last executing test programs: 13m5.245056975s ago: executing program 1 (id=1071): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) r1 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000d40)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401"], 0x0) syz_usb_control_io$sierra_net(r1, 0x0, 0x0) 13m3.329782072s ago: executing program 1 (id=1083): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r0, 0x0, 0x9, &(0x7f0000000040)="ff009143c3ef797c0b5b381b831b732272f9b46316e80ebc2ffe81f366030000000000000000000000000073ae1d0f8bf28c30674be7ae669700f9fed1326b819aea9b25c3e6d9d17c63b495f07ecf934a64ef3746068caf7aa68d8fe38d18a07489e73c265663113a13898db8307b24825d171552f23fdb15d810218a8de225efbe992046e1d10b1ddd1c5205dcfcf26853e7a60d731a338666a9f5d057f59ee682a59f1698561a18edcf038f080bd4b295ece153e7cf9ce61059a20849494a4b14717f804c29ff7c8c459a5b9e6d5a055b7d0b02db6a479cfe40695b963f8ac0fe7803b13c1b8f1a6172", 0xeb) socket$inet(0xa, 0x80000, 0xffff43af) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000240)=0x1, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'syzkaller1\x00', 0x800}) write$tun(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="000086dd0001"], 0xfdef) connect$inet(r3, &(0x7f0000000140)={0x2, 0x5e21, @multicast2}, 0x10) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000300)={'nat\x00', 0x0, 0x0, 0x0, [0x100000000, 0xf, 0x200000002, 0x3, 0x3, 0x2]}, &(0x7f0000000380)=0x78) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x1, &(0x7f0000000200)) ioctl$DVB_DEMUX_DMX_EXPBUF(r3, 0xc00c6f3e, &(0x7f00000003c0)={0xfffffffe, 0x0, r4}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r7, @ANYBLOB="05000000004001971419327718ff70000300d6c5f7f111649e9d94bfa3a38de4cdc14a094816831ce8f722f973ef37357888", @ANYRES32=r8, @ANYBLOB="4d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640001002a01023c040100ae022d1a80001e8100000000000000030009000b0000000100cd1b00000d0000001e000f00751800080400070008005151c25a2e835d3a33f0b8f280ca1b52000008000c006400000008000d0000000000"], 0x9c}}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r12 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r12, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r10, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001240)=@delchain={0x19ec, 0x65, 0x200, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0xfff2, 0x3}, {0x0, 0xfff3}, {0xc, 0x2}}, [@TCA_CHAIN={0x8, 0xb, 0x3}, @filter_kind_options=@f_bpf={{0x8}, {0x19b8, 0x2, [@TCA_BPF_POLICE={0x10, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xd9}]}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_NAME={0x1ff, 0x7, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, @TCA_BPF_ACT={0x6dc, 0x1, [@m_skbedit={0x134, 0x0, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x0, 0xd}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x7, 0xffff}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xffff, 0xfff1}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x73}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x5, 0xfff1}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xe97}]}, {0xd5, 0x6, "41d9293533b90217956b883dc1f0723570db83769596a2cb3be60dbd68a6c6791c2d7a1d3f645dc2a6590da1dcb9c065fd89871beaeb98a34304790292ff6261e3fa1a943ac207a95d2debab6f514d25d10c6d143ae20f7e88b2dcd43fb874a82f88968c14f6309876300124159e1a6e634dc5e938bb97720ec87ca3ee4e2a8fc46095f551acab9b293eeea86b708d876c2016c5df642f0b40999f7840870be40738de637c4810046a0dd61dbacbb780589e21d14546324ff1e69a07d7b69ed6e2526c523daed7cfc5cbfe914525fc1700"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_ct={0x88, 0x16, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_CT_LABELS={0x14, 0x7, "9a5204e127812b9369a358482668380d"}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x46bc25e5}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e23}, @TCA_CT_ZONE={0x6, 0x4, 0x5}]}, {0x32, 0x6, "39e4e2b8a3a0084c6616e2327068e65cfd1f5a1c7bf46939437f8e739d0f9c94538253e0e57358a8e8d6ccacd0df"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_xt={0x228, 0x1f, 0x0, 0x0, {{0x7}, {0x15c, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_INDEX={0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0x3}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}, @TCA_IPT_TARG={0xd7, 0x6, {0xfff, 'filter\x00', 0x8, 0x2, "7e654298a901f3ae00ee5340258e44987a027e108273d215559c0960f3708a5c1b33c9fbda64866093fa4ce51818e249843da804e99521a5b6199284fa0f7a46af8da8580f5b64c8b626b21952517bac8786f97a4ddb9b33b751987334f55de76c9bf9700b26bbe2d9d3c24e7eab4ebbad29d7cf3390359ff28a00db0eba74805b77435bcc9f805a03b3bd05aa7d25ba72bbc17e7029c76b0f5583f9d15adc559136a49d06923a65818ca82e7f"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}]}, {0xa6, 0x6, "4f35abd27ff3dc758a30bb62ae9be4f7ec2d58762d8d46c067e196074b2ac0bef05174bf7df1e4e9b08c31387898ed1802a7a73610f657c7c01e7a02a53fb956d2ae4dca3831f919029f147f4634858f1774dfa051b81ce664c63e68934ae030b83b89ed6158c513da976b05f83f929e59e876557b1892427be1d0540e53bd53be0e049dea756c07465de8a44fe6f876d9566b510a4a41612d61d26b65f7b95bce64"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_gact={0xa8, 0x13, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1568, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0xf, 0x7, 0x4, 0x7, 0x200}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1c4, 0x400, 0xffffffffffffffff, 0x5}}]}, {0x40, 0x6, "860a54337b2e2160ad69a2a3ab4433f38c52a59de202682ad60314cd463c3858f12584e24afdb018be008018a28c4057dd0f7b16f4ccca12ea6aeab3"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ife={0xf4, 0x9, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @random="3342b76f75c6"}]}, {0xbe, 0x6, "ebb413fa82ff1003030fcb1a346e8a333e005b7d9f9758e0bd1d8c7d47fd77828f0b7b542cd2776f5ef9df1daa79de4ac36f3cae5e83abc10d005a26dcb135307baf3ca00fae2f1c71695f6db1ac5389f23962974232411e9dcddb621222a9d685794d0a7b480afd6c191d0991cf760efa48e2c58ef1d6bdae0c99290d07a14fd8cfc16fd5c0235da0f3c7feff6433160ec7402aaee875dcd74471ccfa329db607ea131ad4bb10285367f3ac52989668b5e10dcadec590b0c1ff"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_sample={0x8c, 0x6, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x3ff}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x8d0}]}, {0x4e, 0x6, "ba56f6a3666f18e2d29dcdc54c7e007a3ea2a15cf7416faf861d76b9e22bd1aeeb16337c2b901a3172e48ad66963f97bb970e637504a6eb4c31facf0d00f1ac47b651cdb65a1359bc285"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_sample={0xcc, 0x9, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0xd65, 0xc, 0x6, 0x8, 0x2}}]}, {0x87, 0x6, "0f60a91da2a2436d957be8c012b3e88a4e18b4f8ac2d48ebdea3e9d5d2fdeeb7fff15c418a116288211815948b0033eb4a1579a31b601f75b80e25bac306f2b6ab9e2404416f1d688a0eaeb8cfa4818ae8a73d2f2900cb4aac72b3785ea56fcffb137d1dc48040434874af26110d579655d4ecf2cf0ea775fde8b9fafab4925285cbc7"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_BPF_CLASSID={0x8, 0x3, {0xc, 0x9}}, @TCA_BPF_FD={0x8, 0x6, r3}, @TCA_BPF_POLICE={0x10a4, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0xfffffff7, 0x2, 0x4a6a, 0x4, 0xfd, 0x5, 0x7fffffff, 0x100, 0xbf, 0x1000, 0xffffffff, 0x3, 0x5, 0x80, 0x7f, 0x7, 0xb81, 0x7fffffff, 0x1, 0x9, 0x7, 0x3, 0x4, 0x6, 0x7, 0x7, 0xffffff7f, 0x9a, 0x9, 0x5, 0x9, 0xf1, 0x400, 0xcb, 0x6, 0x4, 0x0, 0x258b, 0x1, 0x5, 0x0, 0x4, 0x1, 0x9, 0xa, 0x74c97324, 0x0, 0x7fffffff, 0xf, 0x71, 0x3, 0x8, 0x9, 0x2, 0x9, 0x7bb2, 0x7, 0x3, 0xe, 0x2, 0x7a3, 0x7, 0x400, 0x8, 0x3, 0xf9, 0x0, 0x995, 0x3, 0x9, 0x2, 0x2, 0x4, 0xd, 0x3, 0x8, 0x5, 0x3, 0x4f, 0x4, 0x8b88, 0x6b, 0x2, 0x8, 0x5, 0x8, 0x5, 0x6, 0x1, 0x0, 0xfffff521, 0x14f5, 0x10001, 0xfffffffe, 0x7, 0x5, 0x4, 0x7, 0xcf43, 0x0, 0x0, 0xf, 0xb, 0x5, 0x82c, 0x6aa7, 0x401, 0x8, 0x7, 0xfff, 0x4, 0x5, 0x3d76, 0x10001, 0x200, 0xfffff6b2, 0x7, 0x3, 0xfff, 0x2, 0x2, 0x81, 0x9, 0x5, 0x8, 0x8, 0xffffda7b, 0x6, 0x7, 0x733a80, 0x10, 0x9, 0x6, 0x1, 0xc, 0x4, 0x0, 0x2, 0x5b, 0x4c8, 0x80, 0xffffff92, 0xb, 0xa, 0x1, 0x5, 0x4bb5, 0xb, 0x80000000, 0x22, 0x9, 0x7, 0x80, 0x988f, 0x9, 0x8, 0xffff, 0x4, 0x3, 0x0, 0x4, 0x38, 0x8, 0x200, 0x1000, 0x4c, 0x8, 0x0, 0xffffffff, 0xfa, 0x3, 0x2, 0x13, 0x1, 0xfffffe00, 0xffff, 0xc5f, 0x9, 0xd08, 0x8, 0x2, 0x7f, 0x4, 0x3ff, 0xa, 0xf30a, 0x2, 0x5, 0x4, 0xfff, 0x5, 0x7fe, 0x7ff, 0x1, 0x8, 0x0, 0x100, 0xff, 0x9, 0x9e48, 0x4, 0x8, 0x3, 0xf2, 0x3f9e, 0x5, 0x5, 0x9, 0x4, 0x8d, 0x1, 0xfffffe00, 0x4, 0x5e5, 0x84, 0x9, 0x6, 0xfffffffb, 0x9, 0xfffffffb, 0x4, 0x7, 0x0, 0x1, 0x5, 0xf, 0x3, 0x1ff, 0xfff, 0x0, 0x0, 0x8, 0x100, 0x1000000, 0xffffd920, 0x5, 0x8, 0x7f, 0xff, 0x4, 0x10001, 0x2, 0xfffffffe, 0x7ff, 0xb, 0xfff, 0xa55c, 0x7, 0x3, 0xd8, 0x11a5, 0x8, 0x1, 0x5, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x8, 0x2, 0x10000, 0x0, 0x2, 0x9, 0x4, 0x4, 0x9, 0x1, 0x1, 0x3, 0xc, 0x80, 0x780, 0x9, 0x401, 0xa0, 0xfff, 0xf8ea, 0x0, 0x7fff, 0x6, 0x80, 0x2, 0x1, 0x3, 0x5, 0x3, 0xfffffe00, 0x9, 0x3, 0x7fffffff, 0x7fffffff, 0x6, 0x5, 0x40000000, 0x5, 0x0, 0x1, 0x3, 0x80000000, 0x6, 0x4, 0x8, 0x9, 0x1, 0x1ff, 0x387, 0x4, 0xf3, 0x9, 0x9, 0x5, 0x3, 0xbda, 0x2a07, 0x9, 0x8, 0x3, 0x9, 0x5e, 0x1, 0xc, 0x7, 0xe0b4, 0x101, 0x0, 0xffffdce8, 0x8001, 0x101, 0x2, 0x101, 0x8, 0x601, 0xffffff39, 0x4, 0x1, 0x3, 0x7f64, 0x8a8, 0x4, 0xb376, 0x3, 0x3, 0xb71, 0x8, 0x10, 0x5b5d7f96, 0x26f0, 0x8001, 0x5, 0xfffffffa, 0x1, 0x4, 0x9, 0x5, 0x0, 0x5, 0xcea, 0x2, 0xc, 0x6c4, 0x0, 0x1ff, 0x9, 0x100, 0x3, 0x1, 0x8, 0xd, 0x7, 0x8001, 0x6, 0x101, 0xff, 0x7, 0x0, 0x2, 0x3, 0x8ae, 0x3, 0x3, 0x100, 0x2, 0x7ff, 0x9075, 0x10000, 0x83d, 0x2, 0x3, 0xfffffffa, 0xc, 0xfffffffe, 0x4, 0x2, 0x3, 0x7fff, 0x6, 0xffff, 0x1d35b7b8, 0x9, 0x200, 0x4d93, 0x1, 0xfffffffc, 0xf, 0x1, 0x8000, 0x6, 0xf, 0x400, 0x4, 0x81, 0x7fff, 0x1400000, 0x8, 0x8000, 0xffffffff, 0xffff, 0x5, 0x0, 0x4, 0x7, 0x4, 0xffffff7f, 0x3, 0x0, 0x5, 0x35, 0x4, 0x24000000, 0x4, 0x5, 0x4, 0x1, 0x6, 0x6, 0x7, 0xfff, 0xd91, 0x1, 0x2, 0xfffffffb, 0x8, 0xe, 0x7, 0xffffffff, 0xffffffff, 0x8, 0x7, 0x3, 0x2, 0x8, 0xa, 0x7, 0x2, 0x7, 0xe, 0x7ff, 0x34, 0xfffffff9, 0xf3, 0x9, 0x4, 0x6, 0xd7e7, 0x200, 0x8000, 0x4c06a00, 0x4, 0x5, 0x7, 0x6, 0xe, 0x400, 0x7, 0x0, 0x9, 0x8, 0x80, 0x0, 0x95, 0xff, 0x6, 0xfffffff9, 0x9, 0xb8d, 0x8, 0x48e, 0x2, 0x7, 0x1, 0x5, 0xf1, 0x6, 0xf32d, 0x4beb7585, 0x8, 0x24e, 0x5, 0xf48, 0x1, 0xfffffff8, 0x4a2a, 0x8, 0x7, 0x4, 0x10000, 0x8, 0x8, 0x1, 0xfffffff9, 0x8, 0x8]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x8, 0x400, 0x3, 0x8d, 0x0, 0x9, 0x7, 0x8, 0x8, 0xffffffb8, 0x8e, 0xd, 0xb5, 0x8, 0x4, 0x9, 0x2, 0x2, 0xff, 0x0, 0x7f, 0x9a8, 0xfffffff9, 0x5, 0x1, 0x1, 0xfffffff5, 0xb8, 0x7, 0xfffffff7, 0x2, 0x89e, 0x7, 0x54, 0x8, 0x7fffffff, 0x8000, 0x8, 0x6, 0x8000, 0x6, 0xd, 0x7ff, 0x3, 0xfffffff1, 0x9, 0x9, 0xcd, 0x1, 0x3, 0x40, 0x101, 0xffffff65, 0x4, 0x4, 0xfffffff9, 0x5, 0x80, 0x5, 0x1, 0xfff, 0x100, 0x2, 0x6, 0x2, 0x10001, 0x1, 0x985, 0x7, 0x2f3, 0x7, 0x4, 0xf55b, 0x2, 0x2, 0x7fff, 0x8, 0xffff7fff, 0x4, 0x3, 0x4, 0x1, 0x1, 0x1, 0x482a9851, 0x8, 0x5, 0x5, 0x45, 0x7, 0x2, 0x5, 0x0, 0x8, 0x7, 0x80000001, 0x5, 0xfffffffc, 0xdc, 0xb110, 0x2, 0x3, 0x7fff, 0x10001, 0x1, 0x9, 0x8, 0x3, 0x4, 0xcba, 0x3, 0x40, 0x4, 0x8000, 0x6, 0x1, 0x696, 0x7fffffff, 0x7fff, 0xfffffff0, 0x1, 0xffffffab, 0x2, 0x3, 0x5, 0x80, 0x3, 0x6, 0x8, 0x62, 0x1, 0x9, 0x0, 0x88, 0x1, 0x9, 0x4, 0x7ff, 0x6, 0x1, 0x4, 0x20000000, 0x8, 0x4, 0x10, 0x2, 0x2, 0x8, 0x4e0000, 0x6, 0x7fffffff, 0x6, 0x0, 0x9, 0x4, 0x7f, 0x200, 0xfffffff9, 0x3, 0x1, 0xb, 0x1, 0x6, 0x81, 0x7f, 0x1d4, 0xfffffffe, 0xda, 0xffff16b1, 0x5, 0x400, 0x4, 0xcf57, 0x2, 0x6, 0x8, 0x1, 0x0, 0xfb, 0x9, 0x390, 0x8000, 0xff, 0x10, 0x5, 0x2, 0x166, 0xb, 0x7, 0x9, 0x0, 0xfe, 0x8, 0x2c, 0x3, 0x2, 0x0, 0x351, 0xfffff146, 0x6, 0xffff, 0x7fffffff, 0x9, 0xd, 0x2, 0x5, 0x9, 0x0, 0x3, 0xf, 0x3, 0x0, 0x7, 0x200, 0x9, 0x0, 0x7, 0xfff, 0x5, 0x262, 0x4dfe, 0x7c, 0xffffffb0, 0x101, 0x10000, 0x7fff, 0x6, 0x5, 0x7, 0x7, 0x6, 0x5, 0x6, 0x7, 0x0, 0xc, 0x80000001, 0x0, 0x1, 0x0, 0x340000, 0xffff, 0x6, 0x7, 0xb, 0x396c, 0x1, 0x0, 0x3, 0x3, 0x4, 0x1, 0xd32c, 0xfb, 0x5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x4, 0xd4, 0x7, 0x1, {0xad, 0x0, 0x2, 0x1000, 0x6, 0x7f}, {0x8, 0x0, 0x2, 0xfff, 0x9, 0xf}, 0xff33, 0x67, 0x7}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x8, 0x3, 0x33a321d1, 0x4, {0x9, 0x2, 0xfffe, 0x853, 0x1, 0x462}, {0x7, 0x1, 0x28c4, 0xe, 0x3, 0x3}, 0x6, 0xfffeffff, 0x1000}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_RATE={0x404, 0x2, [0xf0, 0xfffffff9, 0x45ad, 0x7, 0x9, 0xffffff01, 0x7, 0x1, 0xd, 0x7fff, 0x348, 0xfffffff8, 0xbca9, 0x0, 0x9, 0x9, 0x8001, 0x7, 0xfffffff7, 0x1, 0x1, 0x3ff, 0x9, 0x8, 0x9, 0xbf3, 0x28592559, 0x1, 0x504, 0x10, 0x1, 0x3, 0x6, 0x7, 0xfe4, 0x3, 0x5, 0x1, 0x4, 0x4, 0x8, 0x2, 0x30c1a9f3, 0x2, 0x1, 0x7fff, 0x4, 0x4, 0x0, 0x0, 0xfe, 0x8, 0x5, 0x3, 0x7, 0x10001, 0x101, 0xf96, 0x100, 0x0, 0x10000, 0x3, 0x0, 0xa, 0x1, 0xef, 0x6, 0x1ff, 0xffffffff, 0x6cf16806, 0x0, 0x4, 0x7, 0x0, 0x5, 0xc, 0xfffffffa, 0x0, 0x0, 0x6, 0xe5e, 0x10000, 0x6a39, 0x9, 0x95b, 0x401, 0x6fb, 0x7, 0x6, 0x26caf701, 0x9, 0x9, 0xb, 0x0, 0x3, 0x1a2, 0x5, 0x61, 0x7, 0x4, 0x6, 0x5, 0x6, 0x80000001, 0x1d7d, 0xc, 0x5, 0x4, 0xe9d1b60, 0x7, 0x7f, 0x7, 0x4, 0x2, 0x80000001, 0xffff, 0xffff2fef, 0x5, 0x800, 0x6, 0x8, 0x7, 