0, 0x0, &(0x7f0000000040)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000080)={0x0, 0x0, 0xfd87, 0x405}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/kexec_crash_size', 0x40901, 0x8) write$cgroup_freezer_state(r2, &(0x7f00000002c0)='THAWED\x00', 0x7) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000300)={0x400000000000000, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0xe, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4, 0x0, @empty}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@private0, @in=@broadcast}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}, @sadb_x_sec_ctx={0x1, 0x18, 0x2, 0x3f}]}, 0xa8}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r3, 0x410, &(0x7f0000000100)={0x0, 0x1, 0x1, 0xfffe}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$cont(0x20, r5, 0x5, 0xffffffffffffffff) r6 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r6, 0x0) ftruncate(r6, 0x2) linkat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1000) rename(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)='./file0\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(r1, 0x1, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x3938700}}, &(0x7f0000000480)) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000500)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000540)={0xa, 0xe22, 0x0, @empty, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000580), 0x3) 8m50.662690381s ago: executing program 0 (id=3093): ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc0f8565c, &(0x7f0000000180)={0x10001, 0x800, 0x1, {0x8, @meta={0x53353543, 0x23a599ad, 0x40d5, 0x49a9, 0x130cec4e}}, 0x8}) add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, &(0x7f0000000040), 0x0, 0xfffffffffffffffe) 8m38.337202911s ago: executing program 32 (id=3077): socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec775000) r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0) prctl$PR_GET_NAME(0x10, &(0x7f0000000480)=""/231) r1 = openat2$dir(0xffffff9c, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)={0x80080, 0x41, 0x8}, 0x18) r2 = open_tree(r1, &(0x7f0000000040)='./file0\x00', 0x88901) mount_setattr(r2, &(0x7f0000000080)='.\x00', 0x8000, &(0x7f00000000c0)={0x81, 0x8a, 0x100000}, 0x20) syz_open_dev$vcsu(&(0x7f0000000100), 0x1, 0x2242) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000001c0)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfffffffd, 0x0, &(0x7f0000000200)=0x4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x359201, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r7, 0x29, 0x35, &(0x7f0000000680)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, &(0x7f00000006c0)=ANY=[], 0x8) bind$inet6(r7, &(0x7f0000000700)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r7, &(0x7f0000000740)=[{{0x0, 0x93, 0x0, 0x0, &(0x7f0000000780)=""/21, 0x15}, 0x5}], 0x1, 0x2, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, &(0x7f0000000600)=@x86={0x9, 0x16, 0x1, 0x0, 0x3, 0x8, 0x49, 0x2, 0x5, 0x4, 0xe9, 0xd5, 0x0, 0x7, 0x9, 0x0, 0xa0, 0x5, 0xd, '\x00', 0x9, 0x9}) ioctl$KVM_SET_MP_STATE(r8, 0x4004ae99, &(0x7f0000000640)=0x3) ioctl$KVM_RUN(r8, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'syztnl2\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x2f, 0x6, 0x4f, 0x6, 0x0, @private2={0xfc, 0x2, '\x00', 0x4}, @empty, 0x10, 0x95ef6a0a581e08f7, 0x201006, 0x5}}) sendto$packet(r2, &(0x7f0000000000)="fb8e7fab14f3", 0x6, 0x480c4, &(0x7f0000000400)={0x11, 0x9, r9, 0x1, 0x15, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 8m35.49378917s ago: executing program 33 (id=3093): ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc0f8565c, &(0x7f0000000180)={0x10001, 0x800, 0x1, {0x8, @meta={0x53353543, 0x23a599ad, 0x40d5, 0x49a9, 0x130cec4e}}, 0x8}) add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, &(0x7f0000000040), 0x0, 0xfffffffffffffffe) 12.137961693s ago: executing program 3 (id=5873): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="640000001000ffff263d7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="20ba0100180a04003400128009000100766c616e00000000240002800600010004000000100003800c000100bf000000", @ANYRES32=r1, @ANYRESHEX=r0], 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x8000002) 11.973443167s ago: executing program 3 (id=5874): socket$alg(0x26, 0x5, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) pipe(&(0x7f00000088c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000008900)=[{&(0x7f0000008940)='w', 0x1}], 0x1, 0x1) r1 = userfaultfd(0x80001) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffcb8}]}) clock_getres(0x6, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000008980)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000089c0)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000008a00), 0x8000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000008a40)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000008b40)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 10.561804497s ago: executing program 3 (id=5882): io_uring_setup(0xadc, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x257}) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) rseq(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00'}) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000240)=0x800, 0x4) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, 0x0, 0x0, r4) sendmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602ffa100000e000a000f000000028000001294", 0x2e}], 0x1}, 0x40) r5 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000001000010426bd7000000000", @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r7, @ANYBLOB, @ANYBLOB], 0x44}}, 0x200040cc) 10.364437344s ago: executing program 3 (id=5884): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="640000001000ffff263d7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="20ba0100180a04003400128009000100766c616e00000000240002800600010004000000100003800c000100bf0000000400000006000500", @ANYRES32=r1, @ANYRESHEX=r0], 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x8000002) 10.258259557s ago: executing program 3 (id=5885): syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000080)) sched_getattr(0x0, &(0x7f0000000040)={0x38}, 0x38, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r0, 0x8008976) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYRESHEX], 0xb) r1 = openat$kvm(0xffffff9c, &(0x7f0000000180), 0x800, 0x0) r2 = syz_open_dev$video4linux(&(0x7f00000001c0), 0xaa7, 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(r2, 0xc0585604, &(0x7f0000000200)={0x1}) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r6) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000340)={'syzkaller0\x00', @broadcast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x200504, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a300000000034000480300001800a0001006d617463680000002000028005000300400000000b000100736f636b657400000800024000000002"], 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) syz_usb_connect(0x2, 0xa1, &(0x7f0000000600)=ANY=[@ANYBLOB="12010003546ab520b1134200e4f50102030109028f0001050300030904f6040306a4000809050101000208fe0209050310ff"], &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0}) close(r7) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000680)={{0x1, 0x1, 0xaf2b72fed0f209b, r2}, './file0\x00'}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000006c0)={'syzkaller0\x00'}) 8.779708334s ago: executing program 1 (id=5892): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@bridge_getneigh={0x28, 0x1e, 0x4, 0x70bd2c, 0x25dfdbff, {0x7, 0x0, 0x0, r1, 0xa00a, 0x10}, [@IFLA_MASTER={0x8, 0xa, r1}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004854}, 0x8000002) r2 = syz_open_procfs(0x0, &(0x7f0000000040)) read$FUSE(r2, 0x0, 0x0) r3 = openat$cuse(0xffffff9c, &(0x7f0000000240), 0x2, 0x0) read$FUSE(r2, &(0x7f00000002c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) getresuid(&(0x7f0000002300)=0x0, &(0x7f0000002340), &(0x7f0000002380)) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x800000, &(0x7f00000023c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x266}}], [{@dont_measure}, {@measure}, {@smackfsdef={'smackfsdef', 0x3d, '\x00'}}, {@permit_directio}, {@fowner_eq={'fowner', 0x3d, r5}}]}}, 0x0, 0x0, &(0x7f00000024c0)="25782d6420ba96") sendmsg$AUDIT_GET(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000002500)={0x10, 0x3e8, 0x200, 0x70bd2c, 0x25dfdbf9, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4004000}, 0x8000) 8.488387158s ago: executing program 1 (id=5893): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x1, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x3f00) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') syz_usb_connect(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201100160bb41082e0c00073be1010203010902240001a200000009046103ff0308400409058503"], 0x0) syz_clone3(&(0x7f0000000400)={0x80000, 0x0, &(0x7f0000000480), &(0x7f00000004c0), {0x24}, &(0x7f0000000500)=""/120, 0x6e019f3aa56df439, &(0x7f0000000580)=""/176, &(0x7f0000000640)=[0x0, 0x0], 0x2}, 0x58) r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) write$binfmt_script(r5, 0x0, 0x0) close(r5) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) keyctl$update(0x2, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000801) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="443f00001300a7cc4a372eaf541d002007000000", @ANYRES32=r6, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r8, &(0x7f00000064c0)=[{{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x8004}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001500)=""/4112, 0x1010}, {&(0x7f0000000100)=""/7, 0x7}, {&(0x7f0000000080)=""/82, 0x52}, {&(0x7f0000000340)=""/99, 0x63}, {&(0x7f0000000200)=""/209, 0xd1}, {&(0x7f0000000300)=""/27, 0x1b}], 0x6}, 0x400000}, {{0x0, 0x0, 0x0}}], 0x4, 0x30100, 0x0) 7.539024997s ago: executing program 3 (id=5901): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r3, @ANYBLOB="05005b"], 0x24}}, 0x240008d0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x9, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xb0}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) rseq(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) r8 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r9, 0x5452, &(0x7f00000001c0)=0xffffffffffffffff) fcntl$setsig(r9, 0xa, 0x12) ppoll(&(0x7f0000000200)=[{r10}], 0x1, 0x0, &(0x7f0000000280), 0x8) r11 = dup2(r9, r10) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000007c0)=ANY=[@ANYRESOCT=r0], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) fcntl$setown(r10, 0x8, r8) ioctl$sock_SIOCSPGRP(r11, 0x8902, &(0x7f0000000500)=r8) tkill(r8, 0x13) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000002c0)={0x1, &(0x7f0000000300)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) umount2(0x0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000100)={0x0, 0xffffffe3, &(0x7f0000000580)={&(0x7f0000000380)={0x28, r7, 0x200, 0x0, 0x25dfdbff, {{}, {@void, @val={0x0, 0x99, {0x8, 0x2009}}}}, [@NL80211_ATTR_FRAME_MATCH={0x4, 0x5b, "a91400e5cb56f5d3cc9dd2edb56cdd1b26dd4bd9252c047eb144f3fc8fb4be48bb499bb962113043a41372a10a99b64a7e284cd95a3984b43fe657bf5e838ded87ebd201c57248ba706e4931cf407b5aab1bcbd60000000000000000"}, @NL80211_ATTR_FRAME_MATCH={0x0, 0x5b, "b3a11eb76eaeb6423dc7c0a8b15e8e1731368eea6bd715abd64662260d8fa2434686708f38af788d06fc540e3cf8e38e29d2e89b668a97b1b4f9cf77117142c53aaad035c42031aabc7939dca5ebf01486312d1db93ca45a3867c28b842fc44c5ee8913819a1bc7ffe0e4cc594fd62652d96170ca225353028e5b948e350d4cc364146fc1e541253fe04788b34186ebb45b231a91c185a8e"}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) sendmmsg(r0, &(0x7f00000000c0), 0x4000000000000d2, 0x8048848) 5.161025198s ago: executing program 2 (id=5911): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x8, 0x401, 0x7}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xfff5, 0x10}, {}, {0x8, 0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0xfaeccc0edd389ee1}, 0x20000000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r3, 0xe}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) (fail_nth: 3) 5.023214689s ago: executing program 1 (id=5912): r0 = syz_usb_connect(0x3, 0x39, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002ffffff40da0b29010001000000010902270001010080320904000003ffffff0007050102000200070582020002"], 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a3000000000c0000000020a0102000000000000000005000002940006003d705a42f8c46e1f25cad07a26efc36e7a22f57b40c426213ec686d2d3334c70cc6d1f4e62f2ca96f23ad00b8708e1cd6346f366d4115db82e77d2950e1b446f1158d201dbda5897c7fb1d193a7ca1f8d071766a3282f3ecc0da698e3c7563c2f06465144737d2b9d854208e2adb61cb6bfb0b1d02a24a4351860a6a29b796a6ead8224af9b65c80bf35174279f85af90900010073797a31000000000c000440000000000000000140010000140a01020000000000000000000000000900020073797a32000000000900010073797a30000000000c00064000000000000000040900020073797a31000000005b0008005234c7f5eaee8ac9114de3d727f88742551b974423e37513b1284972be7507422785512d3ca71aafc1f98d9c16f677bacb389605eb0c656dd311bc9f0d68e66f1f9389a058afa6701b227e8f3f20bb1707d5ab8dc9dda400080003400000000208000340000000037a000800f81e78bffd2797f9b5b5a5630a6f49475fc6d8abe7009b08b73ed84b5458e5286fdd0c7932c3c857f49e9ffd6c5cd567f010bf2d69bf900b36f4f54c8b34253440b37c8de412a0b533ae9a4fde134196383f2d74fac4735a49a6faa439164f921c59644a511257c25a2916f2e11850000008000340000000020c0006400000000000000001140000001100010000000000000000000000000a00000000000000"], 0x248}}, 0x84) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0xfd, 0x0, 0x0) (async) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000080)=0x0) timer_settime(r2, 0x1, &(0x7f00000001c0)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000f, 0x204031, 0xffffffffffffffff, 0xec776000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000002, 0x8010, 0xffffffffffffffff, 0x18a41000) (async) syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) (async) syz_usb_ep_write(r0, 0x82, 0x0, 0x0) (async) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) getsockopt$inet_sctp6_SCTP_AUTH_SUPPORTED(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000240)={0x2, 0x8}, &(0x7f0000000280)=0x8) (async) r4 = socket$can_j1939(0x1d, 0x2, 0x7) (async) r5 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000140)={0x1d, r6, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) (async) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x40, 0x0) (async) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000740), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB='oup_id=\x00\x00\x00', @ANYRESDEC=0x0, @ANYRES64=r4, @ANYRES8=r3]) (async) read$FUSE(r7, &(0x7f0000000800)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r7, &(0x7f0000002840)={0x50, 0x0, r8, {0x7, 0x1f, 0x40, 0x524b3c32, 0x85, 0xfffb, 0xfffffffe, 0xabe6, 0x0, 0x0, 0x40, 0x8001}}, 0x50) (async) syz_fuse_handle_req(r7, &(0x7f00000028c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000048c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004940)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r7, &(0x7f0000004980)="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", 0x2000, &(0x7f0000006980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006a00)={0x78, 0x0, 0x7, {0xc, 0x3, 0x0, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x8, 0xfffffffffffffffb, 0xfffffffe, 0x0, 0x80000, 0x8000, 0x0, 0x0, r9, 0x1, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r10 = openat(0xffffffffffffff9c, &(0x7f0000006a80)='./file0\x00', 0x20c01, 0x0) (async) syz_fuse_handle_req(r7, &(0x7f0000006ac0)="7c7a6a069306f2c5ddf91f36944f207a1bd11284b4445fa3507bbc5def2e6fec4bb7c6001eafe381e277221f30085acd5d0c251f7c60c23874c04db6aa516f773dd2e57e746d1a085193c8b7664fceb1fe764d87f4395c66e5d4eee443a555692ebe80f3a11b8be74963f1a18c1d0cd71dec65e609e065e14615d2e8b283e55b4aa8b485f81ce52443d61fac9f08cf34f2997c05a63f98f988cfcea9a5650b37dff5817e5033b3912c226bd9bf68b528dec710584242fbdcf7dd0d55e394d3742039e6960bb589fb9ba18ac8e9e82cdbd08e9b584d0a8224cae3e9dd91e25699549007dc0d99165a73cda1c99fc48f6bfdb900c60e4481222505c58cc1108fbaf317d361d1f2d78f6db6e14b283ca9f1927f4f8a0f6f52818be03c7b257aec57f06a0a4279131a2bb0a13b23ab188ea50a686abb2f7e4d0f7a166f358e4cb886b7fbdf51cd9a153410dcc4cc5db7e8e94cc9ba2371a328480ad20f51d7fa012f367a0a8f9c882c47b5f714f0e1b35f72b2261989513c1428d648aa8ab8c12c87dfea38d5be0d49097fce804c9cd2ac8f61b68579853129351e3bcdbdae3371d2b12a150d94b3097161c226c50a1d2c1f8b4c10a986e21dbbb854ad1d26d0ce5d950835d14664ee8f58c537f5256b761b4707fe8d46cc1658798d285310a1cff127b1280cab3f1f633569391d5a7cc08aa1d108b93c38df397d90bbb81753930934df7dcaf8f960dff660fe239aa15cf48872668cacf4d664dc0809fe9d780ab202c3a968abb56655267c907eb3343809b2407105a5c14d53a3b17a9a1552314d27e13daf48a2bb7b2c9fc15aba9ae1d6325c11fbe8432c067efa72878ca56c6463b6cf4d29646905422908a4a1f7741d0049febed4fc2b7cc27154031e50a0ab297826383935bef6a0f968db92128e8a940509b5368146bdcacc852b9d0b4ae9624635f9e69f3a7bc8e6f3340c7de46f49feb20a46f11aef464fa6696a60865bdd0c40b1c411c9661fa9f6393a33a7eb4afaef3eb1ab4634a42baeea780ac6c0c4fc8cf7a92cf0592f993ac85bdfd6c18ba4b7cf4c4438a8330413de8365b4a080234f59edefca0c5ce9697b20cc7b71d04438c00cf3d557bd03b5e1b86e167d2d6e09714135ef720667d0f2e7ca54da419d1bf6722eda31381059216009cd8c99ba1d7f9ebc1bc021457a195fa5be2f0727a84cf4cac5e080f22c836a4955d5ed06bee2eec0d39abc5f459ac43596fee3b341dfbd7ce6f4e57ea42e1e8d4f65880b8b77d2ee27dc1efe95ff1bacf5aa14933456b68645380d0f2ef6284b9946857456d64f4cb656998e99e3e286f596b31c69a69d0ee8444ed838ca2f0ead1be9538e4e927239d0e65a3f871dcad33881f69592eed93a9fafc934aefa67bb87d582d0ae4cfbb5c50325774bbc259a277749751228d3610f95fd56e9fbccb288eca1b14c8255b6996a59c91efbb08440ed91cdd53b0aab82600906904cee2a117a06157e24fa822e1cf4f9db4c2e8a5e842cfc503e578e69002fbae194b6bc7c8b69aac7359292109b712eb49d21946f5ea2745ab77ef59950dcfd926df2aef20e85f2a14554aabb417f15c725c73edd4853926ad6c525afa2c65de213cee799c18d1ced9424d10d7076fc5862579702a5f91031381f41cb8d9899ab514cfa1c8c51437df9710271d8cf69e8900921cba296703f1a7b5234500c1625884fea594d836a930b06142a6e577cd9c2a32cae65e712624abeeffc423a5d5ed7bd75fcb1a82ecec8acd0da9918a5c7c189f14f8cdf37062f93b87f9188501556060ffc6eac435cb1624f2af688316366e03cfb869eacf83d9d45fce910c3347f810b614c2e4291e70471ca2b574241c3f3d9740c6a45c7296a2f275acbde72e513ef4e5a1123a57c2eb1bd023af716c16a7747204338f60b6e3ac514af50b21952c21592aefb6149828a5183ba581d5ee8647f374645ff941bab67bef760ce353b456c4b51c5d3a0c5372b1773b944ad67a92937dd838e1b6f550a1dca975d6230e430bcc278afed54e0621008b2f850107b0244359e3747be5282630452d432e5df0fd160795effed150f9396a7da5a1e4dce0c8f62280ff2fbfaa813859a671208b4b9f05fe450729b0efad83a790acd688a90e5fee5550de4ddeac70ecd125ad076c4e2b68652e6ea520e2b6b339b4b9dc219d853e06b9aa79d022e53607213fc254e15ec3e6b776d2b562997e0fe52b98c58e1c0316b22a4219460053da87e7baff7dc1892c2de2f324dd1169b977f3a6698d0234c78de3e46ba5824f3e373f264e8d28fbb4cc108a41fdecd4b629d92b0a65f84366bf504eb5a894ba40c89f9df854dc469fa174ac85cb8d2adfdc099ca9848a1032b2e2f375bd1544dfb69e33492e1a4b921ad7ff17c4c7e357ff69f42d2301c302ee2ed313f0e9a20ebfe028a8737d6e38bf179940179cb779b70c2276264cb4f23249db7d5f179baa842b70f5b287cf74ce1ff6b70a56be8f2fe15aeadca229804923d28a793838bc605eaf5dcd362f757577ebdac54b09fd73326720d3522d002a41a3b5f2450f48286a5ea45836b5ee77fc415f47e0716049ec2610d607737fd5a73b066b4876f9d744f6b3486b088dd3bfc3d393a27c6c799ce078e2ee348257b5ec1ba9de76da2a67ca912dc2dd5afc70834ceecbb8bd41f6e790294cacd5891bef1b4e2124dcd6dffdedee8f16b3bddc030429dcb0f98e6fe0649cb14eed3293fa4933b2ab8c0ec0ff4dbbced1e32dceb317252e715b872b00478cbd7b0275b7394a0ccfe9887410b32f1ce9266b3b83470ec982cf908507d3ad0cc366bff3759388b624701b3e0dc0e7928386b155b50b42a8e352622516beeeddfb79866a2eb1d360802cd19d62fd171267a0fece5f54e315a8cd49c41072f2a7a0baab5aadae2c1ff28e285b642f8d3869321bd18b4aed107feaa12d055b179a8ab7b50e2796d287a196e280d527b526c45c8aa98696d88a02d923d06fedf51336c0695c218e70448073921971093ea44b5352e10ce6cec26d082b93f69958165bd986f56650a62224c2d9fd044bd8fefd33544c6bd141b4cc211a087fa57c09e195c8edffe559048db738d1395f5e2625dd7cd035b8c76aad6c238fb52a7c5ff0965fc7122a5899746ca88abd699d6078623722fff92726e18613519f2b1927504fd5cb7a38ffa373c3883022f0387953530834affb5f05e0f44c24caa75561b2b63994493ab857fdc30900586fed09298d846e5936869b43d81c4b91902028e57a8f2da16355ccb7a77d29ecc8e66015e979b2f3edc5b8d77c45348dea55c9ed6b7465acf899f4bc1a7edcae0b0daf69ff85c504eea1294620b6d3dbb004575044a5ae7c110010c2cf39827fbdab3b42ac35d147fc53bb5e7de6c47091dc80c14b8da494b2e913d1a52085e29af19edc4a417346c5a896a3851cb6132511e0627d190b77623c8a3bb6085eff22ede7127f7988a1d388fb70ea20d5c1b2424c5aa83532bc5162a5d177968b4a46583f2d4b92d04a5f19145221aeaf724d92ea1d4dfb53021b47585bbe5ce35f8d09a83e13fdb1de8e52dc646d41e810879ce9c830959c3ee93f11a16d030d141863244395e3f847505fe6d9594a34009fec9a743c033b9793335684cc5c3d0eb0ad094f40a60264b02cd88c583c850d99c5b9c6c5dcef467ca3ea38f2aa42f5657cd940aeb12960efa18d571e4f958b9cd90918e069a486d84f214617ce29c0f2c26bf84f12f5036f26a8de0c8359f572654bf5ee06d38f741c464976d95ae3fdda45c2ed2d08ef71d3590e82d235e0fa357c568158791a195d4a2d9615e1edc85be64cfd169f925ffc4f636f86783cf43624a77bdb9b172228097f02f391df00668dafbd9932298b23cfadfd1b8d14a25cb408a440f930f0813de73c1eb2eb4b3c802d718a672453d0038965c6dc98db96fb4e06f1fda72782d0839d4e8b477ebdb2c73510db44f643ec7dc4fcb837806853caa35cf622aff9d44381d3f7adae00650cbb6f0334ceca14ec982dfb5817d7fd49251c203b6463a09c14885f754603291ccf0a7ceaa57284ee751774fa5ad72f9f7a32fa542947af40601e98057895f2869d4ec2db0d73930962535fc9e12ba7e6777cb458592bee505b367012ebd27b256fa0fac1452cf3b28eab573549b7c7a13752ca0189768f738d5f8030fe999f7bdc466d67bb32937ae469f1a1e21fac2ae2ab92a0a260bf0e9ce20625e82f88d0ed4d13876aed768765d77433bb9137d92d622df502aef574de82fe28063128fe5a1787ced99734c2f3f221e80d3baefd367d01d950ee1bc981b4b5ff86b2a96ab78fa3c1201303cab473103d89bb185afc77dd2cb7ac1564045036fe9fcf85af5d73a7553bc45bf5e221564540982db2f81e612e7c1715d3498b8d7851c0160146d6eaae9e30c81dedfca8e7122fcb69b26b396629b723f1e1822b8d5d8f2ac583728a5ab40010f88aa42f37f2031a3e99d8d6661e63f86f65af521066ea6af89c89e1748521b8368cd03409e895a941025ee777653f55e66cd1a0cca21308666260c3b9a306ddadb322eb1d09f7b27fd570cd35b6ec88bb391e3ae4745e17fb4dd7aef1d75b4ebb91e6e7789b241566d7c0cc97a3a126ed50b0cb621e015414f62641afd85bad78470463f86d8287aa56d331911c23c4cae8e5dfea33f3789c03d61f51c590417b5ff9f1aa35ab6a15364296c5f9399216ce565210a4075ac5e43e916850774a127f9174d95b43d839e056b4a7d679bb8804951ca171c0b59f4d6f32c4fe8f908b9a1614591f5d1e1cf3348e02317ec