last executing test programs: 11m41.02582197s ago: executing program 3 (id=960): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='highspeed', 0x9) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001f00)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f00000005c0)="32ff", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000001280)="a724208a6deb11224dc5a7ab1fc4f6facfec7cc81c7cf523371f02a64aa653cc0dc59311f9b1e1083700cf4228de85e3800569cf8140e3c0bf6015d60f04147e3b3edf88fc6c176febafc4283854be9e9afabffb046d1b2b84181de667be3a3934b31a605c5d748504cb0cc7bd", 0x6d}], 0x1, 0x0, 0x0, 0x4102}}, {{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f00000014c0)="f0aa38238b2f0e0b98f10baed7a984b504c0b94c0f9fd8e738520b76af97cfb35b560f8ce7a89441ab0d6ac21efe8339c7b1c41b5cf7dcf6bfed40f37362252a8936f393e14a5da7daf736df3748", 0x4e}, {0x0}, {&(0x7f0000002180)="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", 0x383}], 0x3}}], 0x3, 0x2090) 11m39.995911976s ago: executing program 3 (id=965): openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000680), 0x0, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000bc0)="e7bc2f4799fe560c31cf5a20a1b22fb77ce7f19e605b6a8d2645af02e63f9a9d7ba31907ccc0f4aa71ec0762b3a8e3332fe3603b4624ac6a578ccd9a27b381a8dad12b3e3de940a99238945935184cd93dd174b70ecb9c3c99d2df9dd0cbef6a9e230f7dd8367384f034a7a011388990e94cd43e9f80ec3358dc596926960604b9f051", 0x83}, {&(0x7f0000000c80)="6c3e28dcd5c7eb9bc39a4bbc398357f3ad842b38a95863911bbd6e6afd9641d356257181e43b6e60349f69ec5f529734f76708a6c5eccb57005c1a513d8030d12c", 0x41}, {&(0x7f0000000d00)="dc6e94ac2db166801ffce85f6f44f2cb071c6b5113bc6bbf2f503d468253693a01102fcb8157c6e8a2b5620efa5d22400147cce896821150f95c0c69fa587a1f99fcb28cfeb09f45cb836f0ff891be10bb209dc04adc202ef866f27b74faa5ad3a2e5d40ebd6785c4e4a97ac13238c746d1109d12af5446c4e84591f121a494251e43bed18f6269bdd2e56f9c211dd7145f664286911b8bb3acf76a1b5ece94183a6c8cc47f2e1dd4e91dc10be8732e92e8620fa060fb1", 0xb7}, {&(0x7f0000000fc0)="c6eae69212ba50dd664af774c32d34273a3baad9692140de74d9294c555a8c2e0d53acea79b788b5eb1a12ada17eda2b2fb96c439ce16e6266afda6613fd7c90be9a9dfcd1b099fe6b023b725241a6e1048c700e7a939bd3a38f1101213b81c252dd8c44b7e647940438343d0d082507d218a952e6d77ec0918968c74f220c981a3797fb6cadfd6723a75c5c4da33e830ecf602c55bc60831ddd694f15728f4d1eacad82a03540713f52f9485138574e5b6aec693c2c613e442d5306c2ef1c8ad8dda8d005f3f3bacb5991d1c18db228185e4d2fcca72d87d81df01c142428158ad7ba84dd6c65d24a8d094308", 0xed}, {&(0x7f0000000800)="b56380b7487ff3b0cd079ed795bdeeb3ad75fe878a", 0x15}, {&(0x7f00000011c0)}, {&(0x7f0000001200)="43979d4537ac96f6e22b12acd1fdd3ffc7ef440e65e2e70d511a408f743d4ce7516f4364a00a041dc7b1ffe56ebc713b158ea1aab13ce3db53ab8af3f76ffaa86df636018175c4a8ea922a193ad08ca30d5031b27a4a87bff93dc12a98b6e4f25b5550d98a5bf3e040a8902083eea93bdbde6da91df3a730dd2b8215e9840f04dd0ab667500fe952fa1b88", 0x8b}, {&(0x7f0000001300)="ceff7472ad7240514c6f826361e8daefdb50fe704622e5641d1b096ad682a5682aa51b6eea91858d93228379d70f8489a6de471b8361073ce93c3bf35183529235eed04037cb6851e51dec4562fe30f99bd5de546427fecd0aa008bcbb2983ce2cfff078d49f7ecf297f85da5c094c0e7f07b12ec543a068bd2d654348f0e303f208c9190f58b7a9e0e1d2ba846bc248a3ec1530f7", 0x95}], 0x8, &(0x7f00000014c0)}}], 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000880)="562f2edb8e8c8229195820c788783ff270fb0f06936fe49376e5519e3fa8f998387d7011fc5d8c9f5fc8e0e1663c9f6919128a8941ae935aaba3f683642630f5a74535b0e1f886ea2807f04d3a68ff4285f2bf581674a033cb5ecf8c756e8df3968c959df5326ed67c09d8b72eceeb87023f6188e15cb258cd8c85be3eddaac311ee4cb17a08ef47157753606ce7996162ea4b18214763730e2b944b468575927829842ee7f6f8a3603a7a522025c55284c9ca0ab899626f86c9336ead2278445733db5e643e10fa93339be48ff1592bc6bcf2b68b4536951c600a0e6d1b5d5b0cdbdf85122560b431", 0xe9}, {&(0x7f0000000540)}, {&(0x7f00000006c0)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e847f403535371a24ce2a19c3898aca95", 0x8a}, {0x0}, {0x0}, {0x0}], 0x6}}], 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 11m39.522471907s ago: executing program 3 (id=968): r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f00000034c0)={0x2020}, 0xcac) 11m39.273107747s ago: executing program 3 (id=970): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) r1 = syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000840)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRESHEX, @ANYRESDEC, @ANYRES64=r5, @ANYRES64=r3], 0x30}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000600)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800450000380000000000019078ac1e0001ac1414aa030490781200183f2500000020000000000100007f0000017f00000100186371ae9b1c03ca7d2035be7178a8fc5a71872e472008769795bbc52623f92df4b554cddc301e878303f63f78d4e119a7d197e019072d5cf7ae333df022022e16d8fa1e53b04c5cd316457c0f8742400f8246ffce46f70ae6484693604f4666bc86fddc92fda60a7f33326b8bbb9a88ddbecdfc9abb81cd18438d32da25093926914a3a9607aa1d999a2be863bad390f996e663e5a5c1c78de1"], 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x578410eb) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="36d2877e1742c726f417faeea30a0f94af86d2c75b82fca64132da6404e96e445031c6c2fbda62ec9dc098471acab87ee1ac7a7bb29898989c0cdffa2dad45303f6d0f591f1ff93abae97b23334a051bd7972bd4ead2afae1c59a06e127d8c0cf6120dbb5579d4319e7f71f9855d78a0eba4ea15dddd557178af14da4e47"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r9, 0x29, 0x5, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000580)="400f08b996080000b8faffff7fba000000000f30b8010000000f01d90f787e00b9ba0a00000f324f0fc7a9904fca054080a503000000830f01b704000000c461fc7766baf80cb88ef0a685ef66bafc0c66b8310066ef", 0x56}], 0x1, 0x4e, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000000)="0f080fae04a200400f01c426660f3a15e6160fc76bdb0f015a820f2170260fed9c000066b9230b00000f32", 0x2b}], 0x1, 0x0, 0x0, 0x0) ioctl$VIDIOC_DECODER_CMD(r1, 0xc0485660, &(0x7f00000002c0)={0x1, 0x0, @raw_data=[0x4, 0x5, 0x5, 0x3c4, 0x40, 0x7, 0x4, 0x200, 0x0, 0x0, 0x0, 0x80000801, 0xae7, 0x5, 0x4, 0xff]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) 11m34.970158042s ago: executing program 3 (id=979): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0xa, 0x300) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x3c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x9) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) unlinkat(r2, &(0x7f00000003c0)='./file1\x00', 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="34000000090605000a00000000000000000000000900020073797a3000000000050001000c00078006000440b18c0c7cc9bceeecf1e259924fbfabf887091cf96b3ff57bd2ed69bd5a56daa1277917979830d51638dcf26b18a8a39e8538c0e90c450865cc44"], 0x34}}, 0x11) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)="a3ca") 11m33.594278129s ago: executing program 3 (id=983): r0 = syz_open_dev$video(&(0x7f0000000280), 0x80, 0x68c02) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r1, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2400c042) r2 = syz_io_uring_setup(0x1e20, &(0x7f0000000100)={0x0, 0x86f6, 0x10100, 0x0, 0x3cf}, &(0x7f00000002c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x4000, @fd=r0, 0x4, &(0x7f00000000c0)='i', 0x1, 0x4}) io_uring_enter(r2, 0x48ed, 0x5974, 0x6b, 0x0, 0x0) 11m18.49016151s ago: executing program 32 (id=983): r0 = syz_open_dev$video(&(0x7f0000000280), 0x80, 0x68c02) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r1, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2400c042) r2 = syz_io_uring_setup(0x1e20, &(0x7f0000000100)={0x0, 0x86f6, 0x10100, 0x0, 0x3cf}, &(0x7f00000002c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x4000, @fd=r0, 0x4, &(0x7f00000000c0)='i', 0x1, 0x4}) io_uring_enter(r2, 0x48ed, 0x5974, 0x6b, 0x0, 0x0) 5m46.15536551s ago: executing program 0 (id=2002): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={&(0x7f0000000380)=@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x100000}, 0x80, &(0x7f0000000500)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="18000000000000008400000000000000620000000000010020000000000000008400000008"], 0x38}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f00000014c0)=""/145, &(0x7f0000000080)=0x91) 5m45.874100114s ago: executing program 0 (id=2003): openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0xa, 0x8001, 0x0, 0xb, 0x1000000000, 0xffff, 0x0, 0xfffffffb}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x200000d, 0x11, 0xffffffffffffffff, 0x8000000) syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) fsopen(&(0x7f0000000240)='jffs2\x00', 0x1) 5m44.901119772s ago: executing program 0 (id=2005): r0 = syz_io_uring_setup(0x114, &(0x7f0000000100)={0x0, 0x79ae, 0x3380, 0x801, 0x373}, &(0x7f0000000340)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_setup(0x10a, &(0x7f0000000680)={0x0, 0x80334c, 0x10, 0x3, 0x3d3}, &(0x7f00000002c0)=0x0, &(0x7f0000000180)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r4, 0x0, 0x0, 0x60, 0x185100, 0x23456}) io_uring_enter(r0, 0x627, 0xc1040000, 0x43, 0x0, 0x0) (fail_nth: 26) 5m44.197998735s ago: executing program 0 (id=2006): socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x44000, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0008004500001c000000000001907800000000ffffffff2a009078000000008be9540b38903654a2f1e9fb7f1231e7a8e39dfaa0b1380354ba2c5d7f16e59a44dc1eca86fa22dc010b906952d8c07397c23c0d6e9649ff100f03dee90b1e5f0f5e2d11ffb04104997d34e375e96b10fdf386e203"], 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xf090}}}, 0x108) setsockopt$inet6_group_source_req(r7, 0x29, 0x2f, &(0x7f0000000200)={0x1, {{0xa, 0x4e22, 0x0, @mcast1={0xff, 0x7}, 0x3}}, {{0xa, 0x3, 0xa4fffffc, @rand_addr=' \x01\x00'}}}, 0x108) dup(r6) r8 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xf691, 0x10100, 0x0, 0x2b4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000040)=@IORING_OP_FILES_UPDATE={0x14, 0x8, 0x0, 0x0, 0x3, &(0x7f0000000c40)=[r5, r5, 0xffffffffffffffff, r5, 0xffffffffffffffff, r2], 0x6}) io_uring_enter(r8, 0x708, 0x41e3, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000a, 0x5d032, 0xffffffffffffffff, 0x0) syncfs(0xffffffffffffffff) r11 = userfaultfd(0x801) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x3, 0x0) ioctl$UFFDIO_API(r11, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r11, 0xc020aa00, &(0x7f0000000440)={{&(0x7f00009f8000/0x1000)=nil, 0x1000}, 0x7}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r7, 0x40189429, &(0x7f0000000080)={0x1, 0x5, 0x200}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000100), 0xc06620, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) 5m42.854114948s ago: executing program 0 (id=2009): socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, 0x0) r0 = socket(0x2, 0x3, 0x6) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000002400)={0x2, 0x1, @remote}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x114, 0x3, 0x0, 0x10) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOBLANK(r4, 0x4611, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r7, 0xc008ae88, &(0x7f0000000180)={0x1, 0x0, [{0x40000106}]}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_int(r8, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r8, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r8, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0xd007) 5m42.368961188s ago: executing program 0 (id=2013): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r1) r2 = socket$unix(0x1, 0x5, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) sched_setscheduler(0x0, 0x5, &(0x7f0000000480)) sendfile(r3, 0xffffffffffffffff, 0x0, 0x10ffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r8 = syz_open_dev$sg(&(0x7f0000000280), 0xfa0, 0x240) ioctl$SCSI_IOCTL_SEND_COMMAND(r8, 0x1, &(0x7f0000000a40)={0x0, 0x0, 0x19ae}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$unix(0x1, 0x1, 0x0) 5m41.341005414s ago: executing program 33 (id=2013): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r1) r2 = socket$unix(0x1, 0x5, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) sched_setscheduler(0x0, 0x5, &(0x7f0000000480)) sendfile(r3, 0xffffffffffffffff, 0x0, 0x10ffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r8 = syz_open_dev$sg(&(0x7f0000000280), 0xfa0, 0x240) ioctl$SCSI_IOCTL_SEND_COMMAND(r8, 0x1, &(0x7f0000000a40)={0x0, 0x0, 0x19ae}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$unix(0x1, 0x1, 0x0) 15.749195121s ago: executing program 4 (id=2896): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x40810) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x183a00) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) lseek(0xffffffffffffffff, 0xfffffffffffffff9, 0x2) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000005c0)={0xffffffffffffffff, 0x10000, {0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x5, 0x18, 0x1, "ddd557994e05f95814b10d5caaab60fa6471833a1288756326ac5a959693b2dd628f602a27105c7dfaad5fd258aed58639bfac71b3449ead408fa8773f846012", "f8c9c1e7bd5ecee233b4b8940184997590f4d16bb30705a8aa0c75c57e030af1bae602f411c76d22f65cb2c1332bf2f90a01c8e42ad14bc358ffca3d43b20a81", "a7d0a4cea705f267881496006cb729ff05507c359833d64391261b3ea2b13214", [0x7fffffffffffffff, 0x6]}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x5, 0x0, 0x3ff, 0xb49, 0xb, 0x8, 0x7, 0x1}, 0x0) syz_usb_disconnect(r0) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000000080)=0x8, 0x4) socket$inet_sctp(0x2, 0x5, 0x84) landlock_restrict_self(0xffffffffffffffff, 0x0) link(0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) close(r2) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x29, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0) lseek(r6, 0x7fff, 0x1) read$FUSE(r6, 0x0, 0x0) 13.330269117s ago: executing program 6 (id=2907): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000080)={0x13803400, &(0x7f0000000280)=0xffffffffffffffff, 0x0, 0x0, {0x4}, 0x0, 0x26, 0x0, 0x0, 0x0, {r0}}, 0x80) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000140)=""/170, 0xaa}], 0x1, 0x6, 0x4) r3 = pidfd_getfd(r1, r1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000001) ioctl$GIO_FONT(r3, 0x4b60, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_INET6={0x4, 0x2d}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048020}, 0x8024) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0xfffffffd, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, r3, 0x3, 0x1}, 0x50) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1ec) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000180)={{}, {0x20}, [], {0x4, 0x2}, [], {}, {0x20, 0x4}}, 0x24, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x7, 0x5, 0x9268, r5, 0x2, '\x00', 0x0, r3, 0x0, 0x1, 0x5, 0x1, @value=r3}, 0x50) setns(r3, 0x10000000) 10.537367507s ago: executing program 4 (id=2911): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, 0x0, &(0x7f0000000040)) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010000305fcffffff0000040000000000", @ANYRES32=0x0, @ANYBLOB="1111020031000000140012800b0001006d616373656300000400028008000500", @ANYRES8, @ANYBLOB="2c9593cf7ce65fa091000a69b8da3395d79ca45a513e59ff9df9c15c4b774e254ae87e80c42536f9cc40ec39e9aa76229d774528b5c0612c1f3c8e6d15f27e922d1155e0e9680cf09960090666934a7bea321d111cc08f58f22951b6e9ad158f32cdb7db1df67e7304eccc4f0702323c53dcd97cd6752591e32a34ebb714f0364d903f4b691a3ae5a5619313abbda72046831a803216383dad206293e669453ce71116857b7ca4647bd17bb2b1a0a43e868e3ca087a6453adf5b77862adb08864bdbc7fba8929e21a6"], 0x3c}, 0x1, 0x0, 0x0, 0x4c890}, 0x0) 9.982107092s ago: executing program 1 (id=2912): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x840000000002, 0x3, 0xfa) getsockname$inet(r2, 0x0, &(0x7f0000002280)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f00000002c0)=0xc) tgkill(r3, 0x0, 0x3f) r4 = syz_open_dev$video(&(0x7f0000000040), 0x400007f, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x4, 0xd06, 0x34524742, 0x4, 0x4, 0x7, 0x3, 0xfeedcafe, 0x0, 0x2, 0x2}}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES8=r0], 0x50) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="300000001000010028bd7000f9dbdf2500000000bfbafa22f494d4e416837f4d7bb4943a2ce8736482ec45e6327d90b8fbe2aace6c5c4291ee4f52f69a5f22b1509a825905467e23c94caf285dd51785e056f48b4cbc308a5636d943d29ee10b32289c434b6c9fc668ca17e5e605a175245eef423b3a835c8d8d88481b9b064ebebd807b8aa511551ef89f2c80cb3e89eec4848f0c46a393b6", @ANYRES32=0x0, @ANYBLOB="158804000300000008000d00010000000800"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000010002500000000000000000000002000", @ANYRES32=0x0, @ANYRES8=r5], 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r8, 0x0, 0xffffffffffffffff, 0x1}) unshare(0x2000400) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000540)={0x48, 0x7, r11, 0x0, 0x1, 0x0, 0x4, 0x1d239b, 0x221eee}) ioctl$IOMMU_IOAS_UNMAP$ALL(r7, 0x3b86, &(0x7f0000000240)={0x18, r8}) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r6, 0x29, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="66696c74657200000000000000200000000000000000000000000000000000000400"/104], 0x68) 9.827251249s ago: executing program 4 (id=2914): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, &(0x7f0000000040)={0x0, 0xe472, 0x800, 0x0, 0x25a}, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000000) r2 = socket(0x840000000002, 0x3, 0xfa) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a3000000100090003007379"], 0x7c}}, 0x4004850) sendmsg$NFT_BATCH(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockname$inet(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) getresuid(&(0x7f0000000100), 0x0, 0x0) lstat(&(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r0, &(0x7f00000000c0)='./file0\x00', 0x0, r4, 0x100) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d2", 0x9}], 0x1}, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000040)={0x0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x12, 0x6, &(0x7f0000000200)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 9.433791306s ago: executing program 6 (id=2915): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, &(0x7f0000000040)={0x0, 0xe472, 0x800, 0x0, 0x25a}, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000000) r2 = socket(0x840000000002, 0x3, 0xfa) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a3000000100090003007379"], 0x7c}}, 0x4004850) sendmsg$NFT_BATCH(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockname$inet(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) getresuid(&(0x7f0000000100), 0x0, 0x0) lstat(&(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r0, &(0x7f00000000c0)='./file0\x00', 0x0, r4, 0x100) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d2", 0x9}], 0x1}, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000040)={0x0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x12, 0x6, &(0x7f0000000200)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 9.327575363s ago: executing program 5 (id=2917): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}, 0x1, 0x7, 0x0, 0xddaa, 0x8e, 0x3a5}, 0x9c) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) write$tun(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaaed0fb70f1088f7f0ef760010a11d003f3cbf7c5b811e3ee6f93f7d31646687ddcc6e149b4904db647d1abdb56338ed44e8980df6a7216884db28c109e6ada39214584a31eb1a5941f8603382cf2214f2bf302f0184761c89b31fafa282d3f9bd0a0a8196893da48a3659d021402144d53d73d0e2a6bf1b1db19e40c5376808"], 0x101) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000540)={{0x1, 0x1, 0x18, r1, {0xee01, 0xee00}}, './cgroup/cgroup.procs\x00'}) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r7, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffec7) write$FUSE_INIT(r7, &(0x7f0000000080)={0x50, 0x0, r8, {0x7, 0x29, 0x9, 0xffffffff998acdc2, 0x0, 0x0, 0x80, 0x6, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r7, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r7, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="d800000000000000f9ffffffffffffff00000000000000010200000000000000020000000000000000010000000000000200000008000000060000000000000009000000000000000000000000000000ff0000000000008003000000000000000000000000000000ffffff7f5800000003000087f807cab613704300", @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="010000000400000000000000000000000000200037050000000000002b000000f90000003a2d285cc980000009c30000f3397cd86d4d928d14d3a461b60245898556c20600000000002b133b0800000000000000"], 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000180)='./cgroup/cgroup.procs\x00', 0x4080, &(0x7f0000000800)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="646530303030e46def7e3030303032303030302c757365725f69643d00000000000000000000485cdc87fadb4dfd0c8c7a988fa0961f9dc96690ca1dc4c6d010087bbe5125e8cc3deeaf51c115ab008ca13e39008634a4e907620f92e9997ffb765f9126ce8cd24bc077bbc5967cb1a7cf53b5ab154fbe250622dbcdb1b55830749df46d4276e632c11d4d9c6981e13084dc8dc528f1f5dfb260e382c57290b3012be93be18dc26ad0647ca7b0658d86320c501912a4a3036401f88bdb1f17117f7ca0f0c9f2dadb330ac2643647dd2906adb0a65ef0e0a0329ed6e218fad0758aab9559d11ef47e1cafedb24f39d7b3cfa3ee54062b2703348c72252c58b44a38dcc22512dd081f1885547e163700000000000000", @ANYRESDEC=r5, @ANYBLOB=',group_id=', @ANYRESDEC=r6, @ANYBLOB=',max_read=0x0000000000000004,blksize=0x0000000000001300,appraise,euid>', @ANYRESDEC=r9, @ANYBLOB=',\x00'], 0x1, 0x0, &(0x7f0000000680)="6e15d582e2755d801b231b7d29f95c958b6304f9d8bca9") recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r11 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r11, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r11, 0xa9525000) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r12, 0x1, &(0x7f0000000040), 0x0) lchown(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x0, 