last executing test programs: 6m55.777205535s ago: executing program 0 (id=235): r0 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x200, 0x0, 0x25dfdbfb, {{@in=@loopback, @in6=@local, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffd, 0x2}, {0xfffffffffffffffe}, 0x9, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500030000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030", @ANYRESOCT], 0xb8}}, 0x4000) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x4002, 0x5, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "96597d00c5c0577eec4f99e3a24dd89fb66655d7b05291cb", "af6af5116bf52dbb91d30ae25aab828a961858f6c338a29f34c53e0526788e16"}}}}}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x8, 0x24, 0x0, 0xe000, 0x1, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0x24, 0x0, @val=0x80}}}}}}}, 0x0) 6m55.764770432s ago: executing program 0 (id=236): openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/kexec_crash_size', 0x800, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff6f, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}]}, &(0x7f0000000080)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) inotify_init1(0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 6m55.717972824s ago: executing program 0 (id=237): syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') io_setup(0x3ff, &(0x7f0000000500)=0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) io_submit(r0, 0x0, &(0x7f00000000c0)) 6m55.589532849s ago: executing program 0 (id=238): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='LINE \'\' '], 0xbb) close(r0) 6m55.53609801s ago: executing program 0 (id=239): getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x234a047, 0x0, 0x10, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x44004) syz_usb_connect$uac1(0x5, 0x8d, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000200000040cc171c0440000102030109027b0003010120080904000000010100000a24010a0025000201020924060142010900550924030406030603f7092406030101dc2c0509040100000102000000000905010900040d04000725010cad000009040200000102000009040201010102000009058209ff03022a08072501080901f8ebaa4c140774c2f56d7c1eb1c6af70a69704f400f350cc6fef60dc7c525962c2b1d0db2cadc1eed51734670199482a494bb387d5e13a5eb119bcdb6d6315ff16b441f62c3f2e2cd9c083abac29ae4709a88af97c48cd58940100000000000000"], 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000100)={0x6, 0x40, {0xffffffffffffffff}, {0xee00}, 0x71d90000000, 0x7}) sched_setattr(r1, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x5, 0xb49, 0x2, 0x8, 0x1, 0x5}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) ioctl$NILFS_IOCTL_GET_BDESCS(r2, 0xc0186e87, &(0x7f0000000040)={&(0x7f0000000000)=[{0x80000001, 0x8, 0x80, 0x6, 0x6}], 0x1, 0x28, 0x80, 0x8000000000000000}) io_setup(0x1, &(0x7f00000004c0)=0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x22, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0xe1f0, 0x20080) r5 = eventfd(0x1ff) io_submit(r3, 0x2, &(0x7f0000000240)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x1, 0x0, r2, 0x0, 0x0, 0x1000000, 0x0, 0x10}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2, 0x0, r4, &(0x7f00000001c0)="79df95b2e4e1101e8fe009e6ce35f4cff97ed9c41ea2ab246e53a1f867", 0x1d, 0xdd, 0x0, 0x1, r5}]) remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000008, 0xffffffffffff8000, 0x800) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r7, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x4, r6, &(0x7f0000000080)="0d32818e", 0x4}]) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@ipv6_delrule={0x30, 0x21, 0x121, 0x0, 0x1, {0xa, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, [@FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'geneve1\x00'}]}, 0x30}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) 6m54.19295646s ago: executing program 0 (id=245): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000000)=0x4, 0x4) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x8000004) 6m53.9043712s ago: executing program 32 (id=245): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000000)=0x4, 0x4) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x8000004) 1m36.953135339s ago: executing program 1 (id=1861): r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x7000, 0x0, 0x1e) r1 = openat(r0, &(0x7f0000000040)='./file1\x00', 0x6049c2, 0x1ff) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r4 = socket(0x80000000000000a, 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r5, &(0x7f00000028c0)={0x0, 0x0, 0x0}, 0x40000000) syz_open_dev$hiddev(&(0x7f0000000000), 0x800, 0x301000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000002b00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f0000000340)="c1997ea5dcd14674d3cb2374e6473bbe4dfcf83d1a2186850195e1efa39499fab08700a4bca279298dc698cad51891966144ab813911001aae61f9ffe4eb2523a5328f9bb7005550", 0x48}, {&(0x7f00000003c0)="eb565810fcfc392eefbe0c48db7164ee62ebaab915f2b0c23305c51f796dfe02b70a22de7c9f373f1d9fb0fa7d21cfee945198db77dca16083eb91ac251f5446f003ebecc1c8aa1f610bc8", 0x4b}, {&(0x7f0000001800)="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", 0x1000}, {&(0x7f0000002800)}, {&(0x7f0000002900)="b00c8ae820e8eb38e9c7991778b2df4592b47c7fcb65d6db708331da8ac5c3f5fc5554e7b0f8f7918acfedf76e958c29366b9dfad43b0f178b73b13a0ab7b46baa3e5d4d5d830f4732ba41530291a66b39b104c137a959acfd2c5c18838ee39c4c40db775910320d5b6b00afddb9e230d67cdea6570a09ee22c135f4721befc93af3b784714b91e8cc4f4f11b85bdb97e41ead80e0575e4b17a962c78cc65fdcb8578feec83e934feb147a97e8d86abba021a0b427681fb2e9dff41b78d63debc8942065c5b787280b7f76f39a42988793a45d85b8dc62de3dbf", 0xda}, {&(0x7f0000002a00)="7a5f8f7617719bed047b81acf90bc4", 0xf}], 0x6, &(0x7f0000002ac0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x10000}}], 0x18}, 0x8011) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000001700)="d80000001e0081064e81f782db44b9040a02080006007c09e8fe78190a0015c00200142603600e120800110024000000a80009001100014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef40900d1001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1m35.844841791s ago: executing program 1 (id=1864): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r3, 0x4068aea3, &(0x7f00000000c0)={0xc7, 0x0, 0x1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m35.579492205s ago: executing program 1 (id=1865): getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2c, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') bpf$OBJ_GET_MAP(0x7, &(0x7f00000007c0)=@o_path={&(0x7f0000000780)='./cgroup\x00', 0x0, 0x4010, r1}, 0x18) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x44000) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r3 = gettid() r4 = socket(0x11, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000000)=0x459, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r4, &(0x7f0000000180)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) r7 = geteuid() getpgid(r3) sendmsg$netlink(r4, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000300)=ANY=[@ANYRES16], 0xdd12}, {&(0x7f0000004100)={0x3318, 0x23, 0x100, 0x70bd29, 0x25dfdbfc, "", [@typed={0x14, 0x7, 0x0, 0x0, @ipv6=@mcast2}, @typed={0xc, 0x4f, 0x0, 0x0, @u64=0x1}, @typed={0x8, 0xa8, 0x0, 0x0, @u32=0x94}, @nested={0x32e0, 0x8a, 0x0, 0x1, [@generic="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", @nested={0x2edc, 0xa9, 0x0, 0x1, [@nested={0x12f4, 0xe9, 0x0, 0x1, [@nested={0x12e3, 0x106, 0x0, 0x1, [@generic="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", @nested={0x4, 0x15b}, @generic="0172a380ef7fc2f9330bf1989f8bb0410eafa496b7e1b7c7646566e172dba255e27b078db53748748b0a32d3947d59d462d06ff7651863f070c48847697b261eccdb4fe21c5418acd9778222446acced790b5652d072376000cd0317cdc1977432449a606047372ffaa0be14d9622cd342cfba29133ea7679c0ed32e5a2d3062d5af29bdb87bf78c0d63771b5ae14b3269ab2209cadd4ae1cfd41a2c2ba09297090fa27a020173c6a43bdf0fdbd5051896743a1e82f135ee278bc45b7415b3c2964a91a32321b5e9547bb9a76799785fdbfba5335fb11abc1d7f2a93dd14e851b1d262973721890e4db4c5925c69e8", @typed={0x8, 0x926, 0x0, 0x0, @u32=0x7}, @typed={0x8, 0x13f, 0x0, 0x0, @pid}, @typed={0x1a1, 0x109, 0x0, 0x0, @binary="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"}]}, @nested={0x4, 0x152}, @typed={0x8, 0x85, 0x0, 0x0, @uid}]}, @nested={0x1ae5, 0xf9, 0x0, 0x1, [@generic="597f41c6793e718c2d1055a767e9eedbb6f0929fc8b9b0f9620f98647200edec5fae47c9608cecd71dea9a29", @typed={0x8, 0x45, 0x0, 0x0, @uid=r7}, @typed={0x8, 0xfc, 0x0, 0x0, @pid=r3}, @generic="93807687ca42ecefb35571e401d1810ca2e74342f208ee17e52140ede007a17bdd694b750a588017041a333d8ad15a753205d91d35", @nested={0x8eb, 0x4, 0x0, 0x1, [@typed={0xc, 0x10a, 0x0, 0x0, @u64}, @generic="50ebedabf166fc948bc8557a550d3c09dac158df43b5a1e95af17d1415780231075f29f53d64dde6b50227f807b99d0576a32145e06802c7fd32d7c28cd7322e72f6898e52", @generic="4d66a588354de328beefac0afcc0f9a1ff744e64c2eb4445127ff0aeda641bf9dcf534649166f5e6443ba0263dcf4ca5be0bca2ff95db9952021d7688b08c551202e76f6df76357145e942a08d71d66f87366722e77bb8c64c78870630ce99c46223f58469048bdc33534c66a13543843382fb33035090c83509c3654d4794886c07cffda2713afc4acad84a8b03dab137c1bee0b295", @generic="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"]}, @nested={0x10ec, 0x5, 0x0, 0x1, [@generic="a282b95ffcd20da734757524689ebeb45da181551c1ac817ecfbd104dbbfb5bd242e74364b7a8d7ac5b15653216d95f1d505bb4cc25721fdd8acce97abe4ece87bb6f2dc2eda9e95d6364085b9086d2dbedbf76f86cb3dd89ff1365e1fd902dfb4f61bb105563e57c520f9f5c56434ca4087ba6517c300ce3e979d01694d6d5ca1", @nested={0x105a, 0xd2, 0x0, 0x1, [@generic="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"]}, @generic="45f86a07327737a128abfd"]}, @nested={0x90, 0xcc, 0x0, 0x1, [@generic="c7fe7faf26de658c5ca2924167834ba99cf13237b00d86d0bc9d4da40790b7ec44f5d693c3a008382bc081f29966b5923bb14c5fba1b3f5e9e75ef1b020d64db48e2e0e3cb43cc6f0162a085175d601b80905c654844b5ad8488298e43442fc487a224c6e7c7bfe478c89b1d37a58f637871fbf7f4c9e318f28c3de89987eecccc82420a215dd77b81c16d7f"]}, @typed={0x8, 0x12d, 0x0, 0x0, @ipv4=@loopback}]}, @nested={0xfc, 0x73, 0x0, 0x1, [@typed={0x1a, 0x54, 0x0, 0x0, @binary="c845690cf8c84a38457b0e917b584238bb2fb8782bdb"}, @typed={0x48, 0x6f, 0x0, 0x0, @binary="93aaccc28c7aa4e53cb7faeef916cf0be2062ca7dfc768cfcdb5be97622b0d93dd70514c61c70f93d0eaf7ca9ad6f3e1b7bebbb333bbd762dcc1f2c8480546773e6e5f56"}, @typed={0x8, 0xce, 0x0, 0x0, @u32=0x2}, @typed={0xc, 0x22, 0x0, 0x0, @u64=0xffffffffffffffc0}, @typed={0x80, 0x10b, 0x0, 0x0, @binary="cd2ce6ea8aad274dea4caf0dc55376cc79a6ada2f3a67fc94e9012353cc25a2e9bdc4c9962df6f19c0d2e6d59a624d52bf6f59285b5670ed2fcf382e7c704c8a1998fce0e9df5020210c076912c80520dd7e1492d2ba3969c6f5941b98a6c1b78bcf29469b9658e6d6de1da09bc6889163a70610cc1b2c32f0f5f8b6"}]}]}]}]}, 0x3318}], 0x2}, 0x4000000) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(0xffffffffffffffff, 0xe503, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000980)=ANY=[@ANYBLOB="07001f00000000000000000086dd6000000000102c03cb697a653e336f000000500000000000ff02000000000000000000000000000100000001"], 0x0) syz_emit_ethernet(0x4a6, &(0x7f00000018c0)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd6099e90704702c03cb697a653e336f000000500000000000ff020000000000000000000000000001890e000e"], 0x0) 1m34.9215516s ago: executing program 1 (id=1872): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000170100000300000001"], 0x18, 0x10}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/124, 0x7c}], 0x1, 0x0, 0x0, 0xeffd}, 0x5}], 0x1, 0x2070, 0x0) 1m34.767629284s ago: executing program 1 (id=1875): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r3, 0x4068aea3, &(0x7f00000000c0)={0xc7, 0x0, 0x1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m34.525051224s ago: executing program 1 (id=1880): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8c0400, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text16={0x10, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x40000000000) 1m19.485668722s ago: executing program 33 (id=1880): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8c0400, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text16={0x10, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x40000000000) 53.750078278s ago: executing program 4 (id=2163): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x20, 0x4, 0x1, 0xfffff010}, {0x6, 0x1, 0x0, 0x3}]}, 0x10) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000403008010000000000000109022400010000000409040000", @ANYBLOB="efb62424cfc00efb1ae472a2078025adee1d81087246405412ba45ea2e112cb821a97f237108aaa45156f233445998ab2c2f14b900c2f1e48ba642ec4a2d8476fbf13db500ea131648d382bd2d33", @ANYRES64=r3, @ANYRES32=r2], 0x0) 51.885321846s ago: executing program 4 (id=2173): r0 = msgget$private(0x0, 0x7fc) msgrcv(r0, 0xffffffffffffffff, 0x0, 0x3, 0x0) msgsnd(r0, &(0x7f0000000100)={0x3}, 0x8, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000380)={0xfffc}, 0x8) sendto$inet6(r1, &(0x7f00000004c0)='W', 0x1, 0x4, &(0x7f0000000100)={0xa, 0x0, 0x3, @loopback, 0x8}, 0x1c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000)=0x5, 0x4) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) getresgid(&(0x7f0000000140), &(0x7f0000000180)=0x0, &(0x7f00000001c0)) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1c00}}, {@max_read={'max_read', 0x3d, 0x3}}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x9}}, {@default_permissions}, {@allow_other}, {@default_permissions}, {@default_permissions}], [{@subj_user}, {@seclabel}]}}) 50.825379984s ago: executing program 4 (id=2186): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x802, 0x100) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0xc1205531, &(0x7f00000010c0)=""/4101) r1 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) read$FUSE(r2, &(0x7f0000006300)={0x2020}, 0x402) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f00000002c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, &(0x7f00000004c0)={r3, 0x0, 0xacf, 0x2, 0x3}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000080)={0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) read$FUSE(r5, &(0x7f0000006300)={0x2020}, 0x402) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f00000002c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r5, 0xc02064cc, &(0x7f00000004c0)={r6, 0x0, 0xacf, 0x2, 0x3}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r1, 0xc02864c3, &(0x7f0000000100)={&(0x7f00000000c0)=[r3, r4, r6], 0x7, 0x3, 0x2}) 50.782720738s ago: executing program 4 (id=2188): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x20d036, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x89901) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304, 0x37}, "475566172f45f011", "bd1406000f000000000092f94413582b", "0100", "00000000ffffffff"}, 0x28) accept4(r1, 0x0, 0x0, 0x80800) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x104000, 0x0) 50.660638936s ago: executing program 4 (id=2189): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = fsopen(&(0x7f0000000a40)='mqueue\x00', 0x0) r1 = socket(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_coalesce={0xf, 0x9, 0x7e, 0x2, 0x10001, 0xc, 0x7, 0x200, 0x99, 0x8, 0x7, 0x9, 0x7, 0x8, 0x3, 0x1, 0x1a00, 0x8, 0xeeea, 0x401, 0x10000, 0x8}}) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r2, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000000606010300000000000000000a0000090900020073797a3100000000050001460007000000"], 0x28}, 0x1, 0x0, 0x0, 0x44040}, 0x4008040) r3 = fsmount(r0, 0x0, 0xf) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r4, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x1}}, 0x18) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}, 0x6}, 0x1c) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) r6 = fcntl$dupfd(r5, 0x0, r5) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e40)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20004880}, 0x1) socket$nl_generic(0x10, 0x3, 0x10) shutdown(r5, 0x0) sendto$inet6(r5, &(0x7f0000001680)="b9ef", 0x2, 0x800, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000681000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/206, 0xce, 0x1, 0x0}, &(0x7f00000001c0)=0x40) 50.577352322s ago: executing program 4 (id=2190): inotify_init() epoll_create(0x800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) socket(0x1, 0x2, 0x10001) r0 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0x9, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x13) r1 = socket$inet_sctp(0x2, 0x1, 0x84) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) fcntl$setstatus(r1, 0x4, 0x400) 50.329665901s ago: executing program 34 (id=2190): inotify_init() epoll_create(0x800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) socket(0x1, 0x2, 0x10001) r0 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0x9, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x13) r1 = socket$inet_sctp(0x2, 0x1, 0x84) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) fcntl$setstatus(r1, 0x4, 0x400) 10.515409737s ago: executing program 2 (id=2409): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0x4902, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000040)=0x13f9) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000680)=0x40) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede0102030109022400010000100009040002020083ec0009050602000202000a09058202"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f00000005c0)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='@\t\f'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000480)={0x0, 0x14, 0x28, "55b477d8afa26e61301a13870409817a3835096b73fd918ab9c7058538fa57231e40f0b1d268fd00"}, 0x0, 0x0, 0x0, 0x0}) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x10, 0x0) get_mempolicy(0x0, 0x0, 0x63, &(0x7f0000ffc000/0x4000)=nil, 0x2) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x2000}, 0x18, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x111080, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000340)={0x2000, r4}, 0x0) landlock_restrict_self(r3, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="200f28"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) 9.825669621s ago: executing program 2 (id=2411): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a64b9f", 0x8, 0x11, 0x0, @remote, @local, {[], {0x0, 0x4e22, 0x8}}}}}}, 0x0) io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) io_uring_setup(0x1b24, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x123481, 0x127) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_setup(0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_usb_connect(0x2, 0x24, &(0x7f0000003200)={{0x12, 0x1, 0x250, 0xbe, 0xb1, 0x16, 0x20, 0xbda, 0x140, 0x87b4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x0, 0x20, 0x7, "", [{{0x9, 0x4, 0xce, 0x9, 0x0, 0x90, 0x2e, 0x59, 0xd6}}]}}]}}, &(0x7f0000003580)={0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f0000000040)={0x9, 0x5, 0x9000, 0x5}) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r3, 0x1) r5 = openat$cgroup_ro(r0, &(0x7f0000000140)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) sendfile(r3, r5, 0x0, 0xffffffff004) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x0, 0x0}) 6.640756458s ago: executing program 2 (id=2425): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) r1 = dup2(r0, r0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x30008040}, 0x40080d1) accept(r2, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000001c0)=0x2) read$FUSE(r1, &(0x7f00000063c0)={0x2020}, 0x2020) (fail_nth: 39) 6.533257442s ago: executing program 7 (id=2426): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="3200000004200000", @ANYRES32, @ANYRES32, @ANYBLOB="38c182ab4dfe692eb0b61b4597eaf401bc03c45e600e9c7cfcc75bb73f47c116b44bc8605ac97963d186d13da2005ae00c3bb3e40566b9e2ee2e4b16874c1795205f5b58db13b94127062341265bfc38164012f7e55989426c78b19c5783b43706f259552b143ac54834f910c0f9", @ANYRES64=0x0], 0x20) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000000)=0x8253, 0x4) setsockopt$inet6_int(r0, 0x29, 0x34, &(0x7f0000000040)=0x1f2b, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000001500)=""/3, &(0x7f00000000c0)=0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) r3 = socket(0x11, 0x3, 0xa1d2) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@gettclass={0x24, 0x2a, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xf, 0xffff}, {0x5, 0x10}, {0xa, 0x3}}, ["", ""]}, 0x24}}, 0x0) r6 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000540), 0x1, 0x0) write$sndseq(r2, &(0x7f0000000000)=[{0x22, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x0, 0x95ffffff]}}], 0xffc8) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x40000090}]}) ioctl$KVM_RUN(r9, 0xae80, 0x0) socket$inet(0x2, 0x80001, 0x84) r10 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r10, &(0x7f0000000180)={0x2, 0xce20, @empty}, 0x10) listen(r10, 0x3) r11 = syz_usb_connect(0x3, 0x2d, &(0x7f0000001540)=ANY=[@ANYRES16=r3, @ANYBLOB="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", @ANYRES64=r6, @ANYRES64=0x0, @ANYRES8=r10, @ANYRES16=r1, @ANYRES8=r4, @ANYRES32, @ANYRESDEC=r0], 0x0) syz_usb_control_io(r11, 0x0, 0x0) r12 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x101042) writev(r12, &(0x7f00000003c0)=[{&(0x7f0000000200)="9b", 