0xb, 0x80000000, 0xdaa, 0x9, 0x9, 0x0, 0x2, 0xd80c, 0x3, 0x2, 0x2, 0xb3c, 0xb, 0x8, 0x7, 0xffff7fff, 0x8, 0x9, 0xf8, 0x9, 0x7, 0x5, 0x8, 0x1, 0x3ff, 0x80, 0x0, 0x7e46, 0x3ff, 0x0, 0x2, 0x375, 0x4, 0xe, 0xe1, 0x6, 0x9da, 0x3ff, 0x3, 0x36c47d61, 0x5, 0x3, 0x10000, 0x1, 0x6, 0x5, 0x4, 0x7fffffff, 0x5, 0x9, 0x2, 0x3, 0x8000, 0x6, 0x1, 0x4, 0x2, 0xfff, 0x1, 0xfffffff8, 0x2, 0x9, 0x82, 0x80000000, 0x8000, 0x7, 0x3, 0x1, 0xffffffff, 0x36a, 0x8, 0x8ff1, 0x400, 0x7, 0x7, 0x10001, 0x10, 0x8c, 0x3, 0x9, 0x200, 0xd4, 0x121, 0xfffffffe, 0xfff, 0x5, 0x1, 0x0, 0x2, 0x0, 0x90, 0x2, 0x7, 0x2, 0x40, 0x7, 0x8, 0x4, 0x7, 0xfffffffb, 0x6, 0xa3, 0x4, 0x6, 0x8, 0x1, 0x800, 0x2, 0x2, 0x9, 0x1ff, 0x6, 0x700000, 0x9, 0x4f3b, 0x4, 0x4, 0x1, 0x9, 0x40, 0x2ca, 0x9, 0x3, 0x30c, 0x1, 0x240000, 0x240, 0x1, 0xd238, 0x9, 0x60000000, 0xe00, 0x0, 0x658f]}]}]}}]}, 0x19ec}}, 0x0) write$tun(r9, &(0x7f0000000500)=ANY=[@ANYBLOB="4500001412344000403a"], 0x1c) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r5, &(0x7f0000000680)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f0000000440)=ANY=[@ANYBLOB="dc010000", @ANYRES16=r7, @ANYBLOB="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"], 0x1dc}, 0x1, 0x0, 0x0, 0x800}, 0x40000) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) 12m59.784527363s ago: executing program 1 (id=1092): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r1 = socket(0x840000000002, 0x80000, 0x100) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r1, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_buf(r1, 0x0, 0x26, 0x0, 0x0) unshare(0x6000000) ioctl$SG_IO(r0, 0x2285, &(0x7f00000033c0)={0x53, 0xfffffffffffffffe, 0x6, 0x6b, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000340)="ac05f2368073", 0x0, 0x1000004, 0x0, 0x0, 0x0}) 12m58.631202732s ago: executing program 1 (id=1096): socketpair(0x22, 0x2, 0x6, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x7f7) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2002, 0x8) write(r3, &(0x7f0000000180)='10000', 0x5) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r4, &(0x7f0000000200)='1', 0x1) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x4, 0x7, 0xff, 0x8b, 0x0, 0x5, 0x7, 0x0, 0xff, 0x40, 0x5, 0x2, 0x7, 0xb}, 0xe) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, 0x0, &(0x7f0000000240)) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f00000000c0), 0x8) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x2) write(r6, &(0x7f0000000280)='0', 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x680, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x4) ioctl$KVM_SET_CLOCK(r8, 0x4030ae7b, &(0x7f0000000000)={0x253, 0x4, 0x5, 0x8000000000000100, 0x6}) r9 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0.,:\x00', 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c000000420001000000000000000000030100000f0000003c00010000112233445566778899aabb86dd2c00001c0000000001110000010101010253aa220fdb0af0357065ae44132403b1fd606412c32700000004000280040003"], 0x5c}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket(0x2c, 0x5, 0x4) 12m57.56348638s ago: executing program 1 (id=1100): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001800dd8d000000000000000002000004fe000006"], 0x1c}}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x890c, 0x0) 12m56.380803815s ago: executing program 1 (id=1104): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x1, 0x9, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x0, 0xb, 0xfffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff, 0xffffffff, 0x2000, 0xa8, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x401, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x7, 0x1, 0x10, "839148ae34f8a738fcea570009000000052b21e1bf1a32dcc9000000004000", 0x64737664}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000080)=@newlink={0x70, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x600a4, 0x40}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xfffffffffffffee0, 0x4, @local}]}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8840}, 0x8000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) r4 = socket$inet6(0xa, 0x80003, 0xff) fsync(r2) setsockopt$inet6_int(r4, 0x29, 0x16, &(0x7f0000000000)=0xfffffffe, 0x4) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000400)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c5500000000004000f0f9ffff0000000000ffff00", [0x80000000006, 0x6]}}) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) 12m55.552070125s ago: executing program 32 (id=1104): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x1, 0x9, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x0, 0xb, 0xfffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff, 0xffffffff, 0x2000, 0xa8, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x401, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x7, 0x1, 0x10, "839148ae34f8a738fcea570009000000052b21e1bf1a32dcc9000000004000", 0x64737664}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000080)=@newlink={0x70, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x600a4, 0x40}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xfffffffffffffee0, 0x4, @local}]}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8840}, 0x8000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) r4 = socket$inet6(0xa, 0x80003, 0xff) fsync(r2) setsockopt$inet6_int(r4, 0x29, 0x16, &(0x7f0000000000)=0xfffffffe, 0x4) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000400)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c5500000000004000f0f9ffff0000000000ffff00", [0x80000000006, 0x6]}}) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) 4m32.994130084s ago: executing program 4 (id=2708): syz_open_dev$video(&(0x7f0000000080), 0x6, 0x262140) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12011001000000407a050ce08a9a57245f43b80303000000000001090224939a1ddff5c30a1ab40c01030001400921c100fe012228009f650bd9ca27b2bb149f02e56ed93dfacad4fe39dd7c7c5936eda90d9c7473466e9b967a754faf5b2009870d0a9ab1edf19c0513f69d2350cc0c7fb5037bde375f8e87d1e4ae"], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {0xffff, 0xffff}, {0x10}}}, 0x24}}, 0x20000000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=@newqdisc={0x5c, 0x28, 0x4ee4e6a52ff56541, 0x3fff, 0xffffbddc, {0x0, 0x0, 0x0, r6, {0x10}, {0xffff}, {0xe, 0x1}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @TCA_EGRESS_BLOCK={0xff80, 0xe, 0x7}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffffff9}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xa46f}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xd914}, @TCA_RATE={0x6, 0x5, {0xd, 0x7}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_clone3(&(0x7f0000002100)={0x1000000, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, &(0x7f00000020c0)=[0x0], 0x1}, 0x58) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x13, r7, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f00000002c0), 0x200300, 0x0) ioctl$BLKZEROOUT(r8, 0x127f, &(0x7f0000000000)={0x7, 0x100000}) syz_open_dev$vbi(0x0, 0x0, 0x2) socket(0x400000000010, 0x3, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x8) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r9, 0x40045431, &(0x7f00000000c0)={0x0, 0x5, 0x4000080, 0xfffffffc, 0x5, "42341f9b1000007e4f0000000d00"}) splice(0xffffffffffffffff, 0x0, r9, 0x0, 0x7ffff000, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r4, 0x0, 0x480, &(0x7f0000000280), &(0x7f00000003c0)=0x40) 4m29.608161612s ago: executing program 4 (id=2724): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@mpls_newroute={0x24, 0x18, 0x601, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_TTL_PROPAGATE={0x5, 0x13}]}, 0x24}, 0x1, 0x0, 0x0, 0x49c0}, 0x0) (async) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x90, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}, {0x10, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x6, 0x20000000, 0x2}, 0x4}}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x90}}, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) (async) keyctl$dh_compute(0x17, &(0x7f0000001200), 0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001340)={'hmac(streebog512)\x00'}}) (async) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) (async) r5 = gettid() syz_clone3(&(0x7f0000002d80)={0x1000, 0x0, 0x0, 0x0, {0x33}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r5], 0x1}, 0x58) (async) r6 = socket(0x10, 0x3, 0x0) r7 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x6, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000000)={0x0, 0x1, 0x28, "a90000eaffffffde4832c30507e8ff000000000040080000faffffff8200", 0x20363159}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) (async) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@getchain={0x2c, 0x66, 0x100, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x5, 0x3}, {0xffff, 0xffe0}, {0xd, 0xfff3}}, [{0x8, 0xb, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000010) 4m28.293154271s ago: executing program 4 (id=2730): timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) open$dir(0x0, 0x149800, 0x4) syz_io_uring_setup(0xf03, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0xfffe, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x8, 0x0, 0x100000001, 0x0, 0x0, 0xffffffffffffb472, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000}, 0x5}}, 0xb8}}, 0x4004) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x1000, 0x0, 0xa, 0x20, 0x0, 0x87}, {0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000, 0x4}}}, 0xb8}}, 0x2c000010) sendmsg$nl_xfrm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000140001000000000004000000e00000020000000000000000000000000000000000000000000000000000000000000000100000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x987a3a9f32358a4c) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 4m25.619245347s ago: executing program 4 (id=2738): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000180)={0x20, r1, 0x2, 0x0, &(0x7f00000001c0)=[{0x0, 0x1}, {0x3, 0x5}]}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000640)={0x18, r1, 0x0, 0x0, 0x0}) 4m24.990680094s ago: executing program 4 (id=2742): syz_open_dev$evdev(&(0x7f0000000000), 0x7f, 0x400400) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0x16, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x6, 0x32, 0x3, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr=0x10003300, @in6=@private2}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x80}}, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(r1, &(0x7f0000000300)=@abs={0x1, 0x0, 0x4e21}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f0000002840), 0x0, 0x10123, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0xffe000000000000, 0x692a42) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x80) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0x8) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000001c0)={0x1, r4}) openat$full(0xffffff9c, &(0x7f0000000200), 0x248200, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x4, 0x0, &(0x7f00000005c0)=""/51, 0x0, 0xd000}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x14, &(0x7f0000000040), 0x50) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000c40)={0x1, 0x0, [{0x0, 0xf3, &(0x7f00000008c0)=""/243}]}) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f00000002c0)={0x1, r4}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) sendmsg$nl_route(r2, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) 4m23.693072775s ago: executing program 4 (id=2744): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d04, 0xec000000, 0x4a54}]}) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000040)) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x101}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r5 = syz_open_dev$video(&(0x7f0000000280), 0x101, 0xab02) preadv2(r5, &(0x7f0000000580)=[{&(0x7f0000000480)=""/208, 0xd0}], 0x1, 0x54, 0x7, 0x0) r6 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r6, 0xc0285629, &(0x7f0000000300)={0x3, @win={{0x0, 0x5, 0x79, 0x6}, 0x8, 0xc, 0x0, 0x0, 0x0, 0x7f}}) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r7, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(r7, 0x4004743a, &(0x7f00000000c0)) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0xe02, 0x0) ioctl(r8, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(r8, 0x4004743a, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="850000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0600000004000000990500000a"], 0x48) ioctl$BTRFS_IOC_TREE_SEARCH(r9, 0xd0009411, &(0x7f0000000240)={{0x0, 0x5, 0xfffffffffffffff9, 0xfffffffffffffffb, 0xffffffff, 0x10, 0x3ff, 0x3ff, 0x0, 0xffffe88a, 0x401, 0x8, 0x101, 0x4, 0x1}}) ioctl$BTRFS_IOC_INO_LOOKUP(r9, 0xd0009412, &(0x7f0000001bc0)={r10, 0x18}) 4m21.523592965s ago: executing program 2 (id=2748): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000040)={'bond0\x00', @ifru_names='veth0_to_bridge\x00'}) 4m20.817466197s ago: executing program 2 (id=2749): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x8, 0x0, &(0x7f0000000000)) 4m20.370154234s ago: executing program 2 (id=2751): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth1_virt_wifi\x00', 0x7101}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x7, {0x5, 0xfffffffe, 0xb28, 0x1d}}) close(r1) (async) r3 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000003700)={&(0x7f00000000c0)=@l2={0x1f, 0xd, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x1000}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000002c0)="86215486a581351abcd3e51b17f5a3df0c4e08856b89d885fe9b9dbc7a73970437e13b8b8ba2f5a4731ac5b654688684d48a4273459a79c95f8f48d6873a0e3d29a939dd672d8b9458e42c157cf93e61b1b5221b14eafff6b4417c982b1ee530f69b8dd131071eb1570364556793a64015e9cb53ceb3567eda689f84fbecb975d1e4a003993914161fd9d17e1ad453aee00d1f6f5f01", 0x96}, {&(0x7f0000000480)="2161207efcafad43afc9401b15a1ecc5bb71253fdd09ead618d7a48d8a02e20fae7eab3d34406c8df45cd481c0500dfd9d13597965e6079c590c719fb8c6f1b82c888821e854e110fb902b3bce320c3630a8ffa6616a834053981bca8e56a2e15434d3fb59c5a8ec3ddaee89f5cebe564f9012739401781a4b49dd61a8cd26505a4f14fe8378ae42e6c27edb24a7f39b8ef9fa9c0f3e4bcba520e61d9cc56f50b011ef453965be8518", 0xa9}, {&(0x7f0000000640)="2da5a8faa78edd5bb3c32e0f9d63309dde7e95c1b28368046d9fa226ab3b91f37a3ca37085cb79aa25b8a884a66e835b13fff5d1a5086eabdd04c870e72280e4f53cc5412bdb404ba02f1cd702afb9ae657e11360b583829115a32dde909", 0x5e}], 0x3, &(0x7f00000022c0)=[{0x88, 0x10e, 0x10001, "9ff4cf4d1f747e535b8bdaa81821b5cd022585a6169b08fe946f3d5bcab5436d812aa90737d64720f67c91402c80a019ffb2fbffeebd1b9d10edf4e0023b7235f4c548ae5be0179d2bae01c2400a818dad69d8d6dcbc67cab41987da360ba3a73aa064bea7aa3d48b4f9300858bda00f29eda27e2fe29d64"}, {0xd0, 0x10c, 0x6, "525798b748a2a722ee7c60a54a23ed4e674981faee0c1e9e8f425b404213aec07f3c3c7413d611e83fe54a4950642409b1d2f83b68a6ce9b5ea74dabf12f31a61acbff3a3f0e4146ed412aef8ac031f92551b7730f975c5dd73262d952b35b671b5ebf9c548901637a59dd59c511e016e63af9d7f56221d53167730ce700041ead8fa40cef1c570bdd7ff460979149d1fceeff7778e3a8c31e81e92e0b8020d1d9dc25f104a8838f5cf6d09b99e3701b63be1e57b0199f1150e4ee0d8e"}, {0x58, 0x102, 0xffff5a28, "eb3b750fdaea9a219c88c26a8b0bad172259323bf3dbb8ec6ae675f24dc846c4ffff7cbc61b4cca54850a22d5f1610f416ad81c9a5696fe80e25ed9166e8c8899757c1658b85"}, {0x78, 0xb, 0x200, "4e23df19f755ea487e1c0237b54efb92c4a4e9847c415e6495994185b27ff94995b7bbcc1ed7558f92b4ad0ccbc1bf9ac93909de552b8df594aaa64f96ebc007232186a1963cf0e8f28fdaba95c006ba44e2675d163e88edf729417df565cfbb8979"}, {0x108, 0x110, 0x3, "98ea331592bb950131952879060614a5e4fbe3d11d805154a123495a162e0105c716a1661ddfe8ce2f8c13a89e489c1e81e2cf54620852c823ab16cbf69884190c0c113a57bf3c575353a091be8a2f445dfa5e1974f8149d13a32d62e4257eb7e20a77c1ebfe56b34d187d8a31812a26c3988b14c63fcd336e8c96b10e15607cc894268a851f13e17169243bbe8c1c0a14e7667a6b139fa311c463812ea74c188dba7a532d033c66f42e608defb9bd66f65df838db799e198dd5feff73bf87e403e16196ae05354eb397731c26bd7100646378083d715bf75bb5d1d71982f90e9818e6af1341bf16e3f27d33fca04f59f6d1351a9055caa7"}, {0x48, 0x110, 0x200, "62571429cc8f7cfcc9e8caabc498257323d40182435b85b23938ff3af69b6ef36879dd288604fc9c0d72961d6387b3f6f01e4262280de5"}, {0x98, 0x103, 0xfffffff4, "2f96b7feccfab631a9b0190156afcb1ad648b43722075b2b335d71d6fc1cbc321efcd239e305f6589307fc7b696e8eb3aa1db4166da29d8ee4e1ef3b2e65501e185c992572987414df632c050843aefe85ffaf0f76349bf7f5af0802032e7e2aafbedb86db60e240f346a7e43aa2f58a2f3bf2608d6b751e1bc20241897ea7fd309ec915"}, {0x1010, 0x10b, 0x663, "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"}], 0x1420}, 0x10) (async) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0xc0, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x9c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x3, 0x3, 0x2, 0x2, 0x7, 0x3, 0x2}}, {0x8, 0x2, [0x3, 0x5]}}, {{0x1c, 0x1, {0x10, 0x4, 0xffff, 0x81, 0x1, 0x2, 0x823, 0x2}}, {0x8, 0x2, [0x8, 0x0]}}, {{0x1c, 0x1, {0x5c, 0x7e, 0xee, 0x6, 0x2, 0x9, 0x6c0d2eda, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x1, 0x4, 0xf86b, 0x4ce3c57e, 0x1, 0x3, 0xfb, 0x6}}, {0x10, 0x2, [0x8, 0xf5f5, 0x7, 0x200, 0x2, 0x1]}}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) (async) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0xb50, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0xb20, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffffc700, 0x3, 0x6, 0xf16, 0x3}, 0x3f82}}, @TCA_CONNMARK_PARMS={0x0, 0x1, {{0x2, 0x0, 0x3, 0x4, 0x40}, 0x1000}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x3, 0x9}}, @TCA_BASIC_ACT={0xac0, 0x3, [@m_sample={0xfffffffffffffe13, 0x4, 0x0, 0x0, {{0xb}, {0x4}, {0x81, 0x6, "09dc9faff8587ce77b2e04278809409eaadb1549ce770e2466288316d42d53fae78e3bd0ab32dfac807ec6fb3c11d0374ad78010a29a03b9e26b0bdcfa11c3c8749e3a37f2c4b3c0a3bfc9f13eb5d2c49c1787626eb9fff35b4cd22ccc866b59d0b7875109149c5c198b6b92a240f93e6995eaeb03585fbfdd8d6cc3df"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mirred={0xd0, 0x1, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8001, 0x400, 0x3, 0x2, 0xaa73}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0xff, 0x4, 0x5, 0x8}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x31b, 0x6, 0xb}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x8000, 0x3, 0x5b, 0x1}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x4, 0x4, 0xb, 0xdc}, 0x2, r5}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_nat={0x10c, 0x20, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xb5, 0x5, 0xffffffffffffffff, 0x8, 0x8}, @multicast2, @broadcast, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xa, 0x9, 0x8, 0x8, 0x6}, @rand_addr=0x64010106, @local, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1d8, 0x7, 0x3, 0x7, 0x6}, @remote, @remote, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x5, 0x2, 0x5, 0xfffffff8}, @empty, @rand_addr=0x64010100, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8000, 0x1c, 0x6, 0x0, 0x2}, @remote, @dev={0xac, 0x14, 0x14, 0x36}, 0xff}}]}, {0x1c, 0x6, "223ba0d4e181ea1fda7b6ccf039098dd91edfb3f1564f358"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_simple={0x830, 0x12, 0x0, 0x0, {{0xb}, {0x4}, {0x804, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}]}, 0xb50}, 0x1, 0x0, 0x0, 0x10}, 0x8080) (async) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r7, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0040000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 4m19.818672367s ago: executing program 2 (id=2754): mremap(&(0x7f0000aaf000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async, rerun: 64) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) (rerun: 64) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) r1 = io_uring_setup(0x130d, &(0x7f00000001c0)={0x0, 0x1fffff, 0x2, 0x2, 0xa}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r1, 0xd, &(0x7f0000000300)={0x9, 0x0, 0x0, 0x0, 0x1b}, 0x20) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r3}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000007c0)={0x28, 0x5, r3, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x1004000}) ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, &(0x7f0000000040)={0x18, r3}) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) (async) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0xfffffffffffffff5, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1003966, 0x1, 0x8000, 0xfffffffc, r5, r6, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r7, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r7, r0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async, rerun: 32) r8 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000000000010711e092000000000000109022400010000000009040009010300010009210500000122050009058103"], 0x0) (rerun: 32) syz_usb_connect$uac2(0x0, 0x92, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x582, 0x4201, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x80, 0x3, 0x1, 0x7, 0x0, 0x8, {0x8, 0xb, 0x0, 0x1, 0x1, 0x0, 0x20, 0xf}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x9, 0x4, 0x20, 0x3}, [@feature_unit={0xb, 0x24, 0x6, 0x4, 0x4, [0xa, 0x3, 0x9]}, @output_terminal={0xc, 0x24, 0x3, 0x1, 0x0, 0x9, 0x2, 0x4, 0x7f7f}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x5, 0x0, 0xd, {0x8, 0x25, 0x1, 0x80, 0x3, 0x5, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0xa, 0x2, 0x8, {0x8, 0x25, 0x1, 0x1, 0x3, 0x0, 0x2}}}}}}}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io(r8, &(0x7f00000003c0)={0x18, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000100)={0xfffffffffffffeab, 0x1, 0x0, {0x2}}, 0xffffffe8) (async, rerun: 64) write(0xffffffffffffffff, &(0x7f0000000500)="7472616e73706f72743d72646d612c6e716e3d6e716e2e323031342d30382e6f72672e6e766d657870726573733a4e564d663a757569643a31323334353637382d313233342d313233342d313233342d3132333435363938396162632c686f73745f7472616464723d3132370f302e302e312c7472616464723d3132372e302e302e312c747273766369643d34", 0x8d) (async, rerun: 64) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x4, 0x4) syz_usb_connect(0x3, 0x0, 0x0, 0x0) (async) r9 = inotify_init() inotify_init1(0x100800) (async) inotify_add_watch(r9, &(0x7f0000000180)='./file0/file0\x00', 0x813) 4m17.218191235s ago: executing program 2 (id=2764): r0 = socket$kcm(0x10, 0x66fde5f0aa2df8ae, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003280)={0x6, 0x8, &(0x7f0000003000)=ANY=[@ANYBLOB="180000008100000000000000050000002339e0fff0ffffff18120000", @ANYRES32=0x1, @ANYBLOB="0000000000000000180001000000000000000000010000809500000000000000"], &(0x7f0000003040)='GPL\x00', 0x9, 0xce, &(0x7f0000003080)=""/206, 0x41000, 0x40, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f0000003180)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000031c0)={0x3, 0xc, 0x8, 0x1000}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000003200)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000003240)=[{0x2, 0x2, 0xb, 0x5}], 0x10, 0x3ff}, 0x94) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000025c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="05000000000000000000000000000000000000005e6db45f4330b7cb2d7ee85616e3fc10d63bf4dd0dc44228d9d1aaf9a5a71c", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000030000000400"/28], 0x50) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x43840, 0x68) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x13, r3, 0x2000) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f00000001c0)=0x4, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000003400)={{r2}, 0x0, &(0x7f0000000040)=r1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="230000006d0200000300000022bf000001"], 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x1562, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xfffffffffffffe49, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES8=r5, @ANYRES16], 0x3c}, 0x1, 0x0, 0x0, 0x400c800}, 0x2004c0a0) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f0000002580)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002540)={&(0x7f0000002640)=ANY=[@ANYBLOB="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"/1081], 0x430}, 0x1, 0x0, 0x0, 0x1}, 0x40000) io_uring_enter(r5, 0x2219, 0xf922, 0x97, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) r6 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200000000100905"], 0x0) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r8 = userfaultfd(0x801) ioctl$UFFDIO_COPY(r8, 0xc028aa03, &(0x7f0000000240)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_usb_control_io(r6, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r9, 0xc0145b0e, &(0x7f0000000040)) ppoll(&(0x7f00000020c0)=[{r9, 0x10400}, {0xffffffffffffffff, 0x1340}], 0x2, 0x0, 0x0, 0x0) 4m16.085602573s ago: executing program 2 (id=2768): epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) r2 = socket(0x2b, 0x800, 0x7) gettid() socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205649, &(0x7f0000000100)={0x98f90a, 0x300, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90a, 0x8000, '\x00', @ptr=0x20002000}}) socket$inet6_udp(0xa, 0x2, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f00000004c0)=ANY=[@ANYBLOB="30340800080211000001ffffffffffff505050"], 0x3a) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000140)) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) lseek(r4, 0x4000000007, 0x1) rmdir(0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f0000001280)={0x2, 'macvlan1\x00', {0x40}, 0x80}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r5, 0x50009418, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r5, 0x0, 0x81, 0x0, 0x78) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)) openat$nvram(0xffffffffffffff9c, 0x0, 0x8882, 0x0) 4m8.612287524s ago: executing program 33 (id=2744): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d04, 0xec000000, 0x4a54}]}) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000040)) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x101}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r5 = syz_open_dev$video(&(0x7f0000000280), 0x101, 0xab02) preadv2(r5, &(0x7f0000000580)=[{&(0x7f0000000480)=""/208, 0xd0}], 0x1, 0x54, 0x7, 0x0) r6 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r6, 