4655c693417a4c4e7007a8db02faa1634f8eea9c9bbe5b149ce2279953a54884392dc7251dd38670fd59d9d1da5203340909d50f779e864339014bcb545d825cdcccedc558a1d01a2784b8f499ce9fa2ddb0dd1dc0b93d1b282a96cb4ecf152474dbc4b2853b30c8e5fcea85bdab949f5eb1e98d81c102c349f680230082db5aba9e20209c35b16598507d28211b49763b598a7e60519d5b28b67c027cb2657cf2ac7c7455291fcfe63f0b43afcd3afaea934da97c209d02e5b47a686c1c284aeee5d662fd9d9be7c576259d9f1a36fc0f7fe329a1da1dbe078381233940745fc28a56db98b1a8442325168158e3f0b3cbf8a368d19dd20cdfc1c4f3893a30a49223050159b0bb8b7c59ca705ae25453988d87ca6cdd2bd2fe37847ba67cbcf7a494925a8598b7b50a741c9ced10ea08e35c422b79265561a07f40ebb89bc46069a1c1ad95949fe757a76ff6b5386a043abc967c367a9d86b54d374e573540dfc1f6d396f398abe9735f523b778fd124ac1e1eb832a66dd4b1838a50e6a4eb1b95b8a60a94f067b24d1194976c539d5ec287a261bf25904575be3ff49e7411a8dc09739649828124c14fc2b89dad1f3f5725db2e45f5a447cd3e4bdf9e1e95c5ad7c76fcf0c1021cb6c32e6985e1d113030d534eecb0dff2554183ee18da2da5d21a8b994a81f05e0e6ae89b20bffb4be333d1956270da23e9905830921b1f3d615a56a20b11d45ccd1d22b910e33f475a92c31fa5b4675ddee18336d0ee7b75c07df2a9d4ad53d83142219a00aef15e1e9dace0f039d63a530fdf671a54aba3882dad0d439632af5576726c3aa095cc1a0a03063e8a6581b78bef501acc24b05a0150d8f683c90e8e5e283a49f898906dab926e544ead48cb9bf9a6e1bf140b5273443b8cb8166b2d8a5464a3e9d9f4246ac81ea91b33a0b399dde9f5efaf792bb04cfa028f40b7c92db2d9c33e16ef58b9263350879ea94e581a1187b2d1931b1cd7606a76bd8943b7c3098a33bdf476960af7bdf2854b1336e72feb603b8bb2242df0839d157843d369a50a615068ff5d99ecebe8dc19158a6c654e853cedf860a727bf8140c062f5d307fdcd150ad0af03d2c3a913b91047858ed6382d2d2d30f5c0bd419c2cd4047f225107ea8bf4a3a69384f16b5b5bb2655bdb750db4e975794592987df95f6a90374b0a08769b2c957faa16a21270196afba76b4527f01f0c5db7fa16e2da81fc49336e20bc3ee1ccbcb62255c84513d9ceb706f03c25000517070c03b7bce838e6b6cbc7f767959fbd62e11ab7ea6d760cff674a4296e6185eb348028b472290922160f3ea36c22c8375a016f505017c0a0e041dd8e52b4f19ccfc701109a19391a059d77db239d40a06d84a6f0ccd08aaad764e53ad1da19ee825a4d25ca7cd538289bffe135486ec1614e28b3682c7081a1b0a2c7272f4e36f6d0d9e68d84209126dc59312d48eed1c63c90efeadd472259392c28746abf394c5c6c97d3fb00b70a74c313a817ee1719c33f16d58f297fc7eacbca5803df115745079c5434e851ad6c1f0e8ba0bdbb66cbb6789b89a23526b476ad0f2cea0907e72702f93d37bdfe7b39fb9b33fb1111e58f5c45db8cc38afe4e03a318aa0690afb870a67aeda7da9640fdad1e1f551dd4757c69b4f523b616e502514a2e35495916f2e5ddab1ad9534644d99ec56e818caba173773aa5e45104deb869b23063eaea5542d3bc503a6948b83779aa46879443cad02477451b46429f1f67560c31d4377f96031ab94866a73be753c4ab91cc6576c3991c3423103ebae604e887c56cbacb9e95b8b46300b62e698a6456a0d175cf682eacabbe301e0b0ea34f963daed0dc6c1b75fa5e3870959913e69e61911d9ff646e9c6bab33fe566871027e861577c4d7fdfdf94ce7ac1a3f6d29daf28d660431a89c0b56c4b95090e2ca5df62c1e5c5dbf98f067751819d4c5914aa33883b7b521aab30d14e1cfae74fcf3ad4b2cf9448009d3223ad984e0c50f92d465573a6fc2894f8a5d4e855316738ecfd6a6c157d39b5c44d80a7cba944cf9f7a701899859821cf2bc248459f7a350fefba53c1481a7197f024f2eb74251455c06f4b82dfcf3ccf3e3b98b898fa1b16c310125e5e9fd4019acccbe91b4d842ddd52ee56f6d3112dec80159d6d3ef93bca70e7afcccb223361c39addbe3c429934cd0ae35f36a8f6309f08e36b27341db1f21fd8a148b239361b31a85f53bd1ad49fadace6c64d5f4363427fb2f268e8aec6d81cdb7f1252baa4652dc55881661114bf98cdf17190379591f0e22dc97e790f53f463bbb0ad0ead78ddf7dfe2e26052acc31cfe52b822afd5ec5c75957106cb5c368c09252ff3e4f624d90e599279fb985ecdb7d8880dfe05ac2d2da83e34e2b9b88f5dd60107a4509902fcddf4a36605e5c7a2606a4aea9fd4b5b24ca6b67d6945d133869cf9276d8c30b08c2a9f4bf03f4e0b956fd5f3c80b958ac5c41e4115b6708799c3102bd8b6c7fe17ff8c3f89c7437255faf69d1e16074086dd44d038bc0211ac74743169b462dbc085d77bf45eea72bf8348308bf48feea02d739a0fee9fbf71023ef8c6828da1aec8618cc2345ff663f88bc52a990e6b9591425435b0c7900ea4068f5aa6345e94254e259a71290fa23281658a6a165d1dee10dcb355518264824665ff2c5538de9ae4487782911f79e0bb09bc2c2d8e0d91b33cbec839075c9b38c848e9d2fad7368e96c1932042c3e85fd95b7d4500e6cae9e649082e9d5ca6f2cf91fc7ecaccc1049525d4325003424cacbd6eb5b8cc30b6893bd1ef46a8e7cbcc87dc2dda5c802ef1f8bb607c7457eb161254dc0feb60ed5ed0383fdb4db91d7e41d45c8eb80c1981e801ef05703f97f8710a2e00eb0559f854f700f946937b9e68c75ad6d0015d5d79be5423d0d846bc76f92ea7ebb0302b3d3c695c0aafa83b2bf029a444709cbf2cefbdcc7eaf3dd7a16f8ca8c861e883db10d433f7fec547be45e6829962e430bb3c93e8cdfb342c1cb7e53d8a6ea625d5574c4b4303f61c4338a658e652ab2bc0029c0a78a5114f495a439956909cf42128cb4348affbecb20b7fea98e22160e9a58e7666a00e7b37fbec4bd3860d66a39d1232a57e8cc50710c5c666f7efa98f16f9a02d843c94b0842a383945d06899998ff2fd01ffb58ab53ea89b2c93634c48d0420edb9791b8e451b35b534b8b2874c4859c684cd14afb5335a2555c75ad9df018635bb7131a7ef204ccecfed33a675fc51687e3f8818406fbf58e7b5fde1ca96153817e1b632e89a78d967eb6a34af1dac0d9ffa448b7b9bac27afc305a7b47febbe0a37036c18aef6852b1b2759d67479f9edb169e796d949844a1624b1e832a2eee9be36dc5866d6fde431cfcbd4e305d322c9dd07f83b5b361daaa74bfc9fbce8b447210c327468659ecbb0a5fc20d0cb79de7d1d70bf251c81d5f38711f3f4bd4752685b077058beb465711b1359d2a7d2f59216c5a807121bb97e7ccacc46526e4072f1d6de3b487d492fed0995e2273fa3bb115bd08d32d8e57eb2aa8f9d3b81babd1b8334c3a5e69422b75502ced3793d07b9bdf38e9d9fa1d2e48c7886dfc41985e8ffc49f09c4ba58ddc3b4cbf562b591f8939ced5d18214a77cc753075334a157373cc33cbc07a731cd6342492f5e05f78108e627bc88777203c76632bbe0120924c7a51bbfc9dc789a5695b7c95ef544935032fb81d499c454a2d78727875c20bc8a48a9f23cf6595c17c9cdaa8d04bab8ac567ebd3bbcdb40e11f1893fea3970f176f75f38d17d6ee1bd4ab76c660723a776bc72319199ab82c40ac4a9f4f475e8fd4643a4be8601cb5172e112c236c7c430078601bf183a59a03885e994c1116a9d4ef275790ff2417ffd85b43274fc57654466fa394958aeb11f343c3439604af13997011af70b67df1a9dfa4cdb751a2dc3e5bbf42f7b9ebc6dcebb2dbdc57d7a2cef7409dba307b7cf6eab148a924566341d035cabc877c68d0fbfaebdd39c16304b63a1bae376fb4650708bf5695dfd7ffc01f43f0021f622de0b116ea494454497337a0ec469963de7f9d2b1d6c5a7a0a7835777a78a2b9e16eec696446981d2fea550f011419b96f7b2018d027b87fc715521b0302bd7b5b3bc5f033346029eced73df07dd1bb1f91848376b40b9e9da7233e7832edcc7b54ef6fd320d19efce78d58ea7020fbbdf77612dc8a4f3281915ac9706f346e405b9f489f8f2e9a2decb8d18bec1e5f735a4ec69bba4dc5d36c9c1cc50b92fe67b2cdd53fa671c0cbe331abdf46787e7c9912b951aa20700dba6cf5a209fe5c9c61ef62a8e2e572ec774b2d0f42d570633fc44d44826e848d47a8f386a5704e0a3eaf1d06617181aeb166334ab55d5aedccb27abf19a42a480930e25465721336c70a2ea7799d21a3659124ac9503efc99c1b13ca2b9723e3e338055f9b3cef7502017ebbb09a64b06462db353a5c562101cb7fbf29e056deeb1ff0c7bc877210c941c87401ceae52bcecc83e87655069ab931bd813c1a87d67554f5d2cf435e6dd92a515c22f5d5a9a44ebc81e9c4849104343b80824005619312a9e349d996e366d381da42edad1a560bf5e31ecd049e92ceaf42954958600a7868599fe10e9b34587368d3044250c3d1a8ba6c8dcb6d318d4f9e71c2d33fc74cb57620a8343258d072f3aa767b4b178f3f66d5a713dae2426296c12edf9ee37636869e30df64cd3855fae20bc7602c1b7e6c8246ed4be71231a5ec7b5e7a9ebb08bf8667d8f2900ecdb0a0addc14a2328eebc448db13013e6a3c1a661065e5ac0a04b5171bd84c9d9d947a6c31257ed13a966530c5e20168c100117cf82b4c00ea3ad00ea65e1af89535b3f11a1418ddad33db8cec281543732d2ff4eab54b12cc95f7d872e75bc01bf6c580540b0e26413c6c2321ddfb0447bdb6acf05ddf2bb92534a3a5f37d6da882289f6fefc6a213cdfcf34902137fa3b982b2b4c27c611f08909a18405482f1e3a2bf3635d3e970457541da16e37bb3c422cceeb484bb64c78724431a543ecf4ca851914c1555e3b785ec87bba3769927f6c29f80e7ae8632bdb9acdddf7c3b5580740d9b2bfc25086c9566844136f3fac74f429121f86c378c68c20a194b0c98b1e92991954cbf60477e217a2e25297fc7b18972e40c531ec19e1eea193bbc8893392d8528c6a0375bcb4b082d20d5c47cb330bbb4b74b91ab55d4a0d3e1dee8182c581e8e70ac30108eeb7185c6ea3f786881ad124e1404651ee95cdb0fbb0d0f4a2b43c795ec1cd4e46234a88862d57903ce878b641004fb637341e5d6bf5163f1a3467b828f6eea96c3c2bb79503687867e11eec32dec452e0fdd2eaacfc0a477ee839ef049855da734d18212142dfe2a95ab9ad9bc4f98c3bfa34134c7e6c9f8669303314d4e8c1bc5475e8fcf418cbdb3246ebf393d911cdfee8f2550dc1593ece59ced81a4ffb2484f9c8ebed0aed8d418138445c4e96b209adcc4afd70f09901662daa2c8c557d6039768d97e6b9518f0de4ac2e0187ba08a4a9128d3e632fca102137338b5e568f12c7bd28db772c800fb5f4d4e683b201840731bb7c034235cd73313cde88891bbb31597bb537696e6c987302297f9717b8053779aed447d33ef9129e84d3031fa9b453bd5731fb010ffd19a9133e0ccbec2461cdd31ba294d68c60a8535b15584bab6e6d0ce6c1cef4755bd5f7d90f4debb40af1437a19a96ef9c0709692156152091c7efb58f2d39a65b96416dc09e8091ae08d9be5235a3c1ec062862baa1aab788f28e83ba4635cecc6671f2320f42b4f711e7d0fcad89d6727d3630da1ef35e32dee39eda665946abe6224f17f2acc29e62518fd51eb7f193d9bb16c38204069098c293fdce24c1c79229fd08622a4256b581cffce12e46c20248dc902753f0e3c91f9685b3d45f984620e262b3487d67d152f1c50de3fd2067a9d3debf715f346dd2f712c55545336a9036ba82bb06cfae59a48d083c3388f77790c9639fa0a9c33f4c66c7513042bffb765c2a4b3657dddf0ea094d8d79018f66c8ef8e9df980a89906275edf4a467a5db0a623976899f0efd167aab6ff385cdde59027a95a570277cb94ebce503906c28527e3114eb9ed739d0c2f4cf82786b35c0054718f47381ed8ce9b107e1f1019be5fc877166da667036f0c1b84e2b5118b5f4babc052d997e5f1e8c4cf45eb26430b74d9e1df3735b8d5df559903143d983e974bed6cc608c2580a991bdd3628ec676d348de8752cafa80c1661f162e35c25fc0ba0198423f83214fed800f9355ac8ea67951cfeeb3736b50c1e14d45d33aa25fc72c38702bd5dd217842e54114f4799c45ff1b7cec9729382ff7fc3ff80cbe1a13d03e19eecd7de676f6791fe34143ae30c97da9623907d974a37b65d0ef5d46b718d58541c6b1902814de71218ca7396ceb5fdacdc3cf4d110862402e7cc6254f1e44e28593fd443290262db75fd482ce1d305d6bf9fd3e5e0efbedac5a4d097650b111e6e9e1b2c66a23ac5bf27ed78d25d1a54c16ca4287126736c2f17ab73e683798c29d16481775ada8e20d94b00b6b29654b18f60e2853fdc7d3ba55d7df660db90288b6f440efd19f0478047b12c7b07ab2b1c9529597e6462d20612e6c3b6d1b1d11305f8ddc811860450504b7cbf9794edd0d07c25ab6307d74afdce958355eb919dcb1fcb8038c6dd5e774ee398dc8553a9ddeb551f", 0x2000, &(0x7f0000008ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000008b40)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r10, &(0x7f0000008b80)=[{&(0x7f0000008bc0)='n', 0xfdef}], 0x1) 4.354895163s ago: executing program 2 (id=5914): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_emit_ethernet(0x42, &(0x7f0000000040)=ANY=[], 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newnexthop={0x4c, 0x68, 0x401, 0x100003, 0x25dfdbfb, {}, [@NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_RES_GROUP={0x14, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x3}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x9}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) r1 = syz_clone(0xa00c1011, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ptrace(0x10, r1) ptrace$poke(0x4, r1, &(0x7f0000000080), 0x96) 3.893453895s ago: executing program 2 (id=5916): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r1, 0x540a, 0x1) r2 = syz_open_dev$loop(&(0x7f0000000040), 0x2040009, 0x600) mmap(&(0x7f00003a0000/0x1000)=nil, 0x1000, 0x1000000, 0x4013, r2, 0xf279) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000080)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f00000000c0)=0x800, 0x4) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r4, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40004) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x20000804}, 0x4080) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$TCXONC(r1, 0x540a, 0x1) (async) syz_open_dev$loop(&(0x7f0000000040), 0x2040009, 0x600) (async) mmap(&(0x7f00003a0000/0x1000)=nil, 0x1000, 0x1000000, 0x4013, r2, 0xf279) (async) socket$netlink(0x10, 0x3, 0x10) (async) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000080)=0x80, 0x4) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f00000000c0)=0x800, 0x4) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r4, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40004) (async) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x20000804}, 0x4080) (async) 3.890801643s ago: executing program 6 (id=5917): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="640000001000ffff263d7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="20ba0100180a04003400128009000100766c616e00000000240002800600010004000000100003800c000100bf000000040000000600050088a80000", @ANYRES32=r1, @ANYRESHEX=r0], 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x8000002) 3.587919047s ago: executing program 2 (id=5918): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffffff, 0x0, 0x381844, 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000740), 0x318, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000780)=0x4ee, 0x4) recvmmsg(r1, &(0x7f00000007c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x4, 0x0, 0xc) sched_setattr(0x0, &(0x7f0000000800)={0x38, 0x0, 0x1, 0x0, 0x0, 0x10002, 0xffffffffffffffff, 0x7fffffffffffffff, 0x7, 0x7}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$evdev(0x0, 0x2, 0x862b01) r4 = syz_open_procfs(0x0, &(0x7f0000000840)='net/igmp6\x00') preadv(r4, &(0x7f0000000880)=[{&(0x7f0000009b80)=""/102400, 0x19000}], 0x1, 0x40000000, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) r5 = fsopen(&(0x7f0000000040)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./net/netfilter/nfnetlink_queue\x00', 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004001}, 0x24004800) read(r7, &(0x7f0000000300)=""/1024, 0x400) read$FUSE(r7, &(0x7f0000000b00)={0x2020}, 0x2020) syz_clone3(&(0x7f00000000c0)={0xa690b000, &(0x7f0000000140), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a4c000000060a010400000000000000000a0000040900010073797a3100000000200004801c000180090001006d617371000000000c000280080002400000000c0900020073797a320000000014000000115d30757fbc00010000000000000000"], 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) 3.399547152s ago: executing program 1 (id=5919): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newlink={0x54, 0x10, 0x1, 0x1, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'erspan0\x00'}, @IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}]}, 0x54}}, 0x0) r1 = syz_open_dev$video(&(0x7f0000000240), 0x5c48bdfb, 0x2000) ioctl$VIDIOC_TRY_FMT(r1, 0xc0cc5640, &(0x7f0000000280)={0xb, @meta={0x53353543, 0x5a4046eb, 0xee35, 0x400c96f, 0x7abfa9c5}}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000480)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000004c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x2, 0x9}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000500)={@mcast1, 0x8000000, 0x1, 0x1, 0xa, 0x0, 0x4}, 0x20) r3 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000df2bfd404b0c0001cad7010203010902240001000000000904450002c9cee40009050802ff03000000090582030004"], 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0x20}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x4}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_KEY(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r5, 0x20, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x1e}}}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x48000080}, 0x20000000) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x4, &(0x7f0000000080)=ANY=[]) 2.94524833s ago: executing program 6 (id=5920): r0 = syz_open_dev$loop(&(0x7f0000000540), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000005c0)={'#! ', './file1/../file0', [{0x20, '\xd7\x8fL\xa2o\x0f\t\'-\xaf\x006y\xc9 a;\x04\xca\xb2\x9f/5\xb1\xb6i\xff\a\x00\x00\x19\xff\xda\xc3\x8a\x99q\x1e\xd3\xad@\x9f#Mw&\xdf\xab\xfd\xf8\xee\xa0\xff2|\x14\x89\x8a\xf0&Of\xc3\x1d5F\xf6N!\"\xd4|\xa4\xe0\x81\x88\xa3b\xcbZ}O\x84\xaf\xf9\xad\x9e\xaa\r\x85\x9fF\xbbs\x1b\x8e*T\x86\xca'}, {0x20, '.\\'}, {0x20, '%^\\\x93|\x82\x84\xef\fu\xd3\x10.\xee\\Q$e\xa9=B\x19I\xd2Le\x14P\x86\xd3\xdc\xe5b\x93y\xdf\xfb\x17B7\a\x9c\xb5?\x0f\xc8\x9b\x9aol)\x87Z\xcc\xa5\xacG\t\x8e\x00*\xf8R\xa9\x8e\xaaUw\xc0!\x1fa\xf5\xecf\x14B\xd4\xd4\r\x143Y=\xa6\x14\x94P\xdb\x81vr\x8c\xfd/6\x16\xd8&\x96\xb0o'}, {0x20, '/\x00\f.\x0el\x85op8\x00O\xaa\x8f)\xa82\x8b\xe9\xdaw\x9f\xc8'}, {0x20, '&/&'}], 0xa, "521299a432289bea0aa53f5db534de379d0418026c1f265a707f7b5008ab99f2c9a997ad079ea398ccfcdc48da03fd070a2913b99836792d5dd5992db64276c3aebed24145776c2f03ce2c7c32"}, 0x14c) write$UHID_INPUT(r1, &(0x7f0000000740)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000001780)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x0, 0x3]}}) (fail_nth: 1) 2.930148121s ago: executing program 5 (id=5921): r0 = syz_open_dev$loop(&(0x7f0000000540), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='cgroup.stat\x00', 0x275a, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe315}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0xfffffffffffffcf3}}}, @IFLA_LINK={0x8}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x48}}, 0x0) write$binfmt_script(r1, &(0x7f00000005c0)={'#! ', './file1/../file0', [{0x20, '\xd7\x8fL\xa2o\x0f\t\'-\xaf\x006y\xc9 a;\x04\xca\xb2\x9f/5\xb1\xb6i\xff\a\x00\x00\x19\xff\xda\xc3\x8a\x99q\x1e\xd3\xad@\x9f#Mw&\xdf\xab\xfd\xf8\xee\xa0\xff2|\x14\x89\x8a\xf0&Of\xc3\x1d5F\xf6N!\"\xd4|\xa4\xe0\x81\x88\xa3b\xcbZ}O\x84\xaf\xf9\xad\x9e\xaa\r\x85\x9fF\xbbs\x1b\x8e*T\x86\xca'}, {0x20, '.\\'}, {0x20, '%^\\\x93|\x82\x84\xef\fu\xd3\x10.\xee\\Q$e\xa9=B\x19I\xd2Le\x14P\x86\xd3\xdc\xe5b\x93y\xdf\xfb\x17B7\a\x9c\xb5?\x0f\xc8\x9b\x9aol)\x87Z\xcc\xa5\xacG\t\x8e\x00*\xf8R\xa9\x8e\xaaUw\xc0!\x1fa\xf5\xecf\x14B\xd4\xd4\r\x143Y=\xa6\x14\x94P\xdb\x81vr\x8c\xfd/6\x16\xd8&\x96\xb0o'}, {0x20, '/\x00\f.\x0el\x85op8\x00O\xaa\x8f)\xa82\x8b\xe9\xdaw\x9f\xc8'}, {0x20, '&/&'}], 0xa, "521299a432289bea0aa53f5db534de379d0418026c1f265a707f7b5008ab99f2c9a997ad079ea398ccfcdc48da03fd070a2913b99836792d5dd5992db64276c3aebed24145776c2f03ce2c7c32"}, 0x14c) write$UHID_INPUT(r1, &(0x7f0000000740)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000000)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x7c, 0x4000000000, 0x0, 0xa, 0x6, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265296c7f306003d8b3f4bd00000003000000f100", [0x0, 0x7]}}) 2.580423298s ago: executing program 6 (id=5922): r0 = socket$kcm(0x2, 0xa, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)={0x30, r2, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x81, 0x1}, {0x4, 0x5}, {0x4, 0x6}, {0x1, 0x6}], "17872f6b66ca15a3"}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) 2.333156181s ago: executing program 5 (id=5923): syz_emit_ethernet(0xa6, &(0x7f0000000000)={@random="0f539af21094", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1200b0", 0x70, 0x3a, 0x0, @empty, @mcast2, {[@routing={0x21, 0x4, 0x1, 0xb, 0x0, [@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}], @dest_unreach={0x4, 0x3, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x2c, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [@hopopts={0x2f, 0x1, '\x00', [@calipso={0x7, 0x8, {0x22ebffff, 0x0, 0xfc}}]}]}}}}}}}, 0x0) 2.151099213s ago: executing program 5 (id=5924): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (fail_nth: 3) 2.116364695s ago: executing program 6 (id=5925): socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8000500080008400400027c9c000461c1d67f6f94001600cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d", 0x96}], 0x1}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a010400000000000000000a0000000c00010066696c746572000040000000030a010400000000000000000a0000000c00010066696c74657200000a000300696e707574000000140004800800010000000000080002000000000064000000060a010400000000000000000a0000000c00010066696c74657200000a000200696e70757400000038000480340001800a0001006d61746368000000240002800f0001006970763668656164657200000800020000000000070003"], 0xec}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0xb, 0x5, 0x5, 0x2, 0x0, 0x70bd27, 0x25dfdbfb}, 0x10}}, 0x4c040) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="fb2af8fff1"], &(0x7f0000000680)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000540)={0x0, 0x18, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) getsockname$packet(r3, &(0x7f00000014c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001500)=0x14) sendmsg$nl_route(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="500000001000370400"/20, @ANYRES32=r2, @ANYBLOB="83040500010000003000128008000100677265002400028008000700ac"], 0x50}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x60, 0x26, 0x101, 0x70bd26, 0xfffffffc, {0x1d}, [@nested={0x49, 0xe, 0x0, 0x1, [@generic="1c", @typed={0x42, 0x11d, 0x0, 0x0, @binary="b38d7b3066b2d71c150b0f586ef10ed20644fd5bea60508057129d69f77f30efbd633210dcb73fcd6e7337c3bbfe6c08aedc89a3017ec40bc486f02397f2"}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route(r1, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000200)=ANY=[@ANYRES64=r1], 0x3c}}, 0x408c8) socket$inet(0x2, 0x6, 0x4) openat$ublk_ctrl(0xffffff9c, &(0x7f00000002c0), 0x2, 0x0) 1.93601921s ago: executing program 5 (id=5926): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x1, &(0x7f0000000f80)=[{0x6, 0x5, 0x87, 0x7ffc0201}]}) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f00000000c0)={0x28, 0x0, 0x2710}, 0x10) accept4(r0, 0x0, 0x0, 0x0) 1.43755882s ago: executing program 5 (id=5927): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x402, 0x6, 0xfffb}, 0x3a, [0x8000, 0x401, 0xf, 0x8, 0x86, 0xc40, 0x3, 0x7f, 0xa6, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0xdb, 0x0, 0x1, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0x10, 0x80, 0x207, 0xacc7, 0x8, 0x8, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7fc, 0x17, 0x0, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x40000006, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000006, 0x9, 0x8000012f, 0x8004, 0x8, 0xffffbff3, 0x7ff, 0xc8, 0xc9, 0xe, 0x2bf, 0x6c7, 0x1, 0xfffffffc, 0x5, 0x0, 0x0, 0x9, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x10, 0x4, 0x7, 0x7ffb, 0x6, 0x500, 0x401, 0x10001, 0x1, 0xff, 0x5, 0xfffff572, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x9, 0xfffff256, 0x2, 0x1, 0xfdfffffd, 0x8, 0x2, 0x0, 0x9, 0x3, 0x3, 0x4100009, 0x6, 0x0, 0x3, 0xfffffffc, 0x48c93690, 0xe79, 0x3], [0x7, 0x408, 0x7, 0x5, 0xfffffffd, 0xff, 0x4, 0xb, 0x6, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x6, 0x1ef, 0x9, 0x8, 0x86, 0x3, 0x3039, 0xfffffffa, 0xb, 0x5, 0xffffffff, 0x2, 0x400003, 0x6, 0x4, 0x6d01, 0x6, 0x31, 0x800003, 0x200, 0x80, 0x3, 0x5, 0x5, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x50, 0x3, 0x7ff, 0x12b, 0x8a6, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x2008077f, 0x2006, 0x1000007, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x2000004, 0xffff, 0x6, 0x80000000, 0xb9, 0xce4, 0x10001fc, 0x10002, 0x4184, 0x5, 0x3, 0x0, 0x10000, 0x4, 0x7fff, 0xfffe, 0x8, 0x1, 0x5, 0x1, 0x6, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x87e, 0xfd, 0x1622, 0x7, 0x200af, 0x717, 0x5, 0x226, 0x3, 0x5, 0x0, 0x30b1d693, 0xfffff4f0, 0x4, 0x7, 0x7, 0x6c1b, 0x0, 0x1, 0x5, 0x803, 0xd6, 0x200, 