0x1}], 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff5000/0x4000)=nil, 0x0}, 0x68) 6.157167405s ago: executing program 2 (id=2427): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000208000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}}, 0x10) 6.012634773s ago: executing program 2 (id=2429): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x540004a9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001c000100040000000000000007000000", @ANYRES32=r6, @ANYBLOB="8000f2040a000200aaaaaaaaaa1b0000060004f901000000"], 0x30}, 0x1, 0x1000000}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) ioctl$KVM_SET_LAPIC(r9, 0x4400ae8f, &(0x7f0000000600)={"136b51b67111890eb8716fec9e92e61fc4e24c6ab22a9372b12f8b947531a214380af60ebf9b6592656d951239f1f1e05e7da12198f54274047ac37c924212e806c1f8f85f1a44fc0d8526bf0a260387554cb1015dbd3eade824af24d718b674edbbf3139d8e6e1f9d58ea5634971e00a65dcdb18e22b6dac178946e7a3a86f9ac42748dbac6014f5989c506c0c1970df1cd7a350926c4ab404841cde1f51caaa4b0caf1d5302a66413db10d0214755b7e3fdd8db4c75bb66c476a61578a074a4868aeab28462a8bdc1ee35156eb99f5350b00f21ee73ef3587d2e1ab1b3c534dd46be1d87285c833f9b9cfebcb4d19e350bd6d698eb0a3f54babdb23e31f077110eb4009a2c17f254b83dad9d1bb7946983cec9d0a83ee8929393bd79db5f34d634e91dc2eacff9aa265dc3d3624ee7e433d621e39cea04fdb5bd87bc1a06bc7516dfa1bd015ac07ccdf70a2015e32b56b55a636aa903f50c96c487367a47b7f153f33686fb967262fcceaa40c7bb4e87d49edf285a3872f57b29ee261190fd2f1ed85dfb8592396805deb5160489c8f093c2d44a1c32bdda43515ec5bfd5353ad23510a53219b4ff192eb5804960ece9af55dba077988a9e2dd9469d6bcb7ba50c8f0c3ae2dab2d3d6e7cd79cd8050c6669a8b07717ae44e9ffd8195f1007a580287f3bbea03e150b925149d9ee3b986d68df96842952c72428c1dde73f657a0af86be451e1a059d05ddc1deeda7a3319fd208ea38c9209ae90dd9883eb30054e4622928a592cdf96576977c582ec259544b8051bdb17cc53fff505c94113790f9b752a55ecd96524667023de31b0400e9317922c78a0b1d03913e84321df696a76bcc74f4b8bc677c83621a1c990b9a3dbda5601a6d47a2ed9043dbe3dcf3587de35d7a8dec9ddf8b8d62e018f2ef7ad03f71523dfa97b42c8171f729ed8f8ae98c22ef8e193f4201025c85c8472b82ebd393cee3e001d9ae3d05cd36bd4da8dcc3f3690f9636e288830dddbb6c72d972be1e2ef0bd9c2a67446107ffc62c923bf3545209c0d36e14a5be422cfff247d2389019809543299287070aba49886950c7632993a8d669244f8f3154cf75977e3c3a86a0d5874d0766344ce538ef0ce04bfa4f14c4a63e7d3b63c52234e80b54d681106699eb4b287f284b418d0b091771d3a8ad41f018623ebb052e33474366cf503eaf9d21510ff9a5332e5a2d12b5e9cca53abadfc35ab12e5a3cc6877965703c74b2dd4b4ffb39fd3e79517040835b80903013176effb064a62acac0262f9ec7fa6592ea529d124a7de7d467055a71fc72adfe7665ab37a286db544344e54cf6ccf38425d6068839d7cc80387f75225a8e645642fea7597ecd8885442246bbeb4ea1828cb10c77aa1e6eb99b90b2d0baa4c12a25a1091c5b6691c8b7bf54103e7084c69a17bf736a7e18623a"}) syz_kvm_setup_syzos_vm$x86(r9, &(0x7f0000c00000/0x400000)=nil) ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000100)={0x7ffffff, 0x6}) r10 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x5e2, 0x1c1000) ioctl$FE_READ_SIGNAL_STRENGTH(r10, 0x80026f47, &(0x7f00000000c0)) bind$unix(r7, &(0x7f0000000380)=@file={0x1, './file0\x00'}, 0xef6bac68be879e5c) 5.960745481s ago: executing program 2 (id=2431): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0900000081000000040000000080000016000000", @ANYRES32, @ANYBLOB="ffffffff0000000000009fe4b8817d34871b0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r0, 0x4b46, &(0x7f0000000000)) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11012, r1, 0x0) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x11, r1, 0xd0b05000) r2 = syz_open_dev$vbi(&(0x7f00000002c0), 0x0, 0x2) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f0000000000)={0x4, @raw_data="abfb0142761ae7910716c2d0f13f272c8a034c458bf9c78185efff093599b48b1d3d02d0d95352bbe628352d0b0037cbe283f581f47a88dc672d8342eed4bfd6796ed614c4de1f8e9164cd74224cd679b184aaa20b0b7b1582625a05cf808673219153c71b1c8bc0a3d5664687f4929176f40dd9a2a06840f7e2e51886930fbf77ba2ab04b0ff4df496bb407117945aa67f89b97e32b3bef137996abb87d3e022eb9b8de753f082749fcfdbdc373f1fe400757d831ba3d6b35b800546bea0bbc0e3e1ba768e32a90"}) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000001c0)={0x2, 0x3, 0x2, 0x0, 0x9}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FICLONE(r4, 0x40049409, r4) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000100)={0x8000000, 0x7, 0x3}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}}) 4.368741472s ago: executing program 3 (id=2440): socket$pppl2tp(0x18, 0x1, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x4, 0xe0, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) syz_open_dev$usbmon(&(0x7f0000000100), 0x8, 0xa00) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r3, &(0x7f0000000080)='disconnect aa:aa:aa:aa:aa:11 2', 0x1e) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/image_size', 0x82802, 0xcd) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={r4, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4010000000000ffd, 0x0, 0x0, 0x19, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0x6]}}) io_submit(0x0, 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x0, &(0x7f0000a00000/0x600000)=nil) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x8480, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r5, 0x3b87, &(0x7f0000000080)={0x18, 0x1, 0x0, 0x0, r6}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000100)={0x28, 0x3, r6, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x6}) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0xc983, 0x2, 0x1ff, 0xf99e, 0x4cfc}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f00000002c0)={r7, 0x3}, &(0x7f0000000300)=0x8) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000240)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r8, 0xffffffffffffffff, 0x0) 4.201557513s ago: executing program 6 (id=2441): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000980)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, '@'}]}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x6, 0x7, 0x1, 0x0, "1c0d"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x8c}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) openat$dlm_control(0xffffff9c, &(0x7f0000000700), 0x100, 0x0) fsopen(0x0, 0x0) sendmsg$IPVS_CMD_GET_INFO(r0, 0x0, 0x40c00) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) socket$inet(0x2, 0x3, 0x9) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000280)={0x0, 0x10, 0x6, &(0x7f0000000240)={0x13, "c2ba2cdddf96c2d905bd4296ce341591ddc08dbe750690648bd79a7fbf3d4cefc6"}}) r4 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCETHTOOL(r4, 0x8946, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="a90018"], 0x0, 0x0, 0x0, 0x0}) socket(0x10, 0x803, 0x0) 3.861476483s ago: executing program 3 (id=2442): r0 = socket(0x2b, 0x1, 0x1) connect$inet6(r0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs2/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd21, 0xfd40, &(0x7f0000000380)={@ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/161, 0xa1, 0x1, 0x2c}, @flat=@handle={0x73682a85, 0xb, 0x2}, @flat=@weak_handle={0x77682a85, 0x100, 0x2}}, &(0x7f0000000200)={0x0, 0x28, 0x40}}}], 0x0, 0x0, 0x0}) r4 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000180)=0x9, 0x4) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x4, @empty, 0x80}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) r6 = syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x8) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0x10000}}, './file0\x00'}) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r7, 0x84, 0x1e, &(0x7f0000000540)=0x2bb, 0x4) syz_usb_disconnect(r6) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x8c, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x24, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASTER={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a013000040000701fcffffff00000100017c0000040042800c00018006000600801c00007c13028078131480731306"], 0x13a0}, 0x1, 0x0, 0x0, 0x20000044}, 0xc000) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r9 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_MCAST_MSFILTER(r9, 0x0, 0x30, 0x0, 0x20000) 3.393290084s ago: executing program 7 (id=2443): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="30000001200104a7298f4c6764165a8395004008ff00000113000100fc169a1400030062726964676530000000000000000398"], 0x30}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) fcntl$setpipe(r2, 0x407, 0xfffffffffffffff8) ppoll(&(0x7f0000000000)=[{r1}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x7}, 0x1c) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000080)=@req={0x1, 0x7f, 0x9, 0x2}, 0x10) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000280)={0x1, @win={{0x80000000, 0x4, 0x0, 0x7f}, 0x5, 0x2, &(0x7f0000000100)={{0x2, 0x5, 0xa75, 0x4}}, 0x1000, &(0x7f0000000240)="3938b9e642cc35d7fe2e952c91fb7217053ce907db5cec"}}) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000200)=0x2, 0x43) 3.120320842s ago: executing program 5 (id=2444): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000009060102000000f8ffffff00000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c000280080001"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) (fail_nth: 7) 3.075671053s ago: executing program 3 (id=2445): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r0, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES32=r0, @ANYRESDEC], 0x40c}}, 0x80) 2.773394884s ago: executing program 5 (id=2446): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x540004a9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001c000100040000000000000007000000", @ANYRES32=r6, @ANYBLOB="8000f2040a000200aaaaaaaaaa1b0000060004f901000000"], 0x30}, 0x1, 0x1000000}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) ioctl$KVM_SET_LAPIC(r9, 0x4400ae8f, &(0x7f0000000600)={"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"}) syz_kvm_setup_syzos_vm$x86(r9, &(0x7f0000c00000/0x400000)=nil) ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000100)={0xf0f014, 0x6}) (fail_nth: 4) r10 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x5e2, 0x1c1000) ioctl$FE_READ_SIGNAL_STRENGTH(r10, 0x80026f47, &(0x7f00000000c0)) bind$unix(r7, &(0x7f0000000380)=@file={0x1, './file0\x00'}, 0xef6bac68be879e5c) 2.719068761s ago: executing program 3 (id=2447): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000001080)={0x0, 'dvmrp1\x00', 0x3}, 0x18) listen(r0, 0x3) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff014}, {0x6}]}, 0x10) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x405c5504, 0x0) syz_emit_ethernet(0xf87, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) 2.531476983s ago: executing program 5 (id=2448): syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@any, 0x1800000}}}, 0xd) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x480803, 0x0) r1 = dup(r0) mmap(&(0x7f0000097000/0x1000)=nil, 0x1000, 0x4, 0x28011, r1, 0x0) write$cgroup_pressure(r1, &(0x7f0000000140)={'full', 0x20, 0x8001, 0x20, 0x9}, 0x2f) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006280)="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", 0x2000, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000080)={0x2}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) getitimer(0x1, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_GET_NESTED_STATE(r4, 0xc080aebe, &(0x7f000000a100)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x0, 0x7}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) creat(&(0x7f0000000040)='./file0\x00', 0x12c) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB="2c726fa7303030303030303030303030303030303130000000002c6a7365725f69643d84d25c7d197a350e534010a2c551b96dfb97a709295bad8e528fa73906ba00000000000000090000000000000000", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) umount2(&(0x7f0000000300)='./file0\x00', 0x4) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) 2.441351134s ago: executing program 7 (id=2449): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7339e00a, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x1}, 0x50) r1 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r2 = socket(0x1e, 0x1, 0x0) connect$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r2, &(0x7f0000000340), 0x2000011a) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r1, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'syztnl1\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x0, 0x10, 0x9, 0xe4, {{0x29, 0x4, 0x2, 0x8, 0xa4, 0x64, 0x0, 0x6, 0x4, 0x0, @rand_addr=0x64010101, @broadcast, {[@cipso={0x86, 0x57, 0x2, [{0x4, 0xa, "cfae2c53227e311d"}, {0x1, 0x10, "a67190292a6ad1759887b52e6213"}, {0x2, 0x8, "5c5252da5444"}, {0x0, 0x5, "cf142e"}, {0x0, 0xf, "1b6c178ebf5a3de04ee44561c2"}, {0x2, 0xa, "4742f695341a9c0b"}, {0x0, 0xa, "67efb4952cf6a209"}, {0x2, 0x4, 'h['}, {0x1, 0x3, 'v'}]}, @cipso={0x86, 0x9, 0x1, [{0x2, 0x3, '\f'}]}, @ssrr={0x89, 0x23, 0x3c, [@rand_addr=0x64010101, @empty, @empty, @local, @broadcast, @empty, @local, @local]}, @ssrr={0x89, 0xb, 0x34, [@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb8, 0xb8, 0x4, [@float={0xa, 0x0, 0x0, 0x10, 0x8}, @volatile={0x0, 0x0, 0x0, 0x9, 0x4}, @enum={0x6, 0x1, 0x0, 0x6, 0x4, [{0xe, 0xc23d}]}, @typedef={0xb, 0x0, 0x0, 0x8, 0x5}, @volatile={0x1, 0x0, 0x0, 0x9, 0x2}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xe, 0x1}]}, @struct={0xc, 0x5, 0x0, 0x4, 0x0, 0x1, [{0x9, 0x4, 0x1}, {0x0, 0x4, 0x6}, {0x5, 0x2, 0x8}, {0x0, 0x4, 0x1}, {0x6, 0x1, 0x9}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x1, 0x3}}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000380)=""/58, 0xd4, 0x3a, 0x1, 0x2, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x2, 0xd69c, 0x0, 0x22900, r0, 0xffff, '\x00', r3, r4, 0x2, 0x1, 0x0, 0x9}, 0x50) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = socket$isdn(0x22, 0x2, 0x11) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x80044943, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r5, 0x29, 0x44, &(0x7f0000000040)={'IDLETIMER\x00'}, &(0x7f0000000080)=0x1e) setsockopt$sock_int(r5, 0x1, 0x4a, &(0x7f0000000600)=0x3fa, 0x4) 2.420447682s ago: executing program 3 (id=2450): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8001, 0x0, 0x4, 0x1, 0x6, 0xfa11, 0xffefffff}, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000380)={0x2800, @bt={0x2d0, 0x190, 0x1, 0x3, 0xd59f80, 0x4, 0x5, 0xfe, 0x8, 0x5, 0x722, 0xe72, 0x7, 0x7f, 0x3d, 0x14, {0xffff945a, 0x1}, 0x3, 0xed}}) r3 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x640, 0x1, 0x2800, 0x10000, 0x19f2, 0x42, 0x4, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xba2, 0xd, 0x23, {0x8, 0xffffffff}, 0xd0, 0x9}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r4) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001340)={0x3, &(0x7f0000000080)=[{0x45, 0x0, 0x1}, {0x0, 0xb, 0xfd}, {0x6, 0x0, 0x0, 0x7ffffdbd}]}) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r5, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) 2.323589699s ago: executing program 7 (id=2451): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000540)="d800000019008111e0020f060d8107040a60093f00020000000055a1bc00090008000699e3ffffff140005000800000006000567b8b7b94002002dc6080016060000000000000074d67f6f5d6b26462f25a4d1c2e446b727f3e29400f7d1d9bbe94f", 0x62}], 0x1}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f0000001900)={0xa, 0x1, 0x0, &(0x7f00000017c0)=[{0x0}, {&(0x7f00000002c0)=""/194, 0xc2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x0}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='attr\x00') close(r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @remote}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000000c0)={0xd, 0x820d, 0x203, 0x200, r4}, &(0x7f0000000100)=0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x33, 0x3d, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0xffffffffffffff57) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_NESTED_STATE(r7, 0x4080aebf, &(0x7f0000000640)=@vmx={0x103, 0x0, 0x2080, {0x50000, 0x60000, {}, 0x1, 0x8}, {"d07ee5110000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f500000000000000000000000000000000000000000000000000000000001c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000057ae000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100008000", "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007a7f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000"}}) io_uring_enter(r0, 0x8ae, 0x6931, 0x17, 0x0, 0x0) 1.281225769s ago: executing program 5 (id=2452): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000002060102000000000000000000000000140007800800124000060000080008400000003710000300686173683a69702c6d616300050005000a00000005000400000000000900020073797a310000000005000100070000000fe55e9947475a4ac0a3863701a4f117083b6fa55ebf34cc14b7f8848bd54dcfc93681aa8d90a2098d33d3bf5c1f6574b6cd6313e0781aae1171f58cab515adf21a3066891b9c102c2be428de2d8b817f8b5271ffbfa2cc2a27739d19d15d9e6824278a044047ffe152743efe89f1c829636a8666a081bff453733815a8fa2852eaaf4dd2db786ab5b25c68f43c852bcd663831f9629a531b746c79059301d7f36fefd87006c550f35748d6622125be29b44e7ac8b90ff236f79e6e2501c2d0a0a3500aa7f67e225796b5d587aa93ea05ee7c6578a279a96e118d8513c83341e86d9067931eae228b6d168730446bcb1f55717be60436899dde531239ef39c1e87b7b3ef1147d185e5e8657e64aea4e5c2205c1e441f58b24ff23352931a"], 0x5c}}, 0x0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100, 0x1, 0x2}, 0x18, 0x0) landlock_restrict_self(r1, 0x4) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') fchdir(r2) creat(&(0x7f0000000300)='./bus\x00', 0x0) 1.019871654s ago: executing program 6 (id=2453): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0xac, 0x0, 0x1, 0x505, 0xffffff84, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1000001}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}]}]}, 0xac}}, 0x0) 909.964843ms ago: executing program 5 (id=2454): r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$binfmt_script(r0, &(0x7f0000001b00), 0xfffffd9d) 836.87423ms ago: executing program 6 (id=2455): bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}, 0x6}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, &(0x7f0000001680)="b9ef", 0x2, 0x800, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000681000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/206, 0xce, 0x1, 0x0}, &(0x7f00000001c0)=0x40) 720.764861ms ago: executing program 5 (id=2456): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x2, 0x0, @empty, 0x30}, 0x1c) listen(r1, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000080)=0xfffffffe, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x20000004, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000", 0x3b}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020", 0xba}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df0", 0x28}, {&(0x7f0000000400)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819aca6122c350602553d81b6eacf6ce927868337", 0x50}], 0x4}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="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", 0x160}, {&(0x7f0000000fc0)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6f10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba9547e1e343b451d9025c4e153612d4674b9411fb4de295499abbcb388d291aa83e93db6cf9ab0954e6a8dfc19c3c1533a11d81e0382999bd736f1caacc2bbf1194598a652677efb930a5b6e", 0xc2}], 0x2}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9c515a1c3ee25ace1", 0xba}], 0x1}}], 0x3, 0x2090) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x26}, 0x4e1e, 0x3, 'sed\x00', 0x21, 0x2, 0x6e}, 0x2c) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000580)={{0x84, @local, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7b}, {@private=0xa010102, 0x4e32, 0x2, 0xc7, 0x1, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 644.814497ms ago: executing program 6 (id=2457): r0 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) (fail_nth: 17) 530.934561ms ago: executing program 3 (id=2458): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x7, 0x3000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) (async) r2 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r2, 0x942e, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000140), &(0x7f0000000180)=0x4) futex(&(0x7f0000004000)=0x2, 0x5, 0x0, 0x0, &(0x7f0000004000), 0xba01ffff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8000003, 0x1, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x32) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x21, &(0x7f0000000480)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x29}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}]}, &(0x7f0000000080)=0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a30000000004c00048024000180090001006d65746100000000140002800800014000000001080002400000001724000180090001006d61737100000000140002800800024000000008080003"], 0xa0}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) 376.297886ms ago: executing program 6 (id=2459): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r3, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 284.735506ms ago: executing program 7 (id=2460): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r3, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c657230000000000000080005000700"], 