0xc0285629, &(0x7f0000000300)={0x3, @win={{0x0, 0x5, 0x79, 0x6}, 0x8, 0xc, 0x0, 0x0, 0x0, 0x7f}}) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r7, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(r7, 0x4004743a, &(0x7f00000000c0)) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0xe02, 0x0) ioctl(r8, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(r8, 0x4004743a, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="850000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0600000004000000990500000a"], 0x48) ioctl$BTRFS_IOC_TREE_SEARCH(r9, 0xd0009411, &(0x7f0000000240)={{0x0, 0x5, 0xfffffffffffffff9, 0xfffffffffffffffb, 0xffffffff, 0x10, 0x3ff, 0x3ff, 0x0, 0xffffe88a, 0x401, 0x8, 0x101, 0x4, 0x1}}) ioctl$BTRFS_IOC_INO_LOOKUP(r9, 0xd0009412, &(0x7f0000001bc0)={r10, 0x18}) 4m0.921288969s ago: executing program 34 (id=2768): epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) r2 = socket(0x2b, 0x800, 0x7) gettid() socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205649, &(0x7f0000000100)={0x98f90a, 0x300, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90a, 0x8000, '\x00', @ptr=0x20002000}}) socket$inet6_udp(0xa, 0x2, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f00000004c0)=ANY=[@ANYBLOB="30340800080211000001ffffffffffff505050"], 0x3a) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000140)) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) lseek(r4, 0x4000000007, 0x1) rmdir(0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f0000001280)={0x2, 'macvlan1\x00', {0x40}, 0x80}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r5, 0x50009418, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r5, 0x0, 0x81, 0x0, 0x78) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)) openat$nvram(0xffffffffffffff9c, 0x0, 0x8882, 0x0) 23.353027169s ago: executing program 5 (id=3711): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'netdevsim0\x00'}) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x74) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r6, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) accept4$inet6(r3, 0x0, 0x0, 0x80800) 22.080160496s ago: executing program 5 (id=3716): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x103080) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x8, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r1 = memfd_create(&(0x7f0000000ac0)='\x00\x0e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xb5\xf5\xe8\x18h\xb4\xa71\xa8\x85s\xaf\x8a\xe5\xca\'\xfc>\x98\xaa\x8e\x02\xf6rY\xc4\xecB5\vX\'\xe7\xdd\x9d\x9e_\x00\xa1^Yx\x0eF\x98S\xdf\"\xa4\xc2T\xfa\x9f\xac|\xa0\xc5\x9d\xec\xa3\xe9c`j\xbf\x19\xc5\xc7c\xaer\x10\\BCo\x86\xe8X\x1c\x05E%\xb0\x85\xd0\x1e\xa7\xc9w\xa3D\xad<\xcc\x90`\xa8<1\xa1\x04\x0f\a\r\xe4H\x95\a\x80{\x1eJW\x8b\x93\x05\xa2\x85\x95\xdf\x87\xf6+\x0e\xff\xff\x00\x00\x00\x00\x00\x00\xff\xd6h\x8b\xc5\xb9\x10\xa4\x0e\xff\xfak\xf1{\xb7{', 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r1, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000003, 0x12, r1, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000000000/0x400000)=nil) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x2b}, 0xa, @in6=@loopback, 0x0, 0x2}}, 0xe8) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r2, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000002780)=""/254, 0xfe, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r2, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000780)=""/212, 0xfe65, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r2, &(0x7f00000003c0)={0x2, 0x0, {&(0x7f0000000a00)=""/133, 0x85, 0x0, 0x0, 0x3}}, 0x48) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x44cf3000) add_key(&(0x7f0000000300)='cifs.idmap\x00', &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000500)="9782cb6183baff140baafd525288a1b362491b565d1a85c52048190229dd61ae237f476c76c1c98c7bbee445de2bd986aac68ab1062345fb4d8374b05beb3608592e198d72962bed0c5c796163b3f48c5bded4e7a9e54a676e0ebac7a9aeaf4afa3a0fd8426dff64a528c0fd55748b7e2b11a433397d3f8f72bbe725986a25c567cb7d38c17ada8695082fbfaaa535a760be67359459f99f6fd8565129ec", 0xff6f, 0xfffffffffffffffe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000068a000000000000041500001801000020696cb9752500000000002020207b1ad6ff000000007ba1000000000000040100000400ffffb70200000800000000020000008518"], &(0x7f0000000100)='GPL\x00', 0x8000004, 0xfed, &(0x7f0000001840)=""/4077, 0x0, 0xa0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94) 21.492369908s ago: executing program 5 (id=3720): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000040c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000340)={r0, 0xffffffffffffffff, 0x14, 0x0, @void}, 0x10) 21.305674189s ago: executing program 5 (id=3721): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0xe1c3, 0x8, 0x2, 0x29b}, &(0x7f0000000c40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x81be, 0x0, 0x0, 0x4a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb4a1, 0x20000, 0x1, 0xcc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2336, 0x400, 0x2, 0x180}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3f62, 0x0, 0x2, 0x356}}], 0x4, &(0x7f0000001ec0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xe326}, 0x0, 0x0, '\x00', {0x0, 0x2bb, 0x0, &(0x7f0000000ec0)=@buf_1k="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"}}, &(0x7f0000001f40)) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001fc0)={0x2e, 0x24, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xdc, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000001f80)=@any_dev={0x3, 0x13d, 0x0, 0x0, 0x1000, 0x9, 0xffffffffffffffff, 0x0, 0x100}}}, &(0x7f0000002040)=0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) r4 = dup(r3) write$cgroup_int(r4, &(0x7f0000000040)=0xfffffffffffffffe, 0x12) r5 = dup3(0xffffffffffffffff, r0, 0x0) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) pwritev2(r6, 0x0, 0x0, 0x1000, 0x7, 0x4) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000002380)={0x0, 0x4750, 0x40, 0x0, 0x2af}, &(0x7f0000002400)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3c31, 0x80, 0x2, 0x3cb}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa4e2, 0x4000, 0x3, 0x1ec}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb5a9, 0x1, 0x7f6, 0x326}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcd0a, 0x400, 0x3, 0x1e5}}], 0x4, &(0x7f0000003680)={0x2e, 0x19, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x401}, 0x0, 0x0, '\x00', {0x4, 0x123, 0x0, &(0x7f0000002680)=@buf_4k="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"}}, &(0x7f0000003700)) syz_ublk_setup_queues(r1, r2, &(0x7f0000002080)={0x0, 0x1c0b, 0x40, 0x3, 0x1a2, 0x0, r4}, &(0x7f0000002100)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5b5f, 0x4, 0x3, 0xea, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x638b, 0x400, 0x1, 0x87, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2f0e, 0x200, 0x0, 0xb3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1ba3, 0x8, 0x1, 0x14f}}], 0x4, &(0x7f0000004740)={0x2e, 0x42, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x7fff}, 0x0, 0x0, '\x00', {0x2, 0x112, 0x0, &(0x7f0000003740)=@buf_max_buf="4c8c88418806d60e32d80529740654426e4e8a3df653900da689b71fda2300841dea3362b02c9a23d23107e27f9e450cfd948b806b36044ed7fb2e8c3bc1b88f68ae1ad9712d6472f5d40404f2457dc720335ae4c2737465c8b2faaa69130955f10d77ffe0a4e933b049d97147d9b855f658d2d911888e15c75f1f16a806579c799d3ce0ddf7001c9c2ff4abf9eafb485f4c4a7828d8abcbd3f213602be52c8287777fe0767e81fb88ab14bc078dbe0ffac2fd6cbe34219ec6dc91cbb35522d60830a7896112d673d8c99a4faf30fb0b1fe616b1ee4f664690ec3b5b5cd321ac78bfa3e6251300f9cc158db9fe130b6c07f2daf02f042b9e63ef94fd9ada6efc0d2bf432c6730f9d968819e2ac80178dcf270f0ba3efcd57800a49b640875f4f2328e0e404f7d9e368fd5bb788615434ab22502675243d5a76a43b6123935a38ccec7389dd0ccefa6c77eec86a6c52a719827734626a6506a37512cdbfb247f692e69458337431bb71f815acbb3c7da46d73db496673e5a7321fc2b58da290bdcb446fcb4640d806d6861ce1c3a3c1d1dfab0c6866e67a321f3e7adf9bd4922aa664d6d3e93bbfad971a3c2c1371ffd138250264caef839a7fd200b82988029bcfdba75047278df8ed2f7de03250c0d5f0b4e710fe40ae151855b3c36c6bdb95e0aff4b6fc36c077bb2989290d7e81ea6b2941ab2c9906a3b905a14e3095d84220295d7b9d65646aa9642fd210de6ba40ef64282f4655a76dad3e46e32ff438931bfd1994fab633515736940b1440bb6acc5dc447d68e8b3db46eed96d6c8134f908cf19e1e5eedb195d59bc79481d87be0ff037ee96040397be5ae568fd2d9f33a2c3003b397897dea89f87d414f5b5451c248aacc382d8442818f0cfbcc09b8fa1d68b760197b7d83a024253d3af8e5157c5db014b8eaf02041358a27b33297ff9857e95cb58700723436c24189bb25d014998475ea1875f92c4a5401cc7f0dfaf25e308b42333e359444891e2ddf8f3a1b4b9d8d53d54580d4525e78aec39732c95c507ff5c4b450d00acae68b43be22a271d8fa801936ace8ab50f39000861ea09b729ae948f4ecdc2a9dbeea4d2051d951bb0be032a463a2fe22833b573d4b580a395cad933407522939e2d0b626f4770bfe8b5f2f32150cec513d3f183754fab01587e61b5c96800ecec78d98826d4f9ff1d0c8351caae5af496e7452ab2b341b7abfd349b8bb1a106657f8afcc642ad67f00891f9a2285fdf0f336318dd2500298286a6ead6a0e0a15224f06cbddfc74bb0b35c0d5c149c25d6ae0b7b7bc4e0a3e7d045fb26f0cd7dc5f5224cacf72ee7e8fad1fce51af1031e6c0f2d99f2597c0d791a1280753f80e1bdc13564baf98b56ed5b5653a50fd1eb229fa93d626dfbfab0db13db75ee08c9a85bcce48095fbab82317b8abfed9b8140925ba0b9fe11594e5599ada7fb9d260e0b382d634ed4a7ac4814614f85eb32dd8974aead6ddc433eb7f159c41a6233e809a528bcc67fe344e0f188f3388fff7ac2eb1164fe6df5a82dad1dab79dc4494be5cacb7fad89a5e211bba6ab73082c5bbf9b18450966481772cb6f9816bd2028b5321f436361c06740f6e6f1fd306a909bbbc97dcfc13533ea66c0b6811241ae90fdeb9697e916a398131c4794e0ed358ea748df9a9319e8f756bb6d0156ef335c98b6bfcce39ecd3ddba81d6367af29456ef6ff769216192b0a484a1c5171321544abe7c05408f525e3a99650e3ca25850d63a45708ceea5349155e762a49ab1f100033e6f468860de18eecd9084fcd2dac669fe2bc704f2389fcd2b11b41cf3f05ce951456ffad5b52b724c3bb9edffeae852465788cbe02c6da69716ce0fd67d15626745b2809310fe9fe901ed20217dd2bd81ce7e3f9025ff89a0e7f7b3b6a51539818d15f63c987ca7608815449d1f47b66e23872fed70e87c14921f2698c01647a0005567acbe66e6dcaa9e87766008a197cb01f539b4849103be00110c79032d56c5b205465ff63ad17ce4159e5f5e8abbc1fdf31f03ea31b166c6e75c7fbe6e8c16b5b4f05924c5aa67fdb31de77ccd23a8cc6e875f8e5c873cb605ef5a999cd7e772b25a35d80464b1f97b2cff794be7fe8ce77a28fe1b3ab7322d0f16309d85f524e8fc02482d7bbe10af162cb5e0a6263f8c8487cee66c9386a7497ed1f551e6269900d85291d14a7dc44a8ce2b6665ebf8a0c562a6bf22ef87a2263a5e2de9d45e42233d17c7783396db914df835d61f68d946e85eca7b3aa48ed06fd68b82c50afbb1ae5ec2521288a0e565e134bdbdb6a8fe93f77448797207dca83968b16d0d0434fbf6e674670a99a466e8424e33e0d58068281490f92a72d9e1cce207a10e2e7c2a8bd200339c3fc1ede019a4c6edfb2640b6f171610a2724a16596356201e0eda6da161332b81e00e030e05f0982ce1a652a5317c6a89063edbb3043fae407df5cfae2f8de5bfc1acf17598ea3bb059c641411588cce38b0bb9e2ca7968c568abed7869488b8b1884a32946b694b35e67b81943e9b14679a298b2aee01212693f08a51ce7851afd38eec95e7348b849a55df457e85e9f18944a5fbca6ee11e847ef90792fd151cbf89dea526b8cea18b389b9df1c1dea5fb9171ef2a4ea566cac5d537d2cb07c22b370fc93803042e85ae811feda3e1b7b6b3fb059bbd5b11fbb5c8cb2fe74960b661dcaed14e2b0fcb1f6578536564726b0a8d5cad664d11d57a56b83362fb424ff5c9e9d9eb9a008e74b49a418b6ef691157608eb042aa782e0b6cf82c5badc2ba01857cea860e8ff7568233805ac342f756a30f5a5845eb488d2e4fcf04e1ea0fdf737e0535e8f50287d26c309ff139c4d9483b4bf0820f4f0113bdfa9e6a42ea9674a4c76c88c852dc9ede302fe80ad6f22f40fc6b840c822d6281419cce2df66fbb5a7b4e9a71f79b90e1d2ec757596d5c5b1d026a2ee22a9c1a650638b9e92e0325d488d6839e7622948ac5de067fc9623e0765488ed61e10477f0cc3416149abd4431306ede3b93c9e603d3fafbf4a8c1e3b919311a3becb95c7b9e88a85e21a50f1945e1074a264ebbaa7997f9b048fc6833f804e4ce2e6ddabea30f5c06330636c164f840a3434d1f2e7e1cba226814caed4e74baedd3706acda2c545c825a23b6a1bd294b7a64ff38f4dd87846508c9c4cbac95d4e65bec9a429f509b07c7a874d68b14b6dcad63ee277318007de00ed8ee71daa9ebfa7d5a5f49b0f17c67494a92aa3e61bbf1829ce9d10b55943f9cac4e67b6236f33ed209b110f70ee5f720d9294d2a5f285edfebcba30d09a973fb09bbcc9040a5ca1ec692ae21670c6eafec807f692f64bf497234ee965775aaabc60ef6142660cc71d43875650a26ddda7429b2f0a57a24ee293645d6afc7489e574499ade6e0afb16c1ed132e9bd07352b7263d6773043a1ba1bb71df2bdde4cfe2a2e28f6dba07e8cfb4490979b9a67f41d11b86d880d8af8a902c9732426ab2117d0a59df6c079cfaaa1d02a1ffb95fb2f37cfa3ffd14ba9e81e3184797f5e101b3b8ef044584d6825593e96103ea17efdb77b53a6eaf41fec4fa6b2864650eb1f8508f1d94d0c6d969c31dca57b9fa72ff004f6e764c08c945dad66775425d753a3d2f187b845847c60cbb6dec0e450d27572b9b927bf2ccdf4074db2f452791e1495b78d782ee3ccb5b2ed7c287931f1b1ce171312fbbdb8cb72fbb047b9a06e90cf6a4221bae7dc76d82ccb1972174fd749f1c53efca1bc424c573a66da45f935351d08fb668af7633c456a22c4ecf1b5914877c1829de2946708ae6ed75bce60868038d6940545b949fd251a26da6664158b20234ddb6d634126ba7c10bb7d0b72997200fd562cbf1763316857db90f50b3867dcc44dc9a69579ec02b5ae2c4a73bb5c5b4de931907c532a8898a3f12285b53fff03c6ff1f09879279729982e185a9c180a9982f4855dab8bd07b4e45f284c3ff87c8b8a51bf99f16f68ed1ce9ddd86652316252d926d309b2be40aae85a78417a47935df5a61c437b0c9f1a30c4d87882cce822d6a583c73a42ba2a6a81608ecb5ba5154cbd91ed6ab6604e9c4f8ebfe9b7ef58c7e2386f44f0e44354ab8f836bef57f891d01b2696de5893b20d3d2f9748aeb1b351314f5b40039323945