0x0) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/diskstats\x00', 0x0, 0x0) syz_io_uring_setup(0x49a, &(0x7f0000000380)={0x0, 0x79ad, 0x80, 0x3, 0x26c, 0x0, r13}, &(0x7f0000000340), &(0x7f0000000040)) 6.142918828s ago: executing program 1 (id=2918): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)={0x1d4, 0x10, 0x1, 0x0, 0x0, {0x3}, [@nested={0x1b6, 0xb8, 0x0, 0x1, [@nested={0xc2, 0x8d, 0x0, 0x1, [@generic="7f43c982fa9cbcb34b8ea0d448f51516e5a32f1cf362c450317f0bd70438733ad8481d0d5fb2223f8137a89b2cf39ad3739eb7011e8e8129dbac70ef71810b2c926e64b55e37f0cf07fcbe0355fb7f68608a598594fbd565321a3735b4d30213e9e0e4a5c6db1d493c53d96be37970e8051d8279695bc45ccb9153faf99d9bb5d1cf1b2fc325d612242ba653bb30a687f172526ec3c0deb5024f600017ff757afb2105a1373ed11ad16ef7fc8c1c46c3278f40937ce2b2e42680ca26f532"]}, @typed={0x14, 0x12, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0xe9, 0x0, 0x0, @u64=0x8}, @nested={0x10, 0xc0, 0x0, 0x1, [@nested={0x4, 0x76}, @typed={0x8, 0xfb, 0x0, 0x0, @u32=0x7}]}, @nested={0x14, 0xec, 0x0, 0x1, [@generic, @generic, @typed={0x8, 0xbb, 0x0, 0x0, @pid}, @typed={0x8, 0x33, 0x0, 0x0, @pid}]}, @generic="e25079b3ecaa1c07888b27474012e924395851b944821d03d3af3d5200921b2a373edf8323074a1454b6873a125f48f848b3c59c7ea2baa652564e0686f5b97abc14e7ac97a7ebdfae1db86b472fe6781018d80a817be85ff6d0aeeeec2b8488ae177b0b7319477a69dd4ac1bea6418ac6fe46c415e21b7d73cf974e29b5c17e62a6e140410ad598d38da25ea220144682e364a6a4fa", @generic="fd62480531c9331c02958de9b3f310145da09607"]}, @generic, @typed={0x8, 0x10a, 0x0, 0x0, @ipv4=@private=0xa010102}]}, 0x1d4}, 0x1, 0x0, 0xf000000, 0x84}, 0x0) 6.038140118s ago: executing program 5 (id=2920): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x4000000) socket(0x6, 0xa, 0x4) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) r2 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/pm_trace_dev_match', 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) readv(r2, &(0x7f0000000780)=[{&(0x7f00000002c0)=""/255, 0xff}], 0x1) 5.466596485s ago: executing program 4 (id=2924): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010000305fcffffff0000040000000000", @ANYRES32=0x0, @ANYBLOB="1111020031000000140012800b0001006d616373656300000400028008000500", @ANYRES8=r2, @ANYBLOB="2c9593cf7ce65fa091000a69b8da3395d79ca45a513e59ff9df9c15c4b774e254ae87e80c42536f9cc40ec39e9aa76229d774528b5c0612c1f3c8e6d15f27e922d1155e0e9680cf09960090666934a7bea321d111cc08f58f22951b6e9ad158f32cdb7db1df67e7304eccc4f0702323c53dcd97cd6752591e32a34ebb714f0364d903f4b691a3ae5a5619313abbda72046831a803216383dad206293e669453ce71116857b7ca4647bd17bb2b1a0a43e868e3ca087a6453adf5b77862adb08864bdbc7fba8929e21a6"], 0x3c}, 0x1, 0x0, 0x0, 0x4c890}, 0x0) 5.385726708s ago: executing program 4 (id=2925): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}, 0x1, 0x7, 0x0, 0xddaa, 0x8e, 0x3a5}, 0x9c) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) write$tun(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x101) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000540)={{0x1, 0x1, 0x18, r1, {0xee01, 0xee00}}, './cgroup/cgroup.procs\x00'}) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r6, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffec7) write$FUSE_INIT(r6, &(0x7f0000000080)={0x50, 0x0, r7, {0x7, 0x29, 0x9, 0xffffffff998acdc2, 0x0, 0x0, 0x80, 0x6, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r6, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r6, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="d800000000000000f9ffffffffffffff00000000000000010200000000000000020000000000000000010000000000000200000008000000060000000000000009000000000000000000000000000000ff0000000000008003000000000000000000000000000000ffffff7f5800000003000087f807cab613704300", @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="010000000400000000000000000000000000200037050000000000002b000000f90000003a2d285cc980000009c30000f3397cd86d4d928d14d3a461b60245898556c20600000000002b133b0800000000000000"], 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000180)='./cgroup/cgroup.procs\x00', 0x4080, &(0x7f0000000800)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="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", @ANYBLOB=',group_id=', @ANYRESDEC=r5, @ANYBLOB=',max_read=0x0000000000000004,blksize=0x0000000000001300,appraise,euid>', @ANYRESDEC=r8, @ANYBLOB=',\x00'], 0x1, 0x0, &(0x7f0000000680)="6e15d582e2755d801b231b7d29f95c958b6304f9d8bca9") recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r10 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r10, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r10, 0xa9525000) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r11, 0x1, &(0x7f0000000040), 0x0) lchown(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x0, 0x0) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/diskstats\x00', 0x0, 0x0) syz_io_uring_setup(0x49a, &(0x7f0000000380)={0x0, 0x79ad, 0x80, 0x3, 0x26c, 0x0, r12}, &(0x7f0000000340), &(0x7f0000000040)) 5.150811735s ago: executing program 1 (id=2927): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, 0x0, 0x0) 5.01536818s ago: executing program 6 (id=2928): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x7, r2, 0x0, 0x10000, 0x0, 0x4, 0x29a13e, 0xe73d3}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000001200)={0x48, 0x8, r2, 0x0, 0xffff, 0x1100, &(0x7f0000000480)='|0', 0x5}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="88c1e6cf", @ANYRES16=r5, @ANYBLOB="010700000000fcdbdf2541000000"], 0x14}}, 0x4c000) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000040)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000020000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000001000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001000600000000004400050000000000000000000000ffff0a010101000000003c00000002000000ac1414aa0000000000000000000000000600000004"], 0xfc}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'syztnl0\x00', &(0x7f0000001700)={'syztnl0\x00', 0x0, 0x4, 0x7, 0x1, 0xff, 0x8, @mcast1, @private0, 0x8000, 0x7801, 0x4}}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000001780)={'team0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001b00)={0x0, @remote, @dev}, &(0x7f0000001b40)=0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001e80)={'gre0\x00', &(0x7f0000001e00)={'tunl0\x00', 0x0, 0x8001, 0x7800, 0xf5c4, 0x5, {{0x10, 0x4, 0x3, 0x14, 0x40, 0x66, 0x0, 0xf9, 0x2f, 0x0, @loopback, @empty, {[@timestamp_prespec={0x44, 0x24, 0xcd, 0x3, 0xb, [{@remote, 0x6daa}, {@private=0xa010102, 0x5}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0xa3}, {@loopback, 0xfffffff7}]}, @ssrr={0x89, 0x7, 0x34, [@loopback]}]}}}}}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) r12 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r12, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet_tcp_TLS_TX(r12, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "60000100", "9de66ebc3914c06f0f90e700", '\x00,\x00', "f8dd000000000092"}, 0x28) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r14 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r14, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_route(r14, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001a0009002bbd70000000000080"], 0x1c}}, 0x4000010) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000001f80)={'syztnl2\x00', &(0x7f0000001ec0)={'syztnl2\x00', 0x0, 0x0, 0x7800, 0x9, 0xfabd, {{0x16, 0x4, 0x1, 0x3b, 0x58, 0x65, 0x0, 0x0, 0x2b, 0x0, @rand_addr=0x64010102, @loopback, {[@cipso={0x86, 0x1b, 0xffffffffffffffff, [{0x6, 0xf, "68f76b68244804959f8fd71f8c"}, {0x0, 0x3, 's'}, {0x0, 0x3, "da"}]}, @timestamp_prespec={0x44, 0xc, 0x72, 0x3, 0x2, [{@empty, 0x7}]}, @ssrr={0x89, 0x1b, 0x54, [@remote, @dev={0xac, 0x14, 0x14, 0x1f}, @multicast2, @multicast2, @multicast1, @empty]}]}}}}}) sendmmsg$inet(r4, &(0x7f0000003140)=[{{&(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000200)=[{&(0x7f00000004c0)="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", 0x1000}, {&(0x7f0000000180)="fb6fc1d730f82c8d6417c909a755537f3b7bc4caed5f8d2f5fde5d37e0f1c6c632e801a1f8c228a8c121baffb900e82a5aafec4adf1e707bf737a29fa4a8eeb32bd049ef74eb352532938c39935f2f1c624c7ef7d2fc077d", 0x58}, {&(0x7f0000002140)="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", 0x1000}], 0x3}}, {{&(0x7f0000000240)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000001680)=[{&(0x7f0000000300)="41bde6707870a3dd1b1570b6f2081211b3abf6172eb9eb817848bd531fa6c17385d8bcc6c302065e353bd158f79624a335895f12b0d395b69742abc205b19bdbedf3b781180dc5b930d7c149cd9751f3e764cd1e10a1ad972c2ca45f6b5812f5d5a031bdfe26b9d9d201e4dac2e1b0428211b511b05ba0be86e1ee1831e9a879c108e1a192278dd0d298f45947fa0d3f6d430bafae096b1a0f55d99351bde75fcf59353d5976", 0xa6}, {&(0x7f00000014c0)="66c212ff23fb4b553c23001163172954a3617101e6b84f0e2e2efbcdf24a8f59c508475d223388bdf13fa16e245c2977b42f9df3e51961422316bfc55ef8a8af0de97e2982388109660b6ffca785cc925e6047befc103fc1b2d5d40f45cb333ab07ef94870da75de0711cb92557c1c472882df8adfca032d052531f8c3e77c085e4607aea394191b7d1237bf84584fa44779151e6c175c2a8881baabc6415363391fd318f9664bd0e078c3eaed3284f70629c608", 0xb4}, {&(0x7f0000000280)="7e566572abb7dacb05a5502f41bb7500cfc327e9746259e9031fd9e63487cd16dc70e0798eb2f39263", 0x29}, {&(0x7f0000001580)="1aa319eaad43c95d0cd798510c9e4bfe4a980b4be33050534a56aa10640bf3afdfb2d9e27dc586ed199e8c5a854c3389d1377c8d9ceee7b91a14bf7cf08e260b46a444327d0fc47d516c64b85190518013522eb42cafe41ae211995d72043d60b53e3a06bf673938e3de6aa93022f2fc180ad1ac0ed3a111d61bb178a2297291e2c8e367995a062103e2f3dd381b10f03ffa0ca6cacb3ce2b1696b805b4e39452b0fc133c2ad3f9e99eea564ea06355211f70e3d33e93b2cbc4bff8b9f8e17301bc0fae9449fc7dcf37fa190d06cbde8c92b", 0xd2}, {&(0x7f00000003c0)="b750f0348dcb4d9a", 0x8}], 0x5, &(0x7f00000017c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @loopback, @local}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @loopback, @empty}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8000}}], 0xa0}}, {{&(0x7f0000001880)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10, &(0x7f0000001980)=[{&(0x7f00000018c0)="4d021e10f334f11f135626e931d4b275ee45051b039a73789b18f295c755d3144e724ca240626d137282ca98096caa070d93e2358aec2c2b44700456d96c04fd92975472d4845ed44a7817a43e5837d3421891e9ffd5d62c2b00bb9b1a73d721bfb2dc404e660559a3a17fb01a82e345b1aa12761d4646fc9a1ec1d7faa66657131340b05acaa8136a1c4a78ebc3496f45c964d69dea963d95b4548b21f62d578e77ccc4f5e2e29dea014fe65628", 0xae}], 0x1, &(0x7f00000019c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xbb9}}], 0x18}}, {{&(0x7f0000001a00)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000001ac0)=[{&(0x7f0000001a40)="f27773aa99f7e76dbc7c7e35515b7e3897566f7eca8d4a084d354dfcb1c2fc0ed9cb4904bcbd2e3d314ad59c443431876c74cc478ba9e9ce5e90b4a5fb7841f67f1bcfe5e2bf303ba7886b447d05299ca0f215d1eaefc7346b3694420fe118bdcd95025a45a7407907c3ddf4c175bf4226af7a7c244fbca06b05e772ea", 0x7d}], 0x1, &(0x7f0000001b80)=ANY=[@ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="ac1414bbe000000100000000"], 0x158}}, {{&(0x7f0000001d00)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000001dc0)=[{&(0x7f0000001d40)="4fb0bd4224891a8c0de7ad620e36d26bfe2af05f95251d0162a490d230811d107acd93f0b7c74705cb3c0cd37f3b8d446369fec6598820", 0x37}, {&(0x7f0000001d80)="80571827fa3e1e79cbfc0d59bdb6c5e547d6acadae4f8f97c7c4304815c04f64cb2128d3cd1d805c", 0x28}], 0x2, &(0x7f0000001fc0)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@generic={0x44, 0x4, "b920"}, @ssrr={0x89, 0x7, 0xa4, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @noop]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @private=0xa010100, @broadcast}}}, @ip_tos_u8={{0x11}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r13, @empty, @multicast2}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xb}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r15, @private=0xa010102, @multicast1}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0xf8}}], 0x5, 0x40041) r16 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r16, &(0x7f00000020c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002100), 0x13f, 0x3}}, 0x20) 4.958482128s ago: executing program 5 (id=2929): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) getpid() setns(0xffffffffffffffff, 0x24020000) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x2, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="0600000000000000643d", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$FUSE_ATTR(r3, &(0x7f0000007100)={0x78, 0x0, 0x0, {0xa0, 0x6, 0x0, {0x4, 0x0, 0x9, 0x8, 0x0, 0x4, 0xfffff92f, 0x0, 0x4, 0xc000, 0x3ff, 0xee00, 0x0, 0x80000003, 0x4}}}, 0x78) r4 = syz_io_uring_setup(0xe42, &(0x7f00000005c0)={0x0, 0x2119, 0x100, 0x0, 0x15b}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f0000000080)=0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_FLAGS(r5, 0x114, &(0x7f0000000000), 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x80000, 0x0, 0x32}, &(0x7f0000000500)='./file0\x00', 0x1d}) io_uring_enter(r4, 0x6f58, 0x0, 0x0, 0x0, 0x0) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000280)) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) 4.514556926s ago: executing program 1 (id=2930): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@deltclass={0x24, 0x29, 0x8, 0x70b525, 0x25dfdc02, {0x0, 0x0, 0x0, 0x0, {0x4, 0xb}, {0x3, 0x10}, {0xfff2}}}, 0x24}}, 0x80000) r0 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0xdcb8, 0x10, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xc5e2, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x77, 0x29c680}) io_uring_enter(r0, 0x3518, 0xaddf, 0x2, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0x0, 0x44e7dc2b}, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond_slave_1\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@gettfilter={0x34, 0x2e, 0x300, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x6, 0xc}, {0xd, 0x7}, {0xd, 0x5}}, [{0x8}, {0x8, 0xb, 0x800}]}, 0x34}}, 0x0) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)=""/52, 0xbb, 0x34, 0x0, 0x6, 0x10000}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x1, 0x0, r5, 0x3ff, '\x00', r7, r9, 0x3, 0x4, 0x1}, 0x50) write$tun(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="00008100010016000000140000005f859c"], 0x94) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x19, 0x0) r10 = socket$kcm(0x29, 0x5, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_pressure(r10, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$int_in(r10, 0x5452, &(0x7f0000000240)=0x7) sendmsg$kcm(r10, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000818) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r11, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r11, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r11, &(0x7f0000000040)={0x50, 0x0, r12, {0x7, 0x1f, 0x100000, 0x5691409, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}}, 0x50) syz_fuse_handle_req(r11, &(0x7f0000004200)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x0, {0x0, 0x3022d6e144aa3cee}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.272290075s ago: executing program 6 (id=2931): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00') r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000040)="240000001e005ff6991a2b200e0f7a000a000000000000000000110008000e00000000ff", 0x24) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r1, 0x0, 0x1) fchdir(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) ppoll(&(0x7f0000000300)=[{r3, 0x8040}, {r0}, {0xffffffffffffffff, 0x1012}], 0x3, &(0x7f0000000380), &(0x7f00000003c0)={[0xa170]}, 0x8) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = syz_open_dev$dri(&(0x7f0000000340), 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x3, 0x0, 0xfffff034}, {0x48}, {0x6, 0x37, 0x0, 0x2c}]}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000400)=ANY=[@ANYBLOB="0380c20000090180c200001988a8420081003900080045da001c00660000a106"], 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r5, 0xc00464c9, &(0x7f0000000100)) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r7, 0x0, {0x1, 0xff}}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r9 = accept$unix(r3, &(0x7f0000000200)=@abs, &(0x7f0000000140)=0x6e) ioctl$BTRFS_IOC_DEFRAG_RANGE(r9, 0x40309410, &(0x7f0000000280)={0xbbe7, 0x1000, 0x2, 0x5, 0x1, [0x5, 0x19, 0x8, 0x9a8]}) ioctl$sock_SIOCGIFCONF(r8, 0x8912, &(0x7f00000001c0)=@buf={0x40, &(0x7f0000000100)="e57cc65058dd6e91be23f83e8eeb9edef08321eb8b9384c0d5264327556c1b12da724df44f48657918c81299238db2851ce13d1bf9627b95b9806fae332cb94c"}) unshare(0x22020600) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r10, 0xffffffffffffffff, 0x0) munmap(&(0x7f00006f4000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x49a, &(0x7f0000000480)={0x0, 0x79af, 0x1c0, 0x1, 0x36c}, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) 3.902540161s ago: executing program 6 (id=2932): socketpair$tipc(0x1e, 0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001e40), 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(0x0, 0x1d24, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x80000) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x2, 0x4, 0x1, 0x5, 0xffffffff}) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000000)={0x1, @private, 0x0, 0x0, 'sed\x00', 0xa, 0xfffffffb, 0x14}, 0x2c) openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0xa0000, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) sendfile(r3, r3, 0x0, 0x2000fb) ioctl$SNAPSHOT_SET_SWAP_AREA(r3, 0x400c330d, &(0x7f00000000c0)={0x3, 0x1}) 3.569686572s ago: executing program 2 (id=2933): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)="7800000018002507b9409b14ffff0b7a0204be14fed8a0056406040c5c0009003f0006180a0000000d0085a168d0bf46d32345653610648d270005000a06024e49935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000400160040030a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x20000800, 0x0, 0xa0) 2.842862377s ago: executing program 2 (id=2934): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000040)={0x0, 0x3, 0x1, 0x3, 0xa1, 0x7, 0x0}) 2.831456074s ago: executing program 4 (id=2935): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, &(0x7f0000000040)={0x0, 0xe472, 0x800, 0x0, 0x25a}, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000000) r2 = socket(0x840000000002, 0x3, 0xfa) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014"], 0x7c}}, 0x4004850) sendmsg$NFT_BATCH(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockname$inet(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) getresuid(&(0x7f0000000100), 0x0, 0x0) lstat(&(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r0, &(0x7f00000000c0)='./file0\x00', 0x0, r4, 0x100) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d2", 0x9}], 0x1}, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000040)={0x0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x12, 0x6, &(0x7f0000000200)=ANY=[@ANYRESDEC=0x0], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 2.797794653s ago: executing program 1 (id=2936): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd31, 0x0, {{@in6=@local, @in6=@local, 0x200, 0x0, 0x0, 0x0, 0xa, 0x10, 0x30, 0x0, 0x0, 0xffffffffffffffff}, {0x10000000000000, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x800000000000a00, 0x407ffffffffffe, 0x800000000000002}, 0x10, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0xc040}, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0xe0ff, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) 2.710723511s ago: executing program 2 (id=2937): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f0000000080)=0x9, 0x4) setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f0000000000)=0xf, 0x4) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c00008008000340000000022c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a310000000014000000110001"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000040)=0xb, 0x4) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000001140), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r3, 0x40045613, &(0x7f0000001180)=0x2) 2.683658992s ago: executing program 5 (id=2938): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone3(&(0x7f0000000240)={0x200a00000, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 2.373128013s ago: executing program 2 (id=2939): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x4000000) socket(0x6, 0xa, 0x4) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) r2 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/pm_trace_dev_match', 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) readv(r2, &(0x7f0000000780)=[{&(0x7f00000002c0)=""/255, 0xff}], 0x1) 2.286955404s ago: executing program 5 (id=2940): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd0000000000000109022400018000000009040000010300000009210500000122050009058103"], 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000900), 0x42200, 0x0) read$FUSE(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x2, "d2903a4e"}]}}, 0x0}, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000180)={0x1, 0xef, 0x0, 0x0}) 2.282027365s ago: executing program 1 (id=2941): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) r3 = syz_open_dev$evdev(&(0x7f000001fa80), 0x20000000, 0x0) ioctl$EVIOCSCLOCKID(r3, 0x40084504, &(0x7f0000ffcffc)) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x20100, 0x0) ioctl$RTC_WKALM_SET(r4, 0x4028700f, &(0x7f0000001400)={0x0, 0x1, {0xb3, 0x13, 0x8, 0x14, 0x5, 0xb30, 0x1, 0x168, 0x1}}) r5 = open(0x0, 0x0, 0x0) fcntl$notify(r5, 0x402, 