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) 16.297704ms ago: executing program 7 (id=2461): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7339e00a, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x1}, 0x50) r1 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r2 = socket(0x1e, 0x1, 0x0) connect$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r2, &(0x7f0000000340), 0x2000011a) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r1, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'syztnl1\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x0, 0x10, 0x9, 0xe4, {{0x29, 0x4, 0x2, 0x8, 0xa4, 0x64, 0x0, 0x6, 0x4, 0x0, @rand_addr=0x64010101, @broadcast, {[@cipso={0x86, 0x57, 0x2, [{0x4, 0xa, "cfae2c53227e311d"}, {0x1, 0x10, "a67190292a6ad1759887b52e6213"}, {0x2, 0x8, "5c5252da5444"}, {0x0, 0x5, "cf142e"}, {0x0, 0xf, "1b6c178ebf5a3de04ee44561c2"}, {0x2, 0xa, "4742f695341a9c0b"}, {0x0, 0xa, "67efb4952cf6a209"}, {0x2, 0x4, 'h['}, {0x1, 0x3, 'v'}]}, @cipso={0x86, 0x9, 0x1, [{0x2, 0x3, '\f'}]}, @ssrr={0x89, 0x23, 0x3c, [@rand_addr=0x64010101, @empty, @empty, @local, @broadcast, @empty, @local, @local]}, @ssrr={0x89, 0xb, 0x34, [@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb8, 0xb8, 0x4, [@float={0xa, 0x0, 0x0, 0x10, 0x8}, @volatile={0x0, 0x0, 0x0, 0x9, 0x4}, @enum={0x6, 0x1, 0x0, 0x6, 0x4, [{0xe, 0xc23d}]}, @typedef={0xb, 0x0, 0x0, 0x8, 0x5}, @volatile={0x1, 0x0, 0x0, 0x9, 0x2}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xe, 0x1}]}, @struct={0xc, 0x5, 0x0, 0x4, 0x0, 0x1, [{0x9, 0x4, 0x1}, {0x0, 0x4, 0x6}, {0x5, 0x2, 0x8}, {0x0, 0x4, 0x1}, {0x6, 0x1, 0x9}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x1, 0x3}}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000380)=""/58, 0xd4, 0x3a, 0x1, 0x2, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x2, 0xd69c, 0x0, 0x22900, r0, 0xffff, '\x00', r3, r4, 0x2, 0x1, 0x0, 0x9}, 0x50) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = socket$isdn(0x22, 0x2, 0x11) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x80044943, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r5, 0x29, 0x44, &(0x7f0000000040)={'IDLETIMER\x00'}, &(0x7f0000000080)=0x1e) setsockopt$sock_int(r5, 0x1, 0x4a, &(0x7f0000000600)=0x3fa, 0x4) 0s ago: executing program 6 (id=2462): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r1, 0x300, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1_macvtap\x00'}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008850}, 0x80) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev\x00') close_range(r3, r3, 0x0) statx(r3, 0x0, 0x1000, 0x6000, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f80)={0x34, r2, 0x701, 0x70bd2b, 0x25dfdbfc, {0x34}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000004}, 0x0) kernel console output (not intermixed with test programs): =05c6, idProduct=9205, bcdDevice=29.ac [ 446.098036][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.109038][ T5923] usb 5-1: config 0 descriptor?? [ 446.755808][T12581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.769330][T12581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.022048][T12586] loop8: detected capacity change from 0 to 8 [ 447.064317][T12586] Dev loop8: unable to read RDB block 8 [ 447.070120][T12586] loop8: unable to read partition table [ 447.076549][T12586] loop8: partition table beyond EOD, truncated [ 447.085221][T12586] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 448.348017][T12592] fuse: Bad value for 'fd' [ 448.414891][ T29] audit: type=1326 audit(1776816809.566:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12591 comm="syz.3.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc93ff9c819 code=0x7ffc0000 [ 448.440076][ T29] audit: type=1326 audit(1776816809.566:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12591 comm="syz.3.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc93ff9c819 code=0x7ffc0000 [ 448.466853][ T29] audit: type=1326 audit(1776816809.566:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12591 comm="syz.3.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc93ff9c819 code=0x7ffc0000 [ 448.485327][T12595] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 448.490889][ T29] audit: type=1326 audit(1776816809.566:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12591 comm="syz.3.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc93ff9c819 code=0x7ffc0000 [ 448.524205][ T29] audit: type=1326 audit(1776816809.566:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12591 comm="syz.3.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fc93ff9c819 code=0x7ffc0000 [ 448.547766][ T29] audit: type=1326 audit(1776816809.616:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12591 comm="syz.3.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc93ff9c819 code=0x7ffc0000 [ 448.570741][ T29] audit: type=1326 audit(1776816809.616:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12591 comm="syz.3.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc93ff9c582 code=0x7ffc0000 [ 448.596117][ T29] audit: type=1326 audit(1776816809.616:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12591 comm="syz.3.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fc93ff9c617 code=0x7ffc0000 [ 448.618678][ T29] audit: type=1326 audit(1776816809.616:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12591 comm="syz.3.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fc93ff59511 code=0x7ffc0000 [ 448.640749][ T5923] usb 5-1: Could not set interface, error -71 [ 448.655770][ T29] audit: type=1326 audit(1776816809.616:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12591 comm="syz.3.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fc93ff9d609 code=0x7ffc0000 [ 448.697472][ T5923] usb 5-1: USB disconnect, device number 108 [ 449.270469][T12610] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1942'. [ 449.295467][T12610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.306895][ T5922] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 449.316692][T12610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.741958][T12612] xt_CT: You must specify a L4 protocol and not use inversions on it [ 449.770818][T12612] libceph: resolve '4' (ret=-3): failed [ 450.662031][T12633] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 450.852954][ T5914] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 450.905995][T12639] fuse: Bad value for 'fd' [ 451.017520][ T5914] usb 5-1: unable to get BOS descriptor or descriptor too short [ 451.031533][ T5914] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 185, changing to 7 [ 451.061915][ T5914] usb 5-1: string descriptor 0 read error: -22 [ 451.076032][ T5914] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 451.087353][T12642] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 451.093040][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.328162][T12631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.345071][T12631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 451.365142][T12631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.391409][T12631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 451.413860][T12631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.433482][T12631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 451.719383][T12646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.799291][T12646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 451.869389][T12646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.922649][T12646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 451.941611][T12654] SET target dimension over the limit! [ 452.051667][T12631] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1949'. [ 452.085913][ T5914] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 452.156614][ T5914] usb 5-1: USB disconnect, device number 109 [ 452.890250][T12680] fuse: Bad value for 'fd' [ 453.062074][T12684] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 453.148003][T12686] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 453.187638][T12688] bridge_slave_0: invalid flags given to default FDB implementation [ 453.397242][T12697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.424805][ T29] kauditd_printk_skb: 1012 callbacks suppressed [ 453.424819][ T29] audit: type=1326 audit(1776816814.576:2295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12679 comm="syz.4.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fed2675d04e code=0x7ffc0000 [ 453.453662][T12697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 453.504975][ T29] audit: type=1326 audit(1776816814.616:2296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12679 comm="syz.4.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fed2675d04e code=0x7ffc0000 [ 453.568043][ T29] audit: type=1326 audit(1776816814.616:2297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12679 comm="syz.4.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fed2675d04e code=0x7ffc0000 [ 453.614820][ T29] audit: type=1326 audit(1776816814.616:2298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12679 comm="syz.4.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fed2675d04e code=0x7ffc0000 [ 453.660206][ T29] audit: type=1326 audit(1776816814.626:2299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12679 comm="syz.4.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fed2675d04e code=0x7ffc0000 [ 453.700517][ T29] audit: type=1326 audit(1776816814.626:2300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12679 comm="syz.4.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fed2675d04e code=0x7ffc0000 [ 453.744570][ T29] audit: type=1326 audit(1776816814.626:2301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12679 comm="syz.4.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fed2675d04e code=0x7ffc0000 [ 453.806446][ T29] audit: type=1326 audit(1776816814.626:2302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12679 comm="syz.4.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fed2675d04e code=0x7ffc0000 [ 453.873563][ T29] audit: type=1326 audit(1776816814.626:2303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12679 comm="syz.4.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fed2675d04e code=0x7ffc0000 [ 453.929023][ T29] audit: type=1326 audit(1776816814.636:2304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12679 comm="syz.4.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fed2675d04e code=0x7ffc0000 [ 454.161442][ T5845] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 454.659166][T12716] xt_CT: No such helper "pptp" [ 454.807262][ T5842] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 454.827474][ T5842] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 454.836367][ T5842] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 454.845816][ T5842] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 454.856237][ T5842] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 455.116941][T12723] xt_hashlimit: size too large, truncated to 1048576 [ 455.129089][T12725] syzkaller0: entered promiscuous mode [ 455.137237][T12725] syzkaller0: entered allmulticast mode [ 455.301146][T12720] chnl_net:caif_netlink_parms(): no params data found [ 455.507926][T12720] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.518128][T12720] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.528481][T12720] bridge_slave_0: entered allmulticast mode [ 455.529596][T12746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.536935][T12720] bridge_slave_0: entered promiscuous mode [ 455.544767][T12746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.556877][T12720] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.569475][T12720] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.577802][T12720] bridge_slave_1: entered allmulticast mode [ 455.586571][T12720] bridge_slave_1: entered promiscuous mode [ 455.617208][T12720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 455.637586][T12720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 455.689905][T12720] team0: Port device team_slave_0 added [ 455.690134][T12750] fuse: Bad value for 'fd' [ 455.706787][T12720] team0: Port device team_slave_1 added [ 455.744636][T12720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 455.760932][T12720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 455.801952][T12720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 455.827643][T12720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 455.837715][T12720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 455.864472][T12720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 455.951354][T12720] hsr_slave_0: entered promiscuous mode [ 455.964000][T12720] hsr_slave_1: entered promiscuous mode [ 456.072947][ T808] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 456.245207][ T808] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 456.280789][ T808] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.326534][ T808] usb 5-1: Product: syz [ 456.352640][ T808] usb 5-1: Manufacturer: syz [ 456.379737][ T808] usb 5-1: SerialNumber: syz [ 456.427952][ T808] usb 5-1: config 0 descriptor?? [ 456.465430][ T808] hub 5-1:0.0: bad descriptor, ignoring hub [ 456.484960][ T808] hub 5-1:0.0: probe with driver hub failed with error -5 [ 456.536148][T12720] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 456.577605][T12720] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 456.597432][T12755] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1983'. [ 456.617536][T12720] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 456.672578][T12720] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 456.704262][T12720] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 456.711541][ T808] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 456.725922][T12763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.777457][T12720] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 456.786264][ T808] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 456.807862][T12763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.825949][T12720] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 456.847683][ T808] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 456.880933][T12720] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 456.892209][ T808] usb 5-1: media controller created [ 456.913862][ T5842] Bluetooth: hci5: command tx timeout [ 456.970001][ T808] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 457.147273][ T808] DVB: Unable to find symbol dib7000p_attach() [ 457.172510][ T808] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 457.196387][T12720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 457.269559][T12720] 8021q: adding VLAN 0 to HW filter on device team0 [ 457.323251][ T808] rc_core: IR keymap rc-dib0700-rc5 not found [ 457.332193][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.339326][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 457.357701][ T808] Registered IR keymap rc-empty [ 457.374731][ T808] dvb-usb: could not initialize remote control. [ 457.400666][ T808] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 457.411878][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.419005][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 457.551847][T12777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.595147][T12777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.682068][T12720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 457.862135][T12720] veth0_vlan: entered promiscuous mode [ 457.921924][T12720] veth1_vlan: entered promiscuous mode [ 458.106942][T12720] veth0_macvtap: entered promiscuous mode [ 458.175145][T12720] veth1_macvtap: entered promiscuous mode [ 458.248796][T12720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 458.281060][T12720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 458.304877][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.324227][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.377563][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.416291][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.718428][ T1025] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.730858][T12789] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1991'. [ 458.746369][ T1025] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.890874][ T1025] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.930456][ T1025] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.994251][ T5842] Bluetooth: hci5: command tx timeout [ 459.202320][ T808] usb 5-1: USB disconnect, device number 110 [ 459.369111][ T808] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 459.652406][T12809] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 459.821155][T12812] delete_channel: no stack [ 460.183538][ T5915] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 460.364610][ T5915] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 460.374000][T12835] xt_hashlimit: size too large, truncated to 1048576 [ 460.392433][ T5915] usb 7-1: New USB device found, idVendor=055d, idProduct=9001, bcdDevice=31.44 [ 460.416153][ T5915] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.429377][ T5915] usb 7-1: config 0 descriptor?? [ 460.447740][ T5915] pwc: Samsung MPC-C30 USB webcam detected. [ 460.650020][ T5915] pwc: send_video_command error -71 [ 460.670514][ T5915] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 460.672601][T12847] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2012'. [ 460.696568][ T5915] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71 [ 460.723660][ T5915] usb 7-1: USB disconnect, device number 2 [ 460.739656][T12847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 460.956217][T12855] netlink: 'syz.2.2015': attribute type 2 has an invalid length. [ 460.964285][T12855] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2015'. [ 460.986447][T12855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.003212][T12855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.075550][ T5842] Bluetooth: hci5: command tx timeout [ 461.165197][T12865] program syz.5.2018 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 461.234712][ T5915] IPVS: starting estimator thread 0... [ 461.281858][T12870] program syz.5.2018 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 461.335367][T12869] IPVS: using max 54 ests per chain, 129600 per kthread [ 461.791637][T12882] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2021'. [ 461.963174][T12889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2024'. [ 462.065679][T12896] SET target dimension over the limit! [ 462.181012][T12899] sctp: [Deprecated]: syz.6.2028 (pid 12899) Use of int in maxseg socket option. [ 462.181012][T12899] Use struct sctp_assoc_value instead [ 462.356037][T12894] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2028'. [ 462.415163][T12900] mac80211_hwsim hwsim7 syzkaller0: Caught tx_queue_len zero misconfig [ 462.630167][T12909] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 462.744183][ T808] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 462.946811][ T808] usb 5-1: unable to get BOS descriptor or descriptor too short [ 462.964407][ T808] usb 5-1: too many configurations: 147, using maximum allowed: 8 [ 462.984636][ T808] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 463.001315][ T808] usb 5-1: can't read configurations, error -61 [ 463.153621][ T808] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 463.163789][ T5842] Bluetooth: hci5: command tx timeout [ 463.171542][ T29] kauditd_printk_skb: 51 callbacks suppressed [ 463.171556][ T29] audit: type=1326 audit(1776816824.306:2356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12913 comm="syz.3.2033" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc93ff9c819 code=0x0 [ 463.262008][T12922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.275036][T12922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.290466][T12922] nftables ruleset with unbound set [ 463.326641][ T808] usb 5-1: unable to get BOS descriptor or descriptor too short [ 463.335640][ T808] usb 5-1: too many configurations: 147, using maximum allowed: 8 [ 463.346432][ T808] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 463.354700][ T808] usb 5-1: can't read configurations, error -61 [ 463.361622][ T808] usb usb5-port1: attempt power cycle [ 463.703252][ T808] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 463.734809][ T808] usb 5-1: unable to get BOS descriptor or descriptor too short [ 463.742636][ T808] usb 5-1: too many configurations: 147, using maximum allowed: 8 [ 463.751982][ T808] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 463.760279][ T808] usb 5-1: can't read configurations, error -61 [ 463.893616][T12927] FAULT_INJECTION: forcing a failure. [ 463.893616][T12927] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 463.907118][T12927] CPU: 1 UID: 0 PID: 12927 Comm: syz.3.2037 Tainted: G L syzkaller #0 PREEMPT(full) [ 463.907131][ T808] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 463.907145][T12927] Tainted: [L]=SOFTLOCKUP [ 463.907153][T12927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 463.907164][T12927] Call Trace: [ 463.907171][T12927] [ 463.907177][T12927] dump_stack_lvl+0xe8/0x150 [ 463.907207][T12927] should_fail_ex+0x412/0x560 [ 463.907239][T12927] _copy_to_user+0x31/0xb0 [ 463.907261][T12927] snd_pcm_oss_read2+0x341/0x420 [ 463.907284][T12927] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 463.907310][T12927] ? __pfx_snd_pcm_oss_read2+0x10/0x10 [ 463.907332][T12927] ? __pfx_snd_pcm_post_prepare+0x10/0x10 [ 463.907357][T12927] ? snd_pcm_action_nonatomic+0x25c/0x2b0 [ 463.907385][T12927] snd_pcm_oss_read+0x628/0x8e0 [ 463.907417][T12927] ? __pfx_snd_pcm_oss_read+0x10/0x10 [ 463.907440][T12927] vfs_read+0x20c/0xa70 [ 463.907468][T12927] ? __pfx_vfs_read+0x10/0x10 [ 463.907490][T12927] ? __fget_files+0x2a/0x420 [ 463.907511][T12927] ? __fget_files+0x2a/0x420 [ 463.907527][T12927] ? __fget_files+0x3a0/0x420 [ 463.907544][T12927] ? __fget_files+0x2a/0x420 [ 463.907569][T12927] ksys_read+0x150/0x270 [ 463.907591][T12927] ? __pfx_ksys_read+0x10/0x10 [ 463.907620][T12927] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.907639][T12927] do_syscall_64+0x15f/0xf80 [ 463.907666][T12927] ? trace_irq_disable+0x3b/0x140 [ 463.907688][T12927] ? clear_bhb_loop+0x40/0x90 [ 463.907710][T12927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.907727][T12927] RIP: 0033:0x7fc93ff9c819 [ 463.907743][T12927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 463.907759][T12927] RSP: 002b:00007fc940e6b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 463.907777][T12927] RAX: ffffffffffffffda RBX: 00007fc940215fa0 RCX: 00007fc93ff9c819 [ 463.907790][T12927] RDX: 0000000000002020 RSI: 00002000000063c0 RDI: 0000000000000003 [ 463.907802][T12927] RBP: 00007fc940e6b090 R08: 0000000000000000 R09: 0000000000000000 [ 463.907813][T12927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 463.907823][T12927] R13: 00007fc940216038 R14: 00007fc940215fa0 R15: 00007fc94033fa48 [ 463.907852][T12927] [ 464.185460][ T808] usb 5-1: unable to get BOS descriptor or descriptor too short [ 464.194278][ T808] usb 5-1: too many configurations: 147, using maximum allowed: 8 [ 464.206511][ T808] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 464.214756][ T808] usb 5-1: can't read configurations, error -61 [ 464.221495][ T808] usb usb5-port1: unable to enumerate USB device [ 464.365114][T12942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.376929][T12942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.401310][ T29] audit: type=1326 audit(1776816825.546:2357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12938 comm="syz.6.2041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a04f9c819 code=0x7ffc0000 [ 464.440919][ T29] audit: type=1326 audit(1776816825.546:2358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12938 comm="syz.6.2041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f4a04f9c819 code=0x7ffc0000 [ 464.464174][ T29] audit: type=1326 audit(1776816825.546:2359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12938 comm="syz.6.2041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a04f9c819 code=0x7ffc0000 [ 464.491052][ T29] audit: type=1326 audit(1776816825.556:2360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12938 comm="syz.6.2041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f4a04f9c819 code=0x7ffc0000 [ 464.532662][ T29] audit: type=1326 audit(1776816825.556:2361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12938 comm="syz.6.2041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a04f9c819 code=0x7ffc0000 [ 464.561180][ T29] audit: type=1326 audit(1776816825.556:2362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12938 comm="syz.6.2041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f4a04f9c819 code=0x7ffc0000 [ 464.584425][ T29] audit: type=1326 audit(1776816825.556:2363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12938 comm="syz.6.2041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a04f9c819 code=0x7ffc0000 [ 464.607765][ T29] audit: type=1326 audit(1776816825.556:2364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12938 comm="syz.6.2041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4a04f9c819 code=0x7ffc0000 [ 464.631753][ T29] audit: type=1326 audit(1776816825.556:2365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12938 comm="syz.6.2041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a04f9c819 code=0x7ffc0000 [ 464.976908][T12955] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 464.983463][T12955] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 465.002186][T12955] vhci_hcd vhci_hcd.0: Device attached [ 465.036073][T12955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.068169][T12959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.077554][T12955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.105822][T12962] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2047'. [ 465.122249][T12956] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 465.141276][ T79] vhci_hcd vhci_hcd.2: stop threads [ 465.146929][ T79] vhci_hcd vhci_hcd.2: release socket [ 465.155853][T12961] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2047'. [ 465.180325][ T808] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 465.186980][ T79] vhci_hcd vhci_hcd.2: disconnect device [ 465.193595][T12959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.218173][T12959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.228379][T12959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.246612][T12959] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2045'. [ 465.262850][ T808] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 465.289714][ T808] usb 37-1: enqueue for inactive port 0 [ 465.372982][ T808] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 465.558136][T12970] macvlan0: mtu greater than device maximum [ 465.842986][ T5923] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 465.993185][ T5923] usb 5-1: Using ep0 maxpacket: 32 [ 466.000036][T12977] x_tables: duplicate underflow at hook 2 [ 466.008930][ T5923] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 466.021030][ T5923] usb 5-1: config 0 has no interfaces? [ 466.035022][ T5923] usb 5-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice=26.2f [ 466.044708][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.058833][ T5923] usb 5-1: Product: syz [ 466.067933][ T5923] usb 5-1: Manufacturer: syz [ 466.079302][ T5923] usb 5-1: SerialNumber: syz [ 466.094755][ T5923] usb 5-1: config 0 descriptor?? [ 466.305433][ T808] usb 5-1: USB disconnect, device number 115 [ 466.820008][T12996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.831856][T12996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.336074][T13009] fuse: Unknown parameter 'appraise_type' [ 467.354005][ T5915] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 467.513606][ T5915] usb 7-1: Using ep0 maxpacket: 16 [ 467.526298][ T5915] usb 7-1: config 0 has no interfaces? [ 467.539904][ T5915] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 467.549402][ T5915] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 467.558081][ T5915] usb 7-1: Manufacturer: syz [ 467.591588][ T5915] usb 7-1: config 0 descriptor?? [ 467.693985][T13018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.707001][T13018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.809465][ T808] usb 7-1: USB disconnect, device number 3 [ 468.737839][T13041] FAULT_INJECTION: forcing a failure. [ 468.737839][T13041] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 468.754700][T13041] CPU: 0 UID: 0 PID: 13041 Comm: syz.5.2076 Tainted: G L syzkaller #0 PREEMPT(full) [ 468.754728][T13041] Tainted: [L]=SOFTLOCKUP [ 468.754735][T13041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 468.754746][T13041] Call Trace: [ 468.754754][T13041] [ 468.754762][T13041] dump_stack_lvl+0xe8/0x150 [ 468.754794][T13041] should_fail_ex+0x412/0x560 [ 468.754829][T13041] _copy_to_user+0x31/0xb0 [ 468.754852][T13041] copy_siginfo_to_user+0x22/0xc0 [ 468.754880][T13041] x64_setup_rt_frame+0x77b/0xcb0 [ 468.754924][T13041] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 468.754957][T13041] arch_do_signal_or_restart+0x424/0x830 [ 468.754984][T13041] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 468.755013][T13041] ? ksys_read+0x242/0x270 [ 468.755041][T13041] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.755061][T13041] exit_to_user_mode_loop+0x86/0x480 [ 468.755085][T13041] ? rcu_is_watching+0x15/0xb0 [ 468.755105][T13041] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.755124][T13041] do_syscall_64+0x33e/0xf80 [ 468.755148][T13041] ? clear_bhb_loop+0x40/0x90 [ 468.755169][T13041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.755187][T13041] RIP: 0033:0x7f5f5a79c817 [ 468.755204][T13041] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 468.755219][T13041] RSP: 002b:00007f5f589f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 468.755239][T13041] RAX: 0000000000000000 RBX: 00007f5f5aa15fa0 RCX: 00007f5f5a79c819 [ 468.755252][T13041] RDX: 0000000000000023 RSI: 0000200000000000 RDI: 0000000000000004 [ 468.755264][T13041] RBP: 00007f5f589f6090 R08: 0000000000000000 R09: 0000000000000000 [ 468.755276][T13041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 468.755286][T13041] R13: 00007f5f5aa16038 R14: 00007f5f5aa15fa0 R15: 00007f5f5ab3fa48 [ 468.755315][T13041] [ 470.031436][T13068] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2085'. [ 470.599821][ T10] kworker/0:1 (10) used greatest stack depth: 14624 bytes left [ 470.620918][T13086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.653562][T13086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.973371][T13147] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 472.892349][T13176] batman_adv: batadv0: Adding interface: dummy0 [ 472.907803][T13176] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 472.977089][T13176] batman_adv: batadv0: Interface activated: dummy0 [ 473.423929][T13193] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2127'. [ 473.457269][T13193] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2127'. [ 473.483413][T13193] FAULT_INJECTION: forcing a failure. [ 473.483413][T13193] name failslab, interval 1, probability 0, space 0, times 0 [ 473.519463][T13193] CPU: 0 UID: 0 PID: 13193 Comm: syz.2.2127 Tainted: G L syzkaller #0 PREEMPT(full) [ 473.519490][T13193] Tainted: [L]=SOFTLOCKUP [ 473.519496][T13193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 473.519508][T13193] Call Trace: [ 473.519515][T13193] [ 473.519522][T13193] dump_stack_lvl+0xe8/0x150 [ 473.519555][T13193] should_fail_ex+0x412/0x560 [ 473.519587][T13193] should_failslab+0xa8/0x100 [ 473.519613][T13193] __kvmalloc_node_noprof+0x178/0x8a0 [ 473.519636][T13193] ? hhf_init+0x4f7/0x980 [ 473.519657][T13193] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 473.519684][T13193] hhf_init+0x4f7/0x980 [ 473.519705][T13193] ? __pfx_hhf_init+0x10/0x10 [ 473.519726][T13193] qdisc_create+0x7c4/0xf20 [ 473.519758][T13193] tc_modify_qdisc+0x16f0/0x2290 [ 473.519780][T13193] ? rcu_is_watching+0x15/0xb0 [ 473.519813][T13193] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 473.519836][T13193] ? __dev_queue_xmit+0x2b6/0x3950 [ 473.519878][T13193] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 473.519899][T13193] rtnetlink_rcv_msg+0x77e/0xbe0 [ 473.519930][T13193] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 473.519953][T13193] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 473.519974][T13193] ? ref_tracker_free+0x693/0x840 [ 473.519995][T13193] ? __pfx_ref_tracker_free+0x10/0x10 [ 473.520023][T13193] netlink_rcv_skb+0x232/0x4b0 [ 473.520050][T13193] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 473.520076][T13193] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 473.520111][T13193] ? netlink_deliver_tap+0x2e/0x1b0 [ 473.520135][T13193] ? netlink_deliver_tap+0x2e/0x1b0 [ 473.520165][T13193] netlink_unicast+0x75c/0x8e0 [ 473.520196][T13193] netlink_sendmsg+0x813/0xb40 [ 473.520229][T13193] ? __pfx_netlink_sendmsg+0x10/0x10 [ 473.520256][T13193] ? aa_sock_msg_perm+0xf1/0x1b0 [ 473.520275][T13193] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 473.520299][T13193] ____sys_sendmsg+0x972/0x9f0 [ 473.520318][T13193] ? __might_fault+0xaf/0x130 [ 473.520343][T13193] ? __pfx_____sys_sendmsg+0x10/0x10 [ 473.520377][T13193] ? import_iovec+0x73/0xa0 [ 473.520399][T13193] ___sys_sendmsg+0x2a5/0x360 [ 473.520413][T13193] ? __lock_acquire+0x6b5/0x2cf0 [ 473.520442][T13193] ? __pfx____sys_sendmsg+0x10/0x10 [ 473.520490][T13193] ? __fget_files+0x2a/0x420 [ 473.520508][T13193] ? __fget_files+0x3a0/0x420 [ 473.520536][T13193] __x64_sys_sendmsg+0x1bd/0x2a0 [ 473.520557][T13193] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 473.520584][T13193] ? __pfx_ksys_write+0x10/0x10 [ 473.520613][T13193] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.520633][T13193] do_syscall_64+0x15f/0xf80 [ 473.520653][T13193] ? trace_irq_disable+0x3b/0x140 [ 473.520676][T13193] ? clear_bhb_loop+0x40/0x90 [ 473.520699][T13193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.520716][T13193] RIP: 0033:0x7f099b59c819 [ 473.520735][T13193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 473.520750][T13193] RSP: 002b:00007f099c491028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 473.520769][T13193] RAX: ffffffffffffffda RBX: 00007f099b815fa0 RCX: 00007f099b59c819 [ 473.520782][T13193] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 473.520794][T13193] RBP: 00007f099c491090 R08: 0000000000000000 R09: 0000000000000000 [ 473.520804][T13193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 473.520814][T13193] R13: 00007f099b816038 R14: 00007f099b815fa0 R15: 00007f099b93fa48 [ 473.520842][T13193] [ 473.933027][ T79] wlan0: Trigger new scan to find an IBSS to join [ 474.015329][T13196] input: syz0 as /devices/virtual/input/input43 [ 474.943176][ T5922] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 475.102892][ T5922] usb 5-1: Using ep0 maxpacket: 32 [ 475.114992][ T5922] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 475.149414][ T5922] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 475.195651][ T5922] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 475.223286][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.248225][ T5922] usb 5-1: config 0 descriptor?? [ 475.423311][T13232] netlink: 212360 bytes leftover after parsing attributes in process `syz.6.2137'. [ 475.672985][T13216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.711346][T13216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 475.785434][ T5922] savu 0003:1E7D:2D5A.0032: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 476.013522][T13241] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.021088][T13241] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.109635][ T5922] usb 5-1: USB disconnect, device number 116 [ 476.346441][T13241] tipc: Resetting bearer [ 476.630285][ T57] netdevsim netdevsim2 : unset [0, 0] type 1 family 0 port 8472 - 0 [ 476.654411][ T57] netdevsim netdevsim2 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.693014][ T57] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 476.741736][ T57] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.767351][ T57] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 476.804963][ T57] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.842683][ T57] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 476.871020][ T57] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.973047][ T5922] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 477.813217][T13273] netlink: 'syz.3.2150': attribute type 6 has an invalid length. [ 477.845691][T13273] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2150'. [ 477.901967][T13277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.933352][T13277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.035509][T13283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.035847][T13283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.087332][T13282] input: syz0 as /devices/virtual/input/input44 [ 478.720324][T13296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.745208][T13296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.753266][ T12] wlan0: Trigger new scan to find an IBSS to join [ 479.426779][T13301] FAULT_INJECTION: forcing a failure. [ 479.426779][T13301] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 479.442003][T13301] CPU: 1 UID: 0 PID: 13301 Comm: syz.2.2160 Tainted: G L syzkaller #0 PREEMPT(full) [ 479.442038][T13301] Tainted: [L]=SOFTLOCKUP [ 479.442045][T13301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 479.442056][T13301] Call Trace: [ 479.442064][T13301] [ 479.442072][T13301] dump_stack_lvl+0xe8/0x150 [ 479.442104][T13301] should_fail_ex+0x412/0x560 [ 479.442136][T13301] _copy_from_iter+0x1d3/0x1670 [ 479.442154][T13301] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 479.442179][T13301] ? __pfx_policy_nodemask+0x10/0x10 [ 479.442206][T13301] ? __pfx__copy_from_iter+0x10/0x10 [ 479.442226][T13301] ? alloc_pages_mpol+0x3c0/0x490 [ 479.442256][T13301] copy_page_from_iter+0x220/0x2d0 [ 479.442279][T13301] tun_get_user+0x1bf7/0x43e0 [ 479.442305][T13301] ? tun_get_user+0x8aa/0x43e0 [ 479.442345][T13301] ? aa_file_perm+0x50e/0x15e0 [ 479.442364][T13301] ? __pfx_tun_get_user+0x10/0x10 [ 479.442391][T13301] ? __lock_acquire+0x6b5/0x2cf0 [ 479.442430][T13301] ? ref_tracker_alloc+0x35c/0x4c0 [ 479.442450][T13301] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 479.442470][T13301] ? tun_get+0x1c/0x2f0 [ 479.442494][T13301] ? tun_get+0x1c/0x2f0 [ 479.442522][T13301] ? tun_get+0x1c/0x2f0 [ 479.442543][T13301] ? tun_get+0x1c/0x2f0 [ 479.442575][T13301] tun_chr_write_iter+0x113/0x200 [ 479.442599][T13301] vfs_write+0x61d/0xb90 [ 479.442624][T13301] ? __pfx_vfs_write+0x10/0x10 [ 479.442651][T13301] ? __fget_files+0x2a/0x420 [ 479.442673][T13301] ksys_write+0x150/0x270 [ 479.442696][T13301] ? __pfx_ksys_write+0x10/0x10 [ 479.442724][T13301] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.442743][T13301] do_syscall_64+0x15f/0xf80 [ 479.442761][T13301] ? trace_irq_disable+0x3b/0x140 [ 479.442782][T13301] ? clear_bhb_loop+0x40/0x90 [ 479.442802][T13301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.442819][T13301] RIP: 0033:0x7f099b55d04e [ 479.442835][T13301] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 479.442850][T13301] RSP: 002b:00007f099c490fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 479.442868][T13301] RAX: ffffffffffffffda RBX: 00007f099c4916c0 RCX: 00007f099b55d04e [ 479.442882][T13301] RDX: 000000000000003e RSI: 0000200000000040 RDI: 00000000000000c8 [ 479.442893][T13301] RBP: 00007f099c491090 R08: 0000000000000000 R09: 0000000000000000 [ 479.442904][T13301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 479.442915][T13301] R13: 00007f099b816038 R14: 00007f099b815fa0 R15: 00007f099b93fa48 [ 479.442942][T13301] [ 479.939580][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 479.939597][ T29] audit: type=1326 audit(1776816841.086:2377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13302 comm="syz.3.2159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc93ff9c819 code=0x7ffc0000 [ 479.969695][ T29] audit: type=1326 audit(1776816841.086:2378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13302 comm="syz.3.2159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fc93ff9c819 code=0x7ffc0000 [ 480.023124][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.038308][ T29] audit: type=1326 audit(1776816841.086:2379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13302 comm="syz.3.2159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc93ff9c819 code=0x7ffc0000 [ 480.127095][ T29] audit: type=1326 audit(1776816841.116:2380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13302 comm="syz.3.2159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc93ff9c819 code=0x7ffc0000 [ 480.171716][ T5922] usb 5-1: unable to get BOS descriptor or descriptor too short [ 480.231629][ T29] audit: type=1326 audit(1776816841.156:2381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13302 comm="syz.3.2159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc93ff9c819 code=0x7ffc0000 [ 480.275808][T13315] netlink: 'syz.4.2163': attribute type 12 has an invalid length. [ 480.297100][T13315] netlink: 'syz.4.2163': attribute type 29 has an invalid length. [ 480.314953][ T5922] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 480.316382][ T29] audit: type=1326 audit(1776816841.156:2382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13302 comm="syz.3.2159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc93ff9c819 code=0x7ffc0000 [ 480.351344][T13315] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2163'. [ 480.357173][ T5922] usb 5-1: can't read configurations, error -71 [ 480.388573][T13315] netlink: 59 bytes leftover after parsing attributes in process `syz.4.2163'. [ 480.404972][ T29] audit: type=1326 