e7ce7e7312d056ce5b9652c7fb981f637139588154c03fb74765e5a58db378fea408249c8f3dc11bea8d0e134d07b8a765892f78550d26e670494f13a6e6db0edbe6029339c036fdfaccfbf9b753ddcebe81849e31efc8f5281212e271203c1a3fffe1568a14e8339317787c3d11a196155bd8bff0b8fb6a521fa6e8faa3a4f0db64c78529bf8bc790063de1f848afd1f0cb9c8262c5b7cde95866b9825ec8ddcaab2fb1a81835e9f5267c2da7b38d89fd08fe26dec9c8bb75be4f90a5695846ac36ca2b838c8882cca17256240335c5aae9a39f2414728620c8c11e551539236f37f754c4d062e5a8d941c448715463347c9f06cb8c348afdb0ae7b1ce056bc764eec416a3b9000426a1d45f1829db22d7aacbb3e7e0f2e90d32971d30889809490f5340e0beffacbb2ffec9e9aba2d20bfa6a253fcc09ddd81ae7300b196c50b45434b4c89c2aa9cededaea70a48bb9e924eb2096d849d90270bcb151078653ad6bb62b7786043ec1587dfd889883fa7a93045b22ea4ca9545851ed27e7a63a84a398f9624db6712132b6eb9b1dd4c20db3a2a512b35ceee2583f6e1590c364fcd10691cdc1d568e14a3597e298a7ea37f79c2cabfdd78928eb0bb4fc01ed189ed456e28cf6231e30cd7e7cecdc3f45eb6c05d1018da241e9d2cc0ac1697f9b532a25c44301e019d2757a2ecf2e2bf98825e1c82674d9380c4cd5c62ce28d87ad8f5c4e615edf8c2ae8a902e193dee34931d7e6ec483cc83e695cffc99a8969ee3250e100a471df53c493e5ba801658f301ffac07c3f76ff0ac13421e943a253efb5262b70fe72f73b7737be219579ce8fd03e56819ce79040ee26d0e050208a1d055192503be023f2eef7632483e9ae93680022f73fa7b9c1cb159341882c47dc35bf73833a9f479358c2269b25dfecd7c28e9cbd1b4ba05126d24594c0a922336e73fa8819308bea2f3b5acf27cac7d45b4248e5c14568a1071479aa43ba6e94d603d7b2f370801afaedccf166243d52ad36271439b45199e5d29b73ceaf59164bea0cabd07a2a5c8f25195bf888c541b515220bfdf75a03d0e9f1a5d0bd5ab843f624c85142ba0cf2651ff05815e1790fc48ebed163a7024f3009865fda150ecea0fae757507df64cb9d3326f437042724922829077e6c65aae4394cb60ad7694e4cb2361e85040df19b5764c881ef2f670a26ffbfc33a5b6842804ee0bb8bac13a69e681df51bd96dfa97e928dab36d843cf918edcc34d64c20fecb5288a93c7661c12e1fb6aa9be69a04d6ea8ebee7e89bc44210820f6166983cd50212530130f186f67a8398e0fcddc9e505f4b60e577e18f15a95787b5345bd33462a1733702bab939ad6af080dfadf1e9fb63aeda98328c8d88c60529dd5c37550e7e76e2336af28b4bc78cf8af8468bfef7a93409d15426aceafae53707e15823845e5bad1e14f528c1bfd5d5f137c24743cd47b1ea60230f3c17ab842352ed1d1f326d73893f0f0b4708eea0dfdcd7abe90d55beec9d50b75ed9ac6e8d06b2c248622aec68930842d9f4e6937a1364453f2fb93175c18b6e2bd2d9d31e7de4ec76104b7dc969068be9ace35d4ad55f322aed629300efdb315b"}}, &(0x7f00000047c0)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r8, 0x11) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r10 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000a40)={0x0, &(0x7f00000005c0)=[@nested_amd_set_intercept={0x181, 0x30, {0x1, 0xffff}}, @cpuid={0x64, 0x18, {0x9, 0x4da}}, @rdmsr={0x66, 0x18, {0x9ff}}, @in_dx={0x69, 0x20, {0x4a1b, 0x1}}, @uexit={0x0, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @ro_nat=0x6404, 0x8000000000000000, 0x3, 0x6}}, @nested_load_code={0x12e, 0x88, {0x2, "0f01cfc7442400f6000000c7442402d32fa0ddff2c24c74424000b000000c74424020d000000c7442406000000000f011c24c4c351792c1308c7442400a6cfb05ac7442402511542a6c7442406000000000f011c2466b843000f00d826430f15f00fc75c3483460f647cfa65f30f2304"}}, @wr_drn={0x68, 0x20, {0x2, 0x6}}, @nested_amd_vmsave={0x183, 0x18, 0x2}, @nested_load_code={0x12e, 0x72, {0x0, "870d628500002e3e672ef3450f09b9800000c00f3235000400000f30f3f3260f01f866baf80cb88cf6aa8eef66bafc0cb800000000ef66b808010f00d80fc72a66baf80cb844505a8cef66bafc0c66b8020066ef0f73f30045ed"}}, @wrmsr={0x65, 0x20, {0x24f, 0x6}}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0x24fc, 0x2, 0x1}}, @nested_create_vm={0x12d, 0x18, 0x3}, @nested_amd_clgi={0x17f, 0x10}, @wr_crn={0x67, 0x20, {0x2, 0x335}}, @wr_drn={0x68, 0x20, {0x7, 0x100}}, @wr_crn={0x67, 0x20, {0x0, 0x6}}, @nested_load_code={0x12e, 0x6c, {0x1, "c4419d72f08c66b8d9008ed066baf80cb858fe6281ef66bafc0c66ed43f4b9770700000f3266baa000b8d000c0feefc46279788500700000650f4ed9b9d80a0000b859510000ba000000000f30c4a3a96b2c3900"}}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @nested_amd_vmload={0x182, 0x18}, @out_dx={0x6a, 0x28, {0x15d5, 0xc, 0xfffffffffffffff9}}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @nested_create_vm={0x12d, 0x18, 0x3}, @enable_nested={0x12c, 0x18}, @nested_amd_vmload={0x182, 0x18, 0x3}, @nested_amd_invlpga={0x17d, 0x20, {0xc000, 0x49c7}}, @in_dx={0x69, 0x20, {0x9892, 0x2}}, @rdmsr={0x66, 0x18, {0x96e}}], 0x456}) ioctl$KVM_GET_FPU(r10, 0x81a0ae8c, &(0x7f0000000a80)) r11 = dup3(r9, r0, 0x0) r12 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r12, 0x0) ppoll(&(0x7f0000000140)=[{r12, 0x2082}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r12, 0x4018620d, &(0x7f00000004c0)={0x73622a85, 0x10a, 0x3}) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f00000002c0)=[@acquire, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat=@binder={0x73622a85, 0x1001, 0x3}, @flat=@weak_binder={0x77622a85, 0x0, 0x3}, @fd={0x66642a85, 0x0, r9}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xf0ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 20.287188298s ago: executing program 5 (id=3728): r0 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)={[{0x2d, 'cpuset'}]}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000002feffff720af0fff8ffffff71a4f0ff000000007110000000000000e5000500000000004704000001ed00000f030000000000001d44000000000000620a00fe040026ca7203000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350844ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffffb9}, 0x48) 20.14647444s ago: executing program 5 (id=3729): mknod(&(0x7f0000000140)='./file0\x00', 0x200, 0x6) (async) mknod(&(0x7f0000000140)='./file0\x00', 0x200, 0x6) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0xc8}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r1 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) read(r1, &(0x7f0000000000)=""/60, 0x3c) close_range(r1, r1, 0x0) (async) close_range(r1, r1, 0x0) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x2200, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000340)={0x8, 0x0, 0x3015, 0x50c, 0x9, 0x919, 0x7, 0x1}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x100000, &(0x7f0000000000/0x100000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f0000000240)={0x0, 0x100000}) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000017c0)={0x7, 0x8, 0x1, 0x4000}) (async) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000017c0)={0x7, 0x8, 0x1, 0x4000}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000300)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f0000000500)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0, 0x1}) r7 = socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x0, 0x800, 0x0, 0x100001, 0x5}, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002100010000000000000000000a000000000000000000000008001b"], 0x24}}, 0x0) syz_io_uring_setup(0x1da1, &(0x7f00000000c0)={0x0, 0xe876, 0x40, 0x2, 0x2d4}, &(0x7f0000000280), &(0x7f0000000080), &(0x7f0000000000)) (async) r8 = syz_io_uring_setup(0x1da1, &(0x7f00000000c0)={0x0, 0xe876, 0x40, 0x2, 0x2d4}, &(0x7f0000000280), &(0x7f0000000080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PBUF_RING(r8, 0x22, &(0x7f0000000380)={&(0x7f0000001000)}, 0x1) (async) io_uring_register$IORING_REGISTER_PBUF_RING(r8, 0x22, &(0x7f0000000380)={&(0x7f0000001000)}, 0x1) ioctl$XFS_IOC_FSGROWFSDATA(r8, 0x4010586e, &(0x7f00000000c0)={0x2, 0x400}) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0) landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) (async) r9 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) landlock_restrict_self(r9, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 11.487311271s ago: executing program 7 (id=3766): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'netdevsim0\x00'}) socket$netlink(0x10, 0x3, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x74) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) accept4$inet6(r2, 0x0, 0x0, 0x80800) 10.69616315s ago: executing program 0 (id=3769): clock_adjtime(0x3, &(0x7f0000000000)={0xe8b1, 0xf7ffffff, 0xb, 0xffffffffffffffff, 0x8001, 0x2000000000007ff, 0x9, 0x80004, 0x100000000000006, 0x203, 0x9, 0x2, 0x100000000, 0x80000000, 0x1, 0xffffffffffffffff, 0xfffffffe, 0x5, 0x800000000000c, 0x1, 0x5, 0x1, 0x2000000011cb, 0xffffffff, 0xd, 0xc}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000100)='virtiofs\x00', 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) close_range(r2, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x413070ed, 0x0) recvmmsg(r0, &(0x7f0000002f40)=[{{&(0x7f0000000140)=@can, 0x80, &(0x7f0000000540)=[{&(0x7f0000000440)=""/203, 0xcb}], 0x1, &(0x7f0000000580)=""/100, 0x64}, 0x2}, {{&(0x7f0000000600), 0x80, &(0x7f0000000880)=[{&(0x7f0000000680)=""/129, 0x81}, {&(0x7f0000000740)=""/120, 0x78}, {&(0x7f00000007c0)=""/110, 0x6e}, {&(0x7f0000000840)=""/31, 0x1f}], 0x4, &(0x7f00000008c0)=""/207, 0xcf}, 0x101}, {{&(0x7f00000009c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000a40)=""/69, 0x45}], 0x1, &(0x7f0000000b00)=""/191, 0xbf}, 0x2}, {{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/23, 0x17}, {&(0x7f00000025c0)=""/23, 0x17}, {&(0x7f0000002600)=""/188, 0xbc}, {&(0x7f00000026c0)=""/27, 0x1b}, {&(0x7f0000002700)=""/203, 0xcb}], 0x6, &(0x7f0000002880)=""/213, 0xd5}, 0x97}, {{&(0x7f0000002980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000002a00)=""/103, 0x67}, {&(0x7f0000002a80)=""/198, 0xc6}, {&(0x7f0000002b80)=""/118, 0x76}, {&(0x7f0000002c00)=""/192, 0xc0}, {&(0x7f0000002cc0)=""/182, 0xb6}, {&(0x7f0000002d80)}], 0x6, &(0x7f0000002e40)=""/219, 0xdb}, 0x5b}], 0x5, 0xa101, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14040010}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x1, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x0) poll(&(0x7f0000000340)=[{r4, 0x3200}], 0x1, 0x9) socket$nl_route(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000003140)=[{&(0x7f00000002c0)="ca7bfc8312c9237bffa562dc1d03c723970f07a1078c261ec3fdfed5f81f4f5fe80bb3ebaa7484bfa3214dbd065c92f849a4c0f98b384d978d483f4d189251fe8cfea46b9c", 0x45}, {&(0x7f0000001000)="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", 0x546}], 0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="23ef04000c0000000200006d2d10fc3d456d737a4d8f0005721874feb6c08ddb410bbce98406e887299ff8215105535f000000fb340000"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r5}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0x0, &(0x7f0000000280)=""/135, &(0x7f0000000340), &(0x7f0000000ec0)="083242aca195feeac7a46bb2817c5d1d06da18e44d9d6b8ae1fe6fe8c3106a1b57c1ea5125afffd6c4ce14cf9b09525d1472e5745098b07d77415c0417074e45705161bb90e70ddfda400181dfe56edc72efeebd014b45d8268b86c2d58dcfd9b602b1442be742132390497971c3", 0xffffff4e, r5}, 0x38) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r6, &(0x7f0000000300)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0xffffffff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f00000000c0)=ANY=[], 0x6a) 10.48774232s ago: executing program 6 (id=3771): r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x10, 0xfffffffffffffffc, 0x0, 0x0, 0x5, 0x11, "43443af4ff8c8ad271d16eb2123b3b1bd68150cf090004a3a3026f60c75585be4d75bc3a45dfa7410022c014cc874a103a4ad38cb4a000", "e2e6b11135c1ce3cffcca6b388251926088888aad5f38476d707002e817c1cfcdaf180c177dd28f6fa00006ca0981b01ab00007d0100", "f9285f39feffbcfdb3eaebf6b08cf712fe7f0000020000000700", [0x1000007e, 0x4008000000d]}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) r2 = syz_open_procfs(r1, &(0x7f0000000080)='fdinfo\x00') r3 = openat(r2, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) write(r3, &(0x7f0000000d00)='nf 127.0.0.1 2000000000 \\xalhost\n', 0x24) syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) (async) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x10, 0xfffffffffffffffc, 0x0, 0x0, 0x5, 0x11, "43443af4ff8c8ad271d16eb2123b3b1bd68150cf090004a3a3026f60c75585be4d75bc3a45dfa7410022c014cc874a103a4ad38cb4a000", "e2e6b11135c1ce3cffcca6b388251926088888aad5f38476d707002e817c1cfcdaf180c177dd28f6fa00006ca0981b01ab00007d0100", "f9285f39feffbcfdb3eaebf6b08cf712fe7f0000020000000700", [0x1000007e, 0x4008000000d]}) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) (async) syz_open_procfs(r1, &(0x7f0000000080)='fdinfo\x00') (async) openat(r2, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) (async) write(r3, &(0x7f0000000d00)='nf 127.0.0.1 2000000000 \\xalhost\n', 0x24) (async) 10.311574462s ago: executing program 7 (id=3772): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0xe0040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4015}, 0x24040004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @loopback, 0x3}, 0x1c, 0x0}, 0x440e0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x21) syz_kvm_setup_syzos_vm$x86(r5, &(0x7f00004e4000/0x400000)=nil) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0xa2e7, 0x5, {0xffffffffffffffff}, {0xffffffffffffffff}, 0xfff, 0xfffffffffffffffa}) migrate_pages(r6, 0xaf, &(0x7f00000000c0)=0x5, &(0x7f0000000100)=0x3) r7 