0x30, 0xfff]}, 0x45c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd09000084"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000040), &(0x7f0000000040), 0x800, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000cc0)=""/129, &(0x7f0000000cc0), &(0x7f0000000d80), 0x6c, r3}, 0x38) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x10200, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x0, 0x4000) (fail_nth: 3) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000080)=0x5ec) 1.362309806s ago: executing program 1 (id=5928): r0 = socket(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0xe64, 0x81, @ipv4={'\x00', '\xff\xff', @empty}, 0x2001ff}, 0x1c) r1 = socket(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0xe64, 0x9, @ipv4={'\x00', '\xff\xff', @empty}, 0x1000}, 0x1c) 1.262514044s ago: executing program 2 (id=5929): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="640000001000ffff263d7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="20ba0100180a04003400128009000100766c616e00000000240002800600010004000000100003800c000100bf000000040000000600050088a80000", @ANYRES32=r1, @ANYRESHEX=r0], 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x8000002) 1.088851839s ago: executing program 1 (id=5930): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x402, 0x6, 0xfffb}, 0x3a, [0x7fff, 0x401, 0xf, 0x8, 0x86, 0xc40, 0x3, 0x7f, 0xa6, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0xdb, 0x0, 0x1, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0x10, 0x80, 0x207, 0xacc7, 0x8, 0x8, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7fc, 0x17, 0x0, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x40000006, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000006, 0x9, 0x8000012f, 0x8004, 0x8, 0xffffbff3, 0x7ff, 0xc8, 0xc9, 0xe, 0x2bf, 0x6c7, 0x1, 0xfffffffc, 0x5, 0x0, 0x0, 0x9, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x10, 0x4, 0x7, 0x7ffb, 0x6, 0x500, 0x401, 0x10001, 0x1, 0xff, 0x5, 0xfffff572, 0x5f2d, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x9, 0xfffff256, 0x2, 0x1, 0xfdfffffd, 0x8, 0x2, 0x0, 0x9, 0x3, 0x3, 0x4100009, 0x6, 0x0, 0x3, 0xfffffffc, 0x48c93690, 0x9, 0x3], [0x7, 0x408, 0x7, 0x5, 0xfffffffd, 0xff, 0x4, 0xb, 0x6, 0x8001, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x6, 0x1f1, 0x9, 0x8, 0x86, 0x3, 0x3039, 0xfffffffa, 0xb, 0x5, 0xffffffff, 0x2, 0x400003, 0x6, 0x4, 0x6d01, 0x6, 0x31, 0x800003, 0x200, 0x80, 0x3, 0x5, 0x5, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x50, 0x3, 0x7ff, 0x12b, 0x8a6, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7, 0x2006, 0x1000007, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x2000004, 0xffff, 0x6, 0x80000000, 0xb9, 0xce4, 0x10001fc, 0x10002, 0x4184, 0x5, 0x3, 0x0, 0x10000, 0x4, 0x7fff, 0xfffe, 0x8, 0x1, 0x5, 0x1, 0x6, 0x14c, 0x60a7, 0x8, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0x7f, 0xffff, 0x0, 0x87e, 0xfd, 0x1622, 0x7, 0x200af, 0x717, 0x5, 0x226, 0x3, 0x5, 0x0, 0x30b1d693, 0xfffff4f0, 0x4, 0x7, 0x7, 0x6c1b, 0x0, 0x1, 0x5, 0x803, 0xd6, 0x200, 0x30, 0xfff]}, 0x45c) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd09000084"], 0x50) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x281c2, 0x100) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/tty/ldiscs\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000280)=""/79, 0x4f, 0x7f) ptrace(0x10, r4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)={0x28, 0x2d, 0x1, 0x70bd27, 0x25dfdbfb, "", [@typed={0x4, 0x2a}, @typed={0x14, 0x151, 0x0, 0x0, @ipv6=@private1}]}, 0x28}], 0x1, 0x0, 0x0, 0x8090}, 0x4008040) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x89f1, &(0x7f00000008c0)={'ip6tnl0\x00', @random="0600002000"}) fcntl$lock(r3, 0x6, &(0x7f00000009c0)={0x0, 0x3, 0x4, 0x3, r4}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000a40)={[0x60000000004, 0x1000000000, 0x80000000000005, 0x41, 0x2000000, 0x0, 0x2004cb, 0xffffffffeffffffe, 0xa1d, 0x9, 0x5, 0x0, 0x3, 0x2, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r10, 0x4040aea0, &(0x7f0000000b00)=@x86={0x33, 0xb, 0x8, 0x0, 0x2, 0x1, 0x2, 0x0, 0x81, 0x81, 0x6e, 0xd2, 0x0, 0x8, 0x8, 0x6, 0x6d, 0x10, 0x9, '\x00', 0x8, 0x3}) 1.088492738s ago: executing program 6 (id=5931): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd2(0xfffffffe, 0x1) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000080)={0x0, r1}) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xf58b, 0x80}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000002c0), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x20040090}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a090400000000000000000200000040000480100001800c0001006e6f747261636b002c0001800e000100696d6d656469617465000000180002800c00028005000100c402000008000140000000080900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000500)={0x1, &(0x7f0000000540)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x200000000000000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r5 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}}) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r5, 0x40045402, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f00000001c0)={0x1d, 0x0, 0x2, {0x0, 0x1, 0x1}, 0xff}, 0x18) r6 = syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x0) syz_usb_disconnect(r6) syz_usb_connect(0x4, 0x24, &(0x7f0000000180)=ANY=[], 0x0) ioctl$EVIOCRMFF(r6, 0x83c0550b, 0x0) dup(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) 718.606853ms ago: executing program 2 (id=5932): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b3, 0x1000, 0x1, 0x158}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000580)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x45}}}, &(0x7f0000000240)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r6) close(0xffffffffffffffff) r7 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000600)=ANY=[@ANYBLOB="ffffffff75000000aaaaaa03ffffffffffff20010000000000010100000000000001bbbbbbbbbbbbfe8000000000000000000001000000aa"], 0x0) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, 0x0, 0x0) r8 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_FMT(r8, 0xc0585605, &(0x7f0000000080)={0x1, 0x0, {0x280, 0x1e0, 0x2001, 0x1, 0x0, 0x0, 0x1}}) r9 = syz_open_dev$video4linux(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_SUBDEV_S_FMT(r9, 0xc0585605, &(0x7f0000000080)={0x1, 0x0, {0x280, 0x0, 0x2001, 0x7, 0x1}}) r10 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_SUBDEV_S_FMT(r10, 0xc0585605, &(0x7f0000000080)={0x1, 0x0, {0x280, 0x1e0, 0x2001, 0x1}}) r11 = syz_open_dev$video(0x0, 0x4, 0x2) ioctl$VIDIOC_REQBUFS(r11, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x1}) ioctl$VIDIOC_QBUF(r11, 0xc058560f, &(0x7f00000000c0)=@mmap={0x0, 0x1, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x1, {}, 0x0, 0x0, 0x0}) ioctl$VIDIOC_STREAMON(r11, 0x40045612, &(0x7f0000000200)=0x1) r12 = syz_open_dev$video(&(0x7f0000000000), 0x5, 0x2) ioctl$VIDIOC_REQBUFS(r12, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x1}) ioctl$VIDIOC_QBUF(r12, 0xc058560f, &(0x7f00000000c0)=@mmap={0x0, 0x1, 0x4}) ioctl$VIDIOC_STREAMON(r12, 0x40045612, &(0x7f0000000200)=0x1) 666.539121ms ago: executing program 6 (id=5933): bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffffffffffffffff, 0x1, &(0x7f0000000040)) sched_setscheduler(0x0, 0x1, 0x0) getpid() syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04f74120"], 0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000080)={[0xfffffffffffffffe, 0x6, 0xfffffffffffffffd, 0x0, 0x2, 0xfffffffffffffffd, 0x0, 0x1000, 0x0, 0x1, 0x10, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff], 0xeeef0000, 0x2011c0}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0xffff, 0x14f600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f0000000280), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000000000000000400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00040000170000000400", "f4bd00000080190000002c88f16b00", [0x100000000, 0x7ffffffffffffffe]}}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0100000004000000040000000001000000000000", @ANYRES32=0x0, @ANYBLOB="0000000002000400000000000000000c000000002a1b8ff39f7bbb19345ddf619f8d60ec466049c71e5b655b559cd71c373890cee0cfc5e128759a3cda6cc6e12f32e0c07a7f80dde9b0a91ffbcefd39b81ed1f6b223e5623c99486ba92179f17201494c21bb8287276f19205592ff03c8330000000000002fa6a0f7270c777ec7d3bd28a17ae698db20dbacc22a9bc45b91753d73f724f203c213cb25341cc661", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) 0s ago: executing program 5 (id=5934): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000600)=ANY=[@ANYRESOCT=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000002c0)=r2, 0x4) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000700)="d80000001a0081044e81f782db4cb904021d08004f1e81f8d8150019001105142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aebfb0daa7b0cd39e4edbb57a5025ccca9e020000000000000040fad95667e006dcbd63951f215ce3bb9ad809d5e1cace81017f5b5cef443dc3ed0bffece0b42a9ecbee5de6ccd40dd6e4", 0xd8}], 0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) dup(0xffffffffffffffff) socket$unix(0x1, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[], 0x44}}, 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)={0xffffffffffffffff}) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') bind$unix(r4, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) pread64(r5, &(0x7f0000000240)=""/164, 0x131, 0x131) (fail_nth: 1) kernel console output (not intermixed with test programs): config 0 descriptor?? [ 1235.328428][ T10] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input86 [ 1235.382429][ T10] imon:send_packet: packet tx failed (-71) [ 1235.408034][ T10] imon 3-1:0.0: panel buttons/knobs setup failed [ 1235.547553][ T10] rc_core: IR keymap rc-imon-pad not found [ 1235.547573][ T10] Registered IR keymap rc-empty [ 1235.547653][ T10] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1235.547663][ T10] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1235.548095][ T10] imon:send_packet: packet tx failed (-71) [ 1235.576010][ T10] imon 3-1:0.0: remote input dev register failed [ 1235.576219][ T10] imon 3-1:0.0: imon_init_intf0: rc device setup failed [ 1235.650577][ T10] imon 3-1:0.0: unable to initialize intf0, err 0 [ 1235.650592][ T10] imon:imon_probe: failed to initialize context! [ 1235.650600][ T10] imon 3-1:0.0: unable to register, err -19 [ 1235.682013][ T10] usb 3-1: USB disconnect, device number 95 [ 1235.721681][T23827] udevd[23827]: setting mode of /dev/bus/usb/003/095 to 020664 failed: No such file or directory [ 1235.721822][T23827] udevd[23827]: setting owner of /dev/bus/usb/003/095 to uid=0, gid=0 failed: No such file or directory [ 1235.787114][T15792] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 1235.787154][T15792] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 1235.787183][T15792] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 1235.787211][T15792] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 1235.791695][T15792] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 1235.791729][T15792] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 1235.791756][T15792] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 1235.791782][T15792] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 1235.791808][T15792] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 1235.791834][T15792] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 1235.902886][T15792] plantronics 0003:047F:FFFF.0029: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1236.410910][T24668] ipvlan2: entered promiscuous mode [ 1236.428991][T24668] team0: Device ipvlan2 failed to register rx_handler [ 1236.524023][T24670] ipvlan2: entered promiscuous mode [ 1236.550890][T24670] team0: Device ipvlan2 failed to register rx_handler [ 1236.736129][ T10] usb 6-1: new full-speed USB device number 116 using dummy_hcd [ 1236.887763][T24674] loop4: detected capacity change from 0 to 7 [ 1236.917200][ T10] usb 6-1: not running at top speed; connect to a high speed hub [ 1236.917237][ T10] usb 6-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1236.924470][T24674] Dev loop4: unable to read RDB block 7 [ 1236.924514][T24674] loop4: unable to read partition table [ 1236.924666][T24674] loop4: partition table beyond EOD, truncated [ 1236.934623][T24674] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1236.975379][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1236.975406][ T10] usb 6-1: Product: syz [ 1236.975422][ T10] usb 6-1: Manufacturer: syz [ 1236.975435][ T10] usb 6-1: SerialNumber: syz [ 1237.232706][T24669] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1237.330079][ T10] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 1237.444218][ T10] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1237.470051][ T10] usb 6-1: USB disconnect, device number 116 [ 1237.516911][T23827] udevd[23827]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1237.626443][ T5364] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1237.760405][T23129] usb 4-1: USB disconnect, device number 7 [ 1237.776639][ T5364] usb 3-1: Using ep0 maxpacket: 16 [ 1237.779302][ T5364] usb 3-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 1237.785216][ T5364] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1237.785235][ T5364] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1237.814862][ T5364] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1237.814878][ T5364] usb 3-1: Product: syz [ 1237.814887][ T5364] usb 3-1: Manufacturer: syz [ 1237.814895][ T5364] usb 3-1: SerialNumber: syz [ 1237.879505][ T5364] usb 3-1: config 0 descriptor?? [ 1238.114522][ C1] imon 3-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1238.139575][ T5364] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input88 [ 1238.167493][ T5364] imon:send_packet: packet tx failed (-71) [ 1238.186276][ T5364] imon 3-1:0.0: panel buttons/knobs setup failed [ 1238.275930][ T5364] rc_core: IR keymap rc-imon-pad not found [ 1238.275949][ T5364] Registered IR keymap rc-empty [ 1238.276024][ T5364] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1238.276042][ T5364] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1238.276348][ T5364] imon:send_packet: packet tx failed (-71) [ 1238.297670][ T5364] imon 3-1:0.0: remote input dev register failed [ 1238.297769][ T5364] imon 3-1:0.0: imon_init_intf0: rc device setup failed [ 1238.378075][ T5364] imon 3-1:0.0: unable to initialize intf0, err 0 [ 1238.378098][ T5364] imon:imon_probe: failed to initialize context! [ 1238.378113][ T5364] imon 3-1:0.0: unable to register, err -19 [ 1238.409473][ T5364] usb 3-1: USB disconnect, device number 96 [ 1238.642124][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.642161][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.747919][ T5364] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1239.824078][T24725] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5655'. [ 1239.897994][ T5364] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1239.899639][ T5364] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1239.899662][ T5364] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 1239.903004][ T5364] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1239.903029][ T5364] usb 4-1: Product: syz [ 1239.903043][ T5364] usb 4-1: Manufacturer: syz [ 1239.903058][ T5364] usb 4-1: SerialNumber: syz [ 1239.961941][ T5364] usb 4-1: config 0 descriptor?? [ 1240.097456][T24736] FAULT_INJECTION: forcing a failure. [ 1240.097456][T24736] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1240.097493][T24736] CPU: 0 UID: 0 PID: 24736 Comm: syz.6.5658 Tainted: G L syzkaller #0 PREEMPT(full) [ 1240.097519][T24736] Tainted: [L]=SOFTLOCKUP [ 1240.097527][T24736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1240.097539][T24736] Call Trace: [ 1240.097547][T24736] [ 1240.097555][T24736] dump_stack_lvl+0xe8/0x150 [ 1240.097590][T24736] should_fail_ex+0x410/0x560 [ 1240.097622][T24736] _copy_to_user+0x31/0xb0 [ 1240.097651][T24736] simple_read_from_buffer+0xe1/0x170 [ 1240.097680][T24736] proc_fail_nth_read+0x1bb/0x230 [ 1240.097710][T24736] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1240.097741][T24736] ? rw_verify_area+0x24a/0x4c0 [ 1240.097766][T24736] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1240.097791][T24736] vfs_read+0x213/0xa80 [ 1240.097820][T24736] ? __pfx___mutex_lock+0x10/0x10 [ 1240.097848][T24736] ? __pfx_vfs_read+0x10/0x10 [ 1240.097873][T24736] ? __fget_files+0x2a/0x420 [ 1240.097894][T24736] ? __fget_files+0x3a2/0x420 [ 1240.097914][T24736] ? __fget_files+0x2a/0x420 [ 1240.097939][T24736] ? fdget+0x1ac/0x250 [ 1240.097968][T24736] ksys_read+0x150/0x270 [ 1240.098002][T24736] ? __pfx_ksys_read+0x10/0x10 [ 1240.098031][T24736] ? asm_int80_emulation+0x1a/0x20 [ 1240.098057][T24736] do_int80_emulation+0x198/0x500 [ 1240.098085][T24736] ? trace_irq_disable+0x3b/0x140 [ 1240.098109][T24736] ? asm_int80_emulation+0x1a/0x20 [ 1240.098128][T24736] ? clear_bhb_loop+0x70/0xc0 [ 1240.098149][T24736] ? clear_bhb_loop+0x70/0xc0 [ 1240.098173][T24736] asm_int80_emulation+0x1a/0x20 [ 1240.098194][T24736] RIP: 0023:0xf71977ab [ 1240.098212][T24736] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1240.098230][T24736] RSP: 002b:00000000f54354bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1240.098252][T24736] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f54355d0 [ 1240.098266][T24736] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 1240.098278][T24736] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1240.098291][T24736] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1240.098304][T24736] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1240.098334][T24736] [ 1240.295274][T24718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1240.311272][T24718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1240.424786][ T5364] usb 4-1: USB disconnect, device number 8 [ 1240.490711][T24738] kernel profiling enabled (shift: 9) [ 1240.504991][T23774] udevd[23774]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1240.916846][T24749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5662'. [ 1241.036476][ T30] kauditd_printk_skb: 235 callbacks suppressed [ 1241.036496][ T30] audit: type=1326 audit(1792780326.027:6713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24753 comm="syz.3.5664" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743ef1c code=0x7ffc0000 [ 1241.038950][ T30] audit: type=1326 audit(1792780326.037:6714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24753 comm="syz.3.5664" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf743ef1c code=0x7ffc0000 [ 1241.039423][ T30] audit: type=1326 audit(1792780326.037:6715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24753 comm="syz.3.5664" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743ef1c code=0x7ffc0000 [ 1241.039469][ T30] audit: type=1326 audit(1792780326.037:6716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24753 comm="syz.3.5664" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743ef1c code=0x7ffc0000 [ 1241.039512][ T30] audit: type=1326 audit(1792780326.037:6717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24753 comm="syz.3.5664" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=324 compat=1 ip=0xf743ef1c code=0x7ffc0000 [ 1241.039621][ T30] audit: type=1326 audit(1792780326.037:6718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24753 comm="syz.3.5664" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743ef1c code=0x7ffc0000 [ 1241.323690][T24761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5667'. [ 1241.341737][T24761] vlan3: entered allmulticast mode [ 1241.341762][T24761] bond0: entered allmulticast mode [ 1241.341783][T24761] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 1241.345410][T24761] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5667'. [ 1241.347625][T15792] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 1241.451073][T24761] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 1241.460985][T24761] netdevsim netdevsim1 netdevsim1: left allmulticast mode [ 1241.461354][T24761] bond0 (unregistering): Released all slaves [ 1241.495996][T24764] openvswitch: netlink: IP tunnel dst address not specified [ 1241.530508][T15792] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 1241.532343][T15792] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1241.533816][T15792] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1241.533840][T15792] usb 6-1: Product: syz [ 1241.533853][T15792] usb 6-1: Manufacturer: syz [ 1241.571432][T15792] usb 6-1: selecting invalid altsetting 1 [ 1241.571584][T15792] dvb_ttusb_budget: ttusb_init_controller: error [ 1241.571596][T15792] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1241.644538][T15792] DVB: Unable to find symbol cx22700_attach() [ 1241.697727][T15792] DVB: Unable to find symbol tda10046_attach() [ 1241.697745][T15792] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1241.761980][T24755] dvb_ttusb_budget: failed urb submission (0: err = -2)! [ 1241.773290][ T30] audit: type=1326 audit(1792780326.757:6719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24752 comm="syz.5.5665" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fef1c code=0x7ffc0000 [ 1241.773351][ T30] audit: type=1326 audit(1792780326.767:6720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24752 comm="syz.5.5665" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fef1c code=0x7ffc0000 [ 1241.773392][ T30] audit: type=1326 audit(1792780326.767:6721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24752 comm="syz.5.5665" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=218 compat=1 ip=0xf73fef1c code=0x7ffc0000 [ 1241.773431][ T30] audit: type=1326 audit(1792780326.767:6722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24752 comm="syz.5.5665" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fef1c code=0x7ffc0000 [ 1241.776962][T15792] usb 6-1: USB disconnect, device number 117 [ 1241.876241][ T10] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1242.025957][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 1242.026479][ T10] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1242.027299][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1242.027316][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1242.027329][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1242.027351][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1242.028960][ T10] usb 3-1: config 0 descriptor?? [ 1242.185466][T24780] tipc: Failed to remove unknown binding: 66,0,2/0:1465571166/1465571167 [ 1242.440710][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 1242.440783][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1242.456797][ T10] usb 3-1: USB disconnect, device number 97 [ 1242.576112][T24786] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5674'. [ 1242.992169][T24792] netlink: 'syz.5.5675': attribute type 1 has an invalid length. [ 1243.067116][T24795] netlink: 'syz.3.5676': attribute type 10 has an invalid length. [ 1243.075428][T24795] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5676'. [ 1243.105714][T24792] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5675'. [ 1243.426290][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1243.579842][ T10] usb 4-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice= 0.01 [ 1243.585123][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1243.614460][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1243.614490][ T10] usb 4-1: Product: syz [ 1243.614506][ T10] usb 4-1: Manufacturer: syz [ 1243.614521][ T10] usb 4-1: SerialNumber: syz [ 1243.663267][ T10] ums-onetouch 4-1:1.0: USB Mass Storage device detected [ 1243.686985][T14687] Bluetooth: hci5: unexpected event for opcode 0x202a [ 1243.710701][ T10] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/input/input90 [ 1243.727196][ T10] scsi host1: usb-storage 4-1:1.0 [ 1243.883437][T24803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1243.883737][T24803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1244.504327][T24830] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5687'. [ 1244.552578][T24830] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5687'. [ 1244.558633][T24832] netlink: 48 bytes leftover after parsing attributes in process `syz.6.5688'. [ 1244.764434][T24835] netlink: 'syz.6.5689': attribute type 10 has an invalid length. [ 1244.953856][T24841] FAULT_INJECTION: forcing a failure. [ 1244.953856][T24841] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1244.953893][T24841] CPU: 1 UID: 0 PID: 24841 Comm: syz.1.5692 Tainted: G L syzkaller #0 PREEMPT(full) [ 1244.953919][T24841] Tainted: [L]=SOFTLOCKUP [ 1244.953927][T24841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1244.953939][T24841] Call Trace: [ 1244.953948][T24841] [ 1244.953957][T24841] dump_stack_lvl+0xe8/0x150 [ 1244.953992][T24841] should_fail_ex+0x410/0x560 [ 1244.954021][T24841] _copy_from_iter+0x1d3/0x1660 [ 1244.954043][T24841] ? __alloc_skb+0x27a/0x7a0 [ 1244.954068][T24841] ? __alloc_skb+0x27a/0x7a0 [ 1244.954092][T24841] ? __alloc_skb+0x27a/0x7a0 [ 1244.954115][T24841] ? __pfx__copy_from_iter+0x10/0x10 [ 1244.954137][T24841] ? kmem_cache_alloc_node_noprof+0x1f4/0x600 [ 1244.954161][T24841] ? __alloc_skb+0x27a/0x7a0 [ 1244.954181][T24841] ? __alloc_skb+0x27a/0x7a0 [ 1244.954209][T24841] ? netlink_sendmsg+0x64f/0xb20 [ 1244.954230][T24841] ? skb_put+0x112/0x210 [ 1244.954257][T24841] netlink_sendmsg+0x6bb/0xb20 [ 1244.954285][T24841] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1244.954311][T24841] ? aa_sock_msg_perm+0x144/0x210 [ 1244.954341][T24841] ? apparmor_socket_sendmsg+0x98/0x360 [ 1244.954362][T24841] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1244.954383][T24841] sock_sendmsg_nosec+0x14e/0x190 [ 1244.954418][T24841] ____sys_sendmsg+0x54e/0x850 [ 1244.954451][T24841] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1244.954494][T24841] ___sys_sendmsg+0x2a5/0x360 [ 1244.954526][T24841] ? __lock_acquire+0x747/0x2de0 [ 1244.954553][T24841] ? __pfx____sys_sendmsg+0x10/0x10 [ 1244.954579][T24841] ? get_pid_task+0x20/0x1f0 [ 1244.954598][T24841] ? get_pid_task+0x20/0x1f0 [ 1244.954616][T24841] ? get_pid_task+0x20/0x1f0 [ 1244.954666][T24841] ? __fget_files+0x3a2/0x420 [ 1244.954688][T24841] ? __fget_files+0x2a/0x420 [ 1244.954722][T24841] __sys_sendmsg+0x177/0x240 [ 1244.954750][T24841] ? __pfx___sys_sendmsg+0x10/0x10 [ 1244.954789][T24841] ? __might_fault+0xaf/0x130 [ 1244.954815][T24841] __do_fast_syscall_32+0x28b/0x6c0 [ 1244.954844][T24841] ? do_fast_syscall_32+0x33/0x70 [ 1244.954869][T24841] ? asm_int80_emulation+0x1a/0x20 [ 1244.954889][T24841] ? do_int80_emulation+0x299/0x500 [ 1244.954915][T24841] ? trace_irq_disable+0x3b/0x140 [ 1244.954944][T24841] do_fast_syscall_32+0x33/0x70 [ 1244.954972][T24841] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1244.954995][T24841] RIP: 0023:0xf7f08f1c [ 1244.955013][T24841] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1244.955029][T24841] RSP: 002b:00000000f53b650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1244.955051][T24841] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 1244.955065][T24841] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1244.955077][T24841] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1244.955089][T24841] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1244.955101][T24841] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1244.955132][T24841] [ 1245.534038][T24856] __nla_validate_parse: 1 callbacks suppressed [ 1245.534059][T24856] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5700'. [ 1245.557190][T24856] netlink: 14 bytes leftover after parsing attributes in process `syz.6.5700'. [ 1245.616542][T24860] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5699'. [ 1245.675104][T24860] vlan2: entered allmulticast mode [ 1245.675126][T24860] bond0: entered allmulticast mode [ 1245.682370][T24860] bond_slave_0: entered allmulticast mode [ 1245.682395][T24860] bond_slave_1: entered allmulticast mode [ 1245.682440][T24860] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 1245.686975][T24863] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5699'. [ 1245.707173][ T5364] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 1245.823540][T24863] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1245.835762][T24863] bond_slave_0: left allmulticast mode [ 1245.839907][T24865] FAULT_INJECTION: forcing a failure. [ 1245.839907][T24865] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1245.839948][T24865] CPU: 0 UID: 0 PID: 24865 Comm: syz.6.5701 Tainted: G L syzkaller #0 PREEMPT(full) [ 1245.839975][T24865] Tainted: [L]=SOFTLOCKUP [ 1245.839983][T24865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1245.839994][T24865] Call Trace: [ 1245.840002][T24865] [ 1245.840011][T24865] dump_stack_lvl+0xe8/0x150 [ 1245.840044][T24865] should_fail_ex+0x410/0x560 [ 1245.840075][T24865] _copy_from_iter+0x1d3/0x1660 [ 1245.840100][T24865] ? __alloc_skb+0x27a/0x7a0 [ 1245.840124][T24865] ? __alloc_skb+0x27a/0x7a0 [ 1245.840146][T24865] ? __alloc_skb+0x27a/0x7a0 [ 1245.840169][T24865] ? __pfx__copy_from_iter+0x10/0x10 [ 1245.840191][T24865] ? kmem_cache_alloc_node_noprof+0x1f4/0x600 [ 1245.840214][T24865] ? __alloc_skb+0x27a/0x7a0 [ 1245.840233][T24865] ? __alloc_skb+0x27a/0x7a0 [ 1245.840259][T24865] ? __alloc_skb+0x4d0/0x7a0 [ 1245.840279][T24865] ? skb_put+0x112/0x210 [ 1245.840304][T24865] pfkey_sendmsg+0x25f/0x11d0 [ 1245.840430][T24865] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 1245.840456][T24865] ? aa_sk_perm+0x6ff/0x8f0 [ 1245.840479][T24865] ? __lock_acquire+0x747/0x2de0 [ 1245.840503][T24865] ? __pfx_aa_sk_perm+0x10/0x10 [ 1245.840526][T24865] ? aa_sock_msg_perm+0x144/0x210 [ 1245.840552][T24865] ? apparmor_socket_sendmsg+0x98/0x360 [ 1245.840574][T24865] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 1245.840595][T24865] sock_sendmsg_nosec+0x14e/0x190 [ 1245.840628][T24865] ____sys_sendmsg+0x54e/0x850 [ 1245.840658][T24865] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1245.840699][T24865] ___sys_sendmsg+0x2a5/0x360 [ 1245.840722][T24865] ? __lock_acquire+0x747/0x2de0 [ 1245.840747][T24865] ? __pfx____sys_sendmsg+0x10/0x10 [ 1245.840772][T24865] ? get_pid_task+0x20/0x1f0 [ 1245.840791][T24865] ? get_pid_task+0x20/0x1f0 [ 1245.840807][T24865] ? get_pid_task+0x20/0x1f0 [ 1245.840855][T24865] ? __fget_files+0x3a2/0x420 [ 1245.840875][T24865] ? __fget_files+0x2a/0x420 [ 1245.840905][T24865] __sys_sendmsg+0x177/0x240 [ 1245.840939][T24865] ? __pfx___sys_sendmsg+0x10/0x10 [ 1245.840975][T24865] ? __might_fault+0xaf/0x130 [ 1245.840999][T24865] __do_fast_syscall_32+0x28b/0x6c0 [ 1245.841028][T24865] ? do_fast_syscall_32+0x33/0x70 [ 1245.841053][T24865] ? asm_int80_emulation+0x1a/0x20 [ 1245.841072][T24865] ? do_int80_emulation+0x299/0x500 [ 1245.841097][T24865] ? trace_irq_disable+0x3b/0x140 [ 1245.841124][T24865] do_fast_syscall_32+0x33/0x70 [ 1245.841151][T24865] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1245.841173][T24865] RIP: 0023:0xf743ef1c [ 1245.841191][T24865] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1245.841209][T24865] RSP: 002b:00000000f545650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1245.841230][T24865] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000008001abc0 [ 1245.841244][T24865] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1245.841256][T24865] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1245.841267][T24865] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1245.841279][T24865] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1245.841308][T24865] [ 1245.889255][ T5364] usb 6-1: Using ep0 maxpacket: 16 [ 1245.894568][ T5364] usb 6-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 1245.900305][ T5364] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1245.900336][ T5364] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1245.944914][ T5364] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1245.944942][ T5364] usb 6-1: Product: syz [ 1245.944957][ T5364] usb 6-1: Manufacturer: syz [ 1245.944973][ T5364] usb 6-1: SerialNumber: syz [ 1246.025607][T24863] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1246.172455][ T5364] usb 6-1: config 0 descriptor?? [ 1246.240370][T24863] bond_slave_1: left allmulticast mode [ 1246.287429][T24863] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 1246.296806][T24863] netdevsim netdevsim3 netdevsim1: left allmulticast mode [ 1246.297252][T24863] bond0 (unregistering): Released all slaves [ 1246.372231][T24866] bridge_slave_1: left allmulticast mode [ 1246.472579][ C1] imon 6-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1246.488950][T24872] FAULT_INJECTION: forcing a failure. [ 1246.488950][T24872] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1246.488975][T24872] CPU: 0 UID: 0 PID: 24872 Comm: syz.1.5703 Tainted: G L syzkaller #0 PREEMPT(full) [ 1246.488991][T24872] Tainted: [L]=SOFTLOCKUP [ 1246.488995][T24872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1246.489002][T24872] Call Trace: [ 1246.489007][T24872] [ 1246.489012][T24872] dump_stack_lvl+0xe8/0x150 [ 1246.489035][T24872] should_fail_ex+0x410/0x560 [ 1246.489052][T24872] _copy_to_user+0x31/0xb0 [ 1246.489068][T24872] simple_read_from_buffer+0xe1/0x170 [ 1246.489084][T24872] proc_fail_nth_read+0x1bb/0x230 [ 1246.489100][T24872] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1246.489116][T24872] ? rw_verify_area+0x24a/0x4c0 [ 1246.489129][T24872] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1246.489143][T24872] vfs_read+0x213/0xa80 [ 1246.489158][T24872] ? __pfx___mutex_lock+0x10/0x10 [ 1246.489173][T24872] ? __pfx_vfs_read+0x10/0x10 [ 1246.489186][T24872] ? __fget_files+0x2a/0x420 [ 1246.489197][T24872] ? __fget_files+0x3a2/0x420 [ 1246.489207][T24872] ? __fget_files+0x2a/0x420 [ 1246.489221][T24872] ? fdget+0x1ac/0x250 [ 1246.489235][T24872] ksys_read+0x150/0x270 [ 1246.489249][T24872] ? __pfx_ksys_read+0x10/0x10 [ 1246.489263][T24872] ? asm_int80_emulation+0x1a/0x20 [ 1246.489277][T24872] do_int80_emulation+0x198/0x500 [ 1246.489292][T24872] ? trace_irq_disable+0x3b/0x140 [ 1246.489304][T24872] ? asm_int80_emulation+0x1a/0x20 [ 1246.489314][T24872] ? clear_bhb_loop+0x70/0xc0 [ 1246.489325][T24872] ? clear_bhb_loop+0x70/0xc0 [ 1246.489338][T24872] asm_int80_emulation+0x1a/0x20 [ 1246.489348][T24872] RIP: 0023:0xf70f77ab [ 1246.489359][T24872] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1246.489368][T24872] RSP: 002b:00000000f53b64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1246.489380][T24872] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000f53b65d0 [ 1246.489388][T24872] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 1246.489394][T24872] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1246.489400][T24872] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1246.489407][T24872] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1246.489423][T24872] [ 1246.492001][ T5364] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input91 [ 1246.772279][ T5364] imon:send_packet: packet tx failed (-71) [ 1246.785962][ T5364] imon 6-1:0.0: panel buttons/knobs setup failed [ 1246.985943][ T5364] rc_core: IR keymap rc-imon-pad not found [ 1246.985962][ T5364] Registered IR keymap rc-empty [ 1246.986037][ T5364] imon 6-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1246.986055][ T5364] imon 6-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1246.990746][ T5364] imon:send_packet: packet tx failed (-71) [ 1247.017792][ T5364] imon 6-1:0.0: remote input dev register failed [ 1247.018032][ T5364] imon 6-1:0.0: imon_init_intf0: rc device setup failed [ 1247.123348][ T5364] imon 6-1:0.0: unable to initialize intf0, err 0 [ 1247.123371][ T5364] imon:imon_probe: failed to initialize context! [ 1247.123384][ T5364] imon 6-1:0.0: unable to register, err -19 [ 1247.156216][ T5364] usb 6-1: USB disconnect, device number 118 [ 1247.623803][T24896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1247.626076][T24896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1247.626166][ T5364] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1247.678448][T24896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1247.678777][T24896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1247.787259][ T5364] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1247.788694][ T5364] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1247.788718][ T5364] usb 2-1: config 0 has no interfaces? [ 1247.788748][ T5364] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1247.838592][ T5364] usb 2-1: config 0 descriptor?? [ 1247.988697][T24899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1247.990223][T24899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1248.023735][T24899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1248.024187][T24899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1248.091609][T24899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1248.092248][T24899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1248.450495][T24905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1248.454837][T24905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1248.633375][T24907] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5714'. [ 1248.678564][T24907] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5714'. [ 1248.822630][T24909] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 1249.497558][T23157] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1249.503643][T23157] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1249.505575][T24921] netlink: 'syz.6.5721': attribute type 1 has an invalid length. [ 1249.520841][T23157] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1249.534537][T24923] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1249.542252][T24923] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1249.763596][T24926] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 1250.360618][T15792] usb 2-1: USB disconnect, device number 36 [ 1250.581244][T24940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1250.584962][T24940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1250.593116][T24940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1250.594740][T24940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1250.599829][T24938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5727'. [ 1250.613447][T24940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1250.621970][T24940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1250.667079][T24942] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5727'. [ 1250.668534][T20457] syz_tun (unregistering): left allmulticast mode [ 1250.725201][T12391] usb 4-1: USB disconnect, device number 9 [ 1250.725319][ C0] input input90: can't resubmit intr, dummy_hcd.3-1/input0, retval -19 [ 1251.299732][T24924] bridge0: port 1(bridge_slave_0) entered blocking state [ 1251.301623][T24924] bridge0: port 1(bridge_slave_0) entered disabled state [ 1251.301771][T24924] bridge_slave_0: entered allmulticast mode [ 1251.303649][T24924] bridge_slave_0: entered promiscuous mode [ 1251.337696][T24924] bridge0: port 2(bridge_slave_1) entered blocking state [ 1251.338742][T24924] bridge0: port 2(bridge_slave_1) entered disabled state [ 1251.338845][T24924] bridge_slave_1: entered allmulticast mode [ 1251.348311][T24924] bridge_slave_1: entered promiscuous mode [ 1251.499750][T24924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1251.514017][T24924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1251.634087][T24924] team0: Port device team_slave_0 added [ 1251.650358][T24924] team0: Port device team_slave_1 added [ 1251.676272][T14687] Bluetooth: hci2: command tx timeout [ 1251.817426][T24924] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1251.817444][T24924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1251.817470][T24924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1251.831366][T24924] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1251.831383][T24924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1251.831409][T24924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1251.896778][T24968] syzkaller0: entered promiscuous mode [ 1251.896801][T24968] syzkaller0: entered allmulticast mode [ 1251.923410][T24973] FAULT_INJECTION: forcing a failure. [ 1251.923410][T24973] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1251.923444][T24973] CPU: 0 UID: 0 PID: 24973 Comm: syz.5.5737 Tainted: G L syzkaller #0 PREEMPT(full) [ 1251.923472][T24973] Tainted: [L]=SOFTLOCKUP [ 1251.923482][T24973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1251.923494][T24973] Call Trace: [ 1251.923502][T24973] [ 1251.923510][T24973] dump_stack_lvl+0xe8/0x150 [ 1251.923545][T24973] should_fail_ex+0x410/0x560 [ 1251.923576][T24973] _copy_from_user+0x2d/0xb0 [ 1251.923603][T24973] binder_ioctl_write_read+0x161/0xa990 [ 1251.923755][T24973] ? __kernel_text_address+0xd/0x30 [ 1251.923778][T24973] ? unwind_get_return_address+0x4d/0x90 [ 1251.923803][T24973] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1251.923826][T24973] ? arch_stack_walk+0xfb/0x150 [ 1251.923861][T24973] ? stack_trace_save+0xa9/0x100 [ 1251.923882][T24973] ? __pfx_stack_trace_save+0x10/0x10 [ 1251.923906][T24973] ? stack_depot_save_flags+0x33/0x7f0 [ 1251.923932][T24973] ? do_raw_spin_lock+0x12b/0x2f0 [ 1251.923963][T24973] ? kasan_save_track+0x4f/0x80 [ 1251.923988][T24973] ? kasan_save_track+0x3e/0x80 [ 1251.924011][T24973] ? __kasan_kmalloc+0x93/0xb0 [ 1251.924036][T24973] ? __kmalloc_cache_noprof+0x31c/0x600 [ 1251.924058][T24973] ? binder_get_thread+0x1c6/0x6d0 [ 1251.924086][T24973] ? __pfx_binder_ioctl_write_read+0x10/0x10 [ 1251.924115][T24973] ? do_fast_syscall_32+0x33/0x70 [ 1251.924140][T24973] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1251.924180][T24973] ? __lock_acquire+0x747/0x2de0 [ 1251.924217][T24973] ? binder_debug+0x155/0x1d0 [ 1251.924250][T24973] ? __pfx_binder_debug+0x10/0x10 [ 1251.924276][T24973] ? do_raw_spin_lock+0x12b/0x2f0 [ 1251.924319][T24973] ? _raw_spin_unlock+0x28/0x50 [ 1251.924346][T24973] ? binder_get_thread+0x59b/0x6d0 [ 1251.924378][T24973] binder_ioctl+0x418/0x1af0 [ 1251.924434][T24973] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1251.924457][T24973] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1251.924479][T24973] ? do_vfs_ioctl+0x116f/0x1530 [ 1251.924505][T24973] ? __pfx_binder_ioctl+0x10/0x10 [ 1251.924535][T24973] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1251.924593][T24973] ? __fget_files+0x2a/0x420 [ 1251.924617][T24973] ? __fget_files+0x2a/0x420 [ 1251.924636][T24973] ? __fget_files+0x3a2/0x420 [ 1251.924655][T24973] ? __fget_files+0x2a/0x420 [ 1251.924679][T24973] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 1251.924704][T24973] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 1251.924733][T24973] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1251.924758][T24973] ? __fget_files+0x3a2/0x420 [ 1251.924778][T24973] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1251.924809][T24973] ? lock_acquire+0x115/0x350 [ 1251.924843][T24973] ? __might_fault+0xaf/0x130 [ 1251.924868][T24973] __do_fast_syscall_32+0x28b/0x6c0 [ 1251.924895][T24973] ? do_fast_syscall_32+0x33/0x70 [ 1251.924920][T24973] ? asm_int80_emulation+0x1a/0x20 [ 1251.924939][T24973] ? do_int80_emulation+0x299/0x500 [ 1251.924964][T24973] ? trace_irq_disable+0x3b/0x140 [ 1251.924991][T24973] do_fast_syscall_32+0x33/0x70 [ 1251.925017][T24973] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1251.925040][T24973] RIP: 0023:0xf73fef1c [ 1251.925058][T24973] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1251.925075][T24973] RSP: 002b:00000000f53f550c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1251.925095][T24973] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000c0306201 [ 1251.925109][T24973] RDX: 0000000080000340 RSI: 0000000000000000 RDI: 0000000000000000 [ 1251.925122][T24973] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1251.925134][T24973] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1251.925146][T24973] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1251.925174][T24973] [ 1251.962852][T24973] binder: 24971:24973 ioctl c0306201 80000340 returned -14 [ 1252.360470][T24924] hsr_slave_0: entered promiscuous mode [ 1252.367723][T24924] hsr_slave_1: entered promiscuous mode [ 1252.814270][T24981] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5741'. [ 1252.827027][ T24] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1252.877050][T24984] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5741'. [ 1252.898586][T24983] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 1252.997929][ T24] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1253.008974][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1253.009009][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1253.009033][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1253.009072][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1253.060013][ T24] usb 4-1: config 0 descriptor?? [ 1253.070608][ T24] em28xx 4-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 1253.202229][T24986] FAULT_INJECTION: forcing a failure. [ 1253.202229][T24986] name failslab, interval 1, probability 0, space 0, times 0 [ 1253.202265][T24986] CPU: 0 UID: 0 PID: 24986 Comm: syz.6.5743 Tainted: G L syzkaller #0 PREEMPT(full) [ 1253.202293][T24986] Tainted: [L]=SOFTLOCKUP [ 1253.202302][T24986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1253.202314][T24986] Call Trace: [ 1253.202323][T24986] [ 1253.202332][T24986] dump_stack_lvl+0xe8/0x150 [ 1253.202382][T24986] should_fail_ex+0x410/0x560 [ 1253.202415][T24986] should_failslab+0xa8/0x100 [ 1253.202448][T24986] __kmalloc_noprof+0xf9/0x710 [ 1253.202475][T24986] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1253.202504][T24986] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1253.202540][T24986] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1253.202575][T24986] genl_family_rcv_msg_doit+0xda/0x340 [ 1253.202610][T24986] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1253.202646][T24986] ? apparmor_capable+0x126/0x170 [ 1253.202678][T24986] ? bpf_lsm_capable+0x9/0x20 [ 1253.202701][T24986] ? security_capable+0x7e/0x2c0 [ 1253.202729][T24986] genl_rcv_msg+0x614/0x7a0 [ 1253.202768][T24986] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1253.202793][T24986] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 1253.202918][T24986] netlink_rcv_skb+0x226/0x4a0 [ 1253.202940][T24986] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1253.202967][T24986] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1253.203005][T24986] ? down_read+0x2b9/0x320 [ 1253.203038][T24986] genl_rcv+0x28/0x40 [ 1253.203061][T24986] netlink_unicast+0x8ef/0xa80 [ 1253.203110][T24986] netlink_sendmsg+0x7f0/0xb20 [ 1253.203138][T24986] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1253.203163][T24986] ? aa_sock_msg_perm+0x144/0x210 [ 1253.203192][T24986] ? apparmor_socket_sendmsg+0x18b/0x360 [ 1253.203215][T24986] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1253.203237][T24986] sock_sendmsg_nosec+0x14e/0x190 [ 1253.203272][T24986] ____sys_sendmsg+0x54e/0x850 [ 1253.203308][T24986] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1253.203353][T24986] ___sys_sendmsg+0x2a5/0x360 [ 1253.203377][T24986] ? __lock_acquire+0x747/0x2de0 [ 1253.203406][T24986] ? __pfx____sys_sendmsg+0x10/0x10 [ 1253.203432][T24986] ? get_pid_task+0x20/0x1f0 [ 1253.203452][T24986] ? get_pid_task+0x20/0x1f0 [ 1253.203470][T24986] ? get_pid_task+0x20/0x1f0 [ 1253.203522][T24986] ? __fget_files+0x3a2/0x420 [ 1253.203543][T24986] ? __fget_files+0x2a/0x420 [ 1253.203574][T24986] __sys_sendmsg+0x177/0x240 [ 1253.203603][T24986] ? __pfx___sys_sendmsg+0x10/0x10 [ 1253.203642][T24986] ? __might_fault+0xaf/0x130 [ 1253.203667][T24986] __do_fast_syscall_32+0x28b/0x6c0 [ 1253.203696][T24986] ? do_fast_syscall_32+0x33/0x70 [ 1253.203722][T24986] ? asm_int80_emulation+0x1a/0x20 [ 1253.203740][T24986] ? do_int80_emulation+0x299/0x500 [ 1253.203773][T24986] ? trace_irq_disable+0x3b/0x140 [ 1253.203801][T24986] do_fast_syscall_32+0x33/0x70 [ 1253.203829][T24986] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1253.203853][T24986] RIP: 0023:0xf743ef1c [ 1253.203872][T24986] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1253.203889][T24986] RSP: 002b:00000000f545650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1253.203910][T24986] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 1253.203925][T24986] RDX: 000000002004c0a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1253.203937][T24986] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1253.203949][T24986] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1253.203962][T24986] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1253.203993][T24986] [ 1253.363549][T24975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1253.384994][T24975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1253.584473][T12391] usb 4-1: USB disconnect, device number 10 [ 1253.648757][T24924] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1253.746037][T15792] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 1253.752782][T24995] netlink: 'syz.1.5747': attribute type 1 has an invalid length. [ 1253.756630][T14687] Bluetooth: hci2: command tx timeout [ 1253.926048][T15792] usb 6-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 1253.935903][T15792] usb 6-1: config 0 has too many interfaces: 223, using maximum allowed: 32 [ 1253.935931][T15792] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1253.935949][T15792] usb 6-1: config 0 has 2 interfaces, different from the descriptor's value: 223 [ 1253.936007][T15792] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1253.941245][T15792] usb 6-1: config 0 descriptor?? [ 1253.965689][T15792] uvcvideo 6-1:0.0: Found UVC 9.00 device (046d:0825) [ 1254.024532][T24924] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1254.120396][T24924] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1254.166522][T24990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1254.182731][T24990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1254.343038][T24924] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1254.672536][T24990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1254.686750][T24990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1254.755973][T23129] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 1254.895937][T23129] usb 4-1: device descriptor read/64, error -71 [ 1254.981598][T15792] uvcvideo 6-1:0.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 48). [ 1254.981656][T15792] uvcvideo 6-1:0.1: Failed to initialize the device (-71). [ 1254.982301][T15792] uvcvideo 6-1:0.0: probe with driver uvcvideo failed with error -71 [ 1255.020230][T15792] usb 6-1: USB disconnect, device number 119 [ 1255.145966][T23129] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 1255.278320][T23129] usb 4-1: device descriptor read/64, error -71 [ 1255.372653][T24924] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1255.386563][T23129] usb usb4-port1: attempt power cycle [ 1255.392999][T24924] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1255.395045][T24924] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1255.424496][T24924] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1255.431393][T24924] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1255.450311][T24924] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1255.458638][T24924] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1255.477124][T24924] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1255.587833][T25011] netlink: 'syz.5.5750': attribute type 10 has an invalid length. [ 1255.591234][T25011] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5750'. [ 1255.749955][T23129] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 1255.780912][T23129] usb 4-1: device descriptor read/8, error -71 [ 1255.834511][T24924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1255.836669][T14687] Bluetooth: hci2: command tx timeout [ 1255.924587][T24924] 8021q: adding VLAN 0 to HW filter on device team0 [ 1255.952527][T21630] bridge0: port 1(bridge_slave_0) entered blocking state [ 1255.952638][T21630] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1255.981291][T22003] bridge0: port 2(bridge_slave_1) entered blocking state [ 1255.981397][T22003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1255.990683][T25018] fuse: Unknown parameter 'Gd~0x0000000000000006' [ 1256.026171][T23129] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 1256.046751][T23129] usb 4-1: device descriptor read/8, error -71 [ 1256.085778][T25022] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5754'. [ 1256.115300][T25022] vlan0: entered allmulticast mode [ 1256.131628][T25020] netlink: 14 bytes leftover after parsing attributes in process `syz.5.5754'. [ 1256.156431][T23129] usb usb4-port1: unable to enumerate USB device [ 1256.212262][T24924] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1256.293549][T24924] veth0_vlan: entered promiscuous mode [ 1256.335483][T24924] veth1_vlan: entered promiscuous mode [ 1256.408619][T24924] veth0_macvtap: entered promiscuous mode [ 1256.427865][T24924] veth1_macvtap: entered promiscuous mode [ 1256.462677][T24924] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1256.487333][T24924] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1256.527182][T14151] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1256.527856][T14151] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1256.527894][T14151] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1256.527928][T14151] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1256.764138][T14151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1256.764161][T14151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1256.871538][T14151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1256.871553][T14151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1257.133050][T25037] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5758'. [ 1257.275944][ T5364] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1257.448388][ T5364] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 1257.450331][ T5364] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1257.454195][ T5364] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1257.454220][ T5364] usb 3-1: Product: syz [ 1257.454234][ T5364] usb 3-1: Manufacturer: syz [ 1257.505194][ T5364] usb 3-1: selecting invalid altsetting 1 [ 1257.505387][ T5364] dvb_ttusb_budget: ttusb_init_controller: error [ 1257.505401][ T5364] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1257.650741][ T5364] DVB: Unable to find symbol cx22700_attach() [ 1257.701935][ T5364] DVB: Unable to find symbol tda10046_attach() [ 1257.701953][ T5364] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1257.739185][T25035] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5719'. [ 1257.897669][ T10] usb 3-1: USB disconnect, device number 98 [ 1257.916798][T14687] Bluetooth: hci2: command tx timeout [ 1258.538227][T25062] tipc: Started in network mode [ 1258.538247][T25062] tipc: Node identity ac14142f, cluster identity 4711 [ 1258.538420][T25062] tipc: New replicast peer: 127.0.0.1 [ 1258.538816][T25062] tipc: Enabled bearer , priority 10 [ 1258.543414][T25062] tipc: New replicast peer: 255.255.255.255 [ 1258.597580][T25046] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:21 [ 1258.926538][ T10] usb 3-1: new full-speed USB device number 99 using dummy_hcd [ 1259.079424][ T10] usb 3-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 1259.080919][ T10] usb 3-1: config index 0 descriptor too short (expected 5668, got 36) [ 1259.080935][ T10] usb 3-1: config 3 has too many interfaces: 84, using maximum allowed: 32 [ 1259.080947][ T10] usb 3-1: config 3 has 1 interface, different from the descriptor's value: 84 [ 1259.080958][ T10] usb 3-1: config 3 has no interface number 0 [ 1259.080980][ T10] usb 3-1: config 3 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1259.080995][ T10] usb 3-1: config 3 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1259.093814][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1259.093840][ T10] usb 3-1: Product: syz [ 1259.093855][ T10] usb 3-1: Manufacturer: syz [ 1259.093869][ T10] usb 3-1: SerialNumber: syz [ 1259.110208][T25067] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1259.325050][ T10] usb-storage 3-1:3.20: USB Mass Storage device detected [ 1259.339367][ T10] usb-storage 3-1:3.20: Quirks match for vid 04e6 pid 000b: 4 [ 1259.403356][T25076] kvm [25075]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010006) = 0x400006 [ 1259.530914][ T10] scsi host1: usb-storage 3-1:3.20 [ 1259.668329][ T29] tipc: Node number set to 2886997039 [ 1259.823121][T23129] usb 3-1: USB disconnect, device number 99 [ 1260.384775][T25099] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5775'. [ 1262.006365][ T5719] usb 3-1: new low-speed USB device number 100 using dummy_hcd [ 1262.138045][ T5719] usb 3-1: device descriptor read/64, error -71 [ 1262.378800][ T5719] usb 3-1: new low-speed USB device number 101 using dummy_hcd [ 1262.516449][ T5719] usb 3-1: device descriptor read/64, error -71 [ 1262.581997][ T30] kauditd_printk_skb: 320 callbacks suppressed [ 1262.582019][ T30] audit: type=1326 audit(1792780347.567:7043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25128 comm="syz.1.5783" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f08f1c code=0x0 [ 1262.628472][ T5719] usb usb3-port1: attempt power cycle [ 1262.967572][ T5719] usb 3-1: new low-speed USB device number 102 using dummy_hcd [ 1262.989282][ T5719] usb 3-1: device descriptor read/8, error -71 [ 1263.065947][ T29] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 1263.197568][T25136] FAULT_INJECTION: forcing a failure. [ 1263.197568][T25136] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1263.197606][T25136] CPU: 1 UID: 0 PID: 25136 Comm: syz.5.5785 Tainted: G L syzkaller #0 PREEMPT(full) [ 1263.197634][T25136] Tainted: [L]=SOFTLOCKUP [ 1263.197646][T25136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1263.197658][T25136] Call Trace: [ 1263.197668][T25136] [ 1263.197677][T25136] dump_stack_lvl+0xe8/0x150 [ 1263.197713][T25136] should_fail_ex+0x410/0x560 [ 1263.197746][T25136] _copy_to_user+0x31/0xb0 [ 1263.197776][T25136] simple_read_from_buffer+0xe1/0x170 [ 1263.197804][T25136] proc_fail_nth_read+0x1bb/0x230 [ 1263.197842][T25136] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1263.197871][T25136] ? rw_verify_area+0x24a/0x4c0 [ 1263.197896][T25136] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1263.197922][T25136] vfs_read+0x213/0xa80 [ 1263.197951][T25136] ? __pfx___mutex_lock+0x10/0x10 [ 1263.197979][T25136] ? __pfx_vfs_read+0x10/0x10 [ 1263.198005][T25136] ? __fget_files+0x2a/0x420 [ 1263.198025][T25136] ? __fget_files+0x3a2/0x420 [ 1263.198045][T25136] ? __fget_files+0x2a/0x420 [ 1263.198070][T25136] ? fdget+0x1ac/0x250 [ 1263.198098][T25136] ksys_read+0x150/0x270 [ 1263.198124][T25136] ? __pfx_ksys_read+0x10/0x10 [ 1263.198151][T25136] ? asm_int80_emulation+0x1a/0x20 [ 1263.198177][T25136] do_int80_emulation+0x198/0x500 [ 1263.198204][T25136] ? trace_irq_disable+0x3b/0x140 [ 1263.198227][T25136] ? asm_int80_emulation+0x1a/0x20 [ 1263.198246][T25136] ? clear_bhb_loop+0x70/0xc0 [ 1263.198266][T25136] ? clear_bhb_loop+0x70/0xc0 [ 1263.198291][T25136] asm_int80_emulation+0x1a/0x20 [ 1263.198310][T25136] RIP: 0023:0xf71577ab [ 1263.198329][T25136] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1263.198346][T25136] RSP: 002b:00000000f54164bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1263.198368][T25136] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54165d0 [ 1263.198383][T25136] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 1263.198395][T25136] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1263.198406][T25136] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1263.198418][T25136] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1263.198449][T25136] [ 1263.228949][ T5719] usb 3-1: new low-speed USB device number 103 using dummy_hcd [ 1263.250772][ T5719] usb 3-1: device descriptor read/8, error -71 [ 1263.287209][ T29] usb 2-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 1263.356899][ T5719] usb usb3-port1: unable to enumerate USB device [ 1263.358102][ T29] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1263.358127][ T29] usb 2-1: config 0 has no interfaces? [ 1263.358158][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1263.521656][ T29] usb 2-1: config 0 descriptor?? [ 1263.946208][ T5719] usb 6-1: new full-speed USB device number 120 using dummy_hcd [ 1264.097221][ T5719] usb 6-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 1264.100066][ T5719] usb 6-1: config index 0 descriptor too short (expected 5668, got 36) [ 1264.100092][ T5719] usb 6-1: config 3 has too many interfaces: 84, using maximum allowed: 32 [ 1264.100114][ T5719] usb 6-1: config 3 has 1 interface, different from the descriptor's value: 84 [ 1264.100135][ T5719] usb 6-1: config 3 has no interface number 0 [ 1264.100172][ T5719] usb 6-1: config 3 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1264.100200][ T5719] usb 6-1: config 3 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1264.108036][ T5719] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1264.108062][ T5719] usb 6-1: Product: syz [ 1264.108076][ T5719] usb 6-1: Manufacturer: syz [ 1264.108091][ T5719] usb 6-1: SerialNumber: syz [ 1264.142614][T25140] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1264.382519][ T5719] usb-storage 6-1:3.20: USB Mass Storage device detected [ 1264.411263][ T5719] usb-storage 6-1:3.20: Quirks match for vid 04e6 pid 000b: 4 [ 1264.584693][ T5719] scsi host1: usb-storage 6-1:3.20 [ 1264.848554][ T5364] usb 6-1: USB disconnect, device number 120 [ 1265.147556][T25150] FAULT_INJECTION: forcing a failure. [ 1265.147556][T25150] name failslab, interval 1, probability 0, space 0, times 0 [ 1265.147600][T25150] CPU: 1 UID: 0 PID: 25150 Comm: syz.2.5789 Tainted: G L syzkaller #0 PREEMPT(full) [ 1265.147628][T25150] Tainted: [L]=SOFTLOCKUP [ 1265.147637][T25150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1265.147650][T25150] Call Trace: [ 1265.147659][T25150] [ 1265.147670][T25150] dump_stack_lvl+0xe8/0x150 [ 1265.147705][T25150] should_fail_ex+0x410/0x560 [ 1265.147738][T25150] should_failslab+0xa8/0x100 [ 1265.147770][T25150] __kmalloc_noprof+0xf9/0x710 [ 1265.147796][T25150] ? tomoyo_encode+0x2ad/0x570 [ 1265.147820][T25150] ? tomoyo_encode+0x2ad/0x570 [ 1265.147850][T25150] tomoyo_encode+0x2ad/0x570 [ 1265.147880][T25150] tomoyo_realpath_from_path+0x5fa/0x640 [ 1265.147916][T25150] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1265.147938][T25150] tomoyo_path_number_perm+0x246/0x5f0 [ 1265.147962][T25150] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1265.147981][T25150] ? __lock_acquire+0x747/0x2de0 [ 1265.148042][T25150] ? __fget_files+0x2a/0x420 [ 1265.148067][T25150] ? __fget_files+0x2a/0x420 [ 1265.148086][T25150] ? __fget_files+0x3a2/0x420 [ 1265.148107][T25150] ? __fget_files+0x2a/0x420 [ 1265.148134][T25150] security_file_ioctl_compat+0xc3/0x2a0 [ 1265.148168][T25150] __ia32_compat_sys_ioctl+0x139/0x950 [ 1265.148198][T25150] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1265.148222][T25150] ? __fget_files+0x3a2/0x420 [ 1265.148241][T25150] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1265.148274][T25150] ? lock_acquire+0x115/0x350 [ 1265.148308][T25150] ? __might_fault+0xaf/0x130 [ 1265.148333][T25150] __do_fast_syscall_32+0x28b/0x6c0 [ 1265.148360][T25150] ? do_fast_syscall_32+0x33/0x70 [ 1265.148386][T25150] ? asm_int80_emulation+0x1a/0x20 [ 1265.148404][T25150] ? do_int80_emulation+0x299/0x500 [ 1265.148430][T25150] ? trace_irq_disable+0x3b/0x140 [ 1265.148457][T25150] do_fast_syscall_32+0x33/0x70 [ 1265.148483][T25150] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1265.148506][T25150] RIP: 0023:0xf739ef1c [ 1265.148522][T25150] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1265.148540][T25150] RSP: 002b:00000000f53b650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1265.148560][T25150] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0d05605 [ 1265.148574][T25150] RDX: 00000000800002c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1265.148594][T25150] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1265.148606][T25150] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1265.148618][T25150] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1265.148647][T25150] [ 1265.151084][T25150] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1265.511723][ T29] usb 2-1: string descriptor 0 read error: -71 [ 1265.522586][ T29] usb 2-1: USB disconnect, device number 37 [ 1265.857863][ T5364] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1266.120814][ T5364] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1266.120869][ T5364] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 1266.134782][ T5364] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1266.136015][ T5719] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1266.144663][ T5364] usb 3-1: can't read configurations, error -71 [ 1266.287122][ T5719] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 1266.289683][ T5719] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1266.289710][ T5719] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1266.330100][ T5719] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1266.330128][ T5719] usb 2-1: Product: syz [ 1266.330144][ T5719] usb 2-1: Manufacturer: syz [ 1266.330159][ T5719] usb 2-1: SerialNumber: syz [ 1266.522127][T25158] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:21 [ 1266.583210][T25166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1266.583551][T25166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1267.054003][ T5719] usb 2-1: failed to send ARPC request 1: -71 [ 1267.054153][ T5719] usb 2-1: failed to execute ARPC: -71 [ 1267.054163][ T5719] usb 2-1: failed to set connected state for cport 0: -71 [ 1267.054173][ T5719] greybus greybus1: 0/0:0: failed to set connected state: -71 [ 1267.054739][ T5719] usb 2-1: failed to send ARPC request 3: -71 [ 1267.054899][ T5719] usb 2-1: failed to execute ARPC: -71 [ 1267.054910][ T5719] usb 2-1: failed to clear cport 0: -71 [ 1267.054919][ T5719] greybus greybus1: 0/0:0: failed to clear host cport: -71 [ 1267.137273][ T5719] es2_ap_driver 2-1:1.0: probe with driver es2_ap_driver failed with error -71 [ 1267.151974][ T5719] usb 2-1: USB disconnect, device number 38 [ 1267.171770][T25180] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5800'. [ 1267.303678][T25184] kvm [25183]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010000) = 0x1234 [ 1267.486496][T12391] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 1267.632076][T25184] block device autoloading is deprecated and will be removed. [ 