audit(1776816841.186:2383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13302 comm="syz.3.2159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7fc93ff9c819 code=0x7ffc0000 [ 480.429536][ T29] audit: type=1326 audit(1776816841.186:2384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13302 comm="syz.3.2159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc93ff9c819 code=0x7ffc0000 [ 480.461771][ T29] audit: type=1326 audit(1776816841.216:2385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13302 comm="syz.3.2159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc93ff9c819 code=0x7ffc0000 [ 480.486035][ T29] audit: type=1326 audit(1776816841.216:2386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13302 comm="syz.3.2159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc93ff9c819 code=0x7ffc0000 [ 480.773884][ T5922] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 480.948549][ T5922] usb 5-1: config 0 has an invalid descriptor of length 192, skipping remainder of the config [ 480.960570][ T5922] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 239, using maximum allowed: 30 [ 480.976504][ T5922] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 239 [ 480.993685][ T5922] usb 5-1: New USB device found, idVendor=0830, idProduct=0001, bcdDevice= 0.00 [ 481.034794][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.075007][ T5922] usb 5-1: config 0 descriptor?? [ 481.259620][T13333] FAULT_INJECTION: forcing a failure. [ 481.259620][T13333] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 481.283256][T13333] CPU: 0 UID: 0 PID: 13333 Comm: syz.3.2169 Tainted: G L syzkaller #0 PREEMPT(full) [ 481.283284][T13333] Tainted: [L]=SOFTLOCKUP [ 481.283296][T13333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 481.283306][T13333] Call Trace: [ 481.283313][T13333] [ 481.283321][T13333] dump_stack_lvl+0xe8/0x150 [ 481.283354][T13333] should_fail_ex+0x412/0x560 [ 481.283387][T13333] _copy_to_user+0x31/0xb0 [ 481.283409][T13333] simple_read_from_buffer+0xe1/0x170 [ 481.283433][T13333] proc_fail_nth_read+0x1bb/0x230 [ 481.283457][T13333] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 481.283480][T13333] ? rw_verify_area+0x2a6/0x4d0 [ 481.283501][T13333] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 481.283522][T13333] vfs_read+0x20c/0xa70 [ 481.283543][T13333] ? __pfx_netdev_run_todo+0x10/0x10 [ 481.283570][T13333] ? __pfx_vfs_read+0x10/0x10 [ 481.283589][T13333] ? tun_get+0x1c/0x2f0 [ 481.283618][T13333] ? __tun_chr_ioctl+0xe32/0x1e10 [ 481.283656][T13333] ksys_read+0x150/0x270 [ 481.283679][T13333] ? __pfx_ksys_read+0x10/0x10 [ 481.283707][T13333] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.283727][T13333] do_syscall_64+0x15f/0xf80 [ 481.283748][T13333] ? trace_irq_disable+0x3b/0x140 [ 481.283769][T13333] ? clear_bhb_loop+0x40/0x90 [ 481.283789][T13333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.283804][T13333] RIP: 0033:0x7fc93ff5d04e [ 481.283820][T13333] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 481.283833][T13333] RSP: 002b:00007fc940e6afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 481.283851][T13333] RAX: ffffffffffffffda RBX: 00007fc940e6b6c0 RCX: 00007fc93ff5d04e [ 481.283863][T13333] RDX: 000000000000000f RSI: 00007fc940e6b0a0 RDI: 0000000000000006 [ 481.283873][T13333] RBP: 00007fc940e6b090 R08: 0000000000000000 R09: 0000000000000000 [ 481.283882][T13333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 481.283891][T13333] R13: 00007fc940216038 R14: 00007fc940215fa0 R15: 00007fc94033fa48 [ 481.283923][T13333] [ 481.498801][ T5922] usb 5-1: string descriptor 0 read error: -71 [ 481.506172][ T5922] usb 5-1: active config #0 != 1 ?? [ 481.595541][ T5922] usb 5-1: USB disconnect, device number 118 [ 481.753468][T13338] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 481.864340][T13341] RDS: rds_bind could not find a transport for ::e0:0:0:0:1, load rds_tcp or rds_rdma? [ 482.014830][T13343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.052042][T13343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.523904][T13361] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2178'. [ 482.822931][ T7656] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 482.886268][T13376] bond22 (unregistering): Released all slaves [ 482.920224][T13378] fuse: fd is not a fuse device [ 482.995208][ T7656] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 483.016923][ T7656] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 483.042872][ T7656] usb 7-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 483.060675][ T7656] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.082451][ T7656] usb 7-1: config 0 descriptor?? [ 483.465631][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.528053][ T7656] usbhid 7-1:0.0: can't add hid device: -71 [ 483.542564][ T7656] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 483.555505][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.565304][ T7656] usb 7-1: USB disconnect, device number 4 [ 483.688066][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.848032][T13395] FAULT_INJECTION: forcing a failure. [ 483.848032][T13395] name failslab, interval 1, probability 0, space 0, times 0 [ 483.887676][T13395] CPU: 0 UID: 0 PID: 13395 Comm: syz.2.2194 Tainted: G L syzkaller #0 PREEMPT(full) [ 483.887704][T13395] Tainted: [L]=SOFTLOCKUP [ 483.887711][T13395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 483.887721][T13395] Call Trace: [ 483.887729][T13395] [ 483.887736][T13395] dump_stack_lvl+0xe8/0x150 [ 483.887780][T13395] should_fail_ex+0x412/0x560 [ 483.887811][T13395] should_failslab+0xa8/0x100 [ 483.887835][T13395] ? __kernfs_new_node+0xea/0x970 [ 483.887854][T13395] kmem_cache_alloc_noprof+0x87/0x650 [ 483.887883][T13395] __kernfs_new_node+0xea/0x970 [ 483.887902][T13395] ? up_write+0x1ab/0x410 [ 483.887926][T13395] ? __pfx___kernfs_new_node+0x10/0x10 [ 483.887946][T13395] ? kernfs_root+0x1c/0x230 [ 483.887972][T13395] ? kernfs_root+0x1c/0x230 [ 483.887991][T13395] ? kernfs_root+0x1c/0x230 [ 483.888015][T13395] kernfs_new_node+0x102/0x210 [ 483.888039][T13395] kernfs_create_link+0xa7/0x200 [ 483.888067][T13395] sysfs_do_create_link_sd+0x83/0x110 [ 483.888089][T13395] device_add_class_symlinks+0xb6/0x240 [ 483.888117][T13395] device_add+0x475/0xbb0 [ 483.888143][T13395] device_create+0x269/0x300 [ 483.888170][T13395] ? timer_init_key+0x161/0x2c0 [ 483.888196][T13395] ? __pfx_device_create+0x10/0x10 [ 483.888224][T13395] ? ieee80211_alloc_hw_nm+0x191d/0x1fa0 [ 483.888256][T13395] mac80211_hwsim_new_radio+0x427/0x5ba0 [ 483.888285][T13395] ? stack_trace_save+0xa9/0x100 [ 483.888309][T13395] ? __pfx_stack_trace_save+0x10/0x10 [ 483.888336][T13395] ? stack_depot_save_flags+0x33/0x810 [ 483.888369][T13395] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 483.888396][T13395] hwsim_new_radio_nl+0xf6a/0x1c00 [ 483.888433][T13395] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 483.888458][T13395] ? rcu_is_watching+0x15/0xb0 [ 483.888477][T13395] ? trace_kmalloc+0x2a/0xf0 [ 483.888518][T13395] ? __nla_parse+0x40/0x60 [ 483.888541][T13395] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 483.888562][T13395] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 483.888589][T13395] genl_family_rcv_msg_doit+0x22a/0x330 [ 483.888615][T13395] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 483.888647][T13395] ? bpf_lsm_capable+0x9/0x20 [ 483.888670][T13395] ? security_capable+0x7e/0x2c0 [ 483.888701][T13395] genl_rcv_msg+0x61c/0x7a0 [ 483.888727][T13395] ? __pfx_genl_rcv_msg+0x10/0x10 [ 483.888752][T13395] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 483.888777][T13395] netlink_rcv_skb+0x232/0x4b0 [ 483.888799][T13395] ? __pfx_genl_rcv_msg+0x10/0x10 [ 483.888816][T13395] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 483.888849][T13395] ? down_read+0x270/0x2e0 [ 483.888867][T13395] ? genl_rcv+0xd/0x40 [ 483.888884][T13395] genl_rcv+0x28/0x40 [ 483.888899][T13395] netlink_unicast+0x75c/0x8e0 [ 483.888928][T13395] netlink_sendmsg+0x813/0xb40 [ 483.888960][T13395] ? __pfx_netlink_sendmsg+0x10/0x10 [ 483.888985][T13395] ? aa_sock_msg_perm+0xf1/0x1b0 [ 483.889002][T13395] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 483.889023][T13395] ____sys_sendmsg+0x972/0x9f0 [ 483.889040][T13395] ? __might_fault+0xaf/0x130 [ 483.889066][T13395] ? __pfx_____sys_sendmsg+0x10/0x10 [ 483.889089][T13395] ? import_iovec+0x73/0xa0 [ 483.889111][T13395] ___sys_sendmsg+0x2a5/0x360 [ 483.889128][T13395] ? __lock_acquire+0x6b5/0x2cf0 [ 483.889158][T13395] ? __pfx____sys_sendmsg+0x10/0x10 [ 483.889201][T13395] ? __fget_files+0x2a/0x420 [ 483.889217][T13395] ? __fget_files+0x3a0/0x420 [ 483.889240][T13395] __x64_sys_sendmsg+0x1bd/0x2a0 [ 483.889257][T13395] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 483.889280][T13395] ? __pfx_ksys_write+0x10/0x10 [ 483.889304][T13395] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.889321][T13395] do_syscall_64+0x15f/0xf80 [ 483.889340][T13395] ? trace_irq_disable+0x3b/0x140 [ 483.889361][T13395] ? clear_bhb_loop+0x40/0x90 [ 483.889380][T13395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.889396][T13395] RIP: 0033:0x7f099b59c819 [ 483.889412][T13395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 483.889426][T13395] RSP: 002b:00007f099c491028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 483.889445][T13395] RAX: ffffffffffffffda RBX: 00007f099b815fa0 RCX: 00007f099b59c819 [ 483.889457][T13395] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 483.889466][T13395] RBP: 00007f099c491090 R08: 0000000000000000 R09: 0000000000000000 [ 483.889475][T13395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 483.889485][T13395] R13: 00007f099b816038 R14: 00007f099b815fa0 R15: 00007f099b93fa48 [ 483.889510][T13395] [ 483.896433][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 483.915232][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 484.306957][T13406] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2196'. [ 484.372188][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 484.391335][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 484.401897][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 484.485626][T13393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 484.513633][T13393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 484.852234][ T13] vlan2: left allmulticast mode [ 484.859900][ T13] geneve0: left allmulticast mode [ 484.880130][ T13] vlan2: left promiscuous mode [ 484.887979][ T13] geneve0: left promiscuous mode [ 484.893615][ T13] bridge0: port 3(vlan2) entered disabled state [ 484.905703][ T13] bridge_slave_1: left allmulticast mode [ 484.911433][ T13] bridge_slave_1: left promiscuous mode [ 484.917453][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.930882][ T13] bridge_slave_0: left allmulticast mode [ 484.936814][ T13] bridge_slave_0: left promiscuous mode [ 484.942569][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.240872][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 485.250650][ T13] bond0 (unregistering): Released all slaves [ 485.276672][ T13] team0: Port device bond1 removed [ 485.294911][ T13] bond1 (unregistering): Released all slaves [ 485.729424][T13438] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2203'. [ 485.747856][T13409] chnl_net:caif_netlink_parms(): no params data found [ 485.853422][T13447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.872703][T13447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.965168][T13447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.997739][T13447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.127345][T13409] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.141866][T13409] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.162682][T13409] bridge_slave_0: entered allmulticast mode [ 486.182560][T13409] bridge_slave_0: entered promiscuous mode [ 486.255499][T13409] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.271652][T13409] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.279390][T13409] bridge_slave_1: entered allmulticast mode [ 486.297672][T13409] bridge_slave_1: entered promiscuous mode [ 486.404886][T13409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 486.431815][ T5505] 8021q: adding VLAN 0 to HW filter on device eth5 [ 486.453586][T13471] netlink: 'syz.2.2209': attribute type 1 has an invalid length. [ 486.481845][T13409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 486.509090][T13476] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2209'. [ 486.518161][ T5842] Bluetooth: hci3: command tx timeout [ 486.562528][T13471] 8021q: adding VLAN 0 to HW filter on device bond22 [ 486.645427][T13476] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2209'. [ 486.683042][T13409] team0: Port device team_slave_0 added [ 486.709621][T13409] team0: Port device team_slave_1 added [ 486.793190][T13409] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 486.801787][T13409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 486.808658][T13480] delete_channel: no stack [ 486.831454][T13409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 486.848290][T13409] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 486.856276][T13409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 486.885539][T13409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 487.128025][ T13] hsr_slave_0: left promiscuous mode [ 487.145005][ T13] hsr_slave_1: left promiscuous mode [ 487.156648][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 487.186590][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 487.604455][T13509] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2216'. [ 487.809051][ T13] team0 (unregistering): Port device team_slave_1 removed [ 487.844720][ T13] team0 (unregistering): Port device team_slave_0 removed [ 488.123034][T13409] hsr_slave_0: entered promiscuous mode [ 488.129357][T13409] hsr_slave_1: entered promiscuous mode [ 488.135793][T13409] debugfs: 'hsr0' already exists in 'hsr' [ 488.141532][T13409] Cannot create hsr debugfs directory [ 488.154514][ T5505] 8021q: adding VLAN 0 to HW filter on device eth6 [ 488.542872][ T5922] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 488.593535][ T5842] Bluetooth: hci3: command tx timeout [ 488.673885][T13535] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 488.743243][ T5922] usb 7-1: Using ep0 maxpacket: 16 [ 488.760192][ T5922] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 488.781221][ T5922] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 488.804651][ T5922] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.832280][ T5922] usb 7-1: config 0 descriptor?? [ 488.860539][ T5922] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 489.161715][T13550] delete_channel: no stack [ 489.235007][T13409] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 489.266045][T13409] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 489.289974][T13409] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 489.316065][T13409] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 489.335155][T13409] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 489.367161][T13409] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 489.390148][T13409] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 489.424058][T13409] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 489.480373][ T5505] 8021q: adding VLAN 0 to HW filter on device eth7 [ 489.484024][T13571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 489.531327][T13573] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2220'. [ 489.540770][T13571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.616441][T13571] input: syz0 as /devices/virtual/input/input45 [ 489.645623][T13571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 489.675201][T13571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.695944][T13409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 489.718962][T13409] 8021q: adding VLAN 0 to HW filter on device team0 [ 489.736405][ T138] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.743512][ T138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 489.797504][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.804705][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 489.904034][T13560] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 489.926040][T13560] IPVS: sed: FWM 3 0x00000003 - no destination available [ 489.967609][T13409] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 490.085570][T13409] veth0_vlan: entered promiscuous mode [ 490.118224][T13409] veth1_vlan: entered promiscuous mode [ 490.194114][T13409] veth0_macvtap: entered promiscuous mode [ 490.219220][T13409] veth1_macvtap: entered promiscuous mode [ 490.305548][T13409] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 490.324047][T13409] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 490.347679][ T138] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.365494][ T1007] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.397779][ T1007] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.425496][ T1007] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.470496][T13587] binder: 13586:13587 ioctl c0306201 200000000300 returned -14 [ 490.627266][T13587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.641004][T13587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.673353][ T5842] Bluetooth: hci3: command tx timeout [ 490.706868][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.726080][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.798042][ T1025] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.818849][ T1025] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.001792][ T5505] 8021q: adding VLAN 0 to HW filter on device eth8 [ 491.223266][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 491.223277][ T29] audit: type=1326 audit(1776816852.366:2427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13604 comm="syz.7.2191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7847f9c819 code=0x7ffc0000 [ 491.282101][ T29] audit: type=1326 audit(1776816852.366:2428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13604 comm="syz.7.2191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7847f9c819 code=0x7ffc0000 [ 491.321312][ T29] audit: type=1326 audit(1776816852.376:2429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13604 comm="syz.7.2191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f7847f9c819 code=0x7ffc0000 [ 491.371760][ T29] audit: type=1326 audit(1776816852.396:2430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13604 comm="syz.7.2191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7847f9c819 code=0x7ffc0000 [ 491.439100][ T5915] usb 7-1: USB disconnect, device number 5 [ 491.484587][ T29] audit: type=1326 audit(1776816852.406:2431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13604 comm="syz.7.2191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7847f9c819 code=0x7ffc0000 [ 491.545301][ T29] audit: type=1326 audit(1776816852.406:2432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13604 comm="syz.7.2191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f7847f9c819 code=0x7ffc0000 [ 491.579640][T13615] bridge0: port 3(macvlan2) entered blocking state [ 491.592507][T13619] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2236'. [ 491.601909][T13615] bridge0: port 3(macvlan2) entered disabled state [ 491.608998][ T29] audit: type=1326 audit(1776816852.406:2433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13604 comm="syz.7.2191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7847f9c819 code=0x7ffc0000 [ 491.633337][T13615] macvlan2: entered allmulticast mode [ 491.647121][T13615] bridge0: entered allmulticast mode [ 491.652620][ T29] audit: type=1326 audit(1776816852.406:2434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13604 comm="syz.7.2191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f7847f9c819 code=0x7ffc0000 [ 491.677247][ T29] audit: type=1326 audit(1776816852.406:2435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13604 comm="syz.7.2191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7847f9c819 code=0x7ffc0000 [ 491.707210][T13615] macvlan2: left allmulticast mode [ 491.712425][ T29] audit: type=1326 audit(1776816852.406:2436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13604 comm="syz.7.2191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7847f9c819 code=0x7ffc0000 [ 491.737608][T13615] bridge0: left allmulticast mode [ 492.377305][T13641] loop9: detected capacity change from 0 to 524287871 [ 492.654241][T13647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.707030][T13647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.754895][ T5842] Bluetooth: hci3: command tx timeout [ 493.059392][T13660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.092490][T13660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.115334][T13660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.133178][T13660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.204885][T13666] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 