0x8000003d) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4008094) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000380)=0xe) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x20042) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r8, 0x40605346, &(0x7f0000000600)={0x0, 0x0, {0x1}, 0x5}) write$sndseq(r8, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick, {}, {}, @raw32}], 0x1c) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PTP_PEROUT_REQUEST2(r5, 0x40383d0c, &(0x7f00000000c0)={{0x9, 0x3}, {0x3, 0x4}, 0x7, 0x1}) r9 = socket(0x10, 0x803, 0x0) write(r9, &(0x7f0000000100)="1c0000005e001f3814584707f9f4ffffff0000000d000000f3f80000", 0x1c) 1.013960688s ago: executing program 2 (id=2942): r0 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in=@dev={0xac, 0x14, 0x14, 0x3e}, @in=@multicast1, 0x0, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x0, 0x62}, {0x700, 0x4, 0x1, 0x0, 0x52b, 0xb}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x80001, 0x1, 0x0, 0x2, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d4, 0x32}, 0x2, @in=@local, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd, 0x140}}, 0xe8) 977.262085ms ago: executing program 6 (id=2943): socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) syz_emit_ethernet(0x8e, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd60d2004000583a00fe800000000000000000000000000000fe8000000000000000000000000000aa04009078000000006031c90900002b0000000000000000000000000000000000fc0100000000000000000000000000016c04040000000000fe88000000003200000000000000000000000000000000bb"], 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) fsopen(&(0x7f0000000040)='afs\x00', 0x0) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000180)=0x6f) r4 = dup2(r3, r3) read$FUSE(r4, &(0x7f00000063c0)={0x2020}, 0x2020) 642.547603ms ago: executing program 2 (id=2944): socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000011540)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r4, 0x4) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="25b096f681cd731c3f3a9badc4e3cf5edeae1f3b5082d7ab3a97c053df68744e7c7e24d0b59997bab4bccff8363b275de3510b0ebe4275d8d2f153395668e3d608e358fc2294263c03f8dc4f8bf194e4fde4600a2dec2f483a914e2fde0cbc344a2b9fc18dd198966045a6d4d4eb8571e8bb69e6724e37fcbaa6e4c64050b47256b9bb17f5c0aa5101e015ecdcb62fec46fc0205512535", 0x97}, {&(0x7f0000000280)="d3a88bea5916e313729a3989393caca70c74cd74e62e524bdd37be131ad827f911027e70ccf679d8e7c0cd3333095f83d6d473db345ded2ac8acaa87503de74c82431758e8e11e3ecb7bce02d6cd65f4eb88cc49ceb9e39f7117eb0f62323dc9b80dea447b0c96a383f14281bb87b09de0a6153ceeaae2b50a2b0f0f41810f379f9c3a1f3938461829d716a4bda86ab11b41f754bc15d71b", 0xfed0}], 0x2}, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r5, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r5, 0x5001, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000000001010200000000141a0000020000002400018014000180080003000000000000000200640101000c00028005000100000000005d3f23a7199bbe425f67a802e6bb1a52fa5e44d53901bf905fcfa58c42c58c31cce7118cbc1e3dd676d2263c4d22843fb6dc789887c70eee697fdfba6a3cb12762e762e0448327b9ef0e4e58e2f7527c970d05930b3f10614c4bb32d84f75493b133d6064386a50b48d1c439b0bde4592b"], 0x38}}, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r5, 0xc0045009, &(0x7f0000000040)=0x2fff) syz_usb_connect(0x2, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, 0x0) preadv(r7, &(0x7f00000001c0), 0x0, 0x185, 0x0) timerfd_gettime(r7, &(0x7f0000000100)) 0s ago: executing program 5 (id=2945): r0 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r1, 0x0, 0x33) syz_open_dev$video(0x0, 0x0, 0x10b200) r2 = socket(0x2d, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x2d, 0x0, 0x20, 0x400000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0xc0) r3 = syz_open_dev$dvb_demux(&(0x7f00000002c0), 0x1, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000000200)={0x7, {"9db867d09ed91aa9c5c29f2f1e4be6bf", "cc6c2d12e0353c0e42899a29fdefe3bc", "9defe9f49655f386b84e6bb715dac54f"}, 0x445, 0x7}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x7, 0x5, 0x1, 0xfffff32b}, {0x200, 0xc, 0xa, 0x2}, {0x8c, 0x9, 0x6, 0x6}]}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="11110200002006002400128009000100626f6e64000400001400028005000e000100000005000d00f4"], 0x44}, 0x1, 0x0, 0x0, 0x48890}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) (async) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) (async) write$proc_mixer(r1, 0x0, 0x33) (async) syz_open_dev$video(0x0, 0x0, 0x10b200) (async) socket(0x2d, 0x2, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x2d, 0x0, 0x20, 0x400000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0xc0) (async) syz_open_dev$dvb_demux(&(0x7f00000002c0), 0x1, 0x0) (async) ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000000200)={0x7, {"9db867d09ed91aa9c5c29f2f1e4be6bf", "cc6c2d12e0353c0e42899a29fdefe3bc", "9defe9f49655f386b84e6bb715dac54f"}, 0x445, 0x7}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x7, 0x5, 0x1, 0xfffff32b}, {0x200, 0xc, 0xa, 0x2}, {0x8c, 0x9, 0x6, 0x6}]}) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="11110200002006002400128009000100626f6e64000400001400028005000e000100000005000d00f4"], 0x44}, 0x1, 0x0, 0x0, 0x48890}, 0x0) (async) kernel console output (not intermixed with test programs): 877445][T16431] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 977.932515][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 978.115821][T16436] netlink: 'syz.2.2483': attribute type 4 has an invalid length. [ 978.628687][T16439] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 978.922309][T16444] team0: entered allmulticast mode [ 978.929755][T16444] 8021q: adding VLAN 0 to HW filter on device team0 [ 978.948238][T16444] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 978.963878][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 979.009774][T16445] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2486'. [ 979.534100][T16450] netlink: 'syz.6.2488': attribute type 1 has an invalid length. [ 979.576775][T16450] 8021q: adding VLAN 0 to HW filter on device bond1 [ 979.587286][T16452] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2488'. [ 979.788514][T16454] netlink: 'syz.4.2491': attribute type 1 has an invalid length. [ 979.870439][T16454] 8021q: adding VLAN 0 to HW filter on device bond4 [ 979.969166][T16462] bond4: (slave geneve2): making interface the new active one [ 980.002646][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 980.027709][T16462] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 980.047906][ T7713] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.071322][ T7713] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.082303][T13755] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 980.105744][ T7713] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.120398][ T7713] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.252186][T13755] usb 2-1: Using ep0 maxpacket: 32 [ 980.259517][T13755] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 980.271709][T13755] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 980.281354][T13755] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.289992][T13755] usb 2-1: Product: syz [ 980.296147][T13755] usb 2-1: Manufacturer: syz [ 980.301173][T16475] fuse: Bad value for 'fd' [ 980.306863][T13755] usb 2-1: SerialNumber: syz [ 980.322401][ T7209] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 980.331090][T13755] usb 2-1: config 0 descriptor?? [ 980.498213][ T7209] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 980.521645][ T7209] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 980.530960][ T7209] usb 6-1: Product: syz [ 980.536782][ T7209] usb 6-1: SerialNumber: syz [ 980.552892][ T7209] usb 6-1: config 0 descriptor?? [ 980.751958][T16480] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2497'. [ 980.901277][T16481] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2497'. [ 981.042748][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 981.067415][T16481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 981.096896][T16481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 981.112536][ T30] audit: type=1326 audit(1774632464.957:2984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16464 comm="syz.5.2493" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fba3cf9c799 code=0x0 [ 982.076257][T16491] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2493'. [ 982.092622][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 982.200918][T16491] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 982.424507][T16498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 983.032456][T16498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 983.122183][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 983.270640][ T7209] usb 6-1: USB disconnect, device number 42 [ 983.449063][T16503] IPVS: ip_vs_add_dest(): server weight less than zero [ 983.748012][T16509] FAULT_INJECTION: forcing a failure. [ 983.748012][T16509] name failslab, interval 1, probability 0, space 0, times 0 [ 983.766711][T16510] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2502'. [ 983.775796][T16510] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2502'. [ 983.821119][T16507] netlink: 'syz.6.2502': attribute type 4 has an invalid length. [ 983.890997][T16509] CPU: 0 UID: 0 PID: 16509 Comm: syz.5.2503 Tainted: G L syzkaller #0 PREEMPT(full) [ 983.891025][T16509] Tainted: [L]=SOFTLOCKUP [ 983.891031][T16509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 983.891041][T16509] Call Trace: [ 983.891047][T16509] [ 983.891054][T16509] dump_stack_lvl+0xe8/0x150 [ 983.891081][T16509] should_fail_ex+0x412/0x560 [ 983.891108][T16509] should_failslab+0xa8/0x100 [ 983.891130][T16509] __kmalloc_cache_noprof+0x88/0x660 [ 983.891147][T16509] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 983.891174][T16509] ? sctp_add_bind_addr+0x8c/0x370 [ 983.891200][T16509] sctp_add_bind_addr+0x8c/0x370 [ 983.891226][T16509] sctp_copy_local_addr_list+0x314/0x4f0 [ 983.891253][T16509] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 983.891276][T16509] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 983.891301][T16509] ? sctp_v6_is_any+0x64/0x80 [ 983.891316][T16509] ? sctp_copy_one_addr+0x93/0x360 [ 983.891341][T16509] sctp_bind_addr_copy+0xb3/0x3c0 [ 983.891364][T16509] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 983.891388][T16509] sctp_connect_new_asoc+0x2ff/0x6b0 [ 983.891408][T16509] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 983.891426][T16509] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 983.891444][T16509] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 983.891460][T16509] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 983.891478][T16509] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 983.891500][T16509] ? security_sctp_bind_connect+0x7e/0x2c0 [ 983.891523][T16509] sctp_sendmsg+0x1528/0x2c10 [ 983.891551][T16509] ? __pfx_sctp_sendmsg+0x10/0x10 [ 983.891570][T16509] ? aa_sk_perm+0x6d5/0x900 [ 983.891598][T16509] ? __pfx_aa_sk_perm+0x10/0x10 [ 983.891622][T16509] ? sock_rps_record_flow+0x19/0x400 [ 983.891645][T16509] ? inet_sendmsg+0x2f4/0x370 [ 983.891679][T16509] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 983.891698][T16509] ____sys_sendmsg+0x80a/0x9f0 [ 983.891724][T16509] ? __pfx_____sys_sendmsg+0x10/0x10 [ 983.891749][T16509] ? import_iovec+0x73/0xa0 [ 983.891769][T16509] ___sys_sendmsg+0x2a5/0x360 [ 983.891792][T16509] ? __pfx____sys_sendmsg+0x10/0x10 [ 983.891838][T16509] ? __fget_files+0x2a/0x420 [ 983.891860][T16509] ? __fget_files+0x3a0/0x420 [ 983.891890][T16509] __x64_sys_sendmsg+0x1bd/0x2a0 [ 983.891911][T16509] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 983.891947][T16509] ? __pfx_ksys_write+0x10/0x10 [ 983.891973][T16509] do_syscall_64+0x14d/0xf80 [ 983.892027][T16509] ? trace_irq_disable+0x3b/0x150 [ 983.892044][T16509] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 983.892066][T16509] ? clear_bhb_loop+0x40/0x90 [ 983.892090][T16509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 983.892114][T16509] RIP: 0033:0x7fba3cf9c799 [ 983.892130][T16509] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 983.892143][T16509] RSP: 002b:00007fba3dd9b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 983.892160][T16509] RAX: ffffffffffffffda RBX: 00007fba3d215fa0 RCX: 00007fba3cf9c799 [ 983.892171][T16509] RDX: 00000000240488c0 RSI: 0000200000000540 RDI: 0000000000000004 [ 983.892182][T16509] RBP: 00007fba3dd9b090 R08: 0000000000000000 R09: 0000000000000000 [ 983.892191][T16509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 983.892200][T16509] R13: 00007fba3d216038 R14: 00007fba3d215fa0 R15: 00007fba3d33fa48 [ 983.892223][T16509] [ 984.203517][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 984.392428][T13755] usb 2-1: USB disconnect, device number 95 [ 984.542202][T16516] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 984.625076][T16519] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2506'. [ 984.734058][T16519] netlink: 'syz.5.2506': attribute type 7 has an invalid length. [ 984.777012][T16519] netlink: 'syz.5.2506': attribute type 8 has an invalid length. [ 984.793916][T16519] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2506'. [ 985.026415][T16519] erspan0: entered promiscuous mode [ 985.104790][T16519] erspan0: left promiscuous mode [ 985.190269][T16531] fuse: Bad value for 'fd' [ 985.282109][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 985.397175][T16533] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2510'. [ 986.092289][T13755] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 986.128267][T16543] kAFS: unable to lookup cell 'ÿ' [ 986.332478][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 986.458719][T13755] usb 6-1: Using ep0 maxpacket: 32 [ 986.491950][T13755] usb 6-1: no configurations [ 986.497071][T13755] usb 6-1: can't read configurations, error -22 [ 986.562142][ T8148] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 986.656637][T13755] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 986.753661][ T8148] usb 2-1: Using ep0 maxpacket: 32 [ 986.853389][ T8148] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 986.864988][ T8148] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 986.942328][ T8148] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 986.952486][T13755] usb 6-1: Using ep0 maxpacket: 32 [ 986.958812][T13755] usb 6-1: no configurations [ 986.964027][T13755] usb 6-1: can't read configurations, error -22 [ 986.990759][ T8148] usb 2-1: Product: syz [ 986.991918][T13755] usb usb6-port1: attempt power cycle [ 987.021208][ T8148] usb 2-1: Manufacturer: syz [ 987.026203][ T8148] usb 2-1: SerialNumber: syz [ 987.057207][ T8148] usb 2-1: config 0 descriptor?? [ 987.352141][T13755] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 987.362104][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 987.393418][T13755] usb 6-1: Using ep0 maxpacket: 32 [ 987.404564][T13755] usb 6-1: no configurations [ 987.436161][T13755] usb 6-1: can't read configurations, error -22 [ 987.602153][T13755] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 987.635474][T13755] usb 6-1: Using ep0 maxpacket: 32 [ 987.651059][T13755] usb 6-1: no configurations [ 987.658726][T13755] usb 6-1: can't read configurations, error -22 [ 987.677185][T13755] usb usb6-port1: unable to enumerate USB device [ 987.861639][T16563] FAULT_INJECTION: forcing a failure. [ 987.861639][T16563] name failslab, interval 1, probability 0, space 0, times 0 [ 987.878136][T16563] CPU: 1 UID: 0 PID: 16563 Comm: syz.2.2520 Tainted: G L syzkaller #0 PREEMPT(full) [ 987.878168][T16563] Tainted: [L]=SOFTLOCKUP [ 987.878174][T16563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 987.878182][T16563] Call Trace: [ 987.878189][T16563] [ 987.878196][T16563] dump_stack_lvl+0xe8/0x150 [ 987.878223][T16563] should_fail_ex+0x412/0x560 [ 987.878250][T16563] should_failslab+0xa8/0x100 [ 987.878271][T16563] __kmalloc_cache_noprof+0x88/0x660 [ 987.878291][T16563] ? sctp_add_bind_addr+0x8c/0x370 [ 987.878319][T16563] sctp_add_bind_addr+0x8c/0x370 [ 987.878345][T16563] sctp_copy_local_addr_list+0x314/0x4f0 [ 987.878371][T16563] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 987.878394][T16563] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 987.878419][T16563] ? sctp_v6_is_any+0x64/0x80 [ 987.878435][T16563] ? sctp_copy_one_addr+0x93/0x360 [ 987.878460][T16563] sctp_bind_addr_copy+0xb3/0x3c0 [ 987.878484][T16563] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 987.878507][T16563] sctp_connect_new_asoc+0x2ff/0x6b0 [ 987.878527][T16563] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 987.878550][T16563] ? __local_bh_enable_ip+0xd0/0x130 [ 987.878570][T16563] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 987.878589][T16563] ? security_sctp_bind_connect+0x7e/0x2c0 [ 987.878611][T16563] sctp_sendmsg+0x1528/0x2c10 [ 987.878639][T16563] ? __pfx_sctp_sendmsg+0x10/0x10 [ 987.878661][T16563] ? aa_sk_perm+0x6d5/0x900 [ 987.878688][T16563] ? __pfx_aa_sk_perm+0x10/0x10 [ 987.878712][T16563] ? sock_rps_record_flow+0x19/0x400 [ 987.878731][T16563] ? __pfx_inet_sendmsg+0x10/0x10 [ 987.878750][T16563] ? inet_sendmsg+0x2f4/0x370 [ 987.878769][T16563] ? __pfx_inet_sendmsg+0x10/0x10 [ 987.878788][T16563] __sys_sendto+0x5de/0x710 [ 987.878808][T16563] ? __pfx___sys_sendto+0x10/0x10 [ 987.878822][T16563] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 987.878851][T16563] ? __fget_files+0x3a0/0x420 [ 987.878881][T16563] ? ksys_write+0x242/0x270 [ 987.878900][T16563] ? __pfx_ksys_write+0x10/0x10 [ 987.878920][T16563] __x64_sys_sendto+0xde/0x100 [ 987.878939][T16563] do_syscall_64+0x14d/0xf80 [ 987.878958][T16563] ? trace_irq_disable+0x3b/0x150 [ 987.878971][T16563] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 987.878987][T16563] ? clear_bhb_loop+0x40/0x90 [ 987.879006][T16563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 987.879021][T16563] RIP: 0033:0x7fee4c59c799 [ 987.879036][T16563] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 987.879049][T16563] RSP: 002b:00007fee4d535028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 987.879066][T16563] RAX: ffffffffffffffda RBX: 00007fee4c815fa0 RCX: 00007fee4c59c799 [ 987.879078][T16563] RDX: 0000000000020a00 RSI: 0000200000000040 RDI: 0000000000000003 [ 987.879088][T16563] RBP: 00007fee4d535090 R08: 0000200000000100 R09: 000000000000001c [ 987.879098][T16563] R10: 0000000000044004 R11: 0000000000000246 R12: 0000000000000002 [ 987.879108][T16563] R13: 00007fee4c816038 R14: 00007fee4c815fa0 R15: 00007fee4c93fa48 [ 987.879136][T16563] [ 988.412575][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 988.465686][T16567] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 988.853126][T16582] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 988.926793][T16584] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 988.972601][T16586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 988.981536][T16586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 989.195280][T16590] fuse: Bad value for 'fd' [ 989.442123][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 990.143705][T13755] usb 2-1: USB disconnect, device number 96 [ 990.492375][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 990.702526][T16607] kAFS: unable to lookup cell 'ÿ' [ 991.430204][T16630] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 991.532108][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 991.781798][ T7209] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 991.943891][ T7209] usb 5-1: Using ep0 maxpacket: 32 [ 991.963037][ T7209] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 991.972535][ T7209] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 991.980917][ T7209] usb 5-1: Product: syz [ 992.008857][ T7209] usb 5-1: Manufacturer: syz [ 992.181474][ T7209] usb 5-1: SerialNumber: syz [ 992.291708][ T7209] usb 5-1: config 0 descriptor?? [ 992.562454][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 992.724846][ T7209] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: version d4.15 found at bus 005 address 122 [ 992.972348][T16646] openvswitch: netlink: Flow actions attr not present in new flow. [ 993.131953][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.139494][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.189608][T16651] openvswitch: netlink: Unknown key attributes 1 [ 993.421642][T16659] fuse: Bad value for 'fd' [ 993.602122][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 994.061729][T16667] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 994.288201][T16672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 994.505110][T16672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 994.642500][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 994.937739][T16682] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2552'. [ 995.020206][T16684] netlink: 272 bytes leftover after parsing attributes in process `syz.1.2552'. [ 995.059017][T16682] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2552'. [ 995.188001][T16691] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 995.311082][T16693] kAFS: unable to lookup cell 'ÿ' [ 995.621922][T13755] usb 5-1: USB disconnect, device number 122 [ 995.682179][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 995.789077][T16698] bridge0: port 1(batadv0) entered disabled state [ 995.940211][T16698] team0: Port device vxcan1 removed [ 996.111498][T16698] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 