1267.646278][T12391] usb 4-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 1267.647865][ T5719] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1267.648078][T12391] usb 4-1: config index 0 descriptor too short (expected 5668, got 36) [ 1267.648092][T12391] usb 4-1: config 3 has too many interfaces: 84, using maximum allowed: 32 [ 1267.648103][T12391] usb 4-1: config 3 has 1 interface, different from the descriptor's value: 84 [ 1267.648114][T12391] usb 4-1: config 3 has no interface number 0 [ 1267.648137][T12391] usb 4-1: config 3 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1267.648152][T12391] usb 4-1: config 3 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1267.650133][T12391] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1267.650147][T12391] usb 4-1: Product: syz [ 1267.650155][T12391] usb 4-1: Manufacturer: syz [ 1267.650163][T12391] usb 4-1: SerialNumber: syz [ 1267.654074][T25182] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1267.831520][ T5719] usb 3-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.00 [ 1267.832614][ T5719] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1267.832628][ T5719] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1267.832662][ T5719] usb 3-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1267.832692][ T5719] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1267.879976][ T29] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 1267.908780][T12391] usb-storage 4-1:3.20: USB Mass Storage device detected [ 1267.930096][T12391] usb-storage 4-1:3.20: Quirks match for vid 04e6 pid 000b: 4 [ 1267.945058][ T5719] snd-ua101 3-1:1.0: invalid bNumEndpoints [ 1268.036348][ T29] usb 6-1: Using ep0 maxpacket: 32 [ 1268.037265][ T29] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1268.038562][ T29] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 1268.038587][ T29] usb 6-1: config 0 has no interface number 0 [ 1268.038628][ T29] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1268.093642][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1268.093670][ T29] usb 6-1: Product: syz [ 1268.093684][ T29] usb 6-1: Manufacturer: syz [ 1268.093699][ T29] usb 6-1: SerialNumber: syz [ 1268.126405][T12391] scsi host1: usb-storage 4-1:3.20 [ 1268.132079][ T29] usb 6-1: config 0 descriptor?? [ 1268.164017][T25189] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1268.225621][T23129] usb 3-1: USB disconnect, device number 106 [ 1268.323143][T25196] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5805'. [ 1268.334217][T25196] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5805'. [ 1268.374118][T25189] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1268.406084][ T5719] usb 4-1: USB disconnect, device number 15 [ 1268.660389][ T29] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1268.660639][ T29] asix 6-1:0.188: probe with driver asix failed with error -71 [ 1268.713480][ T29] usb 6-1: USB disconnect, device number 121 [ 1268.742514][T23711] udevd[23711]: setting mode of /dev/bus/usb/006/121 to 020664 failed: No such file or directory [ 1268.742629][T23711] udevd[23711]: setting owner of /dev/bus/usb/006/121 to uid=0, gid=0 failed: No such file or directory [ 1269.377269][ T5719] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1269.654065][ T5719] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1269.654107][ T5719] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 1269.656762][ T5719] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1269.656797][ T5719] usb 3-1: can't read configurations, error -71 [ 1270.148248][T25226] netlink: 'syz.3.5816': attribute type 10 has an invalid length. [ 1270.176142][T23129] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 1270.346658][T23129] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1270.353078][T23129] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1270.353104][T23129] usb 2-1: Product: syz [ 1270.353119][T23129] usb 2-1: Manufacturer: syz [ 1270.353325][T23129] usb 2-1: SerialNumber: syz [ 1270.390792][T23129] usb 2-1: config 0 descriptor?? [ 1270.567554][T25231] random: crng reseeded on system resumption [ 1270.630270][T23129] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: version d4.15 found at bus 002 address 039 [ 1270.767682][ T2435] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 1270.919267][ T2435] usb 4-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 1270.921046][ T2435] usb 4-1: config index 0 descriptor too short (expected 5668, got 36) [ 1270.921070][ T2435] usb 4-1: config 3 has too many interfaces: 84, using maximum allowed: 32 [ 1270.921085][ T2435] usb 4-1: config 3 has 1 interface, different from the descriptor's value: 84 [ 1270.921096][ T2435] usb 4-1: config 3 has no interface number 0 [ 1270.921137][ T2435] usb 4-1: config 3 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1270.921152][ T2435] usb 4-1: config 3 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1270.993951][ T2435] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1270.993968][ T2435] usb 4-1: Product: syz [ 1270.993976][ T2435] usb 4-1: Manufacturer: syz [ 1270.993987][ T2435] usb 4-1: SerialNumber: syz [ 1271.032919][T25233] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1271.119601][ T30] audit: type=1326 audit(1792780356.117:7044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25238 comm="syz.6.5822" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743ef1c code=0x7ffc0000 [ 1271.121262][ T30] audit: type=1326 audit(1792780356.117:7045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25238 comm="syz.6.5822" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=426 compat=1 ip=0xf743ef1c code=0x7ffc0000 [ 1271.124261][ T30] audit: type=1326 audit(1792780356.117:7046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25238 comm="syz.6.5822" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743ef1c code=0x7ffc0000 [ 1271.124293][ T30] audit: type=1326 audit(1792780356.117:7047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25238 comm="syz.6.5822" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=426 compat=1 ip=0xf743ef1c code=0x7ffc0000 [ 1271.231084][ T30] audit: type=1326 audit(1792780356.167:7048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25238 comm="syz.6.5822" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743ef1c code=0x7ffc0000 [ 1271.231127][ T30] audit: type=1326 audit(1792780356.217:7049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25238 comm="syz.6.5822" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=426 compat=1 ip=0xf743ef1c code=0x7ffc0000 [ 1271.234552][ T30] audit: type=1326 audit(1792780356.227:7050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25238 comm="syz.6.5822" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743ef1c code=0x7ffc0000 [ 1271.292164][ T30] audit: type=1326 audit(1792780356.287:7052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25238 comm="syz.6.5822" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743ef1c code=0x7ffc0000 [ 1271.292464][ T30] audit: type=1326 audit(1792780356.287:7053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25238 comm="syz.6.5822" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf743ef1c code=0x7ffc0000 [ 1271.293031][ T30] audit: type=1326 audit(1792780356.227:7051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25238 comm="syz.6.5822" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=426 compat=1 ip=0xf743ef1c code=0x7ffc0000 [ 1271.412638][ T2435] usb-storage 4-1:3.20: USB Mass Storage device detected [ 1271.432930][ T2435] usb-storage 4-1:3.20: Quirks match for vid 04e6 pid 000b: 4 [ 1271.523524][T25253] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5821'. [ 1271.611453][ T2435] scsi host1: usb-storage 4-1:3.20 [ 1271.798706][T12391] usb 2-1: USB disconnect, device number 39 [ 1271.957095][ T2435] usb 4-1: USB disconnect, device number 16 [ 1272.793410][T25266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5826'. [ 1272.852161][T25270] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5826'. [ 1272.872356][T25266] vlan2: entered allmulticast mode [ 1272.872381][T25266] bond0: entered allmulticast mode [ 1272.872395][T25266] bond_slave_0: entered allmulticast mode [ 1272.872412][T25266] bond_slave_1: entered allmulticast mode [ 1272.985909][ T5364] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1273.025571][T25270] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1273.037670][T25270] bond_slave_0: left allmulticast mode [ 1273.080762][T25270] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1273.084333][T25270] bond_slave_1: left allmulticast mode [ 1273.099102][T25270] bond0 (unregistering): Released all slaves [ 1273.150306][T25274] netlink: 'syz.3.5829': attribute type 10 has an invalid length. [ 1273.200713][T25276] netlink: 15678 bytes leftover after parsing attributes in process `syz.6.5827'. [ 1273.229408][T25274] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5829'. [ 1273.321376][ T5364] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1273.321408][ T5364] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 1273.322656][ T5364] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1273.322678][ T5364] usb 2-1: can't read configurations, error -71 [ 1273.665691][T25285] FAULT_INJECTION: forcing a failure. [ 1273.665691][T25285] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1273.665753][T25285] CPU: 1 UID: 0 PID: 25285 Comm: syz.2.5831 Tainted: G L syzkaller #0 PREEMPT(full) [ 1273.665783][T25285] Tainted: [L]=SOFTLOCKUP [ 1273.665791][T25285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1273.665803][T25285] Call Trace: [ 1273.665811][T25285] [ 1273.665819][T25285] dump_stack_lvl+0xe8/0x150 [ 1273.665853][T25285] should_fail_ex+0x410/0x560 [ 1273.665890][T25285] _copy_from_user+0x2d/0xb0 [ 1273.665918][T25285] arp_ioctl+0x14c/0x490 [ 1273.665944][T25285] ? __pfx_arp_ioctl+0x10/0x10 [ 1273.665985][T25285] inet_ioctl+0x3c4/0x560 [ 1273.666013][T25285] ? __pfx_inet_ioctl+0x10/0x10 [ 1273.666036][T25285] ? kasan_quarantine_put+0xbb/0x1f0 [ 1273.666080][T25285] ? do_vfs_ioctl+0x116f/0x1530 [ 1273.666117][T25285] sock_do_ioctl+0x101/0x320 [ 1273.666150][T25285] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1273.666194][T25285] compat_sock_ioctl+0xbb9/0xcc0 [ 1273.666229][T25285] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 1273.666258][T25285] ? __fget_files+0x2a/0x420 [ 1273.666277][T25285] ? __fget_files+0x3a2/0x420 [ 1273.666297][T25285] ? __fget_files+0x2a/0x420 [ 1273.666323][T25285] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 1273.666348][T25285] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 1273.666379][T25285] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1273.666405][T25285] ? __fget_files+0x3a2/0x420 [ 1273.666426][T25285] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1273.666458][T25285] ? lock_acquire+0x115/0x350 [ 1273.666496][T25285] ? __might_fault+0xaf/0x130 [ 1273.666522][T25285] __do_fast_syscall_32+0x28b/0x6c0 [ 1273.666551][T25285] ? do_fast_syscall_32+0x33/0x70 [ 1273.666578][T25285] ? asm_int80_emulation+0x1a/0x20 [ 1273.666598][T25285] ? do_int80_emulation+0x299/0x500 [ 1273.666624][T25285] ? trace_irq_disable+0x3b/0x140 [ 1273.666653][T25285] do_fast_syscall_32+0x33/0x70 [ 1273.666681][T25285] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1273.666704][T25285] RIP: 0023:0xf739ef1c [ 1273.666722][T25285] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1273.666746][T25285] RSP: 002b:00000000f539550c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1273.666768][T25285] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008953 [ 1273.666782][T25285] RDX: 0000000080000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 1273.666794][T25285] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1273.666804][T25285] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1273.666811][T25285] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1273.666827][T25285] [ 1274.432746][T25301] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 1274.500447][T25305] FAULT_INJECTION: forcing a failure. [ 1274.500447][T25305] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1274.500483][T25305] CPU: 1 UID: 0 PID: 25305 Comm: syz.5.5838 Tainted: G L syzkaller #0 PREEMPT(full) [ 1274.500510][T25305] Tainted: [L]=SOFTLOCKUP [ 1274.500518][T25305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1274.500531][T25305] Call Trace: [ 1274.500539][T25305] [ 1274.500548][T25305] dump_stack_lvl+0xe8/0x150 [ 1274.500583][T25305] should_fail_ex+0x410/0x560 [ 1274.500615][T25305] _copy_to_user+0x31/0xb0 [ 1274.500646][T25305] simple_read_from_buffer+0xe1/0x170 [ 1274.500675][T25305] proc_fail_nth_read+0x1bb/0x230 [ 1274.500706][T25305] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1274.500737][T25305] ? rw_verify_area+0x24a/0x4c0 [ 1274.500762][T25305] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1274.500798][T25305] vfs_read+0x213/0xa80 [ 1274.500826][T25305] ? do_raw_spin_unlock+0xf5/0x200 [ 1274.500857][T25305] ? __pfx_vfs_read+0x10/0x10 [ 1274.500879][T25305] ? _raw_spin_unlock+0x28/0x50 [ 1274.500900][T25305] ? __pfx_nfnetlink_unbind+0x10/0x10 [ 1274.501021][T25305] ? netlink_setsockopt+0x693/0x710 [ 1274.501052][T25305] ? fdget+0x16b/0x250 [ 1274.501082][T25305] ksys_read+0x150/0x270 [ 1274.501103][T25305] ? do_sock_setsockopt+0x185/0x1b0 [ 1274.501131][T25305] ? __pfx_ksys_read+0x10/0x10 [ 1274.501159][T25305] ? asm_int80_emulation+0x1a/0x20 [ 1274.501185][T25305] do_int80_emulation+0x198/0x500 [ 1274.501213][T25305] ? asm_int80_emulation+0x1a/0x20 [ 1274.501232][T25305] ? clear_bhb_loop+0x70/0xc0 [ 1274.501253][T25305] ? clear_bhb_loop+0x70/0xc0 [ 1274.501277][T25305] asm_int80_emulation+0x1a/0x20 [ 1274.501297][T25305] RIP: 0023:0xf71577ab [ 1274.501315][T25305] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1274.501332][T25305] RSP: 002b:00000000f54164bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1274.501354][T25305] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f54165d0 [ 1274.501368][T25305] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 1274.501380][T25305] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1274.501393][T25305] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1274.501405][T25305] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1274.501436][T25305] [ 1275.036050][T23129] usb 3-1: new full-speed USB device number 109 using dummy_hcd [ 1275.187043][T23129] usb 3-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 1275.206675][T23129] usb 3-1: config index 0 descriptor too short (expected 5668, got 36) [ 1275.206705][T23129] usb 3-1: config 3 has too many interfaces: 84, using maximum allowed: 32 [ 1275.206726][T23129] usb 3-1: config 3 has 1 interface, different from the descriptor's value: 84 [ 1275.206746][T23129] usb 3-1: config 3 has no interface number 0 [ 1275.206787][T23129] usb 3-1: config 3 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1275.206815][T23129] usb 3-1: config 3 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1275.212587][T23129] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1275.212625][T23129] usb 3-1: Product: syz [ 1275.212640][T23129] usb 3-1: Manufacturer: syz [ 1275.212655][T23129] usb 3-1: SerialNumber: syz [ 1275.304624][T25307] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1275.426892][ T5364] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 1275.553205][T23129] usb-storage 3-1:3.20: USB Mass Storage device detected [ 1275.568431][T25327] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5844'. [ 1275.595293][T23129] usb-storage 3-1:3.20: Quirks match for vid 04e6 pid 000b: 4 [ 1275.704414][ T5364] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1275.704493][ T5364] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 1275.717183][ T5364] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1275.717221][ T5364] usb 6-1: can't read configurations, error -71 [ 1275.773257][T23129] scsi host1: usb-storage 3-1:3.20 [ 1276.075449][ T2435] usb 3-1: USB disconnect, device number 109 [ 1276.984331][T25342] loop0: detected capacity change from 0 to 4096 [ 1277.155169][T25342] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 1277.199695][T25342] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 1277.199718][T25342] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1277.199785][T25342] loop0: [ 1277.497277][T25345] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5849'. [ 1277.497313][T25345] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5849'. [ 1277.799734][T12391] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1277.926110][T23129] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1277.959498][T12391] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1277.996046][T12391] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1277.996073][T12391] usb 4-1: Product: syz [ 1277.996087][T12391] usb 4-1: Manufacturer: syz [ 1277.996101][T12391] usb 4-1: SerialNumber: syz [ 1278.076190][T23129] usb 3-1: Using ep0 maxpacket: 16 [ 1278.076913][T23129] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1278.078363][T23129] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1278.078393][T23129] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1278.078416][T23129] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1278.078453][T23129] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1278.082254][T23129] usb 3-1: config 0 descriptor?? [ 1278.244279][ T2435] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 1278.398888][ T2435] usb 6-1: Using ep0 maxpacket: 32 [ 1278.417455][ T2435] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1278.418342][ T2435] usb 6-1: config 0 has no interfaces? [ 1278.418377][ T2435] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1278.430536][ T2435] usb 6-1: config 0 descriptor?? [ 1278.612261][T12391] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1278.774204][T23129] usbhid 3-1:0.0: can't add hid device: -71 [ 1278.774311][T23129] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1278.805268][T23129] usb 3-1: USB disconnect, device number 110 [ 1278.912303][ T5364] usb 4-1: USB disconnect, device number 17 [ 1279.676372][T12391] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1279.676626][T12391] ath9k_htc: Failed to initialize the device [ 1279.700266][ T5364] usb 4-1: ath9k_htc: USB layer deinitialized [ 1279.770731][T25365] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5857'. [ 1279.786119][T23129] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1279.848384][T25365] netlink: 'syz.1.5857': attribute type 6 has an invalid length. [ 1279.848408][T25365] netlink: 168 bytes leftover after parsing attributes in process `syz.1.5857'. [ 1280.028293][ T5364] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1280.047926][T23129] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1280.047982][T23129] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 1280.048835][T23129] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1280.048868][T23129] usb 3-1: can't read configurations, error -71 [ 1280.187813][ T5364] usb 4-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.01 [ 1280.190169][ T5364] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1280.190199][ T5364] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1289, setting to 1024 [ 1280.190225][ T5364] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1280.190263][ T5364] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1280.248082][ T29] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 1280.398840][ T29] usb 2-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 1280.409922][ T29] usb 2-1: config index 0 descriptor too short (expected 5668, got 36) [ 1280.409950][ T29] usb 2-1: config 3 has too many interfaces: 84, using maximum allowed: 32 [ 1280.409971][ T29] usb 2-1: config 3 has 1 interface, different from the descriptor's value: 84 [ 1280.409992][ T29] usb 2-1: config 3 has no interface number 0 [ 1280.410034][ T29] usb 2-1: config 3 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1280.410062][ T29] usb 2-1: config 3 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1280.414334][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1280.414360][ T29] usb 2-1: Product: syz [ 1280.414373][ T29] usb 2-1: Manufacturer: syz [ 1280.414388][ T29] usb 2-1: SerialNumber: syz [ 1280.428278][T25347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1280.431321][T25347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1280.516468][T25368] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 1280.658142][ T5719] usb 4-1: USB disconnect, device number 18 [ 1280.662295][T14687] Bluetooth: hci1: Reading Intel version command failed (-71) [ 1280.724910][ T29] usb-storage 2-1:3.20: USB Mass Storage device detected [ 1280.750624][ T29] usb-storage 2-1:3.20: Quirks match for vid 04e6 pid 000b: 4 [ 1280.878711][T25372] netlink: 'syz.2.5859': attribute type 10 has an invalid length. [ 1280.908244][T25372] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5859'. [ 1280.949465][ T24] usb 6-1: USB disconnect, device number 124 [ 1280.954686][ T29] scsi host1: usb-storage 2-1:3.20 [ 1281.109821][T25380] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5862'. [ 1281.109858][T25380] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5862'. [ 1281.172456][T23129] usb 2-1: USB disconnect, device number 42 [ 1281.337534][ T24] usb 6-1: new low-speed USB device number 125 using dummy_hcd [ 1281.501361][ T24] usb 6-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 1281.503037][ T24] usb 6-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 1281.503087][ T24] usb 6-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1281.503125][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1282.327337][ T24] usb 6-1: string descriptor 0 read error: -71 [ 1282.738871][ T24] usb 6-1: USB disconnect, device number 125 [ 1282.767064][T23129] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 1282.927948][T23129] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1282.929137][T23129] usb 2-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1282.929169][T23129] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1282.929191][T23129] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1282.934488][T23129] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1282.934513][T23129] usb 