493.219943][T13666] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 493.232111][T13666] sctp: [Deprecated]: syz.3.2247 (pid 13666) Use of int in maxseg socket option. [ 493.232111][T13666] Use struct sctp_assoc_value instead [ 493.454727][T13673] FAULT_INJECTION: forcing a failure. [ 493.454727][T13673] name failslab, interval 1, probability 0, space 0, times 0 [ 493.467809][T13673] CPU: 0 UID: 0 PID: 13673 Comm: syz.6.2250 Tainted: G L syzkaller #0 PREEMPT(full) [ 493.467827][T13673] Tainted: [L]=SOFTLOCKUP [ 493.467831][T13673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 493.467837][T13673] Call Trace: [ 493.467842][T13673] [ 493.467846][T13673] dump_stack_lvl+0xe8/0x150 [ 493.467867][T13673] should_fail_ex+0x412/0x560 [ 493.467886][T13673] should_failslab+0xa8/0x100 [ 493.467902][T13673] __kmalloc_cache_noprof+0x88/0x660 [ 493.467916][T13673] ? sctp_add_bind_addr+0x8c/0x370 [ 493.467931][T13673] sctp_add_bind_addr+0x8c/0x370 [ 493.467944][T13673] sctp_copy_local_addr_list+0x314/0x4f0 [ 493.467969][T13673] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 493.467980][T13673] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 493.467993][T13673] ? sctp_v6_is_any+0x64/0x80 [ 493.468006][T13673] ? sctp_copy_one_addr+0x93/0x360 [ 493.468019][T13673] sctp_bind_addr_copy+0xb3/0x3c0 [ 493.468031][T13673] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 493.468048][T13673] sctp_connect_new_asoc+0x2ff/0x6b0 [ 493.468064][T13673] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 493.468081][T13673] ? sctp_get_af_specific+0x29/0x80 [ 493.468091][T13673] ? sctp_inet6_send_verify+0x80/0x300 [ 493.468102][T13673] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 493.468117][T13673] __sctp_connect+0x5cb/0xdc0 [ 493.468136][T13673] ? __pfx___sctp_connect+0x10/0x10 [ 493.468149][T13673] ? sctp_setsockopt+0x21c/0x12c0 [ 493.468161][T13673] ? security_sctp_bind_connect+0x7e/0x2c0 [ 493.468176][T13673] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 493.468189][T13673] sctp_setsockopt+0x708/0x12c0 [ 493.468206][T13673] ? sock_common_setsockopt+0x36/0xc0 [ 493.468220][T13673] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 493.468233][T13673] do_sock_setsockopt+0x17c/0x1b0 [ 493.468251][T13673] __x64_sys_setsockopt+0x13d/0x1b0 [ 493.468267][T13673] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.468278][T13673] do_syscall_64+0x15f/0xf80 [ 493.468290][T13673] ? trace_irq_disable+0x3b/0x140 [ 493.468303][T13673] ? clear_bhb_loop+0x40/0x90 [ 493.468316][T13673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.468326][T13673] RIP: 0033:0x7f4a04f9c819 [ 493.468336][T13673] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 493.468348][T13673] RSP: 002b:00007f4a05f12028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 493.468360][T13673] RAX: ffffffffffffffda RBX: 00007f4a05215fa0 RCX: 00007f4a04f9c819 [ 493.468367][T13673] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000003 [ 493.468373][T13673] RBP: 00007f4a05f12090 R08: 0000000000000010 R09: 0000000000000000 [ 493.468379][T13673] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000002 [ 493.468385][T13673] R13: 00007f4a05216038 R14: 00007f4a05215fa0 R15: 00007f4a0533fa48 [ 493.468401][T13673] [ 495.845637][T13724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.861591][T13724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 495.873682][ T5915] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 495.899563][T13722] netlink: 'syz.3.2263': attribute type 10 has an invalid length. [ 495.910130][T13722] team0: Device xfrm0 is of different type [ 496.045935][ T5915] usb 7-1: config 3 has an invalid interface number: 112 but max is 0 [ 496.058368][ T5915] usb 7-1: config 3 has no interface number 0 [ 496.076396][ T5915] usb 7-1: config 3 interface 112 has no altsetting 0 [ 496.096404][ T5915] usb 7-1: New USB device found, idVendor=07fa, idProduct=0846, bcdDevice=42.d9 [ 496.105875][ T5915] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.125194][ T5915] usb 7-1: Product: syz [ 496.132453][ T5915] usb 7-1: Manufacturer: syz [ 496.141767][ T5915] usb 7-1: SerialNumber: syz [ 496.358110][ T5915] HFC-S_USB 7-1:3.112: probe with driver HFC-S_USB failed with error -5 [ 496.388364][ T5915] usb 7-1: USB disconnect, device number 6 [ 496.802513][T13732] delete_channel: no stack [ 496.896155][T13740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.906354][T13740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 497.119176][T13740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 497.131965][T13740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 497.144346][T13745] lo: Caught tx_queue_len zero misconfig [ 497.425677][T13758] FAULT_INJECTION: forcing a failure. [ 497.425677][T13758] name failslab, interval 1, probability 0, space 0, times 0 [ 497.452869][T13758] CPU: 1 UID: 0 PID: 13758 Comm: syz.6.2276 Tainted: G L syzkaller #0 PREEMPT(full) [ 497.452897][T13758] Tainted: [L]=SOFTLOCKUP [ 497.452905][T13758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 497.452916][T13758] Call Trace: [ 497.452923][T13758] [ 497.452931][T13758] dump_stack_lvl+0xe8/0x150 [ 497.452959][T13758] should_fail_ex+0x412/0x560 [ 497.452981][T13758] should_failslab+0xa8/0x100 [ 497.452995][T13758] ? skb_clone+0x212/0x3a0 [ 497.453006][T13758] kmem_cache_alloc_noprof+0x87/0x650 [ 497.453018][T13758] ? __netlink_lookup+0xc6/0x8b0 [ 497.453031][T13758] skb_clone+0x212/0x3a0 [ 497.453043][T13758] __netlink_deliver_tap+0x404/0x850 [ 497.453063][T13758] ? netlink_deliver_tap+0x2e/0x1b0 [ 497.453078][T13758] netlink_deliver_tap+0x19c/0x1b0 [ 497.453092][T13758] netlink_unicast+0x730/0x8e0 [ 497.453110][T13758] netlink_sendmsg+0x813/0xb40 [ 497.453129][T13758] ? __pfx_netlink_sendmsg+0x10/0x10 [ 497.453145][T13758] ? aa_sock_msg_perm+0xf1/0x1b0 [ 497.453156][T13758] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 497.453170][T13758] ____sys_sendmsg+0x972/0x9f0 [ 497.453180][T13758] ? __might_fault+0xaf/0x130 [ 497.453194][T13758] ? __pfx_____sys_sendmsg+0x10/0x10 [ 497.453209][T13758] ? import_iovec+0x73/0xa0 [ 497.453222][T13758] ___sys_sendmsg+0x2a5/0x360 [ 497.453232][T13758] ? __lock_acquire+0x6b5/0x2cf0 [ 497.453249][T13758] ? __pfx____sys_sendmsg+0x10/0x10 [ 497.453276][T13758] ? __fget_files+0x2a/0x420 [ 497.453286][T13758] ? __fget_files+0x3a0/0x420 [ 497.453300][T13758] __x64_sys_sendmsg+0x1bd/0x2a0 [ 497.453312][T13758] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 497.453327][T13758] ? __pfx_ksys_write+0x10/0x10 [ 497.453343][T13758] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.453355][T13758] do_syscall_64+0x15f/0xf80 [ 497.453367][T13758] ? trace_irq_disable+0x3b/0x140 [ 497.453380][T13758] ? clear_bhb_loop+0x40/0x90 [ 497.453393][T13758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.453403][T13758] RIP: 0033:0x7f4a04f9c819 [ 497.453413][T13758] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 497.453422][T13758] RSP: 002b:00007f4a05f12028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 497.453434][T13758] RAX: ffffffffffffffda RBX: 00007f4a05215fa0 RCX: 00007f4a04f9c819 [ 497.453441][T13758] RDX: 0000000024000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 497.453447][T13758] RBP: 00007f4a05f12090 R08: 0000000000000000 R09: 0000000000000000 [ 497.453454][T13758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 497.453460][T13758] R13: 00007f4a05216038 R14: 00007f4a05215fa0 R15: 00007f4a0533fa48 [ 497.453475][T13758] [ 497.985383][ T5922] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 498.026827][T13765] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 498.057639][T13765] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 498.154771][ T5922] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 498.167222][ T5922] usb 7-1: New USB device found, idVendor=055d, idProduct=9001, bcdDevice=31.44 [ 498.183339][ T5922] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.204346][ T5922] usb 7-1: config 0 descriptor?? [ 498.215042][ T5922] pwc: Samsung MPC-C30 USB webcam detected. [ 498.436472][ T5922] pwc: send_video_command error -71 [ 498.461850][ T5922] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 498.482250][ T5922] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71 [ 498.536573][ T5922] usb 7-1: USB disconnect, device number 7 [ 498.601657][T13774] netlink: 'syz.2.2280': attribute type 21 has an invalid length. [ 498.611561][T13774] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2280'. [ 498.632263][T13774] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2280'. [ 498.893685][T13779] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 499.010876][T13782] netlink: 'syz.5.2282': attribute type 2 has an invalid length. [ 499.023653][T13782] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2282'. [ 499.026435][T13781] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 499.392889][ T5915] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 499.602882][ T5915] usb 7-1: Using ep0 maxpacket: 8 [ 499.627417][ T5915] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 499.644787][ T5915] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.656789][ T5915] usb 7-1: Product: syz [ 499.664644][ T5915] usb 7-1: Manufacturer: syz [ 499.674936][ T5915] usb 7-1: SerialNumber: syz [ 499.690617][ T5915] usb 7-1: config 0 descriptor?? [ 499.921015][ T5915] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 500.489984][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 500.490000][ T29] audit: type=1326 audit(1776816861.636:2492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13810 comm="syz.2.2291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f099b59c819 code=0x7fc00000 [ 500.561468][T13819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.571291][T13819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 501.115090][ T29] audit: type=1326 audit(1776816862.266:2493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13810 comm="syz.2.2291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f099b59c819 code=0x7fc00000 [ 501.187387][T13835] input: syz0 as /devices/virtual/input/input46 [ 501.316465][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.324785][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.504227][T13842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 501.515526][T13842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 501.539614][ T5915] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 501.560012][ T5915] usb 7-1: USB disconnect, device number 8 [ 503.227861][T13901] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2306'. [ 503.479221][T13910] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 504.837317][ T5922] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 505.062436][ T5922] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 505.091406][ T5922] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 505.133626][T13938] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 505.140552][ T5922] usb 7-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 505.178101][T13938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.188165][ T5922] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 505.206129][ T5922] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.251711][T13938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.268977][ T5922] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 505.287213][ T5922] usb 7-1: invalid MIDI out EP 0 [ 505.916453][ T5922] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 505.977069][ T5922] usb 7-1: USB disconnect, device number 9 [ 506.167548][T13943] input: syz1 as /devices/virtual/input/input47 [ 506.753404][ T13] wlan0: Trigger new scan to find an IBSS to join [ 506.913323][T13956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.945475][T13956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 507.115678][T13959] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 507.308715][T13963] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 508.205860][T13979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.227448][T13979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.392873][ T807] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 508.569724][ T807] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 508.589889][ T807] usb 7-1: New USB device found, idVendor=055d, idProduct=9001, bcdDevice=31.44 [ 508.606806][ T807] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.628832][ T807] usb 7-1: config 0 descriptor?? [ 508.645787][ T807] pwc: Samsung MPC-C30 USB webcam detected. [ 508.854789][ T807] pwc: send_video_command error -71 [ 508.867893][ T807] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 508.883713][ T807] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71 [ 508.912514][ T807] usb 7-1: USB disconnect, device number 10 [ 509.081205][T13988] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2329'. [ 510.086628][T14003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.101809][T14003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.214528][T14008] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 510.288373][T14007] trusted_key: encrypted_key: insufficient parameters specified [ 510.567094][T14015] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 510.581555][T14017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.598334][T14017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.198565][T14019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.213823][T14019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.430520][T14019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.439902][T14019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.715699][ T138] wlan0: Trigger new scan to find an IBSS to join [ 512.643446][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 513.793466][T14046] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 513.827711][T14046] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 514.049970][T14068] xt_limit: Overflow, try lower: 0/0 [ 514.296621][ T12] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 514.319485][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.332338][ T12] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 514.344703][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.372692][ T12] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 514.411754][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.435352][ T12] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 514.468252][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.674493][T14087] syzkaller0: entered promiscuous mode [ 515.006753][T14098] fuse: Bad value for 'group_id' [ 515.017458][T14098] fuse: Bad value for 'group_id' [ 515.090838][T14100] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2359'. [ 515.565483][T14102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 515.814975][T14113] openvswitch: netlink: Tunnel attr 325 out of range max 16 [ 516.022550][T14119] FAULT_INJECTION: forcing a failure. [ 516.022550][T14119] name failslab, interval 1, probability 0, space 0, times 0 [ 516.101230][T14119] CPU: 0 UID: 0 PID: 14119 Comm: syz.6.2366 Tainted: G L syzkaller #0 PREEMPT(full) [ 516.101248][T14119] Tainted: [L]=SOFTLOCKUP [ 516.101252][T14119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 516.101258][T14119] Call Trace: [ 516.101263][T14119] [ 516.101268][T14119] dump_stack_lvl+0xe8/0x150 [ 516.101289][T14119] should_fail_ex+0x412/0x560 [ 516.101308][T14119] should_failslab+0xa8/0x100 [ 516.101323][T14119] ? __kernfs_new_node+0xea/0x970 [ 516.101335][T14119] kmem_cache_alloc_noprof+0x87/0x650 [ 516.101351][T14119] __kernfs_new_node+0xea/0x970 [ 516.101365][T14119] ? __pfx___kernfs_new_node+0x10/0x10 [ 516.101376][T14119] ? kernfs_root+0x1c/0x230 [ 516.101390][T14119] ? kernfs_root+0x1c/0x230 [ 516.101400][T14119] ? kernfs_root+0x1c/0x230 [ 516.101412][T14119] kernfs_new_node+0x102/0x210 [ 516.101426][T14119] kernfs_create_link+0xa7/0x200 [ 516.101441][T14119] sysfs_do_create_link_sd+0x83/0x110 [ 516.101453][T14119] device_add_class_symlinks+0x1cf/0x240 [ 516.101469][T14119] device_add+0x475/0xbb0 [ 516.101484][T14119] device_create+0x269/0x300 [ 516.101500][T14119] ? timer_init_key+0x161/0x2c0 [ 516.101516][T14119] ? __pfx_device_create+0x10/0x10 [ 516.101531][T14119] ? ieee80211_alloc_hw_nm+0x191d/0x1fa0 [ 516.101549][T14119] mac80211_hwsim_new_radio+0x427/0x5ba0 [ 516.101574][T14119] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 516.101585][T14119] ? __nla_parse+0x40/0x60 [ 516.101598][T14119] hwsim_new_radio_nl+0xf6a/0x1c00 [ 516.101619][T14119] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 516.101633][T14119] ? rcu_is_watching+0x15/0xb0 [ 516.101644][T14119] ? trace_kmalloc+0x2a/0xf0 [ 516.101662][T14119] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 516.101675][T14119] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 516.101690][T14119] genl_family_rcv_msg_doit+0x22a/0x330 [ 516.101705][T14119] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 516.101723][T14119] ? bpf_lsm_capable+0x9/0x20 [ 516.101737][T14119] ? security_capable+0x7e/0x2c0 [ 516.101756][T14119] genl_rcv_msg+0x61c/0x7a0 [ 516.101771][T14119] ? __pfx_genl_rcv_msg+0x10/0x10 [ 516.101782][T14119] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 516.101793][T14119] ? __pfx_ref_tracker_free+0x10/0x10 [ 516.101802][T14119] ? __asan_memcpy+0x40/0x70 [ 516.101812][T14119] ? __skb_clone+0x63/0x7a0 [ 516.101827][T14119] netlink_rcv_skb+0x232/0x4b0 [ 516.101842][T14119] ? __pfx_genl_rcv_msg+0x10/0x10 [ 516.101854][T14119] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 516.101876][T14119] ? down_read+0x270/0x2e0 [ 516.101889][T14119] ? genl_rcv+0xd/0x40 [ 516.101900][T14119] genl_rcv+0x28/0x40 [ 516.101916][T14119] netlink_unicast+0x75c/0x8e0 [ 516.101934][T14119] netlink_sendmsg+0x813/0xb40 [ 516.101953][T14119] ? __pfx_netlink_sendmsg+0x10/0x10 [ 516.101969][T14119] ? aa_sock_msg_perm+0xf1/0x1b0 [ 516.101980][T14119] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 516.101994][T14119] ____sys_sendmsg+0x972/0x9f0 [ 516.102004][T14119] ? __might_fault+0xaf/0x130 [ 516.102019][T14119] ? __pfx_____sys_sendmsg+0x10/0x10 [ 516.102033][T14119] ? import_iovec+0x73/0xa0 [ 516.102046][T14119] ___sys_sendmsg+0x2a5/0x360 [ 516.102056][T14119] ? __lock_acquire+0x6b5/0x2cf0 [ 516.102072][T14119] ? __pfx____sys_sendmsg+0x10/0x10 [ 516.102100][T14119] ? __fget_files+0x2a/0x420 [ 516.102110][T14119] ? __fget_files+0x3a0/0x420 [ 516.102125][T14119] __x64_sys_sendmsg+0x1bd/0x2a0 [ 516.102136][T14119] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 516.102151][T14119] ? __pfx_ksys_write+0x10/0x10 [ 516.102168][T14119] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.102179][T14119] do_syscall_64+0x15f/0xf80 [ 516.102191][T14119] ? trace_irq_disable+0x3b/0x140 [ 516.102205][T14119] ? clear_bhb_loop+0x40/0x90 [ 516.102217][T14119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.102227][T14119] RIP: 0033:0x7f4a04f9c819 [ 516.102237][T14119] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 516.102246][T14119] RSP: 002b:00007f4a05f12028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 516.102260][T14119] RAX: ffffffffffffffda RBX: 00007f4a05215fa0 RCX: 00007f4a04f9c819 [ 516.102268][T14119] RDX: 0000000000000084 RSI: 0000200000000080 RDI: 0000000000000003 [ 516.102274][T14119] RBP: 00007f4a05f12090 R08: 0000000000000000 R09: 0000000000000000 [ 516.102281][T14119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 516.102287][T14119] R13: 00007f4a05216038 R14: 00007f4a05215fa0 R15: 00007f4a0533fa48 [ 516.102303][T14119] [ 517.256326][T14142] fuse: Unknown parameter 'fd0x000000000000000700000000000000000000' [ 517.281719][T14139] kvm: pic: non byte read [ 517.296821][T14139] kvm: pic: non byte read [ 517.302487][T14139] kvm: pic: non byte read [ 517.308589][T14139] kvm: pic: non byte read [ 517.316077][T14139] kvm: pic: non byte read [ 517.320620][T14139] kvm: pic: non byte read [ 517.327759][T14139] kvm: pic: non byte read [ 517.334466][ T29] audit: type=1326 audit(1776816878.486:2494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14138 comm="syz.2.2372" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f099b59c819 code=0x0 [ 517.373474][T14139] kvm: pic: non byte read [ 517.523008][T14060] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 517.529001][T14147] netlink: 'syz.5.2374': attribute type 1 has an invalid length. [ 517.588283][T14147] bond2: entered promiscuous mode [ 517.595297][T14147] bond2: entered allmulticast mode [ 517.601569][T14147] 8021q: adding VLAN 0 to HW filter on device bond2 [ 517.706982][T14060] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 517.765444][T14060] usb 7-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 517.803664][T14060] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 517.833768][T14060] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.838489][T14153] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2376'. [ 517.894304][T14060] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 517.925247][T14060] usb 7-1: invalid MIDI out EP 0 [ 