996.116616][T16705] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2557'. [ 996.136830][T16705] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2557'. [ 996.506983][T16712] netlink: 'syz.4.2557': attribute type 4 has an invalid length. [ 996.732502][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 996.830989][ T8148] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 997.096679][ T8148] usb 7-1: config 0 has no interfaces? [ 997.116878][ T8148] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 997.170709][ T8148] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.302387][ T8148] usb 7-1: config 0 descriptor?? [ 997.762275][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 998.802446][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 998.842344][ T7209] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 999.012531][ T7209] usb 2-1: Using ep0 maxpacket: 32 [ 999.023383][ T7209] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 999.059261][ T7209] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 999.082503][ T7209] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 999.108564][ T7209] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 999.135295][T16736] misc userio: No port type given on /dev/userio [ 999.141846][T16734] fuse: Bad value for 'fd' [ 999.187488][ T7209] usb 2-1: config 0 descriptor?? [ 999.307849][T16735] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2564'. [ 999.395028][ T5888] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 999.762361][ T5888] usb 5-1: Using ep0 maxpacket: 8 [ 999.832818][ T5888] usb 5-1: New USB device found, idVendor=2a39, idProduct=3fd2, bcdDevice= 0.40 [ 999.844663][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 999.863518][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.887186][ T5888] usb 5-1: Product: syz [ 999.897624][ T5888] usb 5-1: Manufacturer: syz [ 999.914552][ T5888] usb 5-1: SerialNumber: syz [ 1000.882583][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1001.932243][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1002.520408][ T7209] usbhid 2-1:0.0: can't add hid device: -71 [ 1002.526739][ T7209] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1002.794499][ T7209] usb 2-1: USB disconnect, device number 97 [ 1002.972516][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1003.385175][ T5888] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1003.402726][ T5888] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1003.634319][ T5888] usb 5-1: USB disconnect, device number 123 [ 1003.803832][ T6043] udevd[6043]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1004.002268][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1004.338131][T16776] kAFS: unable to lookup cell 'ÿ' [ 1004.685854][ T7209] usb 7-1: USB disconnect, device number 19 [ 1005.052572][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1005.167132][T16789] FAULT_INJECTION: forcing a failure. [ 1005.167132][T16789] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1005.181341][T16789] CPU: 1 UID: 0 PID: 16789 Comm: syz.5.2580 Tainted: G L syzkaller #0 PREEMPT(full) [ 1005.181373][T16789] Tainted: [L]=SOFTLOCKUP [ 1005.181382][T16789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1005.181394][T16789] Call Trace: [ 1005.181403][T16789] [ 1005.181411][T16789] dump_stack_lvl+0xe8/0x150 [ 1005.181454][T16789] should_fail_ex+0x412/0x560 [ 1005.181488][T16789] _copy_from_user+0x2d/0xb0 [ 1005.181513][T16789] kstrtouint_from_user+0xd6/0x180 [ 1005.181547][T16789] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1005.181594][T16789] proc_fail_nth_write+0x8e/0x210 [ 1005.181625][T16789] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1005.181654][T16789] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1005.181680][T16789] vfs_write+0x29a/0xb90 [ 1005.181706][T16789] ? __pfx_vfs_write+0x10/0x10 [ 1005.181726][T16789] ? __fget_files+0x2a/0x420 [ 1005.181756][T16789] ? __fget_files+0x3a0/0x420 [ 1005.181780][T16789] ? __fget_files+0x2a/0x420 [ 1005.181813][T16789] ksys_write+0x150/0x270 [ 1005.181835][T16789] ? __pfx_ksys_write+0x10/0x10 [ 1005.181866][T16789] do_syscall_64+0x14d/0xf80 [ 1005.181889][T16789] ? trace_irq_disable+0x3b/0x150 [ 1005.181907][T16789] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1005.181933][T16789] ? clear_bhb_loop+0x40/0x90 [ 1005.181957][T16789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1005.181979][T16789] RIP: 0033:0x7fba3cf5cfce [ 1005.181997][T16789] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1005.182015][T16789] RSP: 002b:00007fba3b1f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1005.182037][T16789] RAX: ffffffffffffffda RBX: 00007fba3b1f66c0 RCX: 00007fba3cf5cfce [ 1005.182053][T16789] RDX: 0000000000000001 RSI: 00007fba3b1f60a0 RDI: 0000000000000005 [ 1005.182067][T16789] RBP: 00007fba3b1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1005.182079][T16789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1005.182092][T16789] R13: 00007fba3d216218 R14: 00007fba3d216180 R15: 00007fba3d33fa48 [ 1005.182124][T16789] [ 1005.780817][T16798] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2584'. [ 1005.795458][T16799] fuse: Bad value for 'fd' [ 1005.892903][ T30] audit: type=1326 audit(1774632489.737:2985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16796 comm="syz.6.2581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f010479c799 code=0x7ffc0000 [ 1005.934305][T16803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2583'. [ 1005.943359][T16803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2583'. [ 1005.955685][T16803] netlink: 'syz.1.2583': attribute type 4 has an invalid length. [ 1006.092089][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1006.402607][ T30] audit: type=1326 audit(1774632489.757:2986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16796 comm="syz.6.2581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f010479c799 code=0x7ffc0000 [ 1006.446353][T16809] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2585'. [ 1006.472195][ T30] audit: type=1326 audit(1774632489.767:2987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16796 comm="syz.6.2581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f010479c799 code=0x7ffc0000 [ 1006.570802][ T30] audit: type=1326 audit(1774632489.767:2988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16796 comm="syz.6.2581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f010479c799 code=0x7ffc0000 [ 1006.752107][ T30] audit: type=1326 audit(1774632489.767:2989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16796 comm="syz.6.2581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f010479c799 code=0x7ffc0000 [ 1006.801616][ T30] audit: type=1326 audit(1774632489.997:2990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16796 comm="syz.6.2581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f010479c799 code=0x7ffc0000 [ 1006.858308][T16812] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2587'. [ 1006.912488][ T30] audit: type=1326 audit(1774632489.997:2991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16796 comm="syz.6.2581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f010479c799 code=0x7ffc0000 [ 1007.084748][ T30] audit: type=1326 audit(1774632489.997:2992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16796 comm="syz.6.2581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f010479c799 code=0x7ffc0000 [ 1007.122463][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1007.306675][T16818] binder: BINDER_SET_CONTEXT_MGR already set [ 1007.312930][T16818] binder: 16815:16818 ioctl 4018620d 200000004a80 returned -16 [ 1007.347527][ T30] audit: type=1326 audit(1774632490.007:2993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16796 comm="syz.6.2581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f010475cfce code=0x7ffc0000 [ 1007.451809][ T30] audit: type=1326 audit(1774632490.007:2994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16796 comm="syz.6.2581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f010479c799 code=0x7ffc0000 [ 1007.533405][ T7204] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1007.946742][ T7204] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1007.987674][ T7204] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1008.020160][ T7204] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1008.061358][ T7204] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1008.080733][ T7204] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1008.162469][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1008.212634][ T7204] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1008.220753][ T7204] usb 6-1: Product: syz [ 1008.229431][ T7204] usb 6-1: Manufacturer: syz [ 1008.252341][ T7204] cdc_wdm 6-1:1.0: skipping garbage [ 1008.257782][ T7204] cdc_wdm 6-1:1.0: skipping garbage [ 1008.264355][ T7204] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1008.431002][T16827] binder: 16824:16827 ioctl c0306201 0 returned -14 [ 1008.939604][T16834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1008.963099][T16834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1009.014772][T16834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1009.096552][T16834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1009.121910][T16837] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2594'. [ 1009.150035][T16837] openvswitch: netlink: Key 6 has unexpected len 222 expected 2 [ 1009.177331][T16837] IPVS: set_ctl: invalid protocol: 58 172.30.1.7:20001 [ 1009.202929][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1009.771291][T16839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1009.814514][T16839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1009.832590][ T5888] usb 6-1: USB disconnect, device number 47 [ 1010.107476][T16827] trusted_key: encrypted_key: keyword 'lod' not recognized [ 1010.243239][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1010.538204][T16844] binder: 16824:16844 ioctl c0306201 0 returned -14 [ 1010.722167][ T8148] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1010.822274][ T7209] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1010.883093][ T5902] usb 2-1: new low-speed USB device number 98 using dummy_hcd [ 1010.899199][ T8148] usb 6-1: config 1 interface 0 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1010.921720][ T8148] usb 6-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1010.937254][ T8148] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1010.960415][ T8148] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1010.982149][ T7209] usb 7-1: Using ep0 maxpacket: 8 [ 1011.006608][ T7209] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1011.016341][ T8148] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.055839][ T8148] usb 6-1: SerialNumber: 䀊 [ 1011.068543][ T7209] usb 7-1: config 6 has an invalid interface number: 128 but max is 1 [ 1011.098971][T16852] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1011.106617][ T5902] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 1011.117531][ T5902] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 1011.126090][ T7209] usb 7-1: config 6 has an invalid interface number: 3 but max is 1 [ 1011.140833][ T5902] usb 2-1: config 0 has no interface number 0 [ 1011.147862][ T7209] usb 7-1: config 6 has no interface number 0 [ 1011.155039][ T5902] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 1011.166513][ T7209] usb 7-1: config 6 has no interface number 1 [ 1011.173510][ T7209] usb 7-1: config 6 interface 128 has no altsetting 0 [ 1011.180762][ T5902] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1011.198229][ T7209] usb 7-1: config 6 interface 3 has no altsetting 0 [ 1011.239182][ T5902] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1011.261152][ T7209] usb 7-1: New USB device found, idVendor=0403, idProduct=b812, bcdDevice=22.79 [ 1011.282538][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1011.315880][ T7209] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.327015][ T5902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1011.358425][T16862] fuse: Bad value for 'fd' [ 1011.387320][ T7209] usb 7-1: Product: syz [ 1011.408878][ T5902] usb 2-1: config 0 descriptor?? [ 1011.417810][ T7209] usb 7-1: Manufacturer: syz [ 1011.451528][ T7209] usb 7-1: SerialNumber: syz [ 1011.730434][T16854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1011.739734][T16854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1011.780383][ T7209] ftdi_sio 7-1:6.128: FTDI USB Serial Device converter detected [ 1011.791722][ T7209] ftdi_sio ttyUSB0: unknown device type: 0x2279 [ 1011.830289][ T7209] hub 7-1:6.3: Invalid hub with more than one config or interface [ 1011.848306][ T7209] hub 7-1:6.3: probe with driver hub failed with error -22 [ 1011.868183][ T7209] ftdi_sio 7-1:6.3: FTDI USB Serial Device converter detected [ 1011.891541][ T7209] ftdi_sio ttyUSB1: unknown device type: 0x2279 [ 1011.947513][ T7209] usb 7-1: USB disconnect, device number 20 [ 1011.973170][ T7209] ftdi_sio 7-1:6.128: device disconnected [ 1012.001230][ T7209] ftdi_sio 7-1:6.3: device disconnected [ 1012.322072][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1013.192109][ T7209] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1013.271715][ T8148] usb 6-1: USB disconnect, device number 48 [ 1013.352307][ T7209] usb 7-1: Using ep0 maxpacket: 16 [ 1013.362480][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1013.369499][ T7209] usb 7-1: config 0 has no interfaces? [ 1013.384856][ T7209] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1013.396133][ T7209] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1013.423942][ T7209] usb 7-1: Manufacturer: syz [ 1013.454227][ T5902] usb 2-1: USB disconnect, device number 98 [ 1013.471913][ T7209] usb 7-1: config 0 descriptor?? [ 1013.559796][T16880] fuse: Bad value for 'fd' [ 1013.669815][T16882] netlink: 'syz.4.2608': attribute type 10 has an invalid length. [ 1013.704103][T16882] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1013.822915][ T7209] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1013.832152][T16886] netlink: 'syz.4.2608': attribute type 10 has an invalid length. [ 1013.840016][T16886] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2608'. [ 1013.867171][T16882] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1013.981183][T16886] batadv0: entered promiscuous mode [ 1014.012175][ T7209] usb 6-1: Using ep0 maxpacket: 16 [ 1014.028593][ T7209] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1014.046009][ T7209] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1014.049706][T16886] batadv0: entered allmulticast mode [ 1014.076663][ T7209] usb 6-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1014.088536][ T7209] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1014.122723][T16886] bond0: (slave batadv0): Releasing backup interface [ 1014.147562][ T7209] usb 6-1: config 0 descriptor?? [ 1014.179188][T16886] bridge0: port 1(batadv0) entered blocking state [ 1014.206934][T16886] bridge0: port 1(batadv0) entered disabled state [ 1014.402110][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1014.424531][T10949] batman_adv: batadv0: IGMP Querier appeared [ 1014.430801][T10949] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1014.606987][ T7209] hid-multitouch 0003:1FD2:6007.0015: reserved main item tag 0xe [ 1014.625137][ T7209] hid-multitouch 0003:1FD2:6007.0015: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.5-1/input0 [ 1014.867101][ T7209] usb 6-1: USB disconnect, device number 49 [ 1015.452493][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1016.064187][ T7209] usb 7-1: USB disconnect, device number 21 [ 1016.122095][ T5888] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1016.482553][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1016.629228][ T5888] usb 6-1: Using ep0 maxpacket: 16 [ 1016.711587][ T5888] usb 6-1: config 0 has no interfaces? [ 1016.725148][ T5888] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1016.735106][ T5888] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1016.743781][ T5888] usb 6-1: Manufacturer: syz [ 1016.757240][ T5888] usb 6-1: config 0 descriptor?? [ 1016.822927][T16914] FAULT_INJECTION: forcing a failure. [ 1016.822927][T16914] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1016.877400][T16914] CPU: 0 UID: 0 PID: 16914 Comm: syz.6.2613 Tainted: G L syzkaller #0 PREEMPT(full) [ 1016.877426][T16914] Tainted: [L]=SOFTLOCKUP [ 1016.877433][T16914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1016.877443][T16914] Call Trace: [ 1016.877449][T16914] [ 1016.877456][T16914] dump_stack_lvl+0xe8/0x150 [ 1016.877483][T16914] should_fail_ex+0x412/0x560 [ 1016.877510][T16914] _copy_from_user+0x2d/0xb0 [ 1016.877528][T16914] ___sys_recvmsg+0x175/0x590 [ 1016.877547][T16914] ? __lock_acquire+0x6b5/0x2cf0 [ 1016.877571][T16914] ? __pfx____sys_recvmsg+0x10/0x10 [ 1016.877615][T16914] do_recvmmsg+0x334/0x800 [ 1016.877640][T16914] ? __pfx_do_recvmmsg+0x10/0x10 [ 1016.877667][T16914] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1016.877699][T16914] __x64_sys_recvmmsg+0x198/0x250 [ 1016.877720][T16914] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1016.877748][T16914] do_syscall_64+0x14d/0xf80 [ 1016.877765][T16914] ? trace_irq_disable+0x3b/0x150 [ 1016.877779][T16914] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1016.877800][T16914] ? clear_bhb_loop+0x40/0x90 [ 1016.877819][T16914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1016.877834][T16914] RIP: 0033:0x7f010479c799 [ 1016.877848][T16914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1016.877862][T16914] RSP: 002b:00007f0105676028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1016.877879][T16914] RAX: ffffffffffffffda RBX: 00007f0104a16090 RCX: 00007f010479c799 [ 1016.877890][T16914] RDX: 0000000000000004 RSI: 0000200000000d80 RDI: 0000000000000003 [ 1016.877900][T16914] RBP: 00007f0105676090 R08: 0000000000000000 R09: 0000000000000000 [ 1016.877910][T16914] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000001 [ 1016.877919][T16914] R13: 00007f0104a16128 R14: 00007f0104a16090 R15: 00007f0104b3fa48 [ 1016.877942][T16914] [ 1017.491109][T16925] fuse: Bad value for 'fd' [ 1017.522797][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1018.078901][T16931] bridge0: port 1(batadv0) entered disabled state [ 1018.098542][T16931] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1018.562099][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1018.591712][T16939] netlink: 'syz.1.2617': attribute type 10 has an invalid length. [ 1018.603277][T16939] fuse: Bad value for 'rootmode' [ 1018.833481][ T5888] usb 6-1: USB disconnect, device number 50 [ 1019.590539][T16945] syzkaller0: entered promiscuous mode [ 1019.596363][ T5902] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1019.606180][T16945] syzkaller0: entered allmulticast mode [ 1019.612788][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1019.756617][T16952] kAFS: unable to lookup cell 'ÿ' [ 1019.827519][ T5902] usb 6-1: Using ep0 maxpacket: 16 [ 1019.854197][ T5902] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1019.904604][ T5902] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1019.949406][ T5902] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1019.960168][ T5902] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.987875][ T5902] usb 6-1: Product: syz [ 1020.077183][ T5902] usb 6-1: Manufacturer: syz [ 1020.081966][ T5902] usb 6-1: SerialNumber: syz [ 1020.099469][ T5902] usb 6-1: config 0 descriptor?? [ 1020.118399][ T5902] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1020.160597][ T5902] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 1020.642113][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1020.712180][ T5888] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1020.757948][T16963] kAFS: unable to lookup cell 'ÿ' [ 1020.901643][ T5888] usb 2-1: config 0 has no interfaces? [ 1020.907429][ T5888] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1020.979677][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1021.162764][ T5888] usb 2-1: config 0 descriptor?? [ 1021.402690][ T5902] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1021.409468][ T5902] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 1021.424440][ T5902] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 1021.450825][ T5902] em28xx 6-1:0.0: No AC97 audio processor [ 1021.682436][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1022.097877][T16969] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2626'. [ 1022.722543][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1023.762434][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1024.812069][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1025.103930][ T5902] usb 2-1: USB disconnect, device number 99 [ 1025.361738][T16982] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2628'. [ 1025.372516][T16982] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2628'. [ 1025.483458][T16983] netlink: 'syz.1.2628': attribute type 4 has an invalid length. [ 1025.852452][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1026.887710][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1027.559592][T16975] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1027.811611][ T7209] usb 6-1: USB disconnect, device number 51 [ 1027.820341][ T7209] em28xx 6-1:0.0: Disconnecting em28xx [ 1027.866222][ T7209] em28xx 6-1:0.0: Freeing device [ 