2-1: Product: syz [ 1282.934528][T23129] usb 2-1: Manufacturer: syz [ 1282.934542][T23129] usb 2-1: SerialNumber: syz [ 1283.000964][T23129] usb 2-1: config 0 descriptor?? [ 1283.029827][T23129] usb 2-1: selecting invalid altsetting 0 [ 1283.550887][T25411] netlink: 'syz.5.5871': attribute type 10 has an invalid length. [ 1283.569934][T25411] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5871'. [ 1283.905192][ T24] hid_parser_main: 5 callbacks suppressed [ 1283.905209][ T24] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 1283.932173][ T24] hid-generic 0000:0000:0000.002A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1284.490942][T25423] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5873'. [ 1284.490967][T25423] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5873'. [ 1285.319526][T25437] FAULT_INJECTION: forcing a failure. [ 1285.319526][T25437] name failslab, interval 1, probability 0, space 0, times 0 [ 1285.319549][T25437] CPU: 1 UID: 0 PID: 25437 Comm: syz.5.5878 Tainted: G L syzkaller #0 PREEMPT(full) [ 1285.319565][T25437] Tainted: [L]=SOFTLOCKUP [ 1285.319569][T25437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1285.319577][T25437] Call Trace: [ 1285.319582][T25437] [ 1285.319588][T25437] dump_stack_lvl+0xe8/0x150 [ 1285.319609][T25437] should_fail_ex+0x410/0x560 [ 1285.319626][T25437] should_failslab+0xa8/0x100 [ 1285.319643][T25437] ? alloc_empty_file+0x5b/0x1d0 [ 1285.319658][T25437] kmem_cache_alloc_noprof+0x9c/0x600 [ 1285.319673][T25437] ? alloc_empty_file+0x5b/0x1d0 [ 1285.319689][T25437] ? trace_sched_exit_tp+0x3a/0x130 [ 1285.319711][T25437] alloc_empty_file+0x5b/0x1d0 [ 1285.319730][T25437] path_openat+0x96/0x20f0 [ 1285.319756][T25437] do_file_open+0x23e/0x4a0 [ 1285.319770][T25437] ? __pfx___schedule+0x10/0x10 [ 1285.319792][T25437] ? __pfx_do_file_open+0x10/0x10 [ 1285.319804][T25437] ? irqentry_exit+0x2a0/0x9b0 [ 1285.319831][T25437] ? _raw_spin_unlock+0x41/0x50 [ 1285.319842][T25437] ? alloc_fd+0x6af/0x760 [ 1285.319859][T25437] do_sys_openat2+0x115/0x200 [ 1285.319876][T25437] ? __pfx_do_sys_openat2+0x10/0x10 [ 1285.319890][T25437] ? lock_acquire+0x115/0x350 [ 1285.319909][T25437] __ia32_compat_sys_openat+0x131/0x160 [ 1285.319923][T25437] __do_fast_syscall_32+0x28b/0x6c0 [ 1285.319938][T25437] ? do_fast_syscall_32+0x33/0x70 [ 1285.319952][T25437] ? asm_int80_emulation+0x1a/0x20 [ 1285.319962][T25437] ? do_int80_emulation+0x299/0x500 [ 1285.319975][T25437] ? trace_irq_disable+0x3b/0x140 [ 1285.319991][T25437] do_fast_syscall_32+0x33/0x70 [ 1285.320005][T25437] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1285.320018][T25437] RIP: 0023:0xf73fef1c [ 1285.320029][T25437] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1285.320038][T25437] RSP: 002b:00000000f541650c EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 1285.320051][T25437] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000040 [ 1285.320058][T25437] RDX: 0000000000080242 RSI: 00000000000001d3 RDI: 0000000000000000 [ 1285.320066][T25437] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1285.320072][T25437] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1285.320079][T25437] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1285.320094][T25437] [ 1285.616930][ T2435] usb 2-1: USB disconnect, device number 43 [ 1285.778590][T25443] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5880'. [ 1285.790946][T25443] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5880'. [ 1285.916147][T25446] bridge0: entered allmulticast mode [ 1286.088280][T25449] netlink: 'syz.3.5882': attribute type 10 has an invalid length. [ 1286.092069][T25449] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5882'. [ 1286.233875][T25454] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5884'. [ 1286.517144][T25452] netlink: 'syz.2.5883': attribute type 1 has an invalid length. [ 1286.517158][T25452] netlink: 256 bytes leftover after parsing attributes in process `syz.2.5883'. [ 1286.823406][T25456] syzkaller0: entered promiscuous mode [ 1286.823461][T25456] syzkaller0: entered allmulticast mode [ 1287.125956][T12391] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 1287.191992][ T30] kauditd_printk_skb: 325 callbacks suppressed [ 1287.192012][ T30] audit: type=1326 audit(1792780372.187:7379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25468 comm="syz.1.5889" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f08f1c code=0x7ffc0000 [ 1287.192146][ T30] audit: type=1326 audit(1792780372.187:7380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25468 comm="syz.1.5889" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f08f1c code=0x7ffc0000 [ 1287.246867][ T30] audit: type=1326 audit(1792780372.227:7381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25468 comm="syz.1.5889" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f08f1c code=0x7ffc0000 [ 1287.246920][ T30] audit: type=1326 audit(1792780372.227:7382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25468 comm="syz.1.5889" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f08f1c code=0x7ffc0000 [ 1287.246962][ T30] audit: type=1326 audit(1792780372.227:7383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25468 comm="syz.1.5889" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f08f1c code=0x7ffc0000 [ 1287.247006][ T30] audit: type=1326 audit(1792780372.227:7384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25468 comm="syz.1.5889" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f08f1c code=0x7ffc0000 [ 1287.247054][ T30] audit: type=1326 audit(1792780372.227:7385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25468 comm="syz.1.5889" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f08f1c code=0x7ffc0000 [ 1287.247093][ T30] audit: type=1326 audit(1792780372.227:7386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25468 comm="syz.1.5889" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f08f1c code=0x7ffc0000 [ 1287.247132][ T30] audit: type=1326 audit(1792780372.237:7387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25468 comm="syz.1.5889" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f08f1c code=0x7ffc0000 [ 1287.247171][ T30] audit: type=1326 audit(1792780372.237:7388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25468 comm="syz.1.5889" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f08f1c code=0x7ffc0000 [ 1287.375632][ T2435] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 1287.464102][T12391] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1287.464891][T12391] usb 4-1: not running at top speed; connect to a high speed hub [ 1287.464913][T12391] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 1287.492476][T12391] usb 4-1: config 5 has an invalid interface number: 246 but max is 0 [ 1287.492504][T12391] usb 4-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 1287.492515][T12391] usb 4-1: config 5 has no interface number 0 [ 1287.492540][T12391] usb 4-1: config 5 interface 246 altsetting 4 endpoint 0x3 has invalid maxpacket 255, setting to 64 [ 1287.492561][T12391] usb 4-1: config 5 interface 246 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1287.492574][T12391] usb 4-1: config 5 interface 246 has no altsetting 0 [ 1287.556077][T12391] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1287.556094][T12391] usb 4-1: Product: syz [ 1287.556102][T12391] usb 4-1: Manufacturer: syz [ 1287.556110][T12391] usb 4-1: SerialNumber: syz [ 1287.581176][T25471] netlink: 'syz.2.5890': attribute type 1 has an invalid length. [ 1287.590917][ T2435] usb 6-1: Using ep0 maxpacket: 16 [ 1287.616776][ T2435] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1287.616829][ T2435] usb 6-1: New USB device found, idVendor=0421, idProduct=0128, bcdDevice=a6.39 [ 1287.621514][ T2435] usb 6-1: config 7 has an invalid interface number: 192 but max is 0 [ 1287.621549][ T2435] usb 6-1: config 7 has no interface number 0 [ 1287.621604][ T2435] usb 6-1: config 7 interface 192 has no altsetting 0 [ 1287.634825][ T2435] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1287.634851][ T2435] usb 6-1: Product: syz [ 1287.634865][ T2435] usb 6-1: Manufacturer: syz [ 1287.634879][ T2435] usb 6-1: SerialNumber: syz [ 1287.771057][T25472] ipvlan2: entered allmulticast mode [ 1287.771079][T25472] bridge0: entered allmulticast mode [ 1287.771762][T25472] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1287.771786][T25472] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 1287.771803][T25472] bond0: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 1287.868596][T25477] fuse: fd is not a fuse device [ 1287.890255][T12391] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1287.898062][T22003] usb 4-1: Failed to submit usb control message: -71 [ 1287.898100][T22003] usb 4-1: unable to send the bmi data to the device: -71 [ 1287.898118][T22003] usb 4-1: unable to get target info from device [ 1287.898134][T22003] usb 4-1: could not get target info (-71) [ 1287.898324][T12391] usb 4-1: USB disconnect, device number 19 [ 1287.962945][ T2435] rndis_host 6-1:7.192: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 1287.963679][T22003] usb 4-1: could not probe fw (-71) [ 1287.983235][ T2435] usb 6-1: USB disconnect, device number 126 [ 1288.178217][T25484] netlink: 'syz.2.5894': attribute type 10 has an invalid length. [ 1288.178904][T25484] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5894'. [ 1288.287092][T25489] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5895'. [ 1288.515908][ T24] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1288.675919][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 1288.678615][ T24] usb 2-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=e1.3b [ 1288.701252][ T24] usb 2-1: config 162 has an invalid interface number: 97 but max is 0 [ 1288.701281][ T24] usb 2-1: config 162 has an invalid descriptor of length 0, skipping remainder of the config [ 1288.701301][ T24] usb 2-1: config 162 has no interface number 0 [ 1288.701324][ T24] usb 2-1: too many endpoints for config 162 interface 97 altsetting 3: 255, using maximum allowed: 30 [ 1288.701344][ T24] usb 2-1: config 162 interface 97 altsetting 3 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1288.701358][ T24] usb 2-1: config 162 interface 97 altsetting 3 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1288.701371][ T24] usb 2-1: config 162 interface 97 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1288.701385][ T24] usb 2-1: config 162 interface 97 has no altsetting 0 [ 1288.786149][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1288.786167][ T24] usb 2-1: Product: syz [ 1288.786175][ T24] usb 2-1: Manufacturer: syz [ 1288.786183][ T24] usb 2-1: SerialNumber: syz [ 1290.162268][T25519] netlink: 'syz.2.5905': attribute type 10 has an invalid length. [ 1290.183383][T25519] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5905'. [ 1290.430435][T24923] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1290.448477][T24923] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1290.463771][T24923] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1290.476192][T24923] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1290.479934][T24923] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1290.598839][T25526] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5907'. [ 1290.817433][T25528] syzkaller0: entered promiscuous mode [ 1290.817466][T25528] syzkaller0: entered allmulticast mode [ 1290.937104][T25530] FAULT_INJECTION: forcing a failure. [ 1290.937104][T25530] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1290.937138][T25530] CPU: 0 UID: 0 PID: 25530 Comm: syz.5.5909 Tainted: G L syzkaller #0 PREEMPT(full) [ 1290.937158][T25530] Tainted: [L]=SOFTLOCKUP [ 1290.937162][T25530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1290.937169][T25530] Call Trace: [ 1290.937174][T25530] [ 1290.937180][T25530] dump_stack_lvl+0xe8/0x150 [ 1290.937201][T25530] should_fail_ex+0x410/0x560 [ 1290.937232][T25530] _copy_from_user+0x2d/0xb0 [ 1290.937260][T25530] vmci_host_unlocked_ioctl+0x92e/0x2840 [ 1290.937363][T25530] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 1290.937411][T25530] ? kasan_quarantine_put+0xbb/0x1f0 [ 1290.937446][T25530] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1290.937461][T25530] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1290.937473][T25530] ? do_vfs_ioctl+0x116f/0x1530 [ 1290.937489][T25530] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1290.937531][T25530] ? __fget_files+0x2a/0x420 [ 1290.937556][T25530] ? __fget_files+0x2a/0x420 [ 1290.937576][T25530] ? __fget_files+0x3a2/0x420 [ 1290.937596][T25530] ? __fget_files+0x2a/0x420 [ 1290.937611][T25530] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 1290.937632][T25530] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 1290.937651][T25530] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1290.937668][T25530] ? __fget_files+0x3a2/0x420 [ 1290.937689][T25530] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1290.937722][T25530] ? lock_acquire+0x115/0x350 [ 1290.937755][T25530] ? __might_fault+0xaf/0x130 [ 1290.937769][T25530] __do_fast_syscall_32+0x28b/0x6c0 [ 1290.937785][T25530] ? do_fast_syscall_32+0x33/0x70 [ 1290.937798][T25530] ? asm_int80_emulation+0x1a/0x20 [ 1290.937809][T25530] ? do_int80_emulation+0x299/0x500 [ 1290.937833][T25530] ? trace_irq_disable+0x3b/0x140 [ 1290.937861][T25530] do_fast_syscall_32+0x33/0x70 [ 1290.937888][T25530] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1290.937908][T25530] RIP: 0023:0xf73fef1c [ 1290.937919][T25530] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1290.937928][T25530] RSP: 002b:00000000f541650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1290.937940][T25530] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000000007a8 [ 1290.937947][T25530] RDX: 0000000080000740 RSI: 0000000000000000 RDI: 0000000000000000 [ 1290.937954][T25530] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1290.937960][T25530] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1290.937971][T25530] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1290.938000][T25530] [ 1291.448937][T25459] bond2: (slave syz_tun): Releasing active interface [ 1291.453480][ T24] metro_usb 2-1:162.97: interrupt-out endpoint missing [ 1291.482057][ T24] usb 2-1: USB disconnect, device number 44 [ 1291.624413][T25535] syzkaller0: entered promiscuous mode [ 1291.624434][T25535] syzkaller0: entered allmulticast mode [ 1291.641349][T25535] FAULT_INJECTION: forcing a failure. [ 1291.641349][T25535] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1291.641371][T25535] CPU: 0 UID: 0 PID: 25535 Comm: syz.2.5911 Tainted: G L syzkaller #0 PREEMPT(full) [ 1291.641387][T25535] Tainted: [L]=SOFTLOCKUP [ 1291.641391][T25535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1291.641398][T25535] Call Trace: [ 1291.641403][T25535] [ 1291.641408][T25535] dump_stack_lvl+0xe8/0x150 [ 1291.641429][T25535] should_fail_ex+0x410/0x560 [ 1291.641446][T25535] _copy_to_user+0x31/0xb0 [ 1291.641462][T25535] simple_read_from_buffer+0xe1/0x170 [ 1291.641477][T25535] proc_fail_nth_read+0x1bb/0x230 [ 1291.641494][T25535] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1291.641510][T25535] ? rw_verify_area+0x24a/0x4c0 [ 1291.641523][T25535] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1291.641536][T25535] vfs_read+0x213/0xa80 [ 1291.641551][T25535] ? __pfx___mutex_lock+0x10/0x10 [ 1291.641566][T25535] ? __pfx_vfs_read+0x10/0x10 [ 1291.641579][T25535] ? __fget_files+0x2a/0x420 [ 1291.641590][T25535] ? __fget_files+0x3a2/0x420 [ 1291.641600][T25535] ? __fget_files+0x2a/0x420 [ 1291.641616][T25535] ? fdget+0x1ac/0x250 [ 1291.641631][T25535] ksys_read+0x150/0x270 [ 1291.641645][T25535] ? __pfx_ksys_read+0x10/0x10 [ 1291.641659][T25535] ? asm_int80_emulation+0x1a/0x20 [ 1291.641673][T25535] do_int80_emulation+0x198/0x500 [ 1291.641687][T25535] ? trace_irq_disable+0x3b/0x140 [ 1291.641700][T25535] ? asm_int80_emulation+0x1a/0x20 [ 1291.641710][T25535] ? clear_bhb_loop+0x70/0xc0 [ 1291.641721][T25535] ? clear_bhb_loop+0x70/0xc0 [ 1291.641734][T25535] asm_int80_emulation+0x1a/0x20 [ 1291.641744][T25535] RIP: 0023:0xf70f77ab [ 1291.641755][T25535] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1291.641765][T25535] RSP: 002b:00000000f53b64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1291.641777][T25535] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000f53b65d0 [ 1291.641784][T25535] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 1291.641790][T25535] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1291.641797][T25535] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1291.641803][T25535] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1291.641819][T25535] [ 1291.896387][ T24] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1291.969163][T22006] netdevsim netdevsim8 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1291.969186][T22006] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1292.046606][ T24] usb 2-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00 [ 1292.057467][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1292.057517][ T24] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1292.057558][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1292.318942][T25549] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5912'. [ 1292.420904][T25553] fuse: Bad value for 'user_id' [ 1292.420917][T25553] fuse: Bad value for 'user_id' [ 1292.535102][T25525] bridge0: port 1(bridge_slave_0) entered blocking state [ 1292.535228][T25525] bridge0: port 1(bridge_slave_0) entered disabled state [ 1292.535736][T25525] bridge_slave_0: entered allmulticast mode [ 1292.559905][T24923] Bluetooth: hci1: command tx timeout [ 1292.578688][ T24] rtsx_usb 2-1:1.0: probe with driver rtsx_usb failed with error -71 [ 1292.583289][T25525] bridge_slave_0: entered promiscuous mode [ 1292.602977][ T24] usb 2-1: USB disconnect, device number 45 [ 1292.604524][T25525] bridge0: port 2(bridge_slave_1) entered blocking state [ 1292.604638][T25525] bridge0: port 2(bridge_slave_1) entered disabled state [ 1292.604769][T25525] bridge_slave_1: entered allmulticast mode [ 1292.641178][T25525] bridge_slave_1: entered promiscuous mode [ 1292.697962][T25525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1292.700691][T25525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1292.710305][T22006] bridge_slave_1: left allmulticast mode [ 1292.710331][T22006] bridge_slave_1: left promiscuous mode [ 1292.710542][T22006] bridge0: port 2(bridge_slave_1) entered disabled state [ 1292.720799][T25559] netlink: 'syz.5.5915': attribute type 10 has an invalid length. [ 1292.732042][T22006] bridge_slave_0: left allmulticast mode [ 1292.732067][T22006] bridge_slave_0: left promiscuous mode [ 1292.732268][T22006] bridge0: port 1(bridge_slave_0) entered disabled state [ 1292.741763][T25565] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5917'. [ 1292.775246][T25566] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5915'. [ 1292.780572][T22006] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 1292.780594][T22006] batadv0: mtu less than device minimum [ 1292.782193][T22006] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1292.783732][T22006] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1292.785256][T22006] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1292.786822][T22006] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1292.788337][T22006] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1292.789821][T22006] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1292.791323][T22006] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1292.792836][T22006] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1292.794338][T22006] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1292.977151][T22006] batman_adv: batadv0: Removing interface: ip6gretap1 [ 1293.305423][T22006] bond1 (unregistering): (slave bridge3): Releasing backup interface [ 1293.305453][T22006] bridge3 (unregistering): left promiscuous mode [ 1293.335610][T22006] bond3 (unregistering): (slave bridge4): Releasing backup interface [ 1293.335633][T22006] bridge4 (unregistering): left promiscuous mode [ 1293.367203][T22006] bond1 (unregistering): Released all slaves [ 1293.389776][T22006] bond2 (unregistering): (slave veth3): Releasing active interface [ 1293.393640][T22006] bond2 (unregistering): Released all slaves [ 1293.429877][T22006] bond3 (unregistering): Released all slaves [ 1293.461302][T22006] bond4 (unregistering): Released all slaves [ 1293.496077][T15792] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1293.583329][T25525] team0: Port device team_slave_0 added [ 1293.594889][T25525] team0: Port device team_slave_1 added [ 1293.658869][T25582] FAULT_INJECTION: forcing a failure. [ 1293.658869][T25582] name failslab, interval 1, probability 0, space 0, times 0 [ 1293.658899][T25582] CPU: 0 UID: 0 PID: 25582 Comm: syz.6.5920 Tainted: G L syzkaller #0 PREEMPT(full) [ 1293.658917][T25582] Tainted: [L]=SOFTLOCKUP [ 1293.658921][T25582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1293.658928][T25582] Call Trace: [ 1293.658934][T25582] [ 1293.658939][T25582] dump_stack_lvl+0xe8/0x150 [ 1293.658960][T25582] should_fail_ex+0x410/0x560 [ 1293.658978][T25582] should_failslab+0xa8/0x100 [ 1293.658996][T25582] __kmalloc_noprof+0xf9/0x710 [ 1293.659009][T25582] ? rcu_is_watching+0x16/0xb0 [ 1293.659024][T25582] ? tomoyo_realpath_from_path+0xef/0x640 [ 1293.659037][T25582] ? tomoyo_realpath_from_path+0xef/0x640 [ 1293.659054][T25582] tomoyo_realpath_from_path+0xef/0x640 [ 1293.659072][T25582] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1293.659084][T25582] tomoyo_path_number_perm+0x246/0x5f0 [ 1293.659097][T25582] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1293.659107][T25582] ? __lock_acquire+0x747/0x2de0 [ 1293.659141][T25582] ? __fget_files+0x2a/0x420 [ 1293.659155][T25582] ? __fget_files+0x2a/0x420 [ 1293.659165][T25582] ? __fget_files+0x3a2/0x420 [ 1293.659176][T25582] ? __fget_files+0x2a/0x420 [ 1293.659189][T25582] security_file_ioctl_compat+0xc3/0x2a0 [ 1293.659207][T25582] __ia32_compat_sys_ioctl+0x139/0x950 [ 1293.659225][T25582] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1293.659238][T25582] ? __fget_files+0x3a2/0x420 [ 