518.121164][ T29] audit: type=1326 audit(1776816879.266:2495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14158 comm="syz.7.2379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7847f9c819 code=0x7ffc0000 [ 518.200787][ T29] audit: type=1326 audit(1776816879.266:2496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14158 comm="syz.7.2379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f7847f9c819 code=0x7ffc0000 [ 518.265926][ T29] audit: type=1326 audit(1776816879.266:2497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14158 comm="syz.7.2379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7847f9c819 code=0x7ffc0000 [ 518.335927][T14060] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 518.363958][T14060] usb 7-1: USB disconnect, device number 11 [ 518.380523][ T29] audit: type=1326 audit(1776816879.266:2498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14158 comm="syz.7.2379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7847f9c819 code=0x7ffc0000 [ 518.438051][ T29] audit: type=1326 audit(1776816879.296:2499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14158 comm="syz.7.2379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7847f9c819 code=0x7ffc0000 [ 518.465178][ T29] audit: type=1326 audit(1776816879.296:2500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14158 comm="syz.7.2379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7847f9c819 code=0x7ffc0000 [ 518.488397][ T29] audit: type=1326 audit(1776816879.296:2501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14158 comm="syz.7.2379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f7847f9c819 code=0x7ffc0000 [ 518.524384][ T29] audit: type=1326 audit(1776816879.296:2502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14158 comm="syz.7.2379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7847f9c819 code=0x7ffc0000 [ 518.556399][ T29] audit: type=1326 audit(1776816879.316:2503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14158 comm="syz.7.2379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7847f9c819 code=0x7ffc0000 [ 518.726444][T14173] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 518.757056][T14173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 518.781005][T14173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 518.833477][T14173] lo: entered allmulticast mode [ 518.849632][T14173] tunl0: entered allmulticast mode [ 518.869146][T14173] gre0: entered allmulticast mode [ 518.884028][T14175] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2383'. [ 518.893172][T14173] gretap0: entered allmulticast mode [ 518.902476][T14173] erspan0: entered allmulticast mode [ 518.931142][T14173] ip_vti0: entered allmulticast mode [ 518.945269][T14173] ip6_vti0: entered allmulticast mode [ 518.960649][T14173] sit0: entered allmulticast mode [ 518.975763][T14173] ip6tnl0: entered allmulticast mode [ 518.998476][T14173] ip6gre0: entered allmulticast mode [ 519.008227][T14173] ip6gretap0: entered allmulticast mode [ 519.027017][T14173] bridge0: entered allmulticast mode [ 519.032575][T14173] vcan0: entered allmulticast mode [ 519.042351][T14173] bond0: entered allmulticast mode [ 519.049198][T14173] bond_slave_0: entered allmulticast mode [ 519.066862][T14173] bond_slave_1: entered allmulticast mode [ 519.080391][T14173] batadv0: entered allmulticast mode [ 519.091435][T14173] team0: entered allmulticast mode [ 519.101222][T14173] team_slave_0: entered allmulticast mode [ 519.111063][T14173] team_slave_1: entered allmulticast mode [ 519.121374][T14173] nlmon0: entered allmulticast mode [ 519.130324][T14173] caif0: entered allmulticast mode [ 519.141296][T14173] veth0: entered allmulticast mode [ 519.149680][T14173] veth1: entered allmulticast mode [ 519.158340][T14173] wg1: entered allmulticast mode [ 519.166853][T14173] wg2: entered allmulticast mode [ 519.173843][T14173] veth0_to_bridge: entered allmulticast mode [ 519.189387][T14173] veth1_to_bridge: entered allmulticast mode [ 519.210430][T14173] veth0_to_bond: entered allmulticast mode [ 519.223845][T14173] veth1_to_bond: entered allmulticast mode [ 519.240757][T14173] veth0_to_team: entered allmulticast mode [ 519.256125][T14173] veth1_to_team: entered allmulticast mode [ 519.263304][T14173] veth0_to_batadv: entered allmulticast mode [ 519.273534][T14173] batadv_slave_0: entered allmulticast mode [ 519.293373][T14173] veth1_to_batadv: entered allmulticast mode [ 519.313716][T14173] batadv_slave_1: entered allmulticast mode [ 519.326781][T14173] xfrm0: entered allmulticast mode [ 519.346790][T14173] veth0_to_hsr: entered allmulticast mode [ 519.360091][T14173] hsr_slave_0: entered allmulticast mode [ 519.383485][T14173] veth1_to_hsr: entered allmulticast mode [ 519.400125][T14173] hsr_slave_1: entered allmulticast mode [ 519.415932][T14173] hsr0: entered allmulticast mode [ 519.423056][T14173] veth1_virt_wifi: entered allmulticast mode [ 519.435873][T14173] veth0_virt_wifi: entered allmulticast mode [ 519.446929][T14173] virt_wifi0: entered allmulticast mode [ 519.460389][T14173] veth1_macvtap: entered allmulticast mode [ 519.469063][T14173] veth0_macvtap: entered allmulticast mode [ 519.486004][T14173] macvtap0: entered allmulticast mode [ 519.493309][T14173] macsec0: entered allmulticast mode [ 519.502238][T14173] geneve0: entered allmulticast mode [ 519.512422][T14173] geneve1: entered allmulticast mode [ 519.523521][T14173] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 519.532248][T14173] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 519.549728][T14173] netdevsim netdevsim3 netdevsim2: entered allmulticast mode [ 519.565585][T14173] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 519.581923][T14173] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 519.602606][T14173] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 519.617153][T14173] gre1: entered allmulticast mode [ 519.629934][T14173] : entered allmulticast mode [ 519.639592][T14173] sit1: left promiscuous mode [ 519.650029][T14173] sit1: entered allmulticast mode [ 519.660760][T14173] bond1: left promiscuous mode [ 519.673212][T14173] bond1: entered allmulticast mode [ 519.685288][T14173] vxlan0: entered allmulticast mode [ 519.702215][T14173] bridge_slave_0.: entered allmulticast mode [ 519.722578][T14173] gre2: entered allmulticast mode [ 519.743998][T14173] sit2: entered allmulticast mode [ 519.753534][T14173] bond2: entered allmulticast mode [ 519.767028][T14173] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 519.780334][T14173] vti60: entered allmulticast mode [ 519.787014][T14173] batadv0.5: entered allmulticast mode [ 519.794797][T14173] bridge1: entered allmulticast mode [ 519.800572][T14173] gre3: entered allmulticast mode [ 519.807595][T14173] sit3: entered allmulticast mode [ 519.813719][T14173] macsec1: left promiscuous mode [ 519.819048][T14173] ipip0: entered allmulticast mode [ 519.836409][T14173] mac80211_hwsim hwsim24 wlan2: entered allmulticast mode [ 519.849534][T14183] netlink: 'syz.5.2385': attribute type 1 has an invalid length. [ 519.849591][T14173] syztnl1: entered allmulticast mode [ 519.876940][T14173] syzkaller0.1: entered allmulticast mode [ 519.903968][T14175] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 520.011129][T14180] bridge0: port 3(macvlan2) entered blocking state [ 520.018535][T14180] bridge0: port 3(macvlan2) entered disabled state [ 520.026314][T14180] macvlan2: entered allmulticast mode [ 520.031857][T14180] bridge0: entered allmulticast mode [ 520.041008][T14180] macvlan2: left allmulticast mode [ 520.048971][T14180] bridge0: left allmulticast mode [ 520.094296][T14183] bond3: entered promiscuous mode [ 520.106351][T14183] bond3: entered allmulticast mode [ 520.119438][T14183] 8021q: adding VLAN 0 to HW filter on device bond3 [ 520.193170][ T808] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 520.336107][T14191] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2388'. [ 520.346181][ T808] usb 7-1: Using ep0 maxpacket: 8 [ 520.355125][ T808] usb 7-1: unable to get BOS descriptor or descriptor too short [ 520.365140][ T808] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 520.387926][ T808] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 520.419530][ T808] usb 7-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 520.439337][ T808] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 520.468482][ T808] usb 7-1: Manufacturer: syz [ 520.489585][ T808] usb 7-1: SerialNumber: syz [ 520.512428][ T808] usb 7-1: config 0 descriptor?? [ 520.532501][T14197] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2390'. [ 520.581161][T14197] bond0: entered promiscuous mode [ 520.590126][T14197] gretap0: entered promiscuous mode [ 520.599143][T14197] hsr1: entered promiscuous mode [ 520.748850][T14186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 520.760448][T14193] netlink: 'syz.2.2389': attribute type 1 has an invalid length. [ 520.778828][T14186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 520.812287][T14186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 520.867475][T14186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 520.908436][T14059] usb 7-1: USB disconnect, device number 12 [ 521.114955][T14210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 521.125071][T14210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 521.705627][T14217] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2396'. [ 521.726258][T14219] FAULT_INJECTION: forcing a failure. [ 521.726258][T14219] name failslab, interval 1, probability 0, space 0, times 0 [ 521.740866][T14219] CPU: 0 UID: 0 PID: 14219 Comm: syz.3.2397 Tainted: G L syzkaller #0 PREEMPT(full) [ 521.740897][T14219] Tainted: [L]=SOFTLOCKUP [ 521.740903][T14219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 521.740914][T14219] Call Trace: [ 521.740922][T14219] [ 521.740930][T14219] dump_stack_lvl+0xe8/0x150 [ 521.740962][T14219] should_fail_ex+0x412/0x560 [ 521.740990][T14219] ? alloc_inode+0x6a/0x1b0 [ 521.741017][T14219] should_failslab+0xa8/0x100 [ 521.741042][T14219] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 521.741063][T14219] ? simple_start_creating+0xcc/0x110 [ 521.741087][T14219] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 521.741111][T14219] alloc_inode+0x6a/0x1b0 [ 521.741138][T14219] new_inode+0x22/0x170 [ 521.741160][T14219] __debugfs_create_file+0xb8/0x400 [ 521.741188][T14219] debugfs_create_file_full+0x3f/0x60 [ 521.741215][T14219] ref_tracker_dir_debugfs+0x197/0x360 [ 521.741235][T14219] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 521.741280][T14219] ? __kvmalloc_node_noprof+0x545/0x8a0 [ 521.741303][T14219] ? alloc_netdev_mqs+0xa6/0x11b0 [ 521.741328][T14219] ? __raw_spin_lock_init+0x45/0x100 [ 521.741353][T14219] alloc_netdev_mqs+0x272/0x11b0 [ 521.741373][T14219] ? __pfx_ipgre_tunnel_setup+0x10/0x10 [ 521.741404][T14219] rtnl_create_link+0x31f/0xd70 [ 521.741431][T14219] rtnl_newlink_create+0x277/0xb70 [ 521.741457][T14219] ? __pfx___nla_validate_parse+0x10/0x10 [ 521.741488][T14219] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 521.741518][T14219] ? __pfx___mutex_lock+0x10/0x10 [ 521.741550][T14219] ? ns_capable+0x89/0xe0 [ 521.741577][T14219] rtnl_newlink+0x166a/0x1bb0 [ 521.741624][T14219] ? __pfx_rtnl_newlink+0x10/0x10 [ 521.741653][T14219] ? __lock_acquire+0x6b5/0x2cf0 [ 521.741682][T14219] ? __lock_acquire+0x6b5/0x2cf0 [ 521.741718][T14219] ? unwind_next_frame+0xa6/0x2550 [ 521.741744][T14219] ? unwind_next_frame+0xa6/0x2550 [ 521.741765][T14219] ? is_bpf_text_address+0x26/0x2b0 [ 521.741800][T14219] ? is_bpf_text_address+0x26/0x2b0 [ 521.741832][T14219] ? __lock_acquire+0x6b5/0x2cf0 [ 521.741861][T14219] ? kernel_text_address+0xa5/0xe0 [ 521.741884][T14219] ? __kernel_text_address+0xd/0x30 [ 521.741905][T14219] ? unwind_get_return_address+0x4d/0x90 [ 521.741924][T14219] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 521.741947][T14219] ? arch_stack_walk+0xfb/0x150 [ 521.741976][T14219] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 521.742012][T14219] ? __pfx_rtnl_newlink+0x10/0x10 [ 521.742035][T14219] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 521.742058][T14219] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 521.742079][T14219] ? netlink_sendmsg+0x5d4/0xb40 [ 521.742107][T14219] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 521.742129][T14219] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 521.742153][T14219] ? __lock_acquire+0x6b5/0x2cf0 [ 521.742192][T14219] netlink_rcv_skb+0x232/0x4b0 [ 521.742218][T14219] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 521.742244][T14219] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 521.742281][T14219] ? netlink_deliver_tap+0x2e/0x1b0 [ 521.742306][T14219] ? netlink_deliver_tap+0x2e/0x1b0 [ 521.742336][T14219] netlink_unicast+0x75c/0x8e0 [ 521.742369][T14219] netlink_sendmsg+0x813/0xb40 [ 521.742403][T14219] ? __pfx_netlink_sendmsg+0x10/0x10 [ 521.742433][T14219] ? aa_sock_msg_perm+0xf1/0x1b0 [ 521.742453][T14219] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 521.742476][T14219] ____sys_sendmsg+0x972/0x9f0 [ 521.742494][T14219] ? __might_fault+0xaf/0x130 [ 521.742518][T14219] ? __pfx_____sys_sendmsg+0x10/0x10 [ 521.742545][T14219] ? import_iovec+0x73/0xa0 [ 521.742568][T14219] ___sys_sendmsg+0x2a5/0x360 [ 521.742594][T14219] ? __lock_acquire+0x6b5/0x2cf0 [ 521.742622][T14219] ? __pfx____sys_sendmsg+0x10/0x10 [ 521.742675][T14219] ? __fget_files+0x2a/0x420 [ 521.742693][T14219] ? __fget_files+0x3a0/0x420 [ 521.742722][T14219] __x64_sys_sendmsg+0x1bd/0x2a0 [ 521.742743][T14219] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 521.742770][T14219] ? __pfx_ksys_write+0x10/0x10 [ 521.742800][T14219] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.742820][T14219] do_syscall_64+0x15f/0xf80 [ 521.742841][T14219] ? trace_irq_disable+0x3b/0x140 [ 521.742864][T14219] ? clear_bhb_loop+0x40/0x90 [ 521.742887][T14219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.742905][T14219] RIP: 0033:0x7fc93ff9c819 [ 521.742923][T14219] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 521.742938][T14219] RSP: 002b:00007fc940e6b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 521.742958][T14219] RAX: ffffffffffffffda RBX: 00007fc940215fa0 RCX: 00007fc93ff9c819 [ 521.742972][T14219] RDX: 0000000008000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 521.742984][T14219] RBP: 00007fc940e6b090 R08: 0000000000000000 R09: 0000000000000000 [ 521.742996][T14219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 521.743007][T14219] R13: 00007fc940216038 R14: 00007fc940215fa0 R15: 00007fc94033fa48 [ 521.743038][T14219] [ 522.709917][T14219] debugfs: out of free dentries, can not create file 'netdev@ffff8880362a6620' [ 522.739588][T14217] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 523.499870][T14252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 523.524339][T14252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 523.573427][ T808] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 523.735070][ T808] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 523.747721][ T808] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 523.774839][ T808] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 523.793326][ T808] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 523.819130][T14255] kvm: pic: non byte read [ 523.826114][T14255] kvm: pic: non byte read [ 523.831504][ T808] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 523.841341][ T808] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 523.850999][T14255] kvm: pic: non byte read [ 523.856690][ T808] usb 7-1: Manufacturer: syz [ 523.866524][ T808] usb 7-1: config 0 descriptor?? [ 523.878581][ T29] audit: type=1326 audit(1776816885.026:2504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14254 comm="syz.3.2410" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc93ff9c819 code=0x0 [ 523.878780][T14255] kvm: pic: non byte read [ 523.933857][T14255] kvm: pic: non byte read [ 523.942964][T14255] kvm: pic: non byte read [ 523.953499][T14255] kvm: pic: non byte read [ 523.964277][T14255] kvm: pic: non byte read [ 523.975141][T14255] kvm: pic: non byte read [ 524.363178][T14265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.387519][T14265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.799895][T14272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.810105][T14272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.825856][T14272] FAULT_INJECTION: forcing a failure. [ 524.825856][T14272] name failslab, interval 1, probability 0, space 0, times 0 [ 524.839832][T14272] CPU: 0 UID: 0 PID: 14272 Comm: syz.3.2415 Tainted: G L syzkaller #0 PREEMPT(full) [ 524.839858][T14272] Tainted: [L]=SOFTLOCKUP [ 524.839863][T14272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 524.839869][T14272] Call Trace: [ 524.839874][T14272] [ 524.839879][T14272] dump_stack_lvl+0xe8/0x150 [ 524.839900][T14272] should_fail_ex+0x412/0x560 [ 524.839922][T14272] should_failslab+0xa8/0x100 [ 524.839937][T14272] __kmalloc_noprof+0xe8/0x760 [ 524.839959][T14272] ? ethnl_default_notify+0x1f5/0xbe0 [ 524.839976][T14272] ? __kmalloc_noprof+0x1b8/0x760 [ 524.839999][T14272] ethnl_default_notify+0x1f5/0xbe0 [ 524.840018][T14272] ? __pfx___ethnl_set_coalesce+0x10/0x10 [ 524.840052][T14272] ? __pfx_ethnl_default_notify+0x10/0x10 [ 524.840085][T14272] ? mutex_is_locked+0x17/0x50 [ 524.840104][T14272] ? rtnl_is_locked+0x15/0x20 [ 524.840123][T14272] ethnl_default_set_doit+0x6ad/0xad0 [ 524.840140][T14272] genl_family_rcv_msg_doit+0x22a/0x330 [ 524.840153][T14272] ? __asan_memcpy+0x40/0x70 [ 524.840167][T14272] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 524.840185][T14272] ? bpf_lsm_capable+0x9/0x20 [ 524.840199][T14272] ? security_capable+0x7e/0x2c0 [ 524.840217][T14272] genl_rcv_msg+0x61c/0x7a0 [ 524.840238][T14272] ? __pfx_genl_rcv_msg+0x10/0x10 [ 524.840258][T14272] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 524.840290][T14272] netlink_rcv_skb+0x232/0x4b0 [ 524.840317][T14272] ? __pfx_genl_rcv_msg+0x10/0x10 [ 524.840339][T14272] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 524.840363][T14272] ? down_read+0x270/0x2e0 [ 524.840376][T14272] ? genl_rcv+0xd/0x40 [ 524.840387][T14272] genl_rcv+0x28/0x40 [ 524.840398][T14272] netlink_unicast+0x75c/0x8e0 [ 524.840422][T14272] netlink_sendmsg+0x813/0xb40 [ 524.840441][T14272] ? __pfx_netlink_sendmsg+0x10/0x10 [ 524.840457][T14272] ? aa_sock_msg_perm+0xf1/0x1b0 [ 524.840468][T14272] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 524.840481][T14272] ____sys_sendmsg+0x972/0x9f0 [ 524.840492][T14272] ? __might_fault+0xaf/0x130 [ 524.840506][T14272] ? __pfx_____sys_sendmsg+0x10/0x10 [ 524.840521][T14272] ? import_iovec+0x73/0xa0 [ 524.840534][T14272] ___sys_sendmsg+0x2a5/0x360 [ 524.840543][T14272] ? __lock_acquire+0x6b5/0x2cf0 [ 524.840560][T14272] ? __pfx____sys_sendmsg+0x10/0x10 [ 524.840588][T14272] ? __fget_files+0x2a/0x420 [ 524.840598][T14272] ? __fget_files+0x3a0/0x420 [ 524.840613][T14272] __x64_sys_sendmsg+0x1bd/0x2a0 [ 524.840624][T14272] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 524.840640][T14272] ? __pfx_ksys_write+0x10/0x10 [ 524.840656][T14272] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.840667][T14272] do_syscall_64+0x15f/0xf80 [ 524.840679][T14272] ? trace_irq_disable+0x3b/0x140 [ 524.840692][T14272] ? clear_bhb_loop+0x40/0x90 [ 524.840705][T14272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.840715][T14272] RIP: 0033:0x7fc93ff9c819 [ 524.840725][T14272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 524.840734][T14272] RSP: 002b:00007fc940e6b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 524.840746][T14272] RAX: ffffffffffffffda RBX: 00007fc940215fa0 RCX: 00007fc93ff9c819 [ 524.840753][T14272] RDX: 0000000000000006 RSI: 0000200000000540 RDI: 0000000000000011 [ 524.840760][T14272] RBP: 00007fc940e6b090 R08: 0000000000000000 R09: 0000000000000000 [ 524.840766][T14272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 524.840771][T14272] R13: 00007fc940216038 R14: 00007fc940215fa0 R15: 00007fc94033fa48 [ 524.840787][T14272] [ 525.302597][ T808] usbhid 7-1:0.0: can't add hid device: -71 [ 525.312209][ T808] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 525.340799][ T808] usb 7-1: USB disconnect, device number 13 [ 525.693292][ T808] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 525.853679][ T808] usb 7-1: Using ep0 maxpacket: 32 [ 525.862640][ T808] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 525.878800][ T808] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 525.891064][ T808] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 525.913945][ T808] usb 7-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 525.923554][ T808] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 525.932020][ T808] usb 7-1: Product: syz [ 525.937290][ T808] usb 7-1: Manufacturer: syz [ 525.941973][ T808] usb 7-1: SerialNumber: syz [ 525.950174][ T808] usb 7-1: config 0 descriptor?? [ 525.974646][ T808] usb 7-1: no audio or video endpoints found [ 526.002637][T14286] loop7: detected capacity