1027.932498][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1028.199643][T17000] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1028.231109][T17002] fuse: Bad value for 'fd' [ 1028.973746][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1029.127730][T17008] batadv_slave_0: entered promiscuous mode [ 1029.158404][T17008] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2633'. [ 1029.184147][T17008] hsr_slave_0: left promiscuous mode [ 1029.190233][T17008] hsr_slave_1: left promiscuous mode [ 1029.934860][T17007] batadv_slave_0: left promiscuous mode [ 1030.002421][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1030.162188][ T7204] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1030.260690][T17032] FAULT_INJECTION: forcing a failure. [ 1030.260690][T17032] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1030.343215][ T7204] usb 7-1: Using ep0 maxpacket: 16 [ 1030.588041][T17032] CPU: 1 UID: 0 PID: 17032 Comm: syz.5.2639 Tainted: G L syzkaller #0 PREEMPT(full) [ 1030.588075][T17032] Tainted: [L]=SOFTLOCKUP [ 1030.588084][T17032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1030.588106][T17032] Call Trace: [ 1030.588115][T17032] [ 1030.588124][T17032] dump_stack_lvl+0xe8/0x150 [ 1030.588158][T17032] should_fail_ex+0x412/0x560 [ 1030.588193][T17032] _copy_to_user+0x31/0xb0 [ 1030.588217][T17032] simple_read_from_buffer+0xe1/0x170 [ 1030.588252][T17032] proc_fail_nth_read+0x1bb/0x230 [ 1030.588285][T17032] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1030.588318][T17032] ? rw_verify_area+0x2a6/0x4d0 [ 1030.588339][T17032] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1030.588369][T17032] vfs_read+0x20c/0xa70 [ 1030.588389][T17032] ? fdget_pos+0x246/0x320 [ 1030.588413][T17032] ? __pfx___mutex_lock+0x10/0x10 [ 1030.588441][T17032] ? __pfx_vfs_read+0x10/0x10 [ 1030.588464][T17032] ? __fget_files+0x2a/0x420 [ 1030.588500][T17032] ? __fget_files+0x3a0/0x420 [ 1030.588529][T17032] ? __fget_files+0x2a/0x420 [ 1030.588570][T17032] ksys_read+0x150/0x270 [ 1030.588596][T17032] ? __pfx_ksys_read+0x10/0x10 [ 1030.588631][T17032] do_syscall_64+0x14d/0xf80 [ 1030.588669][T17032] ? trace_irq_disable+0x3b/0x150 [ 1030.588689][T17032] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1030.588712][T17032] ? clear_bhb_loop+0x40/0x90 [ 1030.588738][T17032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1030.588760][T17032] RIP: 0033:0x7fba3cf5cfce [ 1030.588782][T17032] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1030.588800][T17032] RSP: 002b:00007fba3dd79fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1030.588822][T17032] RAX: ffffffffffffffda RBX: 00007fba3dd7a6c0 RCX: 00007fba3cf5cfce [ 1030.588838][T17032] RDX: 000000000000000f RSI: 00007fba3dd7a0a0 RDI: 0000000000000004 [ 1030.588853][T17032] RBP: 00007fba3dd7a090 R08: 0000000000000000 R09: 0000000000000000 [ 1030.588866][T17032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1030.588879][T17032] R13: 00007fba3d216128 R14: 00007fba3d216090 R15: 00007fba3d33fa48 [ 1030.588913][T17032] [ 1030.606582][T17037] kAFS: unable to lookup cell 'ÿ' [ 1030.663791][ T7204] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1030.982165][ T5888] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 1030.998094][ T7204] usb 7-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 1031.017420][ T7204] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1031.032680][ T7204] usb 7-1: Product: syz [ 1031.042096][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1031.263534][ T5888] usb 2-1: config index 0 descriptor too short (expected 3133, got 61) [ 1031.276530][ T5888] usb 2-1: config 0 has an invalid interface number: 156 but max is 1 [ 1031.287441][ T5888] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1031.318324][ T7204] usb 7-1: Manufacturer: syz [ 1031.332300][ T7204] usb 7-1: SerialNumber: syz [ 1031.338979][ T5888] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1031.357212][ T5888] usb 2-1: config 0 has no interface number 0 [ 1031.382511][T17042] kAFS: unable to lookup cell 'ÿ' [ 1031.426643][ T5888] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1031.437545][ T5888] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1031.471500][ T5888] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1031.639095][ T5888] usb 2-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1031.697875][ T7204] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1031.813620][ T7204] usb 7-1: 2:0: failed to get current value for ch 0 (-71) [ 1031.927510][ T5888] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 1031.938960][ T7204] usb 7-1: unit 7 not found! [ 1031.968995][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1031.989077][ T5888] usb 2-1: config 0 descriptor?? [ 1031.990050][T17050] kAFS: unable to lookup cell 'ÿ' [ 1032.007659][ T5888] gspca_main: spca561-2.14.0 probing abcd:cdee [ 1032.069764][T17052] FAULT_INJECTION: forcing a failure. [ 1032.069764][T17052] name failslab, interval 1, probability 0, space 0, times 0 [ 1032.083265][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1032.194702][T17052] CPU: 0 UID: 0 PID: 17052 Comm: syz.2.2642 Tainted: G L syzkaller #0 PREEMPT(full) [ 1032.194742][T17052] Tainted: [L]=SOFTLOCKUP [ 1032.194750][T17052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1032.194763][T17052] Call Trace: [ 1032.194772][T17052] [ 1032.194781][T17052] dump_stack_lvl+0xe8/0x150 [ 1032.194817][T17052] should_fail_ex+0x412/0x560 [ 1032.194855][T17052] should_failslab+0xa8/0x100 [ 1032.194886][T17052] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1032.194913][T17052] ? __alloc_skb+0x1d0/0x7d0 [ 1032.194934][T17052] ? __local_bh_enable_ip+0xd0/0x130 [ 1032.194968][T17052] __alloc_skb+0x1d0/0x7d0 [ 1032.194994][T17052] _sctp_make_chunk+0x59/0x290 [ 1032.195020][T17052] sctp_make_init+0x5e3/0xe00 [ 1032.195064][T17052] ? __pfx_sctp_make_init+0x10/0x10 [ 1032.195117][T17052] sctp_sf_do_prm_asoc+0xd2/0x3f0 [ 1032.195149][T17052] sctp_do_sm+0x238/0x5cf0 [ 1032.195177][T17052] ? __pfx_sctp_pname+0x10/0x10 [ 1032.195284][T17052] ? __pfx_sctp_ulpevent_notify_peer_addr_change+0x10/0x10 [ 1032.195320][T17052] ? __pfx_sctp_do_sm+0x10/0x10 [ 1032.195398][T17052] ? sctp_connect_new_asoc+0x40a/0x6b0 [ 1032.195427][T17052] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1032.195453][T17052] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1032.195482][T17052] sctp_primitive_ASSOCIATE+0x95/0xc0 [ 1032.195519][T17052] __sctp_connect+0x911/0xdc0 [ 1032.195557][T17052] ? __pfx___sctp_connect+0x10/0x10 [ 1032.195579][T17052] ? sctp_setsockopt+0x21c/0x12c0 [ 1032.195601][T17052] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1032.195632][T17052] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 1032.195665][T17052] sctp_setsockopt+0x480/0x12c0 [ 1032.195687][T17052] ? sock_common_setsockopt+0x36/0xc0 [ 1032.195719][T17052] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1032.195754][T17052] do_sock_setsockopt+0x17c/0x1b0 [ 1032.195783][T17052] __x64_sys_setsockopt+0x13d/0x1b0 [ 1032.195813][T17052] do_syscall_64+0x14d/0xf80 [ 1032.195838][T17052] ? trace_irq_disable+0x3b/0x150 [ 1032.195856][T17052] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1032.195878][T17052] ? clear_bhb_loop+0x40/0x90 [ 1032.195904][T17052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1032.195926][T17052] RIP: 0033:0x7fee4c59c799 [ 1032.195947][T17052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1032.195965][T17052] RSP: 002b:00007fee4d535028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1032.195988][T17052] RAX: ffffffffffffffda RBX: 00007fee4c815fa0 RCX: 00007fee4c59c799 [ 1032.196004][T17052] RDX: 000000000000006b RSI: 0000000000000084 RDI: 0000000000000003 [ 1032.196017][T17052] RBP: 00007fee4d535090 R08: 0000000000000010 R09: 0000000000000000 [ 1032.196031][T17052] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 1032.196044][T17052] R13: 00007fee4c816038 R14: 00007fee4c815fa0 R15: 00007fee4c93fa48 [ 1032.196078][T17052] [ 1032.819108][ T5888] spca561 2-1:0.156: probe with driver spca561 failed with error -22 [ 1032.833811][ T7204] usb 7-1: USB disconnect, device number 22 [ 1032.841476][ T5888] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1032.851291][ T5888] usb 2-1: MIDIStreaming interface descriptor not found [ 1033.122103][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1033.340268][ T6043] udevd[6043]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1033.918486][T17070] netlink: 'syz.2.2644': attribute type 4 has an invalid length. [ 1034.162449][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1034.183527][T17075] program syz.1.2638 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1034.490987][T17080] fuse: Bad value for 'fd' [ 1034.582177][ T7209] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1034.841679][ T7209] usb 7-1: config 7 descriptor has 1 excess byte, ignoring [ 1034.849171][ T7209] usb 7-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 1034.875827][ T7209] usb 7-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 7.84 [ 1034.936702][ T7209] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1034.968593][ T7209] usb 7-1: Product: syz [ 1034.986604][ T7209] usb 7-1: Manufacturer: syz [ 1035.021112][ T7209] usb 7-1: SerialNumber: syz [ 1035.138009][ T7209] rndis_host 7-1:7.0: skipping garbage [ 1035.148625][ T7209] usb 7-1: bad CDC descriptors [ 1035.160644][ T7209] option 7-1:7.0: GSM modem (1-port) converter detected [ 1035.202079][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1035.489295][T17096] x_tables: duplicate underflow at hook 2 [ 1035.717939][ T7204] usb 2-1: USB disconnect, device number 100 [ 1036.252359][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1036.353785][T17103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2652'. [ 1036.415169][T17103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2652'. [ 1036.833794][ T7209] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 1037.182101][ T7209] usb 5-1: device descriptor read/64, error -71 [ 1037.282158][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1037.582427][ T5888] usb 7-1: USB disconnect, device number 23 [ 1037.589938][ T5888] option 7-1:7.0: device disconnected [ 1037.662123][ T5902] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1037.672172][ T7209] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 1037.876458][ T7209] usb 5-1: device descriptor read/64, error -71 [ 1037.879572][T17121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1037.914707][T17121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1037.953036][ T5902] usb 6-1: Using ep0 maxpacket: 16 [ 1038.299060][ T7209] usb usb5-port1: attempt power cycle [ 1038.322503][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1038.448761][ T5902] usb 6-1: config 0 has no interfaces? [ 1038.463500][ T5902] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1038.473973][ T5902] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1038.484180][ T5902] usb 6-1: Manufacturer: syz [ 1038.491681][ T5902] usb 6-1: config 0 descriptor?? [ 1038.812621][ T7209] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 1038.869428][ T7209] usb 5-1: device descriptor read/8, error -71 [ 1039.132147][ T7209] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 1039.166343][ T7209] usb 5-1: device descriptor read/8, error -71 [ 1039.283635][ T7209] usb usb5-port1: unable to enumerate USB device [ 1039.362274][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1039.382112][ T5888] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1039.603181][ T5888] usb 2-1: Using ep0 maxpacket: 32 [ 1039.649966][ T5888] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1039.667909][ T5888] usb 2-1: can't read configurations, error -61 [ 1039.822219][ T5888] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1040.007121][ T5888] usb 2-1: Using ep0 maxpacket: 32 [ 1040.030394][ T5888] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1040.044135][ T5888] usb 2-1: can't read configurations, error -61 [ 1040.061653][ T5888] usb usb2-port1: attempt power cycle [ 1040.380411][T13368] usb 6-1: USB disconnect, device number 52 [ 1040.412395][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1040.428438][T17139] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1040.502513][ T5888] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 1040.541183][ T5888] usb 2-1: Using ep0 maxpacket: 32 [ 1040.583942][ T5888] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1040.591592][ T5888] usb 2-1: can't read configurations, error -61 [ 1040.646451][T17143] kAFS: unable to lookup cell 'ÿ' [ 1040.753548][ T5888] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 1040.830289][ T5888] usb 2-1: Using ep0 maxpacket: 32 [ 1040.841510][ T5888] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1041.004976][ T5888] usb 2-1: can't read configurations, error -61 [ 1041.015230][ T5888] usb usb2-port1: unable to enumerate USB device [ 1041.108941][ T7209] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1041.310896][ T7209] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1041.373040][ T7209] usb 6-1: config 13 has an invalid interface number: 177 but max is 0 [ 1041.381358][ T7209] usb 6-1: config 13 has no interface number 0 [ 1041.402279][ T7209] usb 6-1: config 13 interface 177 altsetting 4 has an endpoint descriptor with address 0x99, changing to 0x89 [ 1041.416458][ T7209] usb 6-1: config 13 interface 177 altsetting 4 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 1041.432362][ T7209] usb 6-1: config 13 interface 177 altsetting 4 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1041.443123][ T7209] usb 6-1: config 13 interface 177 has no altsetting 0 [ 1041.452115][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1041.456038][ T7209] usb 6-1: New USB device found, idVendor=15c2, idProduct=f142, bcdDevice=ef.b7 [ 1041.469182][ T7209] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1041.477880][ T7209] usb 6-1: Product: syz [ 1041.680869][ T7209] usb 6-1: Manufacturer: syz [ 1041.791055][ T7209] usb 6-1: SerialNumber: syz [ 1042.078131][ T7209] usb 6-1: USB disconnect, device number 53 [ 1042.094398][T17152] fuse: Bad value for 'fd' [ 1042.482995][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1043.511312][T17176] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1043.522163][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1044.222365][ T5888] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 1044.334600][T17183] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2673'. [ 1044.364343][ T5888] usb 2-1: device descriptor read/64, error -71 [ 1044.562505][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1044.693078][ T5888] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 1044.853166][ T5888] usb 2-1: device descriptor read/64, error -71 [ 1044.962872][ T5888] usb usb2-port1: attempt power cycle [ 1045.332106][ T5888] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 1045.353169][ T5888] usb 2-1: device descriptor read/8, error -71 [ 1045.602233][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1045.609934][ T5888] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 1045.642886][ T5888] usb 2-1: device descriptor read/8, error -71 [ 1045.748955][T17204] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1045.988108][T17206] fuse: Bad value for 'fd' [ 1046.043227][ T5888] usb usb2-port1: unable to enumerate USB device [ 1046.583053][T17219] fuse: Bad value for 'fd' [ 1046.652465][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1047.579929][T17234] netlink: 'syz.5.2686': attribute type 4 has an invalid length. [ 1047.692161][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1047.986633][T17241] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1048.299364][T17246] fuse: Bad value for 'fd' [ 1048.589770][T17251] fuse: Bad value for 'fd' [ 1048.732488][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1048.740206][ T5888] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 1048.952794][ T5888] usb 2-1: config 1 interface 0 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1049.016438][ T5888] usb 2-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1049.082157][ T5888] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1049.145628][ T5888] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1049.182101][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1049.232059][ T5888] usb 2-1: SerialNumber: 䀊 [ 1049.288193][T17249] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1049.772126][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1050.021282][T17267] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1050.271420][T17261] macvtap1: entered promiscuous mode [ 1050.286913][T17261] ip6gretap0: entered promiscuous mode [ 1050.337886][T17261] ip6gretap0: left promiscuous mode [ 1050.812756][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1051.162197][ T7204] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1051.422074][ T7204] usb 7-1: Using ep0 maxpacket: 32 [ 1051.466955][ T7204] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1051.518418][ T7204] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1051.755967][ T7204] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1051.784058][ T7204] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1051.825084][ T7204] usb 7-1: config 0 descriptor?? [ 1051.852273][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1052.223603][ T7209] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1052.475546][ T7209] usb 6-1: Using ep0 maxpacket: 32 [ 1052.476426][ T5888] usb 2-1: USB disconnect, device number 109 [ 1052.580851][ T7209] usb 6-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1052.590890][ T7209] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1052.644649][ T7209] usb 6-1: Product: syz [ 1052.653188][ T7209] usb 6-1: Manufacturer: syz [ 1052.672808][ T7209] usb 6-1: SerialNumber: syz [ 1052.714296][ T7209] usb 6-1: config 0 descriptor?? [ 1052.882510][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1052.952977][ T7209] RobotFuzz Open Source InterFace, OSIF 6-1:0.0: version d4.15 found at bus 006 address 054 [ 1053.340543][T17289] fuse: Bad value for 'fd' [ 1053.546770][T17290] i2c i2c-1: failure reading data [ 1053.922205][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1054.345049][T17294] netlink: 'syz.4.2701': attribute type 4 has an invalid length. [ 1054.568838][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.577445][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.707073][T17297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1054.763192][T17297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1054.789674][T17302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1054.799069][T17302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1054.972533][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1055.366494][ T7204] usbhid 7-1:0.0: can't add hid device: -71 [ 1055.385165][T17307] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2703'. [ 1055.394497][T17307] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2703'. [ 1055.457986][ T7204] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1055.516945][T17308] netlink: 'syz.1.2703': attribute type 4 has an invalid length. [ 1055.661455][ T7204] usb 7-1: USB disconnect, device number 24 [ 1056.002124][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1056.162281][ T5888] usb 6-1: USB disconnect, device number 54 [ 1056.503812][T17321] fuse: Bad value for 'user_id' [ 1056.529935][T17321] fuse: Bad value for 'user_id' [ 1056.547480][T17319] FAULT_INJECTION: forcing a failure. [ 1056.547480][T17319] name failslab, interval 1, probability 0, space 0, times 0 [ 1056.562378][T17319] CPU: 0 UID: 0 PID: 17319 Comm: syz.5.2706 Tainted: G L syzkaller #0 PREEMPT(full) [ 1056.562410][T17319] Tainted: [L]=SOFTLOCKUP [ 1056.562419][T17319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1056.562432][T17319] Call Trace: [ 1056.562441][T17319] [ 1056.562451][T17319] dump_stack_lvl+0xe8/0x150 [ 1056.562486][T17319] should_fail_ex+0x412/0x560 [ 1056.562534][T17319] ? __d_alloc+0x37/0x6f0 [ 1056.562557][T17319] should_failslab+0xa8/0x100 [ 1056.562586][T17319] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 1056.562609][T17319] ? tomoyo_check_open_permission+0x1d3/0x470 [ 1056.562647][T17319] __d_alloc+0x37/0x6f0 [ 1056.562674][T17319] d_alloc_parallel+0xe6/0x1610 [ 1056.562700][T17319] ? __lock_acquire+0x6b5/0x2cf0 [ 1056.562739][T17319] ? look_up_lock_class+0x57/0x110 [ 1056.562765][T17319] ? register_lock_class+0x31/0x2e0 [ 1056.562797][T17319] ? __lock_acquire+0x6b5/0x2cf0 [ 1056.562824][T17319] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1056.562853][T17319] ? __raw_spin_lock_init+0x45/0x100 [ 1056.562877][T17319] ? __init_waitqueue_head+0xa9/0x150 [ 1056.562905][T17319] __lookup_slow+0x137/0x410 [ 1056.562928][T17319] ? __pfx___lookup_slow+0x10/0x10 [ 1056.562961][T17319] ? down_read+0x272/0x2e0 [ 1056.562993][T17319] lookup_slow+0x53/0x70 [ 1056.563015][T17319] link_path_walk+0xd1e/0x18d0 [ 1056.563067][T17319] __filename_parentat+0x27f/0x6f0 [ 1056.563106][T17319] ? __pfx___filename_parentat+0x10/0x10 [ 1056.563177][T17319] filename_create+0xd9/0x370 [ 1056.563208][T17319] ? __pfx_filename_create+0x10/0x10 [ 1056.563243][T17319] filename_mkdirat+0xd2/0x510 [ 1056.563275][T17319] ? __pfx_filename_mkdirat+0x10/0x10 [ 1056.563305][T17319] ? do_getname+0x151/0x250 [ 1056.563336][T17319] __se_sys_mkdirat+0x35/0x150 [ 1056.563365][T17319] do_syscall_64+0x14d/0xf80 [ 