1293.659249][T25582] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1293.659267][T25582] ? lock_acquire+0x115/0x350 [ 1293.659286][T25582] ? __might_fault+0xaf/0x130 [ 1293.659300][T25582] __do_fast_syscall_32+0x28b/0x6c0 [ 1293.659315][T25582] ? do_fast_syscall_32+0x33/0x70 [ 1293.659329][T25582] ? asm_int80_emulation+0x1a/0x20 [ 1293.659340][T25582] ? do_int80_emulation+0x299/0x500 [ 1293.659353][T25582] ? trace_irq_disable+0x3b/0x140 [ 1293.659368][T25582] do_fast_syscall_32+0x33/0x70 [ 1293.659383][T25582] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1293.659395][T25582] RIP: 0023:0xf743ef1c [ 1293.659406][T25582] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1293.659422][T25582] RSP: 002b:00000000f545650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1293.659434][T25582] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000004c0a [ 1293.659442][T25582] RDX: 0000000080001780 RSI: 0000000000000000 RDI: 0000000000000000 [ 1293.659448][T25582] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1293.659455][T25582] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1293.659461][T25582] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1293.659477][T25582] [ 1293.659489][T25582] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1293.659781][T25582] loop8: detected capacity change from 0 to 8 [ 1293.677730][T15792] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1293.678899][T15792] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 1293.678922][T15792] usb 2-1: config 0 has no interface number 0 [ 1293.678960][T15792] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1293.678985][T15792] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1293.688029][T15792] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1293.688053][T15792] usb 2-1: Product: syz [ 1293.688067][T15792] usb 2-1: Manufacturer: syz [ 1293.688081][T15792] usb 2-1: SerialNumber: syz [ 1293.690173][T25582] Dev loop8: unable to read RDB block 8 [ 1293.690212][T25582] loop8: unable to read partition table [ 1293.690422][T25582] loop8: partition table beyond EOD, truncated [ 1293.690437][T25582] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1293.698979][T15792] usb 2-1: config 0 descriptor?? [ 1293.700521][T25579] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1293.709483][T25525] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1293.709498][T25525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1293.709523][T25525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1293.713469][T15792] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1293.729446][T25525] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1293.739076][T25525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1293.739106][T25525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1293.808681][T15792] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1293.849438][T25584] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5921'. [ 1294.236548][T22003] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1294.236584][T22003] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1294.238710][ T13] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1294.238739][ T13] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1294.238837][ T13] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1294.238869][ T13] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1294.238901][ T13] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1294.238924][ T13] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1294.277563][T25525] hsr_slave_0: entered promiscuous mode [ 1294.280545][T25525] hsr_slave_1: entered promiscuous mode [ 1294.284245][T25525] debugfs: 'hsr0' already exists in 'hsr' [ 1294.284266][T25525] Cannot create hsr debugfs directory [ 1294.419081][T25591] FAULT_INJECTION: forcing a failure. [ 1294.419081][T25591] name failslab, interval 1, probability 0, space 0, times 0 [ 1294.419115][T25591] CPU: 1 UID: 0 PID: 25591 Comm: syz.5.5924 Tainted: G L syzkaller #0 PREEMPT(full) [ 1294.419143][T25591] Tainted: [L]=SOFTLOCKUP [ 1294.419151][T25591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1294.419164][T25591] Call Trace: [ 1294.419173][T25591] [ 1294.419182][T25591] dump_stack_lvl+0xe8/0x150 [ 1294.419217][T25591] should_fail_ex+0x410/0x560 [ 1294.419250][T25591] should_failslab+0xa8/0x100 [ 1294.419282][T25591] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 1294.419310][T25591] ? __d_alloc+0x37/0x820 [ 1294.419332][T25591] ? __d_alloc+0x37/0x820 [ 1294.419360][T25591] __d_alloc+0x37/0x820 [ 1294.419389][T25591] d_alloc+0x4b/0x190 [ 1294.419410][T25591] ? lookup_one_qstr_excl+0xc4/0x360 [ 1294.419437][T25591] lookup_one_qstr_excl+0xd8/0x360 [ 1294.419467][T25591] filename_create+0x20e/0x370 [ 1294.419500][T25591] ? __pfx_filename_create+0x10/0x10 [ 1294.419538][T25591] filename_mkdirat+0xd2/0x510 [ 1294.419572][T25591] ? __pfx_filename_mkdirat+0x10/0x10 [ 1294.419597][T25591] ? strncpy_from_user+0x150/0x2c0 [ 1294.419627][T25591] ? do_getname+0x151/0x250 [ 1294.419661][T25591] __se_sys_mkdirat+0x35/0x150 [ 1294.419691][T25591] __do_fast_syscall_32+0x28b/0x6c0 [ 1294.419720][T25591] ? do_fast_syscall_32+0x33/0x70 [ 1294.419747][T25591] ? asm_int80_emulation+0x1a/0x20 [ 1294.419767][T25591] ? do_int80_emulation+0x299/0x500 [ 1294.419792][T25591] ? trace_irq_disable+0x3b/0x140 [ 1294.419819][T25591] do_fast_syscall_32+0x33/0x70 [ 1294.419854][T25591] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1294.419878][T25591] RIP: 0023:0xf73fef1c [ 1294.419896][T25591] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1294.419913][T25591] RSP: 002b:00000000f541650c EFLAGS: 00000206 ORIG_RAX: 0000000000000128 [ 1294.419934][T25591] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000200 [ 1294.419949][T25591] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1294.419962][T25591] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1294.419974][T25591] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1294.419989][T25591] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1294.420018][T25591] [ 1294.445528][T15792] usb 2-1: USB disconnect, device number 46 [ 1294.486973][T15792] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1294.487598][T15792] cyberjack 2-1:0.69: device disconnected [ 1294.637074][T24923] Bluetooth: hci1: command tx timeout [ 1294.724637][ T30] kauditd_printk_skb: 510 callbacks suppressed [ 1294.724685][ T30] audit: type=1326 audit(1792780379.717:7899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25597 comm="syz.5.5926" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fef1c code=0x7ffc0000 [ 1294.724854][ T30] audit: type=1326 audit(1792780379.717:7900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25597 comm="syz.5.5926" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fef1c code=0x7ffc0000 [ 1294.784272][T25595] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5925'. [ 1294.791383][ T30] audit: type=1326 audit(1792780379.787:7901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25597 comm="syz.5.5926" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf73fef1c code=0x7ffc0000 [ 1294.791433][ T30] audit: type=1326 audit(1792780379.787:7902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25597 comm="syz.5.5926" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fef1c code=0x7ffc0000 [ 1294.791471][ T30] audit: type=1326 audit(1792780379.787:7903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25597 comm="syz.5.5926" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fef1c code=0x7ffc0000 [ 1294.809904][ T30] audit: type=1326 audit(1792780379.787:7904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25597 comm="syz.5.5926" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf73fef1c code=0x7ffc0000 [ 1294.809955][ T30] audit: type=1326 audit(1792780379.787:7905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25597 comm="syz.5.5926" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fef1c code=0x7ffc0000 [ 1294.809993][ T30] audit: type=1326 audit(1792780379.787:7906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25597 comm="syz.5.5926" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fef1c code=0x7ffc0000 [ 1294.838117][ T30] audit: type=1326 audit(1792780379.817:7907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25597 comm="syz.5.5926" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=363 compat=1 ip=0xf73fef1c code=0x7ffc0000 [ 1294.838173][ T30] audit: type=1326 audit(1792780379.817:7908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25597 comm="syz.5.5926" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fef1c code=0x7ffc0000 [ 1295.403154][T25615] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5929'. [ 1295.657947][T22006] tipc: Left network mode [ 1295.678314][ T5293] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1295.891973][T25623] FAULT_INJECTION: forcing a failure. [ 1295.891973][T25623] name failslab, interval 1, probability 0, space 0, times 0 [ 1295.892007][T25623] CPU: 0 UID: 0 PID: 25623 Comm: syz.5.5927 Tainted: G L syzkaller #0 PREEMPT(full) [ 1295.892029][T25623] Tainted: [L]=SOFTLOCKUP [ 1295.892035][T25623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1295.892045][T25623] Call Trace: [ 1295.892053][T25623] [ 1295.892060][T25623] dump_stack_lvl+0xe8/0x150 [ 1295.892088][T25623] should_fail_ex+0x410/0x560 [ 1295.892114][T25623] should_failslab+0xa8/0x100 [ 1295.892139][T25623] ? alloc_empty_file+0x5b/0x1d0 [ 1295.892162][T25623] kmem_cache_alloc_noprof+0x9c/0x600 [ 1295.892181][T25623] ? stack_depot_save_flags+0x33/0x7f0 [ 1295.892202][T25623] ? alloc_empty_file+0x5b/0x1d0 [ 1295.892230][T25623] alloc_empty_file+0x5b/0x1d0 [ 1295.892255][T25623] path_openat+0x96/0x20f0 [ 1295.892290][T25623] do_file_open+0x23e/0x4a0 [ 1295.892315][T25623] ? __pfx_do_file_open+0x10/0x10 [ 1295.892353][T25623] ? _raw_spin_unlock+0x28/0x50 [ 1295.892371][T25623] ? alloc_fd+0x6af/0x760 [ 1295.892397][T25623] do_sys_openat2+0x115/0x200 [ 1295.892423][T25623] ? __pfx_do_sys_openat2+0x10/0x10 [ 1295.892447][T25623] ? ksys_write+0x242/0x270 [ 1295.892467][T25623] ? __pfx_ksys_write+0x10/0x10 [ 1295.892489][T25623] __ia32_compat_sys_openat+0x131/0x160 [ 1295.892510][T25623] do_int80_emulation+0x198/0x500 [ 1295.892532][T25623] ? trace_irq_disable+0x3b/0x140 [ 1295.892550][T25623] ? asm_int80_emulation+0x1a/0x20 [ 1295.892566][T25623] ? clear_bhb_loop+0x70/0xc0 [ 1295.892583][T25623] ? clear_bhb_loop+0x70/0xc0 [ 1295.892602][T25623] asm_int80_emulation+0x1a/0x20 [ 1295.892627][T25623] RIP: 0023:0xf71577ab [ 1295.892643][T25623] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1295.892656][T25623] RSP: 002b:00000000f53f503c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1295.892674][T25623] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f53f5100 [ 1295.892686][T25623] RDX: 0000000000004000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1295.892696][T25623] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1295.892706][T25623] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1295.892716][T25623] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1295.892741][T25623] [ 1295.985539][T24923] Bluetooth: hci5: unexpected event for opcode 0x2041 [ 1296.027137][T25627] loop5: detected capacity change from 0 to 7 [ 1296.030951][T25627] Dev loop5: unable to read RDB block 7 [ 1296.030993][T25627] loop5: unable to read partition table [ 1296.031196][T25627] loop5: partition table beyond EOD, truncated [ 1296.031213][T25627] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1296.320267][T25629] vimc link validate: Sensor B:src:640x16 (0x33424752, 1, 0, 0, 0) Raw Capture 1:snk:16x16 (0x38414761, 7, 0, 0, 0) [ 1296.606676][T25631] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5930'. [ 1296.633580][T22006] ------------[ cut here ]------------ [ 1296.633590][T22006] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 1296.633599][T22006] WARNING: kernel/locking/mutex.c:625 at __mutex_lock+0x132a/0x15a0, CPU#0: kworker/u8:10/22006 [ 1296.656008][T22006] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1296.660006][T22006] CPU: 0 UID: 0 PID: 22006 Comm: kworker/u8:10 Tainted: G L syzkaller #0 PREEMPT(full) [ 1296.671551][T22006] Tainted: [L]=SOFTLOCKUP [ 1296.676446][T22006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1296.686725][T22006] Workqueue: netns cleanup_net [ 1296.691509][T22006] RIP: 0010:__mutex_lock+0x1331/0x15a0 [ 1296.697617][T22006] Code: fb 7c 91 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 46 02 00 00 83 3d 83 e9 83 05 00 75 13 48 8d 3d 06 e7 86 05 48 c7 c6 e0 24 0d 8c <67> 48 0f b9 3a 90 e9 1d ee ff ff 90 0f 0b 90 e9 f0 f1 ff ff 90 0f [ 1296.717401][T22006] RSP: 0018:ffffc9000450f040 EFLAGS: 00010246 [ 1296.723485][T22006] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff88802aa39f40 [ 1296.731855][T22006] RDX: 0000000000000000 RSI: ffffffff8c0d24e0 RDI: ffffffff917ff970 [ 1296.739910][T22006] RBP: ffffc9000450f1c8 R08: ffffffff917cfbe3 R09: 1ffffffff22f9f7c [ 1296.747908][T22006] R10: dffffc0000000000 R11: fffffbfff22f9f7d R12: ffff88802d184500 [ 1296.756099][T22006] R13: 0000000000000000 R14: 1ffff920008a1e1c R15: 0000000000000000 [ 1296.756111][T24923] Bluetooth: hci1: command tx timeout [ 1296.769517][T22006] FS: 0000000000000000(0000) GS:ffff888123a52000(0000) knlGS:0000000000000000 [ 1296.778516][T22006] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1296.785149][T22006] CR2: 000000008004a018 CR3: 00000000663b6000 CR4: 00000000003526f0 [ 1296.793198][T22006] Call Trace: [ 1296.796614][T22006] [ 1296.799559][T22006] ? __lock_acquire+0x747/0x2de0 [ 1296.804502][T22006] ? kthread_data+0x4f/0xc0 [ 1296.809025][T22006] ? nsim_dev_netdevice_event+0x1e8/0x830 [ 1296.814806][T22006] ? __pfx___mutex_lock+0x10/0x10 [ 1296.819851][T22006] ? lock_acquire+0x115/0x350 [ 1296.824514][T22006] ? bpf_offload_find_netdev+0xe3/0x7a0 [ 1296.830169][T22006] nsim_dev_netdevice_event+0x1e8/0x830 [ 1296.835727][T22006] notifier_call_chain+0x1a5/0x3d0 [ 1296.840842][T22006] call_netdevice_notifiers_info+0x8c/0x100 [ 1296.846745][T22006] unregister_netdevice_many_notify+0x1432/0x1d80 [ 1296.853153][T22006] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1296.859914][T22006] ? __pfx_kernfs_free_rcu+0x10/0x10 [ 1296.865253][T22006] ? rcu_is_watching+0x16/0xb0 [ 1296.870030][T22006] ? __up_read+0x29c/0x930 [ 1296.874430][T22006] unregister_netdevice_queue+0x2f5/0x340 [ 1296.880243][T22006] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 1296.886499][T22006] ? kernfs_remove_by_name_ns+0x101/0x140 [ 1296.892203][T22006] _cfg80211_unregister_wdev+0x1c4/0x8e0 [ 1296.897929][T22006] ? __pfx__cfg80211_unregister_wdev+0x10/0x10 [ 1296.904063][T22006] ? __mutex_lock+0x305/0x15a0 [ 1296.908897][T22006] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1296.914899][T22006] ? cfg80211_shutdown_all_interfaces+0x1cc/0x220 [ 1296.921321][T22006] ieee80211_remove_interfaces+0x49c/0x6a0 [ 1296.927225][T22006] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1296.933369][T22006] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 1296.939749][T22006] ieee80211_unregister_hw+0x5d/0x2d0 [ 1296.945184][T22006] mac80211_hwsim_del_radio+0x31a/0x500 [ 1296.950767][T22006] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 1296.956871][T22006] ? hwsim_exit_net+0xcc0/0xf50 [ 1296.961705][T22006] ? __local_bh_enable_ip+0xd6/0x140 [ 1296.967013][T22006] hwsim_exit_net+0xe91/0xf50 [ 1296.971709][T22006] ? hwsim_exit_net+0x326/0xf50 [ 1296.976636][T22006] ? __pfx_hwsim_exit_net+0x10/0x10 [ 1296.981848][T22006] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 1296.987720][T22006] ops_undo_list+0x451/0x8f0 [ 1296.992292][T22006] ? __pfx_ops_undo_list+0x10/0x10 [ 1296.997425][T22006] ? idr_destroy+0x218/0x290 [ 1297.002057][T22006] ? do_raw_spin_unlock+0xf5/0x200 [ 1297.007178][T22006] cleanup_net+0x572/0x810 [ 1297.011577][T22006] ? __pfx_cleanup_net+0x10/0x10 [ 1297.016509][T22006] ? rcu_is_watching+0x16/0xb0 [ 1297.021256][T22006] ? process_scheduled_works+0x97a/0x1630 [ 1297.026972][T22006] process_scheduled_works+0xc3d/0x1630 [ 1297.032506][T22006] ? __pfx_process_scheduled_works+0x10/0x10 [ 1297.038605][T22006] ? assign_work+0x3cf/0x5d0 [ 1297.043182][T22006] worker_thread+0xa47/0xfb0 [ 1297.047786][T22006] ? __kthread_parkme+0x71/0x1f0 [ 1297.052709][T22006] kthread+0x38b/0x480 [ 1297.056890][T22006] ? __pfx_worker_thread+0x10/0x10 [ 1297.061998][T22006] ? __pfx_kthread+0x10/0x10 [ 1297.066612][T22006] ret_from_fork+0x514/0xb70 [ 1297.071183][T22006] ? __pfx_ret_from_fork+0x10/0x10 [ 1297.076304][T22006] ? __switch_to+0xc78/0x1410 [ 1297.080964][T22006] ? __pfx_kthread+0x10/0x10 [ 1297.085530][T22006] ret_from_fork_asm+0x1a/0x30 [ 1297.090332][T22006] [ 1297.093357][T22006] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1297.100617][T22006] CPU: 0 UID: 0 PID: 22006 Comm: kworker/u8:10 Tainted: G L syzkaller #0 PREEMPT(full) [ 1297.111875][T22006] Tainted: [L]=SOFTLOCKUP [ 1297.116176][T22006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1297.126209][T22006] Workqueue: netns cleanup_net [ 1297.130975][T22006] Call Trace: [ 1297.134252][T22006] [ 1297.137162][T22006] vpanic+0x56d/0xa60 [ 1297.141127][T22006] ? __pfx__printk+0x10/0x10 [ 1297.145692][T22006] ? __pfx_vpanic+0x10/0x10 [ 1297.150175][T22006] ? is_bpf_text_address+0x292/0x2b0 [ 1297.155443][T22006] ? is_bpf_text_address+0x26/0x2b0 [ 1297.160623][T22006] panic+0xc5/0xd0 [ 1297.164329][T22006] ? __pfx_panic+0x10/0x10 [ 1297.168728][T22006] ? ret_from_fork_asm+0x1a/0x30 [ 1297.173644][T22006] __warn+0x315/0x4c0 [ 1297.177609][T22006] ? __mutex_lock+0x132a/0x15a0 [ 1297.182441][T22006] ? __mutex_lock+0x132a/0x15a0 [ 1297.187270][T22006] __report_bug+0x276/0x570 [ 1297.191843][T22006] ? __mutex_lock+0x132a/0x15a0 [ 1297.196677][T22006] ? __pfx___report_bug+0x10/0x10 [ 1297.201684][T22006] ? rcu_is_watching+0x16/0xb0 [ 1297.206439][T22006] ? trace_sched_exit_tp+0x3a/0x130 [ 1297.211620][T22006] ? __schedule+0x17f3/0x5820 [ 1297.216300][T22006] report_bug_entry+0x19b/0x290 [ 1297.221135][T22006] ? __mutex_lock+0x1331/0x15a0 [ 1297.225966][T22006] ? __mutex_lock+0x1336/0x15a0 [ 1297.230796][T22006] handle_bug+0xce/0x200 [ 1297.235022][T22006] exc_invalid_op+0x1a/0x50 [ 1297.239517][T22006] asm_exc_invalid_op+0x1a/0x20 [ 1297.244346][T22006] RIP: 0010:__mutex_lock+0x1331/0x15a0 [ 1297.249785][T22006] Code: fb 7c 91 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 46 02 00 00 83 3d 83 e9 83 05 00 75 13 48 8d 3d 06 e7 86 05 48 c7 c6 e0 24 0d 8c <67> 48 0f b9 3a 90 e9 1d ee ff ff 90 0f 0b 90 e9 f0 f1 ff ff 90 0f [ 1297.269368][T22006] RSP: 0018:ffffc9000450f040 EFLAGS: 00010246 [ 1297.275413][T22006] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff88802aa39f40 [ 1297.283361][T22006] RDX: 0000000000000000 RSI: ffffffff8c0d24e0 RDI: ffffffff917ff970 [ 1297.291311][T22006] RBP: ffffc9000450f1c8 R08: ffffffff917cfbe3 R09: 1ffffffff22f9f7c [ 1297.299261][T22006] R10: dffffc0000000000 R11: fffffbfff22f9f7d R12: ffff88802d184500 [ 1297.307211][T22006] R13: 0000000000000000 R14: 1ffff920008a1e1c R15: 0000000000000000 [ 1297.315169][T22006] ? __lock_acquire+0x747/0x2de0 [ 1297.320095][T22006] ? kthread_data+0x4f/0xc0 [ 1297.324593][T22006] ? nsim_dev_netdevice_event+0x1e8/0x830 [ 1297.330335][T22006] ? __pfx___mutex_lock+0x10/0x10 [ 1297.335351][T22006] ? lock_acquire+0x115/0x350 [ 1297.340024][T22006] ? bpf_offload_find_netdev+0xe3/0x7a0 [ 1297.345569][T22006] nsim_dev_netdevice_event+0x1e8/0x830 [ 1297.351114][T22006] notifier_call_chain+0x1a5/0x3d0 [ 1297.356215][T22006] call_netdevice_notifiers_info+0x8c/0x100 [ 1297.362091][T22006] unregister_netdevice_many_notify+0x1432/0x1d80 [ 1297.368494][T22006] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1297.375242][T22006] ? __pfx_kernfs_free_rcu+0x10/0x10 [ 1297.380508][T22006] ? rcu_is_watching+0x16/0xb0 [ 1297.385254][T22006] ? __up_read+0x29c/0x930 [ 1297.389654][T22006] unregister_netdevice_queue+0x2f5/0x340 [ 1297.395359][T22006] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 1297.401582][T22006] ? kernfs_remove_by_name_ns+0x101/0x140 [ 1297.407289][T22006] _cfg80211_unregister_wdev+0x1c4/0x8e0 [ 1297.412907][T22006] ? __pfx__cfg80211_unregister_wdev+0x10/0x10 [ 1297.419042][T22006] ? __mutex_lock+0x305/0x15a0 [ 1297.423788][T22006] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1297.429752][T22006] ? cfg80211_shutdown_all_interfaces+0x1cc/0x220 [ 1297.436150][T22006] ieee80211_remove_interfaces+0x49c/0x6a0 [ 1297.441939][T22006] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1297.447988][T22006] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 1297.454304][T22006] ieee80211_unregister_hw+0x5d/0x2d0 [ 1297.459655][T22006] mac80211_hwsim_del_radio+0x31a/0x500 [ 1297.465186][T22006] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 1297.471230][T22006] ? hwsim_exit_net+0xcc0/0xf50 [ 1297.476060][T22006] ? __local_bh_enable_ip+0xd6/0x140 [ 1297.481323][T22006] hwsim_exit_net+0xe91/0xf50 [ 1297.485980][T22006] ? hwsim_exit_net+0x326/0xf50 [ 1297.490809][T22006] ? __pfx_hwsim_exit_net+0x10/0x10 [ 1297.496012][T22006] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 1297.501827][T22006] ops_undo_list+0x451/0x8f0 [ 1297.506397][T22006] ? __pfx_ops_undo_list+0x10/0x10 [ 1297.511497][T22006] ? idr_destroy+0x218/0x290 [ 1297.516080][T22006] ? do_raw_spin_unlock+0xf5/0x200 [ 1297.521185][T22006] cleanup_net+0x572/0x810 [ 1297.525591][T22006] ? __pfx_cleanup_net+0x10/0x10 [ 1297.530513][T22006] ? rcu_is_watching+0x16/0xb0 [ 1297.535263][T22006] ? process_scheduled_works+0x97a/0x1630 [ 1297.540965][T22006] process_scheduled_works+0xc3d/0x1630 [ 1297.546507][T22006] ? __pfx_process_scheduled_works+0x10/0x10 [ 1297.552469][T22006] ? assign_work+0x3cf/0x5d0 [ 1297.557039][T22006] worker_thread+0xa47/0xfb0 [ 1297.561612][T22006] ? __kthread_parkme+0x71/0x1f0 [ 1297.566549][T22006] kthread+0x38b/0x480 [ 1297.570595][T22006] ? __pfx_worker_thread+0x10/0x10 [ 1297.575690][T22006] ? __pfx_kthread+0x10/0x10 [ 1297.580254][T22006] ret_from_fork+0x514/0xb70 [ 1297.584841][T22006] ? __pfx_ret_from_fork+0x10/0x10 [ 1297.589927][T22006] ? __switch_to+0xc78/0x1410 [ 1297.594591][T22006] ? __pfx_kthread+0x10/0x10 [ 1297.599157][T22006] ret_from_fork_asm+0x1a/0x30 [ 1297.603902][T22006] [ 1297.607164][T22006] Kernel Offset: disabled [ 1297.611477][T22006] Rebooting in 86400 seconds..