change from 0 to 16384 [ 526.182718][T14274] fuse: Bad value for 'fd' [ 526.270824][T14292] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2416'. [ 526.326874][T14292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.350777][T14292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.380014][ C1] I/O error, dev loop7, sector 15360 op 0x0:(READ) flags 0x80700 phys_seg 16 prio class 2 [ 526.390036][ C1] I/O error, dev loop7, sector 15616 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2 [ 526.402034][T14289] loop7: detected capacity change from 16384 to 0 [ 526.411355][ C1] I/O error, dev loop7, sector 15360 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 526.420952][ C1] Buffer I/O error on dev loop7, logical block 1920, async page read [ 527.435566][T14308] FAULT_INJECTION: forcing a failure. [ 527.435566][T14308] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 527.454106][T14308] CPU: 0 UID: 0 PID: 14308 Comm: syz.2.2425 Tainted: G L syzkaller #0 PREEMPT(full) [ 527.454134][T14308] Tainted: [L]=SOFTLOCKUP [ 527.454141][T14308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 527.454152][T14308] Call Trace: [ 527.454160][T14308] [ 527.454167][T14308] dump_stack_lvl+0xe8/0x150 [ 527.454200][T14308] should_fail_ex+0x412/0x560 [ 527.454233][T14308] _copy_to_user+0x31/0xb0 [ 527.454262][T14308] snd_pcm_oss_read2+0x341/0x420 [ 527.454287][T14308] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 527.454315][T14308] ? __pfx_snd_pcm_oss_read2+0x10/0x10 [ 527.454336][T14308] ? __pfx_snd_pcm_post_prepare+0x10/0x10 [ 527.454362][T14308] ? snd_pcm_action_nonatomic+0x25c/0x2b0 [ 527.454392][T14308] snd_pcm_oss_read+0x628/0x8e0 [ 527.454425][T14308] ? __pfx_snd_pcm_oss_read+0x10/0x10 [ 527.454449][T14308] vfs_read+0x20c/0xa70 [ 527.454480][T14308] ? __pfx_vfs_read+0x10/0x10 [ 527.454503][T14308] ? __fget_files+0x2a/0x420 [ 527.454525][T14308] ? __fget_files+0x2a/0x420 [ 527.454542][T14308] ? __fget_files+0x3a0/0x420 [ 527.454559][T14308] ? __fget_files+0x2a/0x420 [ 527.454585][T14308] ksys_read+0x150/0x270 [ 527.454609][T14308] ? __pfx_ksys_read+0x10/0x10 [ 527.454637][T14308] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.454654][T14308] do_syscall_64+0x15f/0xf80 [ 527.454676][T14308] ? trace_irq_disable+0x3b/0x140 [ 527.454699][T14308] ? clear_bhb_loop+0x40/0x90 [ 527.454720][T14308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.454737][T14308] RIP: 0033:0x7f099b59c819 [ 527.454752][T14308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 527.454765][T14308] RSP: 002b:00007f099c491028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 527.454781][T14308] RAX: ffffffffffffffda RBX: 00007f099b815fa0 RCX: 00007f099b59c819 [ 527.454792][T14308] RDX: 0000000000002020 RSI: 00002000000063c0 RDI: 0000000000000003 [ 527.454802][T14308] RBP: 00007f099c491090 R08: 0000000000000000 R09: 0000000000000000 [ 527.454812][T14308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 527.454821][T14308] R13: 00007f099b816038 R14: 00007f099b815fa0 R15: 00007f099b93fa48 [ 527.454845][T14308] [ 528.114470][T14327] netlink: 'syz.3.2432': attribute type 16 has an invalid length. [ 528.141121][T14327] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 528.292019][T14334] gretap0: left allmulticast mode [ 528.302063][T14334] netlink: 136 bytes leftover after parsing attributes in process `syz.3.2434'. [ 528.322316][T14334] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 528.392148][ T7667] usb 7-1: USB disconnect, device number 14 [ 528.581984][T14344] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2437'. [ 528.598464][T14344] netlink: 'syz.3.2437': attribute type 14 has an invalid length. [ 528.614270][T14344] netlink: 'syz.3.2437': attribute type 13 has an invalid length. [ 528.633970][T14343] bridge0: entered promiscuous mode [ 528.680666][T14343] bridge0: port 3(macvlan2) entered blocking state [ 528.701034][T14343] bridge0: port 3(macvlan2) entered disabled state [ 528.727937][T14343] macvlan2: entered allmulticast mode [ 528.749826][T14343] bridge0: entered allmulticast mode [ 528.795102][T14343] macvlan2: left allmulticast mode [ 528.800392][T14343] bridge0: left allmulticast mode [ 528.811671][T14343] bridge0: left promiscuous mode [ 529.511345][T14350] FAULT_INJECTION: forcing a failure. [ 529.511345][T14350] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 529.528877][T14350] CPU: 0 UID: 0 PID: 14350 Comm: syz.6.2438 Tainted: G L syzkaller #0 PREEMPT(full) [ 529.528904][T14350] Tainted: [L]=SOFTLOCKUP [ 529.528911][T14350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 529.528923][T14350] Call Trace: [ 529.528930][T14350] [ 529.528938][T14350] dump_stack_lvl+0xe8/0x150 [ 529.528971][T14350] should_fail_ex+0x412/0x560 [ 529.529003][T14350] _copy_from_user+0x2d/0xb0 [ 529.529023][T14350] ___sys_sendmsg+0x1c6/0x360 [ 529.529040][T14350] ? __lock_acquire+0x6b5/0x2cf0 [ 529.529070][T14350] ? __pfx____sys_sendmsg+0x10/0x10 [ 529.529114][T14350] ? __fget_files+0x2a/0x420 [ 529.529133][T14350] ? __fget_files+0x3a0/0x420 [ 529.529166][T14350] __x64_sys_sendmsg+0x1bd/0x2a0 [ 529.529187][T14350] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 529.529213][T14350] ? __pfx_ksys_write+0x10/0x10 [ 529.529240][T14350] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.529258][T14350] do_syscall_64+0x15f/0xf80 [ 529.529279][T14350] ? trace_irq_disable+0x3b/0x140 [ 529.529301][T14350] ? clear_bhb_loop+0x40/0x90 [ 529.529323][T14350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.529340][T14350] RIP: 0033:0x7f4a04f9c819 [ 529.529357][T14350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 529.529371][T14350] RSP: 002b:00007f4a05f12028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 529.529389][T14350] RAX: ffffffffffffffda RBX: 00007f4a05215fa0 RCX: 00007f4a04f9c819 [ 529.529402][T14350] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 529.529414][T14350] RBP: 00007f4a05f12090 R08: 0000000000000000 R09: 0000000000000000 [ 529.529424][T14350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 529.529434][T14350] R13: 00007f4a05216038 R14: 00007f4a05215fa0 R15: 00007f4a0533fa48 [ 529.529462][T14350] [ 529.993387][T14058] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 530.098298][T14358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 530.107636][T14358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 530.153372][T14058] usb 7-1: Using ep0 maxpacket: 32 [ 530.161564][T14058] usb 7-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 530.174098][T14058] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.182148][T14058] usb 7-1: Product: syz [ 530.186972][T14058] usb 7-1: Manufacturer: syz [ 530.191584][T14058] usb 7-1: SerialNumber: syz [ 530.198567][T14058] usb 7-1: config 0 descriptor?? [ 530.319054][T14358] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 530.407897][T14058] RobotFuzz Open Source InterFace, OSIF 7-1:0.0: version d4.15 found at bus 007 address 015 [ 530.867667][T14363] FAULT_INJECTION: forcing a failure. [ 530.867667][T14363] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 530.882628][T14363] CPU: 0 UID: 0 PID: 14363 Comm: syz.5.2444 Tainted: G L syzkaller #0 PREEMPT(full) [ 530.882655][T14363] Tainted: [L]=SOFTLOCKUP [ 530.882662][T14363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 530.882673][T14363] Call Trace: [ 530.882680][T14363] [ 530.882688][T14363] dump_stack_lvl+0xe8/0x150 [ 530.882720][T14363] should_fail_ex+0x412/0x560 [ 530.882756][T14363] _copy_to_user+0x31/0xb0 [ 530.882778][T14363] simple_read_from_buffer+0xe1/0x170 [ 530.882802][T14363] proc_fail_nth_read+0x1bb/0x230 [ 530.882825][T14363] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 530.882848][T14363] ? rw_verify_area+0x2a6/0x4d0 [ 530.882869][T14363] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 530.882891][T14363] vfs_read+0x20c/0xa70 [ 530.882917][T14363] ? __pfx___mutex_lock+0x10/0x10 [ 530.882940][T14363] ? __pfx_vfs_read+0x10/0x10 [ 530.882963][T14363] ? __fget_files+0x2a/0x420 [ 530.882986][T14363] ? __fget_files+0x3a0/0x420 [ 530.883004][T14363] ? __fget_files+0x2a/0x420 [ 530.883031][T14363] ksys_read+0x150/0x270 [ 530.883055][T14363] ? __pfx_ksys_read+0x10/0x10 [ 530.883091][T14363] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.883111][T14363] do_syscall_64+0x15f/0xf80 [ 530.883133][T14363] ? trace_irq_disable+0x3b/0x140 [ 530.883156][T14363] ? clear_bhb_loop+0x40/0x90 [ 530.883179][T14363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.883197][T14363] RIP: 0033:0x7f5f5a75d04e [ 530.883215][T14363] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 530.883231][T14363] RSP: 002b:00007f5f589f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 530.883251][T14363] RAX: ffffffffffffffda RBX: 00007f5f589f66c0 RCX: 00007f5f5a75d04e [ 530.883265][T14363] RDX: 000000000000000f RSI: 00007f5f589f60a0 RDI: 0000000000000004 [ 530.883277][T14363] RBP: 00007f5f589f6090 R08: 0000000000000000 R09: 0000000000000000 [ 530.883288][T14363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 530.883300][T14363] R13: 00007f5f5aa16038 R14: 00007f5f5aa15fa0 R15: 00007f5f5ab3fa48 [ 530.883329][T14363] [ 531.107770][T14366] gre0: left allmulticast mode [ 531.115666][T14366] netlink: 136 bytes leftover after parsing attributes in process `syz.3.2445'. [ 531.147906][T14366] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 531.177724][T14368] FAULT_INJECTION: forcing a failure. [ 531.177724][T14368] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 531.191540][T14368] CPU: 1 UID: 0 PID: 14368 Comm: syz.5.2446 Tainted: G L syzkaller #0 PREEMPT(full) [ 531.191567][T14368] Tainted: [L]=SOFTLOCKUP [ 531.191574][T14368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 531.191585][T14368] Call Trace: [ 531.191593][T14368] [ 531.191601][T14368] dump_stack_lvl+0xe8/0x150 [ 531.191633][T14368] should_fail_ex+0x412/0x560 [ 531.191664][T14368] _copy_to_user+0x31/0xb0 [ 531.191687][T14368] video_usercopy+0xe0a/0x1450 [ 531.191718][T14368] ? __pfx___video_do_ioctl+0x10/0x10 [ 531.191743][T14368] ? __pfx_video_usercopy+0x10/0x10 [ 531.191776][T14368] ? __fget_files+0x2a/0x420 [ 531.191804][T14368] ? __fget_files+0x2a/0x420 [ 531.191822][T14368] ? __fget_files+0x3a0/0x420 [ 531.191842][T14368] v4l2_ioctl+0x18d/0x1e0 [ 531.191864][T14368] ? __pfx_v4l2_ioctl+0x10/0x10 [ 531.191887][T14368] __se_sys_ioctl+0xfc/0x170 [ 531.191910][T14368] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.191930][T14368] do_syscall_64+0x15f/0xf80 [ 531.191951][T14368] ? trace_irq_disable+0x3b/0x140 [ 531.191975][T14368] ? clear_bhb_loop+0x40/0x90 [ 531.191997][T14368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.192016][T14368] RIP: 0033:0x7f5f5a79c819 [ 531.192032][T14368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 531.192047][T14368] RSP: 002b:00007f5f589f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 531.192066][T14368] RAX: ffffffffffffffda RBX: 00007f5f5aa15fa0 RCX: 00007f5f5a79c819 [ 531.192080][T14368] RDX: 0000200000000100 RSI: 00000000c008561c RDI: 0000000000000009 [ 531.192092][T14368] RBP: 00007f5f589f6090 R08: 0000000000000000 R09: 0000000000000000 [ 531.192103][T14368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 531.192114][T14368] R13: 00007f5f5aa16038 R14: 00007f5f5aa15fa0 R15: 00007f5f5ab3fa48 [ 531.192143][T14368] [ 531.590633][T14374] delete_channel: no stack [ 532.044379][T14381] fuse: Unknown parameter 'ro§000000000000000010' [ 532.901475][T14058] usb 7-1: USB disconnect, device number 15 [ 533.740204][T14409] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2460'. [ 533.887485][T14402] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 533.914205][T14402] IPVS: sed: FWM 3 0x00000003 - no destination available [ 533.953791][ T30] INFO: task kworker/1:0:24 blocked for more than 143 seconds. [ 533.975858][ T30] Tainted: G L syzkaller #0 [ 533.985943][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 534.011730][ T30] task:kworker/1:0 state:D stack:20832 pid:24 tgid:24 ppid:2 task_flags:0x4288060 flags:0x00080000 [ 534.051893][ T30] Workqueue: usb_hub_wq hub_event [ 534.070319][ T30] Call Trace: [ 534.076565][ T30] [ 534.083621][ T30] __schedule+0x17b4/0x5680 [ 534.097462][ T30] ? __pfx___schedule+0x10/0x10 [ 534.113263][ T30] ? schedule+0x90/0x360 [ 534.117680][ T30] schedule+0x164/0x360 [ 534.126590][ T30] schedule_timeout+0xc3/0x2c0 [ 534.126669][T14412] delete_channel: no stack [ 534.139210][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 534.151365][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 534.157211][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 534.175325][ T30] ? wait_for_completion+0x274/0x5e0 [ 534.190945][ T30] wait_for_completion+0x2cc/0x5e0 [ 534.197498][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 534.210720][ T30] i2c_del_adapter+0x5c0/0x790 [ 534.224916][ T30] ? __pfx___up_read+0x10/0x10 [ 534.237762][ T30] ? __pfx_i2c_del_adapter+0x10/0x10 [ 534.253367][ T30] ? __pfx_ft260_remove+0x10/0x10 [ 534.260205][ T30] ? sysfs_remove_group+0x23d/0x2e0 [ 534.269889][ T30] ? __pfx_ft260_remove+0x10/0x10 [ 534.278848][ T30] ft260_remove+0x5d/0x80 [ 534.289033][ T30] hid_device_remove+0x228/0x370 [ 534.299151][ T30] ? __pfx_hid_device_remove+0x10/0x10 [ 534.309271][ T30] device_release_driver_internal+0x46f/0x870 [ 534.319397][ T30] bus_remove_device+0x455/0x570 [ 534.329516][ T30] ? __pfx_bus_remove_device+0x10/0x10 [ 534.339634][ T30] ? kernfs_remove_by_name_ns+0x101/0x140 [ 534.348016][ T30] device_del+0x527/0x8f0 [ 534.352503][ T30] ? __pfx_device_del+0x10/0x10 [ 534.366173][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 534.371278][ T30] hid_destroy_device+0x6b/0x1b0 [ 534.376967][ T30] usbhid_disconnect+0x9f/0xc0 [ 534.381792][ T30] usb_unbind_interface+0x26e/0x910 [ 534.387787][ T30] ? kernfs_remove_by_name_ns+0x101/0x140 [ 534.394114][ T30] ? __pfx_usb_unbind_interface+0x10/0x10 [ 534.399919][ T30] device_release_driver_internal+0x4d9/0x870 [ 534.406806][ T30] bus_remove_device+0x455/0x570 [ 534.411802][ T30] ? __pfx_bus_remove_device+0x10/0x10 [ 534.417890][ T30] ? kernfs_remove_by_name_ns+0x101/0x140 [ 534.424389][ T30] device_del+0x527/0x8f0 [ 534.428725][ T30] ? __pfx_device_del+0x10/0x10 [ 534.434087][ T30] ? kobject_put+0x51d/0x560 [ 534.438861][ T30] usb_disable_device+0x3d4/0x8d0 [ 534.444671][ T30] usb_disconnect+0x32f/0x990 [ 534.449350][ T30] hub_event+0x1cc9/0x4f30 [ 534.454417][ T30] ? __pfx_hub_event+0x10/0x10 [ 534.459194][ T30] ? process_scheduled_works+0xa70/0x1860 [ 534.465679][ T30] ? process_scheduled_works+0xa70/0x1860 [ 534.471424][ T30] ? process_scheduled_works+0xa70/0x1860 [ 534.477385][ T30] process_scheduled_works+0xb5d/0x1860 [ 534.483568][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 534.489556][ T30] ? assign_work+0x3d5/0x5e0 [ 534.494681][ T30] worker_thread+0xa53/0xfc0 [ 534.499288][ T30] kthread+0x388/0x470 [ 534.504020][ T30] ? __pfx_worker_thread+0x10/0x10 [ 534.509144][ T30] ? __pfx_kthread+0x10/0x10 [ 534.514629][ T30] ret_from_fork+0x514/0xb70 [ 534.519293][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 534.525327][ T30] ? __switch_to+0xc79/0x1410 [ 534.530054][ T30] ? __pfx_kthread+0x10/0x10 [ 534.535135][ T30] ret_from_fork_asm+0x1a/0x30 [ 534.540125][ T30] [ 534.544631][ T30] [ 534.544631][ T30] Showing all locks held in the system: [ 534.573882][ T30] 2 locks held by ksoftirqd/1/23: [ 534.583592][ T30] 6 locks held by kworker/1:0/24: [ 534.596736][ T30] #0: ffff8880226a3540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 534.608886][ T30] #1: ffffc900001e7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 534.621235][ T30] #2: ffff88802a3c31d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 534.630714][ T30] #3: ffff8880372b81d8 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xf8/0x990 [ 534.640423][ T30] #4: ffff8880251c51a0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x870 [ 534.651312][ T30] #5: ffff888044285a58 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x870 [ 534.662297][ T30] 1 lock held by khungtaskd/30: [ 534.668053][ T30] #0: ffffffff8e95cce0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 534.678954][ T30] 3 locks held by kworker/u8:2/35: [ 534.685196][ T30] #0: ffff8880b863aea0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb6/0x150 [ 534.695736][ T30] #1: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 534.705212][ T30] #2: ffffffff8e95cce0 (rcu_read_lock){....}-{1:3}, at: rds_queue_reconnect+0x213/0x8c0 [ 534.715516][ T30] 2 locks held by getty/5592: [ 534.720217][ T30] #0: ffff88803718f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 534.730786][ T30] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 534.741477][ T30] 1 lock held by syz.1.1880/12417: [ 534.747572][ T30] #0: ffff88802a3c31d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x182/0x770 [ 534.757375][ T30] 1 lock held by syz.2.2431/14323: [ 534.762501][ T30] #0: ffff88802a3c31d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x182/0x770 [ 534.772124][ T30] [ 534.776662][ T30] ============================================= [ 534.776662][ T30] [ 534.786088][ T30] NMI backtrace for cpu 0 [ 534.786103][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 534.786117][ T30] Tainted: [L]=SOFTLOCKUP [ 534.786121][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 534.786127][ T30] Call Trace: [ 534.786132][ T30] [ 534.786137][ T30] dump_stack_lvl+0xe8/0x150 [ 534.786158][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 534.786175][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 534.786199][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 534.786226][ T30] sys_info+0x135/0x170 [ 534.786247][ T30] watchdog+0xfd3/0x1030 [ 534.786275][ T30] ? watchdog+0x1c9/0x1030 [ 534.786294][ T30] kthread+0x388/0x470 [ 534.786306][ T30] ? __pfx_watchdog+0x10/0x10 [ 534.786317][ T30] ? __pfx_kthread+0x10/0x10 [ 534.786329][ T30] ret_from_fork+0x514/0xb70 [ 534.786345][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 534.786359][ T30] ? __switch_to+0xc79/0x1410 [ 534.786374][ T30] ? __pfx_kthread+0x10/0x10 [ 534.786385][ T30] ret_from_fork_asm+0x1a/0x30 [ 534.786402][ T30] [ 534.786406][ T30] Sending NMI from CPU 0 to CPUs 1: [ 534.908240][ C1] NMI backtrace for cpu 1 [ 534.908275][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 534.908296][ C1] Tainted: [L]=SOFTLOCKUP [ 534.908303][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 534.908315][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 534.908345][ C1] Code: 2b 71 02 e9 53 f4 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 f1 10 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 534.908360][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000242 [ 534.908378][ C1] RAX: 0000000000ca5519 RBX: ffffffff819aae9a RCX: 0000000080000001 [ 534.908389][ C1] RDX: 0000000000000001 RSI: ffffffff8dfd6f87 RDI: ffffffff8c289ce0 [ 534.908401][ C1] RBP: ffffc90000197f10 R08: ffff8880b87339db R09: 1ffff110170e673b [ 534.908412][ C1] R10: dffffc0000000000 R11: ffffed10170e673c R12: 0000000000000001 [ 534.908424][ C1] R13: 1ffff11003bd0000 R14: 0000000000000001 R15: 1ffff11003bd0000 [ 534.908436][ C1] FS: 0000000000000000(0000) GS:ffff888125317000(0000) knlGS:0000000000000000 [ 534.908449][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 534.908459][ C1] CR2: 00007fc9401e7158 CR3: 000000000e74a000 CR4: 00000000003526f0 [ 534.908476][ C1] Call Trace: [ 534.908486][ C1] [ 534.908493][ C1] default_idle+0x9/0x20 [ 534.908520][ C1] default_idle_call+0x72/0xb0 [ 534.908542][ C1] do_idle+0x36a/0x5f0 [ 534.908560][ C1] ? asm_sysvec_call_function_single+0x1a/0x20 [ 534.908580][ C1] ? __pfx_do_idle+0x10/0x10 [ 534.908598][ C1] cpu_startup_entry+0x43/0x60 [ 534.908613][ C1] start_secondary+0x101/0x110 [ 534.908641][ C1] common_startup_64+0x13e/0x147 [ 534.908673][ C1] [ 535.093548][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 535.100422][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 535.111092][ T30] Tainted: [L]=SOFTLOCKUP [ 535.115405][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 535.125450][ T30] Call Trace: [ 535.128718][ T30] [ 535.131658][ T30] vpanic+0x56c/0xa60 [ 535.135646][ T30] ? __pfx___schedule+0x10/0x10 [ 535.140491][ T30] ? __pfx_vpanic+0x10/0x10 [ 535.145004][ T30] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 535.151182][ T30] panic+0xc5/0xd0 [ 535.154897][ T30] ? __pfx_panic+0x10/0x10 [ 535.159331][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 535.164696][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 535.170875][ T30] watchdog+0x102c/0x1030 [ 535.175204][ T30] ? watchdog+0x1c9/0x1030 [ 535.179619][ T30] kthread+0x388/0x470 [ 535.183687][ T30] ? __pfx_watchdog+0x10/0x10 [ 535.188350][ T30] ? __pfx_kthread+0x10/0x10 [ 535.192936][ T30] ret_from_fork+0x514/0xb70 [ 535.197546][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 535.202669][ T30] ? __switch_to+0xc79/0x1410 [ 535.207340][ T30] ? __pfx_kthread+0x10/0x10 [ 535.211921][ T30] ret_from_fork_asm+0x1a/0x30 [ 535.216686][ T30] [ 535.220297][ T30] Kernel Offset: disabled [ 535.224608][ T30] Rebooting in 86400 seconds..