1056.563390][T17319] ? trace_irq_disable+0x3b/0x150 [ 1056.563408][T17319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1056.563430][T17319] ? clear_bhb_loop+0x40/0x90 [ 1056.563457][T17319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1056.563478][T17319] RIP: 0033:0x7fba3cf9b607 [ 1056.563498][T17319] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1056.563516][T17319] RSP: 002b:00007fba3dd79e58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1056.563539][T17319] RAX: ffffffffffffffda RBX: 00007fba3dd79ee0 RCX: 00007fba3cf9b607 [ 1056.563555][T17319] RDX: 00000000000001ff RSI: 0000200000000ec0 RDI: 00000000ffffff9c [ 1056.563569][T17319] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1056.563581][T17319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000ec0 [ 1056.563595][T17319] R13: 00007fba3dd79ea0 R14: 0000000000000000 R15: 0000000000000000 [ 1056.563627][T17319] [ 1057.042432][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1057.932094][ T5888] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1058.082069][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1058.152425][ T5888] usb 6-1: Using ep0 maxpacket: 32 [ 1058.215971][ T5888] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1058.265032][ T5888] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1058.332454][ T5888] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1058.372214][ T5888] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1058.431840][ T5888] usb 6-1: config 0 descriptor?? [ 1058.774009][T10377] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1058.807887][T10377] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1058.822495][T10377] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1058.831194][T10377] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1058.839806][T10377] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1059.132478][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1059.395066][T17336] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2709'. [ 1059.762216][ T7209] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 1059.945156][ T7209] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1059.954943][ T7209] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1059.974493][ T7209] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1060.023426][ T7209] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1060.063895][ T7209] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1060.084662][ T7209] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1060.119117][ T7209] usb 2-1: Product: syz [ 1060.138019][ T7209] usb 2-1: Manufacturer: syz [ 1060.162365][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1060.191864][ T7209] cdc_wdm 2-1:1.0: skipping garbage [ 1060.213805][ T7209] cdc_wdm 2-1:1.0: skipping garbage [ 1060.238763][ T7209] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1060.261121][T17332] chnl_net:caif_netlink_parms(): no params data found [ 1060.712448][T13368] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1060.785215][ T5888] usbhid 6-1:0.0: can't add hid device: -71 [ 1060.798270][ T5888] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1060.866212][ T5888] usb 6-1: USB disconnect, device number 55 [ 1060.917051][T14029] Bluetooth: hci3: command tx timeout [ 1060.986401][ T7209] usb 3-1: USB disconnect, device number 19 [ 1061.058138][T13368] usb 7-1: config 7 descriptor has 1 excess byte, ignoring [ 1061.095849][T13368] usb 7-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 1061.122935][T13368] usb 7-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 7.84 [ 1061.132453][T13368] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1061.140496][T13368] usb 7-1: Product: syz [ 1061.178437][T13368] usb 7-1: Manufacturer: syz [ 1061.187427][T13368] usb 7-1: SerialNumber: syz [ 1061.212489][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1061.295707][T13368] rndis_host 7-1:7.0: skipping garbage [ 1061.301246][T13368] usb 7-1: bad CDC descriptors [ 1061.308141][T13368] option 7-1:7.0: GSM modem (1-port) converter detected [ 1061.794139][T17332] bridge0: port 1(bridge_slave_0) entered blocking state [ 1061.819852][T17332] bridge0: port 1(bridge_slave_0) entered disabled state [ 1061.943441][T17332] bridge_slave_0: entered allmulticast mode [ 1062.013858][T17332] bridge_slave_0: entered promiscuous mode [ 1062.068103][T17332] bridge0: port 2(bridge_slave_1) entered blocking state [ 1062.088359][T17332] bridge0: port 2(bridge_slave_1) entered disabled state [ 1062.121402][T17332] bridge_slave_1: entered allmulticast mode [ 1062.160761][T17332] bridge_slave_1: entered promiscuous mode [ 1062.242387][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1062.563577][ T7209] usb 2-1: USB disconnect, device number 110 [ 1062.738676][T17332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1062.902209][T17367] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1062.961025][T17332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1062.983573][T14029] Bluetooth: hci3: command tx timeout [ 1063.119196][T17332] team0: Port device team_slave_0 added [ 1063.163232][T17332] team0: Port device team_slave_1 added [ 1063.282829][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1063.509976][T17332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1063.517237][T17332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1063.623420][T17332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1063.652743][T17332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1063.659928][T17332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1063.718164][ T7209] usb 7-1: USB disconnect, device number 25 [ 1063.726826][ T7209] option 7-1:7.0: device disconnected [ 1063.776045][T17332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1063.992247][ T5888] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1064.212294][ T5888] usb 5-1: Using ep0 maxpacket: 32 [ 1064.225141][ T5888] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1064.242966][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1064.271164][ T5888] usb 5-1: Product: syz [ 1064.275760][ T5888] usb 5-1: Manufacturer: syz [ 1064.283813][ T5888] usb 5-1: SerialNumber: syz [ 1064.317977][ T5888] usb 5-1: config 0 descriptor?? [ 1064.565228][ T5888] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: version d4.15 found at bus 005 address 002 [ 1064.692401][ T49] bond0 (unregistering): Released all slaves [ 1064.706600][T13368] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1064.745412][ T49] bond1 (unregistering): (slave veth3): Releasing backup interface [ 1064.764663][ T49] veth3: left promiscuous mode [ 1064.770775][ T49] bond1 (unregistering): Released all slaves [ 1064.798183][ T49] bond2 (unregistering): Released all slaves [ 1064.873904][T17332] hsr_slave_0: entered promiscuous mode [ 1064.882094][T13368] usb 6-1: Using ep0 maxpacket: 32 [ 1064.912872][T13368] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1064.919762][T17332] hsr_slave_1: entered promiscuous mode [ 1064.982927][T17332] debugfs: 'hsr0' already exists in 'hsr' [ 1064.986375][T13368] usb 6-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1065.004885][T13368] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1065.005079][T17332] Cannot create hsr debugfs directory [ 1065.062155][T14029] Bluetooth: hci3: command tx timeout [ 1065.106819][T17383] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1065.137522][T17385] i2c i2c-1: failure reading data [ 1065.146824][T13368] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1065.173271][T13368] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1065.181362][T13368] usb 6-1: Product: syz [ 1065.192336][T13368] usb 6-1: Manufacturer: syz [ 1065.203021][T13368] usb 6-1: SerialNumber: syz [ 1065.290755][T13368] usb 6-1: config 0 descriptor?? [ 1065.461550][ T49] tipc: Disabling bearer [ 1065.467803][ T49] tipc: Left network mode [ 1065.866772][T13368] gs_usb 6-1:0.0: Configuring for 154 interfaces [ 1065.978464][T17390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1066.011250][T17390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1066.023319][ T5902] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1066.192679][ T5902] usb 7-1: Using ep0 maxpacket: 32 [ 1066.201874][ T5902] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1066.248473][ T5902] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1066.291425][ T5902] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1066.338591][T13368] gs_usb 6-1:0.0: Disabling termination support for channel 0 (-EPIPE) [ 1066.354800][ T5902] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1066.425787][ T5902] usb 7-1: config 0 descriptor?? [ 1067.132183][T14029] Bluetooth: hci3: command tx timeout [ 1067.188210][ T5888] usb 5-1: USB disconnect, device number 2 [ 1067.268025][T17403] kAFS: unable to lookup cell 'ÿ' [ 1067.712995][T13368] gs_usb 6-1:0.0: Couldn't get bit timing const for channel 2 (-ETIMEDOUT) [ 1067.961769][ T49] hsr_slave_0: left promiscuous mode [ 1068.010728][ T49] hsr_slave_1: left promiscuous mode [ 1068.548750][ T49] pim6reg (unregistering): left allmulticast mode [ 1068.552969][ T7209] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 1068.729001][ T7209] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1068.764509][ T7209] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1068.779520][ T7209] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 1068.791015][ T7209] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1068.936098][ T7209] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1068.945719][ T7209] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1068.970647][ T7209] usb 5-1: Product: syz [ 1068.989561][ T7209] usb 5-1: Manufacturer: syz [ 1069.019960][ T7209] usb 5-1: SerialNumber: syz [ 1069.103709][T17414] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1069.113747][ T7209] cdc_mbim 5-1:1.0: skipping garbage [ 1069.354206][T17414] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1069.392681][T17414] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1069.741780][ T5902] usbhid 7-1:0.0: can't add hid device: -71 [ 1069.748173][ T5902] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1069.792845][ T5902] usb 7-1: USB disconnect, device number 26 [ 1069.838672][T17422] af_packet: tpacket_rcv: packet too big, clamped from 156 to 4294967272. macoff=96 [ 1070.031714][T17414] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1070.072551][T17414] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1070.080072][ T7209] cdc_mbim 5-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1070.122467][ T7209] cdc_mbim 5-1:1.0: setting rx_max = 2048 [ 1070.352312][ T7209] cdc_mbim 5-1:1.0: setting tx_max = 184 [ 1070.364737][ T7209] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device [ 1070.365896][T13368] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -110 [ 1070.459880][ T7209] wwan wwan0: port wwan0mbim0 attached [ 1070.477652][T13368] usb 6-1: USB disconnect, device number 56 [ 1070.587443][ T7209] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.4-1, CDC MBIM, be:1c:ca:2b:e7:1d [ 1070.593190][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 1070.593266][ T30] audit: type=1326 audit(1774632554.347:3041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17426 comm="syz.1.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd507d9c799 code=0x7ffc0000 [ 1070.629125][ T7209] usb 5-1: USB disconnect, device number 3 [ 1070.658234][T17332] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1070.751107][ T7209] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.4-1, CDC MBIM [ 1070.781334][T17332] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1070.859474][ T30] audit: type=1326 audit(1774632554.347:3042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17426 comm="syz.1.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd507d9c799 code=0x7ffc0000 [ 1070.892229][ T8148] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 1070.911774][T17332] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1070.938032][ T30] audit: type=1326 audit(1774632554.347:3043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17426 comm="syz.1.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd507d9c799 code=0x7ffc0000 [ 1071.028905][T17332] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1071.041598][ T7209] wwan wwan0: port wwan0mbim0 disconnected [ 1071.275333][ T30] audit: type=1326 audit(1774632554.347:3044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17426 comm="syz.1.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd507d9c799 code=0x7ffc0000 [ 1071.336386][ T8148] usb 2-1: Using ep0 maxpacket: 32 [ 1071.375991][ T8148] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1071.424902][ T8148] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1071.439145][T17438] syzkaller0: entered promiscuous mode [ 1071.471338][ T30] audit: type=1326 audit(1774632554.347:3045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17426 comm="syz.1.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd507d9c799 code=0x7ffc0000 [ 1071.501915][ T8148] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1071.527069][ T8148] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1071.569273][ T8148] usb 2-1: config 0 descriptor?? [ 1071.584548][T17438] syzkaller0: entered allmulticast mode [ 1071.631410][ T30] audit: type=1326 audit(1774632554.347:3046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17426 comm="syz.1.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fd507d9c799 code=0x7ffc0000 [ 1071.781662][ T30] audit: type=1326 audit(1774632554.347:3047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17426 comm="syz.1.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd507d9c799 code=0x7ffc0000 [ 1071.910500][ T30] audit: type=1326 audit(1774632554.347:3048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17426 comm="syz.1.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fd507d9c799 code=0x7ffc0000 [ 1071.959469][T17434] ip6gretap0: entered promiscuous mode [ 1071.966114][T17434] macvtap1: entered promiscuous mode [ 1071.980648][T17434] ip6gretap0: left promiscuous mode [ 1072.048041][ T30] audit: type=1326 audit(1774632554.347:3049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17426 comm="syz.1.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd507d9c799 code=0x7ffc0000 [ 1072.127210][ T30] audit: type=1326 audit(1774632554.347:3050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17426 comm="syz.1.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7fd507d9c799 code=0x7ffc0000 [ 1072.888814][T17467] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2734'. [ 1073.095025][T17471] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2734'. [ 1073.717120][ T8148] usbhid 2-1:0.0: can't add hid device: -71 [ 1073.723785][ T8148] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1073.775853][ T8148] usb 2-1: USB disconnect, device number 111 [ 1075.927384][T17476] ip6gretap0: entered promiscuous mode [ 1075.947573][T17476] macvtap1: entered promiscuous mode [ 1075.993887][T17476] ip6gretap0: left promiscuous mode [ 1076.134850][T17487] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1076.189866][ T49] IPVS: stop unused estimator thread 0... [ 1076.361855][T17332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1076.425204][T17332] 8021q: adding VLAN 0 to HW filter on device team0 [ 1076.438956][ T7710] bridge0: port 1(bridge_slave_0) entered blocking state [ 1076.446123][ T7710] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1076.490068][ T7710] bridge0: port 2(bridge_slave_1) entered blocking state [ 1076.497261][ T7710] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1076.821582][T17332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1076.926265][T17332] veth0_vlan: entered promiscuous mode [ 1077.002743][T17332] veth1_vlan: entered promiscuous mode [ 1077.131092][T17494] bond2: option packets_per_slave: mode dependency failed, not supported in mode balance-xor(2) [ 1077.199508][T17494] bond2 (unregistering): Released all slaves [ 1077.417259][T17332] veth0_macvtap: entered promiscuous mode [ 1077.435005][T17332] veth1_macvtap: entered promiscuous mode [ 1077.589156][T17332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1077.666705][T17332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1077.700793][T17503] netlink: 'syz.5.2742': attribute type 4 has an invalid length. [ 1077.743953][ T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1077.767228][ T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1077.804973][ T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1077.934446][T10951] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.232161][ T5902] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1078.396251][ T5902] usb 5-1: config 7 descriptor has 1 excess byte, ignoring [ 1078.404398][ T5902] usb 5-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 1078.429894][T17518] syzkaller0: entered promiscuous mode [ 1078.436180][T17518] syzkaller0: entered allmulticast mode [ 1078.475139][ T5902] usb 5-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 7.84 [ 1078.570534][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1078.597500][ T5902] usb 5-1: Product: syz [ 1078.618598][ T5902] usb 5-1: Manufacturer: syz [ 1078.623597][ T5902] usb 5-1: SerialNumber: syz [ 1078.705564][ T5902] rndis_host 5-1:7.0: skipping garbage [ 1078.711178][ T5902] usb 5-1: bad CDC descriptors [ 1078.722850][ T5902] option 5-1:7.0: GSM modem (1-port) converter detected [ 1081.143832][T17517] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 1081.284186][T13368] usb 5-1: USB disconnect, device number 4 [ 1081.366837][T13368] option 5-1:7.0: device disconnected [ 1081.525859][ T7710] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1081.542759][ T7710] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1081.592785][ T7710] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1081.625372][T17534] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2747'. [ 1081.642497][ T7710] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1081.746702][T17535] fuse: Bad value for 'user_id' [ 1081.751692][T17535] fuse: Bad value for 'user_id' [ 1081.935463][T17538] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2751'. [ 1081.945916][T17539] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2751'. [ 1082.651540][T17552] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1082.812120][ T7204] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1082.972271][ T7204] usb 7-1: Using ep0 maxpacket: 16 [ 1082.994319][ T7204] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1083.016390][ T7204] usb 7-1: config 7 has an invalid interface number: 188 but max is 0 [ 1083.035707][ T7204] usb 7-1: config 7 has no interface number 0 [ 1083.045828][ T7204] usb 7-1: config 7 interface 188 has no altsetting 0 [ 1083.056903][ T7204] usb 7-1: New USB device found, idVendor=12d1, idProduct=0b9f, bcdDevice=5a.df [ 1083.102026][ T7204] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1083.131848][ T7204] usb 7-1: Product: syz [ 1083.140583][ T7204] usb 7-1: Manufacturer: syz [ 1083.181580][ T7204] usb 7-1: SerialNumber: syz [ 1083.197986][T17557] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1083.320181][T17561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1083.554971][T17564] syzkaller0: entered promiscuous mode [ 1083.666181][T17564] syzkaller0: entered allmulticast mode [ 1084.176438][T17570] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1084.255912][T17576] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2760'. [ 1085.111484][T17584] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2762'. [ 1085.595376][ T7204] uvcvideo 7-1:7.188: Found multiple Units with ID 1 [ 1085.615566][ T7204] uvcvideo 7-1:7.188: Found UVC 0.00 device syz (12d1:0b9f) [ 1085.774871][ T7204] uvcvideo 7-1:7.188: No valid video chain found. [ 1085.815459][ T7204] usb 7-1: USB disconnect, device number 27 [ 1086.685046][T17610] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2769'. [ 1087.418493][T17616] syzkaller0: entered promiscuous mode [ 1087.424104][T17616] syzkaller0: entered allmulticast mode [ 1087.600542][T17614] ip6gretap0: entered promiscuous mode [ 1087.627015][T17614] macvtap1: entered promiscuous mode [ 1087.783395][T17614] ip6gretap0: left promiscuous mode [ 1088.420954][T17620] fuse: Unknown parameter '0x0000000000000004' [ 1089.432380][T17632] fuse: Bad value for 'fd' [ 1089.553804][T17634] fuse: Bad value for 'user_id' [ 1089.558707][T17634] fuse: Bad value for 'user_id' [ 1092.664303][T17663] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2782'. [ 1093.255733][T17669] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2784'. [ 1093.368406][T17671] syzkaller0: entered promiscuous mode [ 1093.425313][T17671] syzkaller0: entered allmulticast mode [ 1093.627010][T17677] xt_hashlimit: size too large, truncated to 1048576 [ 1093.652176][ T7204] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1093.686251][T17679] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 1093.845768][ T7204] usb 6-1: Using ep0 maxpacket: 16 [ 1093.873580][ T7204] usb 6-1: config 0 has no interfaces? [ 1093.994064][T13368] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1094.014399][ T7204] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1094.174809][ T7204] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1094.259267][ T7204] usb 6-1: Manufacturer: syz [ 1094.270680][ T7204] usb 6-1: config 0 descriptor?? [ 1094.292604][T17683] kAFS: unable to lookup cell 'ÿ' [ 1094.443729][T13368] usb 5-1: Using ep0 maxpacket: 16 [ 1094.465173][T13368] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 1094.474146][T13368] usb 5-1: config 0 has no interface number 0 [ 1094.480584][T13368] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1094.492911][T13368] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1094.631422][T13368] usb 5-1: config 0 interface 41 has no altsetting 0 [ 1094.665051][T13368] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1094.676497][T13368] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1094.686524][T13368] usb 5-1: Product: syz [ 1094.690926][T13368] usb 5-1: Manufacturer: syz [ 1094.696645][T13368] usb 5-1: SerialNumber: syz [ 1094.769855][T13368] usb 5-1: config 0 descriptor?? [ 1094.779937][T17681] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1094.788240][T17681] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1095.064226][T17681] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1095.087718][T17681] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1095.250726][T17698] netlink: 'syz.2.2792': attribute type 21 has an invalid length. [ 1095.258740][T17698] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2792'. [ 1095.268967][T17698] netlink: 'syz.2.2792': attribute type 4 has an invalid length. [ 1095.277074][T17698] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2792'. [ 1095.468525][T17700] fuse: Bad value for 'fd' [ 1095.742218][T13368] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 1096.168645][T13368] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 1096.186724][T13368] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 1096.222854][ T5902] usb 6-1: USB disconnect, device number 57 [ 1096.268822][T13368] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 1096.479645][T13368] usb 5-1: USB disconnect, device number 5 [ 1096.493260][T17702] fuse: Bad value for 'user_id' [ 1096.498659][T17702] fuse: Bad value for 'user_id' [ 1096.952117][ T5902] usb 6-1: new low-speed USB device number 58 using dummy_hcd [ 1097.022524][ T7209] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1097.044016][T17711] syzkaller0: entered promiscuous mode [ 1097.049518][T17711] syzkaller0: entered allmulticast mode [ 1097.116662][ T5902] usb 6-1: device descriptor read/64, error -71 [ 1097.205893][ T7209] usb 7-1: Using ep0 maxpacket: 32 [ 1097.325314][ T7209] usb 7-1: config 0 has no interfaces? [ 1097.359620][ T7209] usb 7-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1097.392094][ T5902] usb 6-1: new low-speed USB device number 59 using dummy_hcd [ 1097.406691][ T7209] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1097.451788][ T7209] usb 7-1: Product: syz [ 1097.469379][ T7209] usb 7-1: Manufacturer: syz [ 1097.490406][ T7209] usb 7-1: SerialNumber: syz [ 1097.522301][ T5902] usb 6-1: device descriptor read/64, error -71 [ 1097.587672][T17715] syzkaller0: entered promiscuous mode [ 1097.587695][ T7209] usb 7-1: config 0 descriptor?? [ 1097.605666][T17715] syzkaller0: entered allmulticast mode [ 1097.632909][ T5902] usb usb6-port1: attempt power cycle [ 1097.992298][ T5902] usb 6-1: new low-speed USB device number 60 using dummy_hcd [ 1098.014122][ T5902] usb 6-1: device descriptor read/8, error -71 [ 1098.205448][T17722] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2800'. [ 1098.332226][ T5902] usb 6-1: new low-speed USB device number 61 using dummy_hcd [ 1098.369933][ T5902] usb 6-1: device descriptor read/8, error -71 [ 1098.482656][ T5902] usb usb6-port1: unable to enumerate USB device [ 1100.023623][ T7204] usb 7-1: USB disconnect, device number 28 [ 1100.050361][T13368] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1100.112482][T17743] kAFS: unable to lookup cell 'ÿ' [ 1100.252055][T13368] usb 3-1: Using ep0 maxpacket: 16 [ 1100.299948][T13368] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1100.321871][T13368] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1100.349663][T13368] usb 3-1: Product: syz [ 1100.361282][T13368] usb 3-1: Manufacturer: syz [ 1100.372153][T13368] usb 3-1: SerialNumber: syz [ 1100.569760][T13368] usb 3-1: config 0 descriptor?? [ 1101.125540][T13368] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1101.150362][T13368] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1101.180960][T13368] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1101.204406][T13368] usb 3-1: media controller created [ 1101.249343][T13368] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1101.463294][T13368] zl10353_read_register: readreg error (reg=127, ret==0) [ 1101.472785][T13368] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1101.481816][T13368] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1101.543473][T13368] usb 3-1: USB disconnect, device number 20 [ 1101.798542][T13368] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1101.933119][ T7204] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1102.114612][ T7204] usb 5-1: config 7 descriptor has 1 excess byte, ignoring [ 1102.125840][ T7204] usb 5-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 1102.145446][ T7204] usb 5-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 7.84 [ 1102.169988][ T7204] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.219910][ T7204] usb 5-1: Product: syz [ 1102.242114][ T7204] usb 5-1: Manufacturer: syz [ 1102.246847][ T7204] usb 5-1: SerialNumber: syz [ 1102.281382][ T7204] rndis_host 5-1:7.0: skipping garbage [ 1102.308621][ T7204] usb 5-1: bad CDC descriptors [ 1102.411893][ T7204] option 5-1:7.0: GSM modem (1-port) converter detected [ 1102.422659][T17772] bond1: (slave geneve2): Releasing active interface [ 1102.820851][T17778] kAFS: unable to lookup cell 'ÿ' [ 1103.974684][T17790] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2818'. [ 1104.397936][T17798] ip6gretap0: entered promiscuous mode [ 1104.404200][T17798] macvtap1: entered promiscuous mode [ 1104.601305][T17798] ip6gretap0: left promiscuous mode [ 1104.742975][ T5902] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1104.894630][ T7204] usb 5-1: USB disconnect, device number 6 [ 1104.901813][ T7204] option 5-1:7.0: device disconnected [ 1105.012853][ T5902] usb 7-1: Using ep0 maxpacket: 16 [ 1105.029817][ T5902] usb 7-1: config 0 has no interfaces? [ 1105.044378][ T5902] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1105.065437][ T5902] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1105.096126][ T5902] usb 7-1: Manufacturer: syz [ 1105.121660][ T5902] usb 7-1: config 0 descriptor?? [ 1105.215127][T17803] syzkaller0: entered promiscuous mode [ 1105.220968][T17803] syzkaller0: entered allmulticast mode [ 1105.809675][T17819] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2825'. [ 1106.420300][T17827] netem: change failed [ 1106.552172][ T5902] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1106.722334][ T5902] usb 5-1: Using ep0 maxpacket: 16 [ 1106.734147][ T5902] usb 5-1: config 0 has no interfaces? [ 1106.744234][ T5902] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1106.768602][ T5902] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1106.874997][ T5902] usb 5-1: Manufacturer: syz [ 1106.971670][ T5902] usb 5-1: config 0 descriptor?? [ 1107.709423][T17842] kAFS: unable to lookup cell 'ÿ' [ 1107.984923][T17845] syzkaller0: entered promiscuous mode [ 1107.999335][T17845] syzkaller0: entered allmulticast mode [ 1108.766432][ T7209] usb 5-1: USB disconnect, device number 7 [ 1109.174099][T17857] kAFS: unable to lookup cell 'ÿ' [ 1109.203866][ T5902] usb 7-1: USB disconnect, device number 29 [ 1109.392014][ T30] kauditd_printk_skb: 54 callbacks suppressed [ 1109.392034][ T30] audit: type=1326 audit(1774632593.207:3105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17856 comm="syz.2.2840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f724e79c799 code=0x7ffc0000 [ 1109.536222][ T30] audit: type=1326 audit(1774632593.207:3106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17856 comm="syz.2.2840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f724e79c799 code=0x7ffc0000 [ 1109.564839][ T30] audit: type=1326 audit(1774632593.207:3107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17856 comm="syz.2.2840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f724e79c799 code=0x7ffc0000 [ 1109.781620][ T5888] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1109.880302][ T30] audit: type=1326 audit(1774632593.207:3108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17856 comm="syz.2.2840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f724e79c799 code=0x7ffc0000 [ 1109.944184][ T30] audit: type=1326 audit(1774632593.207:3109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17856 comm="syz.2.2840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f724e79c799 code=0x7ffc0000 [ 1110.030102][ T30] audit: type=1326 audit(1774632593.207:3110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17856 comm="syz.2.2840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f724e79c799 code=0x7ffc0000 [ 1110.061399][ T5888] usb 3-1: Using ep0 maxpacket: 32 [ 1110.155115][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1110.176492][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1110.189365][ T30] audit: type=1326 audit(1774632593.207:3111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17856 comm="syz.2.2840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f724e79c799 code=0x7ffc0000 [ 1110.222082][ T5888] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1110.251673][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1110.285887][T17870] FAULT_INJECTION: forcing a failure. [ 1110.285887][T17870] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1110.322752][ T30] audit: type=1326 audit(1774632593.207:3112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17856 comm="syz.2.2840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f724e79c799 code=0x7ffc0000 [ 1110.378554][ T5888] usb 3-1: config 0 descriptor?? [ 1110.492139][ T30] audit: type=1326 audit(1774632593.207:3113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17856 comm="syz.2.2840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f724e79c799 code=0x7ffc0000 [ 1110.502747][T17870] CPU: 0 UID: 0 PID: 17870 Comm: syz.1.2843 Tainted: G L syzkaller #0 PREEMPT(full) [ 1110.502844][T17870] Tainted: [L]=SOFTLOCKUP [ 1110.502866][T17870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1110.502905][T17870] Call Trace: [ 1110.502927][T17870] [ 1110.502956][T17870] dump_stack_lvl+0xe8/0x150 [ 1110.503062][T17870] should_fail_ex+0x412/0x560 [ 1110.503165][T17870] _copy_to_user+0x31/0xb0 [ 1110.503238][T17870] simple_read_from_buffer+0xe1/0x170 [ 1110.503326][T17870] proc_fail_nth_read+0x1bb/0x230 [ 1110.503419][T17870] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1110.503511][T17870] ? rw_verify_area+0x2a6/0x4d0 [ 1110.503576][T17870] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1110.503662][T17870] vfs_read+0x20c/0xa70 [ 1110.503740][T17870] ? fdget_pos+0x246/0x320 [ 1110.503825][T17870] ? __pfx___mutex_lock+0x10/0x10 [ 1110.503902][T17870] ? __pfx_vfs_read+0x10/0x10 [ 1110.503964][T17870] ? __fget_files+0x2a/0x420 [ 1110.504068][T17870] ? __fget_files+0x3a0/0x420 [ 1110.504148][T17870] ? __fget_files+0x2a/0x420 [ 1110.504244][T17870] ksys_read+0x150/0x270 [ 1110.504309][T17870] ? __pfx_ksys_read+0x10/0x10 [ 1110.504400][T17870] do_syscall_64+0x14d/0xf80 [ 1110.504462][T17870] ? trace_irq_disable+0x3b/0x150 [ 1110.504508][T17870] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1110.504571][T17870] ? clear_bhb_loop+0x40/0x90 [ 1110.504638][T17870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1110.504692][T17870] RIP: 0033:0x7fd507d5cfce [ 1110.504744][T17870] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1110.504794][T17870] RSP: 002b:00007fd508c1afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1110.504848][T17870] RAX: ffffffffffffffda RBX: 00007fd508c1b6c0 RCX: 00007fd507d5cfce [ 1110.504897][T17870] RDX: 000000000000000f RSI: 00007fd508c1b0a0 RDI: 0000000000000004 [ 1110.504929][T17870] RBP: 00007fd508c1b090 R08: 0000000000000000 R09: 0000000000000000 [ 1110.504977][T17870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1110.505009][T17870] R13: 00007fd508016038 R14: 00007fd508015fa0 R15: 00007fd50813fa48 [ 1110.505107][T17870] [ 1111.279027][ T30] audit: type=1326 audit(1774632593.207:3114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17856 comm="syz.2.2840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f724e79c799 code=0x7ffc0000 [ 1111.613633][T17883] syzkaller0: entered promiscuous mode [ 1111.619456][T17883] syzkaller0: entered allmulticast mode [ 1112.324477][T17889] ip6gretap0: entered promiscuous mode [ 1112.330260][T17889] macvtap1: entered promiscuous mode [ 1112.378322][T17889] ip6gretap0: left promiscuous mode [ 1112.551038][ T5888] usbhid 3-1:0.0: can't add hid device: -71 [ 1112.557182][ T5888] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1112.572336][ T5888] usb 3-1: USB disconnect, device number 21 [ 1112.765135][T17897] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1112.925249][T17904] kAFS: unable to lookup cell 'ÿ' [ 1113.003159][T17907] fuse: Bad value for 'fd' [ 1113.258404][T17914] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2857'. [ 1113.879876][T17917] syzkaller0: entered promiscuous mode [ 1113.888072][T17917] syzkaller0: entered allmulticast mode [ 1114.790599][T17924] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2860'. [ 1115.276099][T17928] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2861'. [ 1116.009061][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.015790][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.116887][T17938] bridge_slave_0: left allmulticast mode [ 1116.132254][T17938] bridge_slave_0: left promiscuous mode [ 1116.174515][T17938] bridge0: port 1(bridge_slave_0) entered disabled state [ 1116.236453][T17938] bridge_slave_1: left allmulticast mode [ 1116.259842][T17938] bridge_slave_1: left promiscuous mode [ 1116.284377][T17938] bridge0: port 2(bridge_slave_1) entered disabled state [ 1116.365472][T17938] bond0: (slave bond_slave_0): Releasing backup interface [ 1116.409175][T17938] bond0: (slave bond_slave_1): Releasing backup interface [ 1116.447063][T17938] team0: Port device team_slave_0 removed [ 1116.476790][T17938] team0: Port device team_slave_1 removed [ 1116.487962][T17938] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1116.496917][T17938] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1116.513841][T17938] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1116.524232][T17938] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1116.536391][T17938] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1116.576389][T13368] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1116.754245][T13368] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1116.764381][T13368] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1116.776185][T13368] usb 6-1: config 0 descriptor?? [ 1116.785571][T13368] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1117.040159][T13368] gspca_stv06xx: I2C: Read error writing address: -71 [ 1117.070953][T17960] kAFS: unable to lookup cell 'ÿ' [ 1117.109893][T13368] usb 6-1: USB disconnect, device number 62 [ 1118.011486][ T5888] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1118.103235][T17967] ip6gretap0: entered promiscuous mode [ 1118.108840][T17967] macvtap1: entered promiscuous mode [ 1118.270567][ T5888] usb 7-1: Using ep0 maxpacket: 32 [ 1118.303071][T17967] ip6gretap0: left promiscuous mode [ 1118.352128][ T5888] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1118.383173][ T5888] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1118.392959][ T5888] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1118.407746][ T5888] usb 7-1: Product: syz [ 1118.506561][ T5888] usb 7-1: Manufacturer: syz [ 1118.520519][ T5888] usb 7-1: SerialNumber: syz [ 1118.591881][ T5888] usb 7-1: config 0 descriptor?? [ 1118.623330][ T7204] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1118.658431][ T5888] gs_usb 7-1:0.0: Required endpoints not found [ 1118.786292][ T7204] usb 5-1: config 7 descriptor has 1 excess byte, ignoring [ 1118.802204][ T7204] usb 5-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 1118.827192][ T7204] usb 5-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 7.84 [ 1118.840824][ T7204] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1118.869629][ T7204] usb 5-1: Product: syz [ 1118.888827][ T7204] usb 5-1: Manufacturer: syz [ 1118.910765][ T7204] usb 5-1: SerialNumber: syz [ 1118.945641][ T7204] rndis_host 5-1:7.0: skipping garbage [ 1118.968819][ T7204] usb 5-1: bad CDC descriptors [ 1118.996784][ T7204] option 5-1:7.0: GSM modem (1-port) converter detected [ 1119.268388][T17963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1119.288143][T17963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1120.476195][T17988] misc userio: No port type given on /dev/userio [ 1120.742065][T14470] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 1120.902108][T14470] usb 2-1: Using ep0 maxpacket: 8 [ 1120.912584][T14470] usb 2-1: New USB device found, idVendor=2a39, idProduct=3fd2, bcdDevice= 0.40 [ 1120.926689][T14470] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1120.947683][T14470] usb 2-1: Product: syz [ 1120.957054][T14470] usb 2-1: Manufacturer: syz [ 1120.967974][T14470] usb 2-1: SerialNumber: syz [ 1121.192490][ T5888] usb 7-1: USB disconnect, device number 30 [ 1121.945589][ T5902] usb 5-1: USB disconnect, device number 8 [ 1121.953756][ T5902] option 5-1:7.0: device disconnected [ 1122.622115][ T7209] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1122.772343][ T7209] usb 3-1: Using ep0 maxpacket: 32 [ 1122.780375][ T7209] usb 3-1: config 0 has no interfaces? [ 1122.791002][ T7209] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1122.825462][ T7209] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1122.854340][ T7209] usb 3-1: Product: syz [ 1122.864317][ T7209] usb 3-1: Manufacturer: syz [ 1122.874457][T18016] kAFS: unable to lookup cell 'ÿ' [ 1122.883923][ T7209] usb 3-1: SerialNumber: syz [ 1123.007118][ T7209] usb 3-1: config 0 descriptor?? [ 1123.320726][T14470] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1123.351572][T14470] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1123.673519][T14470] usb 2-1: USB disconnect, device number 112 [ 1124.543957][T18031] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2892'. [ 1124.566970][ T6043] udevd[6043]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1125.427411][T14470] usb 3-1: USB disconnect, device number 22 [ 1125.452142][ T5888] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1125.625445][ T5888] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1125.676338][ T5888] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1125.707375][ T5888] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1125.725366][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1125.776693][ T5888] usb 5-1: Product: syz [ 1125.798753][ T5888] usb 5-1: Manufacturer: syz [ 1125.805879][ T5888] usb 5-1: SerialNumber: syz [ 1125.820024][ T5888] usb 5-1: config 0 descriptor?? [ 1125.862732][ T5888] usb 5-1: selecting invalid altsetting 0 [ 1125.929823][T18047] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1126.078015][T18057] FAULT_INJECTION: forcing a failure. [ 1126.078015][T18057] name failslab, interval 1, probability 0, space 0, times 0 [ 1126.279993][T18057] CPU: 0 UID: 0 PID: 18057 Comm: syz.5.2902 Tainted: G L syzkaller #0 PREEMPT(full) [ 1126.280033][T18057] Tainted: [L]=SOFTLOCKUP [ 1126.280040][T18057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1126.280050][T18057] Call Trace: [ 1126.280059][T18057] [ 1126.280066][T18057] dump_stack_lvl+0xe8/0x150 [ 1126.280094][T18057] should_fail_ex+0x412/0x560 [ 1126.280121][T18057] should_failslab+0xa8/0x100 [ 1126.280141][T18057] ? skb_clone+0x212/0x3a0 [ 1126.280163][T18057] kmem_cache_alloc_noprof+0x87/0x650 [ 1126.280179][T18057] ? __netlink_lookup+0xc6/0x8b0 [ 1126.280202][T18057] skb_clone+0x212/0x3a0 [ 1126.280222][T18057] __netlink_deliver_tap+0x404/0x850 [ 1126.280254][T18057] ? netlink_deliver_tap+0x2e/0x1b0 [ 1126.280279][T18057] netlink_deliver_tap+0x19c/0x1b0 [ 1126.280303][T18057] netlink_unicast+0x7e3/0x9b0 [ 1126.280331][T18057] ? __pfx_netlink_unicast+0x10/0x10 [ 1126.280353][T18057] ? netlink_sendmsg+0x650/0xb40 [ 1126.280366][T18057] ? skb_put+0x11b/0x210 [ 1126.280385][T18057] netlink_sendmsg+0x813/0xb40 [ 1126.280406][T18057] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1126.280423][T18057] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1126.280449][T18057] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1126.280470][T18057] ____sys_sendmsg+0x972/0x9f0 [ 1126.280495][T18057] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1126.280519][T18057] ? import_iovec+0x73/0xa0 [ 1126.280539][T18057] ___sys_sendmsg+0x2a5/0x360 [ 1126.280567][T18057] ? __pfx____sys_sendmsg+0x10/0x10 [ 1126.280610][T18057] ? __fget_files+0x2a/0x420 [ 1126.280633][T18057] ? __fget_files+0x3a0/0x420 [ 1126.280662][T18057] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1126.280683][T18057] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1126.280708][T18057] ? __pfx_ksys_write+0x10/0x10 [ 1126.280733][T18057] do_syscall_64+0x14d/0xf80 [ 