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r7, &(0x7f0000000240)=ANY=[@ANYBLOB="4c494e45202743442043617074757265272030303030303030303030303030303030303030300a5350454139a64b9f73cba0e2a22bf149324b455220274344204361707475726527203030303030303030fced707a3dbe9ee5303030300a564f4c554d4520274d69632720"], 0xbb) close(r7) mmap(&(0x7f00003ff000/0x2000)=nil, 0x2000, 0xf, 0x50, 0xffffffffffffffff, 0xec774000) 10.110964791s ago: executing program 6 (id=3773): r0 = socket$unix(0x1, 0x5, 0x0) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000340)={0x44, r1, 0xb97534d5fe9704cf, 0x1, 0xffffffff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x2c8}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x7fc}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x404c000}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) (async) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xfd, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, 0x0, 0x7, 0x1], 0x0, [0x1, 0x2, 0x9, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x0, 0x81], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) 9.868452536s ago: executing program 6 (id=3774): r0 = syz_usb_connect$lan78xx(0x2, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) io_setup(0x3, &(0x7f0000000180)=0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) io_submit(r3, 0x1, &(0x7f0000000240)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8, r4, 0x0, 0x0, 0x3}]) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB="28000000130005000100"/20, @ANYRES32=r6, @ANYBLOB="0000000050262ac5465389bf61fb91bd0bd32e319c13ca00a667809b17133f1b2f8ef06e58dc5bfb52ffdb32fbe7cd75e556dfa9c8b2f0e0866ecfaa455c4b2dcf0508ef125b62", @ANYRES32=r5], 0x28}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket(0x10, 0x803, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xa, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0xd}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8864}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x24040084) r10 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) openat$cgroup_int(r10, &(0x7f0000000080)='cpuset.mem_exclusive\x00', 0x2, 0x0) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r10, 0x40146f2c, &(0x7f00000000c0)={0x5, 0x0, 0x3, 0x3, 0x4}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f00000011c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) r11 = open(&(0x7f0000000140)='./bus\x00', 0x147bc2, 0x0) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) writev(r11, &(0x7f0000000000)=[{0x0}], 0x1) r12 = syz_usb_connect$cdc_ecm(0x0, 0x6f, &(0x7f0000000200)=ANY=[@ANYBLOB="12010003020000082505a1a440000502030109025d00010104e0000904000a0302060010335c0ca4000524000500000b1524120f00a317a88b045e4f01a607c0ffcb7e392a0424020009058103ef0307070f0905820208000800010905030200000401fc"], &(0x7f00000004c0)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x200, 0xf, 0x8, 0xb, 0x8, 0x80}, 0x5f, &(0x7f0000000340)=ANY=[@ANYBLOB="050f5f000514100a06e200000000f00600c000ff0000000000141004062a04808b063b6f918cc8f237bc9efd3314100405e4cbe41148c277dd0fe9d74e61b2fef614100404423cff5bcc612a5f380f61257b15f7500a100302090001519402"], 0x2, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x401}}, {0x1b, &(0x7f0000000880)=ANY=[@ANYBLOB="1b032783b98c7067884f42f30622abf5ceda6b1916197c50e23cb493286bf16f90b5e70575b255e45f926b0f6da05e5e87b1a6a35e978af266268c4b7e8640dc5dcb986fe0d3ed782a1cfccfc270a2cbe16f85e3de8a2844fe68d14cc25152b9d2fc72e8fcd786e3d85e7eabe0f22a1a0935fb847d287fbc36ecf1ba9eb0f38e21135b687556990da43973468eef8ec859524a61b941688ccddc5042df3983646b2b7c11b2"]}]}) syz_usb_control_io$cdc_ecm(r12, &(0x7f0000000480)={0x14, &(0x7f0000000a40)={0x40, 0x31, 0xfd, {0xfd, 0xf, "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"}}, &(0x7f0000000600)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000001c0)={0x1c, &(0x7f0000000680)=ANY=[], &(0x7f0000000740)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0xf7}}) 9.465163204s ago: executing program 0 (id=3776): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7f, 0x401, 0x1, 0x7ff}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240048e4}, 0x20004890) r9 = socket$kcm(0x11, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000600), 0x56) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r6, 0x8983, 0x0) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r11, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200e61114120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000030427bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="46040900000000002400128009000100766c616e0000000014000280060001000100e2ff0500f84288a8000008000500", @ANYRES32=r4], 0x4c}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e6576650000200002801400072100000000000000000000000000000001050004000100000008000a00", @ANYRES32=r2], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4048800) 8.878089739s ago: executing program 7 (id=3778): unshare(0x2a020480) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x8000000000000003, {}, 0xfd}, 0x18) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@deltclass={0x24, 0x29, 0x8, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xffff}, {0x1, 0x8}, {0x6, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0xfd27c4eff795f0e1}, 0x480c5) syz_usb_connect(0x0, 0x0, 0x0, 0x0) close(r1) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd000000000000010902240001000000000904004001030000000921010000012205000905810300"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0xa, "7bf48418"}]}}, 0x0}, 0x0) gettid() timer_create(0x7, &(0x7f0000000100)={0x0, 0x2a, 0x2, @thr={&(0x7f0000000140)="f7574ea8dde810364d2ac6ede01331f69592b9fa2e7851a824f61718387413", &(0x7f00000002c0)="0335d6e23d5f64f5facdc6af7b68ad9cc8c47c61f35876abc235f20408182f69dd94c6c5d02c26edc41fc28cf1f3c7f65e83b550ec84cbd4446149ba4e9b5043b52d009a079b840fbc5002e96dab987795f46ee72ae1b82c0073eac28ef9c42457e4885add5abe23b87b5ffb3012612df58992d6bebfd3ae2a1dcb396c02a3bae321ce83f003cac373120238e5c48c39b6eb"}}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000780)=""/4080, 0xff0}], 0x1) r4 = syz_open_dev$hiddev(&(0x7f0000000180), 0x9, 0x200782) bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000180)={@ifindex, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$HIDIOCGCOLLECTIONINFO(r4, 0xc0104811, &(0x7f0000000240)={0x3, 0x7, 0x51f5, 0xa63}) lsm_get_self_attr(0x66, &(0x7f0000000000)={0x0, 0x0, 0x20}, &(0x7f0000000040)=0x20, 0x0) unshare(0x80) 8.454810312s ago: executing program 0 (id=3780): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x6, 0x0) close(r3) write(r1, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r4, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x6101}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2901, 0x0) close(r8) socket$can_raw(0x1d, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local}) write$tun(r6, &(0x7f00000001c0)=ANY=[], 0xc2) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r9, &(0x7f0000000280)="05", 0x1, 0x200c085, &(0x7f00000001c0)={0x11, 0x3, r10, 0x1, 0xfc, 0x6, @multicast}, 0x14) getsockopt$inet_mptcp_buf(r5, 0x11c, 0x4, &(0x7f0000001280)=""/247, &(0x7f0000000200)=0xf7) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="6800000042000100000000000000000003010000060000002600010000112233445566778899aabb0800450000140000000001170000010203040506070800000c00020006000600810000000c0003"], 0x68}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x28, 0x7, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}}, 0x40000) 8.454409986s ago: executing program 3 (id=3781): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0xff, &(0x7f0000006680)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x15, @loopback}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@private=0xa010102, 0x15, 0x0, 0x1}}, 0x44) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') fchdir(r3) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r4 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r4, &(0x7f0000001fc0)=""/184, 0xb8) connect$inet(r2, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000000000000000000008000000de4d8a63fd81cd10cfc19c9f72d6f9d59b0b6437c283f10e79af2f846716cc88287ef6492777c3e2", @ANYRES64=0x0, @ANYRESOCT=0x0], 0x38}, 0x200040c4) syz_usb_connect(0x5, 0xe4, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000017ffd340b1134200bbdf000000010902d200010000400009046a00067af4190009050f102000050801060c8b631b7507250102020700090501e6"], 0x0) 8.308142763s ago: executing program 6 (id=3782): syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x13f) unshare(0x22020600) r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x2000000) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000002c0), 0x10) readv(r3, &(0x7f0000001780)=[{&(0x7f0000000380)=""/31, 0x1f}, {0x0}], 0x2) sendmsg$can_bcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=0x0, @ANYRES64=r1], 0x80}}, 0x0) sendmsg$inet6(r0, &(0x7f0000003b40)={&(0x7f0000003880)={0xa, 0x2, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8001}, 0x1c, 0x0}, 0x40000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x2, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0xd0cd0ae23579d064) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYRES64=r4, @ANYRES64=r4, @ANYRESHEX, @ANYRES32=r1, @ANYRES32=r6, @ANYRES64=r0, @ANYBLOB="14dd16d3b163a39e88d5f1213226c8497e78e0e0c3fcb5471a90b9446ccca0e9678e41e24d647f228b3a9471ac9db770b3aca15e5ac5a6b9b99cb41fa21f3f98c2f3a5ad65392ed7180a82d3597f62127719bb1f2aed9c2fef353ad12116b6700bf3684a936d15ea89b531abeefeb6e16b9061d6836f3c59acdf476116a8539f7380205998910214fd151c05cbed52bc600bcb8c0dba07dd68557c852ee65ce93e1fd3df6ec7140c0e9b8ce64e77fb6bdce53c9e773e728a7945df0df6f6ec7555dd8974b8e3f643d004031b6c4a459c2c94235a74b80b5010", @ANYRESDEC, @ANYRESHEX=r5, @ANYRES64=r6], 0x50) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r10, {0x0, 0x4}, {0xffff, 0xffff}, {0x3, 0xffe5}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x8000000000000001}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x6}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100fdffffbffe000800e0000002000000000000000000000000ffffffff000000000000000000000000000307944e230020020000003c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f000001000000080000000000000000000004d66c00000000000000000000000000ffffac141418040000000000000009000000000000000600000000000000ffff0000000000001c25080000000000010000000000000083000000000000000000000000000000fcffffffffffffffff7f0000000000001f00000000000000ff0100000000000002000000fcffffff000000002cbd700000000000020000fd200000000000000048000300"], 0x138}, 0x1, 0x0, 0x0, 0xc801}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', r10, 0x29, 0x81, 0x8, 0x0, 0xa, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x40, 0x1000000, 0xed2d}}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x19, 0xe, &(0x7f0000000200)=ANY=[@ANYRES8=r8], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4}, 0x10}, 0x94) r13 = fanotify_init(0x200, 0x0) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) fanotify_mark(r13, 0x1, 0x4800001e, r15, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYRES16=r10, @ANYRES32=r7, @ANYBLOB="0100010000000000e3ffffffffffffff00000000786291b4b59474c55a26209b0aecec03b32c460d72cc4d7469ae2dd8e62b67631aa093837366746c3d6a989e7cf80300e01fe2405bac66", @ANYRES32=r12, @ANYRES32=r14, @ANYBLOB="03000000050000000300"/28], 0x50) fcntl$lock(r6, 0x410, 0x0) r16 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') close(r16) 7.364474037s ago: executing program 6 (id=3783): openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x40002) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_usb_connect$uac3(0x6, 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB="120100020000ec0f8205820540000102030109026e0003018100f7080b01000122300b0904000000010130000a24010e0800403589560904010000010230000904010101010230000d000000ff030101f70a252f010100000603000904020000010230000904020101010230000905820910000609010a25250002000001f4e6"], 0x0) io_uring_setup(0x1195, 0x0) socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x80000, 0x0) socket$unix(0x1, 0x5, 0x0) socket$unix(0x1, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000001b80)='.