1126.280752][T18057] ? trace_irq_disable+0x3b/0x150 [ 1126.280766][T18057] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1126.280782][T18057] ? clear_bhb_loop+0x40/0x90 [ 1126.280800][T18057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1126.280815][T18057] RIP: 0033:0x7fba3cf9c799 [ 1126.280830][T18057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1126.280843][T18057] RSP: 002b:00007fba3dd9b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1126.280859][T18057] RAX: ffffffffffffffda RBX: 00007fba3d215fa0 RCX: 00007fba3cf9c799 [ 1126.280870][T18057] RDX: 0000000004000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 1126.280881][T18057] RBP: 00007fba3dd9b090 R08: 0000000000000000 R09: 0000000000000000 [ 1126.280890][T18057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1126.280899][T18057] R13: 00007fba3d216038 R14: 00007fba3d215fa0 R15: 00007fba3d33fa48 [ 1126.280922][T18057] [ 1126.558427][T18061] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1126.647368][T14470] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 1126.778481][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1126.778501][ T30] audit: type=1326 audit(1774632610.617:3121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18067 comm="syz.5.2904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba3cf9c799 code=0x7ffc0000 [ 1126.862321][T14470] usb 2-1: Using ep0 maxpacket: 16 [ 1126.890929][ T7204] usb 5-1: USB disconnect, device number 9 [ 1126.972910][T14470] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1126.991290][T14470] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1127.024393][T14470] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1127.033937][T14470] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1127.050278][ T30] audit: type=1326 audit(1774632610.617:3122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18067 comm="syz.5.2904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fba3cf9c799 code=0x7ffc0000 [ 1127.087181][T14470] usb 2-1: Product: syz [ 1127.091427][T14470] usb 2-1: Manufacturer: syz [ 1127.110080][T14470] usb 2-1: SerialNumber: syz [ 1127.152169][ T5888] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1127.163431][ T30] audit: type=1326 audit(1774632610.617:3123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18067 comm="syz.5.2904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba3cf9c799 code=0x7ffc0000 [ 1127.393832][ T30] audit: type=1326 audit(1774632610.617:3124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18067 comm="syz.5.2904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba3cf9c799 code=0x7ffc0000 [ 1127.482146][ T5888] usb 6-1: Using ep0 maxpacket: 32 [ 1127.519280][ T30] audit: type=1326 audit(1774632610.657:3125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18067 comm="syz.5.2904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fba3cf9c799 code=0x7ffc0000 [ 1127.548240][T14470] usb 2-1: 0:2 : does not exist [ 1127.554387][ T5888] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1127.584046][ T5888] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1127.594993][ T5888] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1127.605123][ T5888] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1127.683705][ T5888] usb 6-1: config 0 descriptor?? [ 1127.701301][ T30] audit: type=1326 audit(1774632610.657:3126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18067 comm="syz.5.2904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba3cf9c799 code=0x7ffc0000 [ 1127.818465][ T30] audit: type=1326 audit(1774632610.657:3127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18067 comm="syz.5.2904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fba3cf9c799 code=0x7ffc0000 [ 1127.888519][T18077] bridge0: port 2(bridge_slave_1) entered disabled state [ 1127.896301][T18077] bridge0: port 1(1¾x9ÿ) entered disabled state [ 1127.915163][ T30] audit: type=1326 audit(1774632610.657:3128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18067 comm="syz.5.2904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba3cf9c799 code=0x7ffc0000 [ 1127.983068][T14470] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 1128.000781][ T30] audit: type=1326 audit(1774632610.657:3129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18067 comm="syz.5.2904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7fba3cf9c799 code=0x7ffc0000 [ 1128.082079][ T30] audit: type=1326 audit(1774632610.657:3130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18067 comm="syz.5.2904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba3cf9c799 code=0x7ffc0000 [ 1128.182796][T14470] usb 2-1: USB disconnect, device number 113 [ 1128.276675][ T6043] udevd[6043]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1129.143194][T18077] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1129.414333][T18077] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1129.533212][T18099] kAFS: unable to lookup cell 'ÿ' [ 1130.671868][ T5888] usbhid 6-1:0.0: can't add hid device: -71 [ 1130.677980][ T5888] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1130.712517][ T5888] usb 6-1: USB disconnect, device number 63 [ 1130.745849][ T49] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1130.782005][ T49] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1130.827175][ T49] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1130.897528][ T49] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1131.462103][ T5902] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 1131.904189][T18137] fuse: Bad value for 'fd' [ 1131.933541][ T5902] usb 2-1: Using ep0 maxpacket: 16 [ 1131.950031][ T5902] usb 2-1: config 0 has no interfaces? [ 1131.994741][T18083] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1132.005553][ T5902] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1132.016352][ T5902] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1132.032067][ T5902] usb 2-1: Manufacturer: syz [ 1132.086867][ T5902] usb 2-1: config 0 descriptor?? [ 1132.202133][T18083] usb 5-1: Using ep0 maxpacket: 16 [ 1132.292070][T18083] usb 5-1: config 0 has no interfaces? [ 1132.416066][T18121] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2912'. [ 1132.493867][T18083] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1132.552339][T18083] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1132.561689][T18083] usb 5-1: Manufacturer: syz [ 1132.620494][T18083] usb 5-1: config 0 descriptor?? [ 1132.889814][ T8148] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1133.152249][ T8148] usb 7-1: Using ep0 maxpacket: 16 [ 1133.166797][ T8148] usb 7-1: config 0 has no interfaces? [ 1133.176415][ T8148] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1133.188213][ T8148] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1133.197345][ T8148] usb 7-1: Manufacturer: syz [ 1133.234373][ T8148] usb 7-1: config 0 descriptor?? [ 1133.607867][T18132] FAULT_INJECTION: forcing a failure. [ 1133.607867][T18132] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1133.632079][T18132] CPU: 1 UID: 0 PID: 18132 Comm: syz.2.2916 Tainted: G L syzkaller #0 PREEMPT(full) [ 1133.632117][T18132] Tainted: [L]=SOFTLOCKUP [ 1133.632123][T18132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1133.632132][T18132] Call Trace: [ 1133.632139][T18132] [ 1133.632146][T18132] dump_stack_lvl+0xe8/0x150 [ 1133.632173][T18132] should_fail_ex+0x412/0x560 [ 1133.632199][T18132] prepare_alloc_pages+0x22a/0x650 [ 1133.632225][T18132] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1133.632254][T18132] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1133.632276][T18132] ? __pfx_policy_nodemask+0x10/0x10 [ 1133.632303][T18132] alloc_pages_mpol+0x232/0x4a0 [ 1133.632326][T18132] folio_alloc_mpol_noprof+0x39/0x70 [ 1133.632348][T18132] shmem_alloc_and_add_folio+0x445/0xf80 [ 1133.632398][T18132] ? filemap_get_entry+0xca/0x320 [ 1133.632414][T18132] ? filemap_get_entry+0xca/0x320 [ 1133.632431][T18132] ? filemap_get_entry+0x2ac/0x320 [ 1133.632447][T18132] ? __pfx_filemap_get_entry+0x10/0x10 [ 1133.632464][T18132] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1133.632483][T18132] ? shmem_allowable_huge_orders+0x5ec/0x690 [ 1133.632512][T18132] shmem_get_folio_gfp+0x5a9/0x1670 [ 1133.632548][T18132] shmem_fault+0x179/0x390 [ 1133.632570][T18132] __do_fault+0x138/0x390 [ 1133.632590][T18132] do_pte_missing+0x5c4/0x3490 [ 1133.632615][T18132] ? handle_mm_fault+0xee/0x3310 [ 1133.632641][T18132] handle_mm_fault+0x1bec/0x3310 [ 1133.632678][T18132] ? handle_mm_fault+0xee/0x3310 [ 1133.632707][T18132] ? __pfx_handle_mm_fault+0x10/0x10 [ 1133.632749][T18132] ? lock_mm_and_find_vma+0xa7/0x340 [ 1133.632768][T18132] do_user_addr_fault+0x75b/0x1340 [ 1133.632802][T18132] exc_page_fault+0x6a/0xc0 [ 1133.632822][T18132] asm_exc_page_fault+0x26/0x30 [ 1133.632836][T18132] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 1133.632861][T18132] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 1133.632874][T18132] RSP: 0018:ffffc90002fd7988 EFLAGS: 00050202 [ 1133.632926][T18132] RAX: 6e69666e6f636e75 RBX: 000000000000000a RCX: 000000000000000a [ 1133.632941][T18132] RDX: 0000000000000000 RSI: ffff88802fa96880 RDI: 00002000000014c0 [ 1133.632956][T18132] RBP: ffffc90002fd7ab0 R08: 0000000000000001 R09: 0000000000000003 [ 1133.632969][T18132] R10: dffffc0000000000 R11: ffffed1005f52d11 R12: 00002000000014ca [ 1133.632985][T18132] R13: 00007ffffffff000 R14: ffff88802fa96880 R15: 00002000000014c0 [ 1133.633020][T18132] _copy_to_user+0x8a/0xb0 [ 1133.633040][T18132] apparmor_socket_getpeersec_stream+0x3cc/0x700 [ 1133.633069][T18132] ? __pfx_apparmor_socket_getpeersec_stream+0x10/0x10 [ 1133.633101][T18132] security_socket_getpeersec_stream+0xbf/0x380 [ 1133.633124][T18132] sk_getsockopt+0x18c0/0x2840 [ 1133.633148][T18132] ? __pfx_sk_getsockopt+0x10/0x10 [ 1133.633175][T18132] ? __lock_acquire+0x6b5/0x2cf0 [ 1133.633217][T18132] do_sock_getsockopt+0x223/0x3f0 [ 1133.633243][T18132] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1133.633261][T18132] ? __fget_files+0x3a0/0x420 [ 1133.633284][T18132] ? __fget_files+0x2a/0x420 [ 1133.633312][T18132] __x64_sys_getsockopt+0x1a4/0x240 [ 1133.633336][T18132] do_syscall_64+0x14d/0xf80 [ 1133.633354][T18132] ? trace_irq_disable+0x3b/0x150 [ 1133.633367][T18132] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1133.633382][T18132] ? clear_bhb_loop+0x40/0x90 [ 1133.633401][T18132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1133.633415][T18132] RIP: 0033:0x7f724e79c799 [ 1133.633429][T18132] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1133.633441][T18132] RSP: 002b:00007f724f6bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1133.633456][T18132] RAX: ffffffffffffffda RBX: 00007f724ea15fa0 RCX: 00007f724e79c799 [ 1133.633467][T18132] RDX: 000000000000001f RSI: 0000000000000001 RDI: 0000000000000003 [ 1133.633476][T18132] RBP: 00007f724f6bb090 R08: 0000200000000080 R09: 0000000000000000 [ 1133.633487][T18132] R10: 00002000000014c0 R11: 0000000000000246 R12: 0000000000000001 [ 1133.633496][T18132] R13: 00007f724ea16038 R14: 00007f724ea15fa0 R15: 00007f724eb3fa48 [ 1133.633519][T18132] [ 1134.587644][T13756] usb 2-1: USB disconnect, device number 114 [ 1135.273648][ T8148] usb 5-1: USB disconnect, device number 10 [ 1135.410945][T18165] fuse: Bad value for 'fd' [ 1135.728430][ T8148] usb 7-1: USB disconnect, device number 31 [ 1135.738651][T18170] kAFS: unable to lookup cell 'ÿ' [ 1136.509403][T18182] fuse: Bad value for 'user_id' [ 1136.520665][T18182] fuse: Bad value for 'user_id' [ 1138.863655][T18090] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1138.992513][T18083] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1139.048876][T18090] usb 6-1: Using ep0 maxpacket: 16 [ 1139.066704][T18090] usb 6-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1139.098487][T18090] usb 6-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1139.134451][T18090] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1139.162073][T18083] usb 5-1: Using ep0 maxpacket: 16 [ 1139.169406][T18090] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1139.188890][T18083] usb 5-1: config 0 has no interfaces? [ 1139.206888][T18083] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1139.273906][T18083] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1139.306433][T18083] usb 5-1: Manufacturer: syz [ 1139.340415][T18083] usb 5-1: config 0 descriptor?? [ 1139.744107][T18090] mcp2221 0003:04D8:00DD.0016: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 1140.000432][ T8148] usb 6-1: USB disconnect, device number 64 [ 1141.092129][T18109] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1141.272255][T18109] usb 6-1: Using ep0 maxpacket: 32 [ 1141.288082][T18109] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1141.298399][T18109] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1141.421585][T18109] usb 6-1: config 0 descriptor?? [ 1141.539963][T18109] as10x_usb: device has been detected [ 1141.593634][T18109] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1141.644243][T18109] usb 6-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1141.683939][T18239] ------------[ cut here ]------------ [ 1141.689459][T18239] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 1141.689486][T18239] WARNING: kernel/locking/mutex.c:593 at __mutex_lock+0x10a4/0x1300, CPU#1: syz.5.2945/18239 [ 1141.706085][T18239] Modules linked in: [ 1141.710441][T18239] CPU: 1 UID: 0 PID: 18239 Comm: syz.5.2945 Tainted: G L syzkaller #0 PREEMPT(full) [ 1141.722080][T18239] Tainted: [L]=SOFTLOCKUP [ 1141.726423][T18239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1141.737046][T18239] RIP: 0010:__mutex_lock+0x10ab/0x1300 [ 1141.742570][T18239] Code: 11 90 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 33 02 00 00 83 3d d9 5c 61 04 00 75 13 48 8d 3d 1c 72 64 04 48 c7 c6 c0 e0 cc 8b <67> 48 0f b9 3a 90 e9 ac f0 ff ff 90 0f 0b 90 e9 73 f4 ff ff 90 0f [ 1141.762846][T18239] RSP: 0018:ffffc900037b7a20 EFLAGS: 00010246 [ 1141.769113][T18239] RAX: 0000000000000000 RBX: 1ffff920006f6f5c RCX: ffff888026fe8000 [ 1141.777844][T18239] RDX: 0000000000000000 RSI: ffffffff8bcce0c0 RDI: ffffffff90150710 [ 1141.786141][T18239] RBP: ffffc900037b7bd8 R08: ffffffff9011f1c3 R09: 1ffffffff2023e38 [ 1141.794269][T18239] R10: dffffc0000000000 R11: fffffbfff2023e39 R12: ffff888028a94b60 [ 1141.802323][T18239] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1141.810806][T18239] FS: 00007fba3dd9b6c0(0000) GS:ffff88812555a000(0000) knlGS:0000000000000000 [ 1141.820185][T18239] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1141.826961][T18239] CR2: 0000000000000000 CR3: 000000008de62000 CR4: 00000000003526f0 [ 1141.835186][T18239] DR0: 0000000040000005 DR1: 0000000100000000 DR2: 0000000000000898 [ 1141.843387][T18239] DR3: 0000000000000006 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1141.851377][T18239] Call Trace: [ 1141.854799][T18239] [ 1141.857768][T18239] ? __mutex_lock+0x319/0x1300 [ 1141.862600][T18239] ? as102_dvb_dmx_start_feed+0x70/0x290 [ 1141.868348][T18239] ? dmx_section_feed_allocate_filter+0x34f/0x3e0 [ 1141.874858][T18239] ? __pfx___mutex_lock+0x10/0x10 [ 1141.879900][T18239] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1141.885757][T18239] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1141.891749][T18239] ? do_raw_spin_lock+0x12b/0x2f0 [ 1141.896817][T18239] as102_dvb_dmx_start_feed+0x70/0x290 [ 1141.902327][T18239] dmx_section_feed_start_filtering+0x518/0x6c0 [ 1141.908665][T18239] dvb_dmxdev_filter_start+0xcf4/0x10e0 [ 1141.914770][T18239] ? dvb_dmxdev_filter_set+0x2d1/0x580 [ 1141.920589][T18239] dvb_demux_do_ioctl+0x470/0x540 [ 1141.925992][T18239] dvb_usercopy+0x199/0x2e0 [ 1141.930613][T18239] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 1141.936195][T18239] ? __pfx_dvb_usercopy+0x10/0x10 [ 1141.941244][T18239] ? __fget_files+0x3a0/0x420 [ 1141.946014][T18239] ? __fget_files+0x2a/0x420 [ 1141.950640][T18239] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 1141.955984][T18239] dvb_demux_ioctl+0x29/0x40 [ 1141.960611][T18239] __se_sys_ioctl+0xfc/0x170 [ 1141.965248][T18239] do_syscall_64+0x14d/0xf80 [ 1141.969853][T18239] ? trace_irq_disable+0x3b/0x150 [ 1141.974946][T18239] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1141.981022][T18239] ? clear_bhb_loop+0x40/0x90 [ 1141.985750][T18239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1141.992147][T18239] RIP: 0033:0x7fba3cf9c799 [ 1141.996733][T18239] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1142.017901][T18239] RSP: 002b:00007fba3dd9b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1142.026897][T18239] RAX: ffffffffffffffda RBX: 00007fba3d215fa0 RCX: 00007fba3cf9c799 [ 1142.034928][T18239] RDX: 0000200000000200 RSI: 00000000403c6f2b RDI: 0000000000000007 [ 1142.042941][T18239] RBP: 00007fba3d032c99 R08: 0000000000000000 R09: 0000000000000000 [ 1142.050924][T18239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1142.058938][T18239] R13: 00007fba3d216038 R14: 00007fba3d215fa0 R15: 00007fba3d33fa48 [ 1142.067044][T18239] [ 1142.070110][T18239] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1142.077441][T18239] CPU: 1 UID: 0 PID: 18239 Comm: syz.5.2945 Tainted: G L syzkaller #0 PREEMPT(full) [ 1142.088479][T18239] Tainted: [L]=SOFTLOCKUP [ 1142.092808][T18239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1142.102886][T18239] Call Trace: [ 1142.106204][T18239] [ 1142.109263][T18239] vpanic+0x56c/0xa60 [ 1142.113391][T18239] ? __pfx__printk+0x10/0x10 [ 1142.117995][T18239] ? __pfx_vpanic+0x10/0x10 [ 1142.122617][T18239] ? is_bpf_text_address+0x292/0x2b0 [ 1142.127913][T18239] ? is_bpf_text_address+0x26/0x2b0 [ 1142.133210][T18239] panic+0xc5/0xd0 [ 1142.136956][T18239] ? __pfx_panic+0x10/0x10 [ 1142.141408][T18239] __warn+0x315/0x4f0 [ 1142.145531][T18239] ? __mutex_lock+0x10a4/0x1300 [ 1142.150576][T18239] ? __mutex_lock+0x10a4/0x1300 [ 1142.155440][T18239] __report_bug+0x29a/0x540 [ 1142.160025][T18239] ? dvb_demux_do_ioctl+0x470/0x540 [ 1142.165341][T18239] ? __mutex_lock+0x10a4/0x1300 [ 1142.170292][T18239] ? __pfx___report_bug+0x10/0x10 [ 1142.175324][T18239] ? pfn_valid+0x125/0x4c0 [ 1142.179758][T18239] ? __lock_acquire+0x6b5/0x2cf0 [ 1142.184705][T18239] report_bug_entry+0x19a/0x290 [ 1142.189595][T18239] ? __mutex_lock+0x10ab/0x1300 [ 1142.194457][T18239] ? __mutex_lock+0x10b0/0x1300 [ 1142.199354][T18239] handle_bug+0xce/0x200 [ 1142.203609][T18239] exc_invalid_op+0x1a/0x50 [ 1142.208121][T18239] asm_exc_invalid_op+0x1a/0x20 [ 1142.213408][T18239] RIP: 0010:__mutex_lock+0x10ab/0x1300 [ 1142.218880][T18239] Code: 11 90 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 33 02 00 00 83 3d d9 5c 61 04 00 75 13 48 8d 3d 1c 72 64 04 48 c7 c6 c0 e0 cc 8b <67> 48 0f b9 3a 90 e9 ac f0 ff ff 90 0f 0b 90 e9 73 f4 ff ff 90 0f [ 1142.238719][T18239] RSP: 0018:ffffc900037b7a20 EFLAGS: 00010246 [ 1142.244808][T18239] RAX: 0000000000000000 RBX: 1ffff920006f6f5c RCX: ffff888026fe8000 [ 1142.252805][T18239] RDX: 0000000000000000 RSI: ffffffff8bcce0c0 RDI: ffffffff90150710 [ 1142.260883][T18239] RBP: ffffc900037b7bd8 R08: ffffffff9011f1c3 R09: 1ffffffff2023e38 [ 1142.268873][T18239] R10: dffffc0000000000 R11: fffffbfff2023e39 R12: ffff888028a94b60 [ 1142.276876][T18239] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1142.284877][T18239] ? __mutex_lock+0x319/0x1300 [ 1142.289660][T18239] ? as102_dvb_dmx_start_feed+0x70/0x290 [ 1142.295300][T18239] ? dmx_section_feed_allocate_filter+0x34f/0x3e0 [ 1142.301862][T18239] ? __pfx___mutex_lock+0x10/0x10 [ 1142.306939][T18239] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1142.312677][T18239] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1142.318860][T18239] ? do_raw_spin_lock+0x12b/0x2f0 [ 1142.323920][T18239] as102_dvb_dmx_start_feed+0x70/0x290 [ 1142.329403][T18239] dmx_section_feed_start_filtering+0x518/0x6c0 [ 1142.335662][T18239] dvb_dmxdev_filter_start+0xcf4/0x10e0 [ 1142.341244][T18239] ? dvb_dmxdev_filter_set+0x2d1/0x580 [ 1142.346743][T18239] dvb_demux_do_ioctl+0x470/0x540 [ 1142.352110][T18239] dvb_usercopy+0x199/0x2e0 [ 1142.356738][T18239] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 1142.362522][T18239] ? __pfx_dvb_usercopy+0x10/0x10 [ 1142.367568][T18239] ? __fget_files+0x3a0/0x420 [ 1142.372266][T18239] ? __fget_files+0x2a/0x420 [ 1142.377151][T18239] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 1142.382498][T18239] dvb_demux_ioctl+0x29/0x40 [ 1142.387118][T18239] __se_sys_ioctl+0xfc/0x170 [ 1142.391758][T18239] do_syscall_64+0x14d/0xf80 [ 1142.396452][T18239] ? trace_irq_disable+0x3b/0x150 [ 1142.401490][T18239] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1142.407571][T18239] ? clear_bhb_loop+0x40/0x90 [ 1142.412273][T18239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1142.418193][T18239] RIP: 0033:0x7fba3cf9c799 [ 1142.422621][T18239] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1142.442528][T18239] RSP: 002b:00007fba3dd9b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1142.450957][T18239] RAX: ffffffffffffffda RBX: 00007fba3d215fa0 RCX: 00007fba3cf9c799 [ 1142.459054][T18239] RDX: 0000200000000200 RSI: 00000000403c6f2b RDI: 0000000000000007 [ 1142.467144][T18239] RBP: 00007fba3d032c99 R08: 0000000000000000 R09: 0000000000000000 [ 1142.475384][T18239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1142.483368][T18239] R13: 00007fba3d216038 R14: 00007fba3d215fa0 R15: 00007fba3d33fa48 [ 1142.491361][T18239] [ 1142.495022][T18239] Kernel Offset: disabled [ 1142.499443][T18239] Rebooting in 86400 seconds..