\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x80000, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 7.01420172s ago: executing program 3 (id=3784): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) io_setup(0x1, &(0x7f00000001c0)=0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x1, 0x0) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000240)='asymmetric\x00', 0x0, &(0x7f0000000940)="3082010c3081baa003020102020101300a06082a85030701010302300c310a30080603550403130141301e170d3230303130313030303030305a170d3330303130313030303030305a300c310a300806035504031301413068302106082a85030701010101301506092a850307010201010106082a85e55c9e3f969b030701010202034300044001010101010101010101010101010101010101010101010101010101010101010101010101014c17010101010101010101010101010101010101010101010101300a06082a8503070101030203410002020202020202020202020202020202020202020202020202020202020202020202021a350df4595d8018020202020202020202020202020202", 0x110, r2) io_submit(r0, 0x0, 0x0) ioctl$KVM_GET_STATS_FD_cpu(r1, 0xaece) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000204000/0x2000)=nil, 0x0}, 0x68) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket(0x23, 0x1a0e840f4ed7d1c4, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "0000000b000204000b00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) io_uring_setup(0x29c2, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x381}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r6, &(0x7f0000000140)='syz1\x00', 0x1ff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) 6.71512327s ago: executing program 3 (id=3785): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004010}, 0x20000040) chroot(&(0x7f0000000000)='./file0\x00') mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES16=r1], 0x0) syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x4) 5.24199025s ago: executing program 3 (id=3786): syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000100000027bf000000050000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000005234943dba000600000000"], 0x50) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3000001, 0x13, r1, 0xe64a2000) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000100fd0000000900020073797a3200000000140007800800064000000000080013400000000813000300686173683a6e65742c6966616365000005000500020000000500040002000000"], 0x60}}, 0x4004020) syz_open_dev$ptys(0xc, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) landlock_create_ruleset(&(0x7f0000000140)={0x10895, 0x3, 0x2}, 0x18, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000000540)=""/158, 0x9e}, {&(0x7f0000000b00)=""/4094, 0xffe}, {&(0x7f0000001b00)=""/147, 0x93}], 0x3}, 0x40000000) socket$nl_generic(0x10, 0x3, 0x10) r4 = mq_open(&(0x7f0000000180)='&\xaf\x12}N\xf3oW\'\x00', 0x9998bdb00e53b971, 0x80, 0x0) mq_notify(r4, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) mq_open(&(0x7f00000000c0)='\x00\x00\x8ah\x15\xffmW\'\x00', 0x2, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc724, 0xc000, 0xa, 0x3c}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r6, 0x5b06, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r7 = syz_ublk_setup_io_uring(0x6fff, &(0x7f0000000a80)={0x0, 0xfda5, 0x400, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000080)=@any_dev={0x3, 0x3d9, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x1c}}}, &(0x7f0000000480)) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r11) 4.126114411s ago: executing program 35 (id=3729): mknod(&(0x7f0000000140)='./file0\x00', 0x200, 0x6) (async) mknod(&(0x7f0000000140)='./file0\x00', 0x200, 0x6) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000006440000001e0a01010000000000000000070000000900020073797a31000000000900010073797a30000000001800038014000080100001800a000100fefe807eb37b0000140000001000010000000000000000000084000a60ca3d4a0eb815dfbaa2ace19ed6a65bf0a214ca5a0be9ba5dc66e4227aacedfe486e8e3eda55119326ec78aa3c86f33a1bfcb55740fba76a1bc45d7a84298b5224af0ca6a91bf9b995afe99bb15ba353c8d80dce3c38b884280ea24300790a1f39b2e323f090b9139bdc7cb658676238cc3f50efe43896cef1060786bf77da9659c0dfa70ef6dbe685e36db93c4dec5979b2142d5ef6f7b910e582e4195365862d5ee6029fef4c10b1c79baef0d05eec0bdf557651c59a86e59557f2c84fbb4a62e5307f9948d8f694a86219ff6e0ba88e42dae2650f8b2503c75834063f0dc68d514234f490866cff84d"], 0xc8}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r1 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) read(r1, &(0x7f0000000000)=""/60, 0x3c) close_range(r1, r1, 0x0) (async) close_range(r1, r1, 0x0) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x2200, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000340)={0x8, 0x0, 0x3015, 0x50c, 0x9, 0x919, 0x7, 0x1}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x100000, &(0x7f0000000000/0x100000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f0000000240)={0x0, 0x100000}) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000017c0)={0x7, 0x8, 0x1, 0x4000}) (async) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000017c0)={0x7, 0x8, 0x1, 0x4000}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000300)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f0000000500)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0, 0x1}) r7 = socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x0, 0x800, 0x0, 0x100001, 0x5}, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002100010000000000000000000a000000000000000000000008001b"], 0x24}}, 0x0) syz_io_uring_setup(0x1da1, &(0x7f00000000c0)={0x0, 0xe876, 0x40, 0x2, 0x2d4}, &(0x7f0000000280), &(0x7f0000000080), &(0x7f0000000000)) (async) r8 = syz_io_uring_setup(0x1da1, &(0x7f00000000c0)={0x0, 0xe876, 0x40, 0x2, 0x2d4}, &(0x7f0000000280), &(0x7f0000000080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PBUF_RING(r8, 0x22, &(0x7f0000000380)={&(0x7f0000001000)}, 0x1) (async) io_uring_register$IORING_REGISTER_PBUF_RING(r8, 0x22, &(0x7f0000000380)={&(0x7f0000001000)}, 0x1) ioctl$XFS_IOC_FSGROWFSDATA(r8, 0x4010586e, &(0x7f00000000c0)={0x2, 0x400}) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0) landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) (async) r9 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) landlock_restrict_self(r9, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 1.986562758s ago: executing program 3 (id=3788): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020)={0xffffffffffffffff}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000400)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000a0)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000b0)) socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x40, 0x3, 0x3, 0x3}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000003c0)) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r3, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, &(0x7f0000000180)="c4e121651766b822000f00d0f2430f5f160f011cca893e66c60f71d27171213366baf805b8a8cfd482ef66bafc0cb054eec744240000000000c7442402f4840000c7442406000000000f011c24440f01cab87117508fef66baf40cb00eee67660fc730", 0x63}], 0x1, 0x58, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x38, 0x0, 0x0) r5 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r5, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x648e7000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000280)=@req3={0x100, 0x7, 0x3, 0x4, 0xcb5, 0x7, 0x7c2}, 0x1c) 1.504002404s ago: executing program 7 (id=3789): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) socket$tipc(0x1e, 0x5, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRES64=r2, @ANYRESHEX=r3, @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x800) sendmsg$nl_route_sched(r2, 0x0, 0x40) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x400000, 0x80001100008b}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000060000000600000001"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r5}, &(0x7f00000004c0), &(0x7f0000000180)='%pI4 \x00'}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000033c0)={r5, &(0x7f0000000200), 0x0}, 0x20) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x305c04, 0x0) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000080)={0x0, 0x8a, 0x4, 0x7fffffff, 0xd, "00080000000000000000000cadf100004000"}) r9 = syz_open_pts(r7, 0x141401) fcntl$setstatus(r9, 0x4, 0x2000) write(r9, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000040)=0x3) close_range(r6, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 1.275295263s ago: executing program 6 (id=3790): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) accept4$alg(r1, 0x0, 0x0, 0x0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r6 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) syz_ublk_setup_queues(r12, r10, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x1f0, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x5aa, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xbd7, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) r14 = dup(r13) syz_ublk_setup_queues(r14, r10, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x20000254}, &(0x7f0000000600)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r14}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xffffdffe, 0x34f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x400, 0x0, 0x1f0, 0x0, r14}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x200, 0x2, 0x252, 0x0, r2}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r14, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 1.21033983s ago: executing program 0 (id=3791): timer_create(0xfffffffffffffffc, 0x0, 0x0) timer_gettime(0x0, &(0x7f00000001c0)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xc0, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x2}, {0x0, 0x7ff}, 0x20000000, 0x0, 0x0, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0xc0}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newspdinfo={0x1c, 0x24, 0x21, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="b80000001900674c000000060000000000000000000000000000000000000000e000000200000000000000000000000000000000000000000a"], 0xb8}}, 0x0) 957.852279ms ago: executing program 0 (id=3792): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x6c00, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_pidfd_open(r0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x68, 0xc, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x3c, 0x3, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "d1"}]}, @NFTA_SET_ELEM_EXPR={0x28, 0x7, 0x0, 0x1, @connlimit={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xd4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$kcm(0x21, 0x2, 0x2) clock_gettime(0x3, &(0x7f0000000180)={0x0, 0x0}) r7 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000340)="faf63a96ffdeeb3145f0409885d93a61a9e04be6552305649ad62993a1fadd24a79560c28bb3a29662f7ab7e435fce084af87343e4145b547a874bffc7c0800a0d3ae8acd36cf0a5ee33a5c55ada71c71b045f0f34668409f316b37bbde25781e204ebeceab9d7e47a75dcde7e1f62f81cb1873dc3a412c18b394b66109acb23122eec90f7fb1071552d529e5e47ae82226975638796a65e9d85386cd0f40e33141f0863018134706b42c5d36c25", 0xae, 0xffffffffffffffff) r8 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$negate(0xd, r7, 0x7, r8) setsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000000140)={r5, r6/1000+60000}, 0x10) sendmsg$kcm(r4, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0xffffff1f}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0xff02, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=@ipv6_getaddrlabel={0x30, 0x4a, 0x3, 0x0, 0x0, {0xa, 0x0, 0x80, 0x0, 0x0, 0x1000000}, [@IFAL_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @local}}]}, 0x30}}, 0x0) 896.327104ms ago: executing program 7 (id=3793): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r0, &(0x7f0000000100)={0x18, 0x2, {0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1e) io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8, 0x6c}) r1 = io_uring_setup(0x5978, &(0x7f0000000000)={0x0, 0x400078bf, 0x1000, 0x1, 0x1}) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000200)={0x2, 0x4, 0x0, 0x3, 0xa, 0x0, 0xfffffffc, 0x0, [@sadb_address={0x3, 0x6, 0xff, 0x0, 0xe, @in={0x2, 0x4e21, @remote}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x32, 0x0, 0x0, @in={0x2, 0x4e21, @remote}}]}, 0x50}}, 0x4) io_uring_register$IORING_UNREGISTER_RING_FDS(r1, 0x15, &(0x7f0000001f80)=[{0x0, 0x0, 0x0}, {0x0, 0x1, 0x0}], 0x2) 596.150536ms ago: executing program 7 (id=3794): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000280)={0xf0f022}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f0000000080)={0x1000000}) ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f0000000380)={0x1fe, 0x4, 0xe000, 0x1000000, &(0x7f0000000000/0x1000000)=nil, 0x2000, r3}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f0000000340)={0x10000, 0x1000000}) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, 0x0, 0x0) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f0000000440)={0x10001, 0x4, 0x6000, 0x2000, &(0x7f0000ffd000/0x2000)=nil, 0x1000, r3}) (async) ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f0000000440)={0x10001, 0x4, 0x6000, 0x2000, &(0x7f0000ffd000/0x2000)=nil, 0x1000, r3}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x2, 0x9, 0x9, 0xfffffe0000000003, 0xfa51, 0xffffffff}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x2, 0x9, 0x9, 0xfffffe0000000003, 0xfa51, 0xffffffff}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) writev(r7, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1) (async) writev(r7, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180800000800000004000001ffffffffffec9500230000000008"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180800000800000004000001ffffffffffec9500230000000008"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) capset(&(0x7f00000000c0)={0x20071026}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x12) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000003300), 0x40002, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r9 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f00004d2000/0x3000)=nil, 0x3000, 0x3, 0x11, r9, 0xb829f000) (async) mmap(&(0x7f00004d2000/0x3000)=nil, 0x3000, 0x3, 0x11, r9, 0xb829f000) io_uring_register$IORING_REGISTER_SEND_MSG_RING(0xffffffffffffffff, 0x1f, &(0x7f00000003c0)={0x28, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8, 0x2, 0x1}, 0x1) write$rfkill(r8, &(0x7f00000000c0)={0xfffffffd, 0x2, 0x3, 0xfe, 0x1}, 0x8) landlock_restrict_self(0xffffffffffffffff, 0xc) syz_usb_connect(0x5, 0x58, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) (async) r10 = syz_usb_connect(0x5, 0x58, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r10, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="00030c000000040301", @ANYRES32=0x0, @ANYBLOB="0ac330dc9b12d74a481dcfe8ad90b57fb41576f74c922c114c4cacb03a5b6daa1249d7f70a6e888c2121960a59b987b315d5a5216aff07832f362b60934ef0cb033bb5f91edbaf59ddd57a011b5e31309593d9324d670c57465c47aad00598c19affe56f0c454b99cb4e4814d10298b2", @ANYRESHEX=r2], 0x0, 0x0}, 0x0) 165.963487ms ago: executing program 3 (id=3795): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x3b, 0x301, 0x2270bd24, 0x25dfdbff, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x20040000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001700), 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) map_shadow_stack(&(0x7f00004d8000/0x3000)=nil, 0x1627, 0x3) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) r2 = syz_open_dev$vim2m(0x0, 0x2, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000000)={0xa5, 0x1, 0x83, "ac9d94ee54931bae100000000100001a0000ae767db959804a58000100", 0x59565955}) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7fffffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="64000000090603000000000000000000020000003c0007800c000180080001407f0000010c001480080001400a0101000600044013880000060005403a9800000500070006000000080006400000000105000100060000000900020073797a3100000000421b5ffeb963c786329a211f6cdffaa7c8ec2255bab0013c8b691dcac75fea9077145128cff65a23abc9c9ae5f", @ANYRES32=0x0], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x22004000) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, 0x0, 0x80) syz_usb_connect(0x6, 0x6ba, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 0s ago: executing program 0 (id=3796): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000280)) r1 = syz_io_uring_setup(0x2000f00, &(0x7f0000000080)={0x0, 0x0, 0x40, 0x0, 0x91, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000003c0)=@IORING_OP_NOP128={0x3f, 0x71, 0x0, 0xffffffffffffffff, 0xb, 0x6, 0x3, 0x1, 0x0, {0x62bf}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) r5 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) r9 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r1, 0x4002f516, &(0x7f0000000000)={0x2, 0x5}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0xa0, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0x0, 0x4}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x6c, 0x2, [@TCA_MATCHALL_ACT={0x68, 0x2, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @local}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xfffffffc, 0x8, 0x4, 0x7fff, 0x7}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8080}, 0x24000080) r14 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r14, 0x4040534e, &(0x7f0000000040)={0x104, @tick, 0x2, {0x48, 0x4}, 0x76, 0x2, 0x1}) syz_usb_control_io$hid(r9, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f000001b7c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, 0x0, 0x30}}], 0x1, 0x4008804) r15 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r16 = ioctl$KVM_CREATE_VM(r15, 0xae01, 0x0) r17 = dup(r16) ioctl$KVM_CREATE_VCPU(r17, 0xae41, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r17, 0xc0406619, &(0x7f0000000240)={@desc={0x1, 0x0, @desc1}}) syz_usb_ep_write$ath9k_ep1(r9, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) io_uring_enter(r5, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[]) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 751962][T18785] R13: 00007f542fa26038 R14: 00007f542fa25fa0 R15: 00007f542fb4fa48 [ 1045.752000][T18785] [ 1045.779839][T13054] usb 6-1: new full-speed USB device number 97 using dummy_hcd [ 1045.858901][T13054] usb 6-1: device descriptor read/8, error -71 [ 1045.908466][T13043] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1046.047909][T18785] kobject: kobject_add_internal failed for macvlan2 (error: -12 parent: net) [ 1046.085540][T13043] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 1046.112494][T13043] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1046.112653][T13043] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1046.112703][T13043] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1046.120731][T13054] usb 6-1: new full-speed USB device number 98 using dummy_hcd [ 1046.205395][T13054] usb 6-1: device descriptor read/8, error -71 [ 1046.255068][T13043] usb 4-1: config 0 descriptor?? [ 1046.330191][T13054] usb usb6-port1: unable to enumerate USB device [ 1046.691666][T18781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1046.717891][T18781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1046.736278][T13043] Bluetooth: Can't get state to change to load ram patch err [ 1046.736312][T13043] Bluetooth: Loading patch file failed [ 1046.736341][T13043] ath3k 4-1:0.0: probe with driver ath3k failed with error -71 [ 1046.741935][T13043] usb 4-1: USB disconnect, device number 53 [ 1047.040209][T18796] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3417'. [ 1047.773373][T13054] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1047.923483][T13054] usb 4-1: Using ep0 maxpacket: 8 [ 1047.926919][T13054] usb 4-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 1047.932704][T18821] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 1047.991832][T13054] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1047.991876][T13054] usb 4-1: can't read configurations, error -61 [ 1048.115055][T13054] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1048.263103][T13054] usb 4-1: Using ep0 maxpacket: 8 [ 1048.264190][T13054] usb 4-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 1048.269753][T13054] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1048.269880][T13054] usb 4-1: can't read configurations, error -61 [ 1048.270572][T13054] usb usb4-port1: attempt power cycle [ 1048.455059][ T5682] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 1048.617334][ T5682] usb 6-1: Using ep0 maxpacket: 32 [ 1048.621005][ T5682] usb 6-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1048.637510][ T5682] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1048.637595][ T5682] usb 6-1: config 0 interface 0 altsetting 16 has an endpoint descriptor with address 0x6E, changing to 0xE [ 1048.637679][ T5682] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0xE has invalid wMaxPacketSize 0 [ 1048.637735][ T5682] usb 6-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1048.637809][ T5682] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1048.637914][ T5682] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1048.663669][ T5682] usb 6-1: config 0 descriptor?? [ 1048.719706][T13054] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1048.736417][T13054] usb 4-1: Using ep0 maxpacket: 8 [ 1048.738419][T13054] usb 4-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 1048.783465][T13054] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1048.783508][T13054] usb 4-1: can't read configurations, error -61 [ 1048.913474][T13054] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1048.938467][T13054] usb 4-1: Using ep0 maxpacket: 8 [ 1048.940735][T18837] netlink: 'syz.7.3429': attribute type 29 has an invalid length. [ 1048.942760][T13054] usb 4-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 1048.966030][T18840] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3431'. [ 1048.966054][T18840] netlink: 43 bytes leftover after parsing attributes in process `syz.6.3431'. [ 1048.966134][T18840] netlink: 'syz.6.3431': attribute type 6 has an invalid length. [ 1048.966150][T18840] netlink: 'syz.6.3431': attribute type 5 has an invalid length. [ 1048.966165][T18840] netlink: 43 bytes leftover after parsing attributes in process `syz.6.3431'. [ 1049.069842][T13054] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1049.069966][T13054] usb 4-1: can't read configurations, error -61 [ 1049.070730][T13054] usb usb4-port1: unable to enumerate USB device [ 1049.165334][T18837] syzkaller0: entered promiscuous mode [ 1049.165397][T18837] syzkaller0: entered allmulticast mode [ 1049.513360][T18845] netlink: 'syz.0.3434': attribute type 29 has an invalid length. [ 1049.531117][T18845] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3434'. [ 1049.654922][T18849] netlink: 'syz.0.3434': attribute type 4 has an invalid length. [ 1049.781894][T18849] netlink: 'syz.0.3434': attribute type 4 has an invalid length. [ 1049.814543][ T5682] usbhid 6-1:0.0: can't add hid device: -71 [ 1049.814818][ T5682] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1049.885970][ T5682] usb 6-1: USB disconnect, device number 99 [ 1049.963153][ T5703] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1050.113147][ T5703] usb 7-1: Using ep0 maxpacket: 16 [ 1050.115435][ T5703] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1050.121432][ T5703] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1050.121495][ T5703] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1050.121591][ T5703] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.176075][ T5703] usb 7-1: config 0 descriptor?? [ 1050.596035][T18859] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3437'. [ 1050.739395][ T5703] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.0030/input/input103 [ 1050.743185][T13044] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 1050.763426][ T5703] microsoft 0003:045E:07DA.0030: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 1050.904854][T13044] usb 6-1: Using ep0 maxpacket: 32 [ 1050.905928][T13044] usb 6-1: New USB device found, idVendor=1bac, idProduct=0304, bcdDevice= 0.00 [ 1050.907355][T13044] usb 6-1: too many endpoints for config 0 interface 0 altsetting 6: 255, using maximum allowed: 30 [ 1050.907401][T13044] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1050.907460][T13044] usb 6-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1050.907494][T13044] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1050.907530][T13044] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.911679][T13044] usb 6-1: config 0 descriptor?? [ 1051.399052][ T5689] usb 7-1: USB disconnect, device number 13 [ 1051.567318][T18873] netlink: 'syz.3.3440': attribute type 4 has an invalid length. [ 1051.629503][T13044] input: HID 1bac:0304 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:1BAC:0304.0031/input/input104 [ 1051.886459][T13044] hid-generic 0003:1BAC:0304.0031: input,hidraw0: USB HID vd.8f Joystick [HID 1bac:0304] on usb-dummy_hcd.5-1/input0 [ 1052.595643][T18878] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3442'. [ 1052.595673][T18878] netlink: 43 bytes leftover after parsing attributes in process `syz.6.3442'. [ 1052.595693][T18878] netlink: 'syz.6.3442': attribute type 6 has an invalid length. [ 1052.595708][T18878] netlink: 'syz.6.3442': attribute type 5 has an invalid length. [ 1052.595723][T18878] netlink: 43 bytes leftover after parsing attributes in process `syz.6.3442'. [ 1052.790501][T18880] bond0: entered allmulticast mode [ 1052.790526][T18880] bond_slave_0: entered allmulticast mode [ 1052.790546][T18880] bond_slave_1: entered allmulticast mode [ 1052.792480][T18880] bridge0: port 3(bond0) entered blocking state [ 1052.792713][T18880] bridge0: port 3(bond0) entered disabled state [ 1052.832589][T18880] bond0: entered promiscuous mode [ 1052.832613][T18880] bond_slave_0: entered promiscuous mode [ 1052.832833][T18880] bond_slave_1: entered promiscuous mode [ 1052.852993][T18880] bridge0: port 3(bond0) entered blocking state [ 1052.853119][T18880] bridge0: port 3(bond0) entered forwarding state [ 1053.463320][T13054] usb 6-1: USB disconnect, device number 100 [ 1054.336369][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.336431][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.569488][T18897] fuse: Bad value for 'fd' [ 1054.670588][T13052] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 1055.053842][T18905] FAULT_INJECTION: forcing a failure. [ 1055.053842][T18905] name failslab, interval 1, probability 0, space 0, times 0 [ 1055.053883][T18905] CPU: 1 UID: 0 PID: 18905 Comm: syz.3.3452 Tainted: G L syzkaller #0 PREEMPT(full) [ 1055.053914][T18905] Tainted: [L]=SOFTLOCKUP [ 1055.053923][T18905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1055.053938][T18905] Call Trace: [ 1055.053948][T18905] [ 1055.053959][T18905] dump_stack_lvl+0xe8/0x150 [ 1055.053999][T18905] should_fail_ex+0x410/0x560 [ 1055.054040][T18905] should_failslab+0xa8/0x100 [ 1055.054072][T18905] ? __kernfs_new_node+0xe6/0x980 [ 1055.054097][T18905] kmem_cache_alloc_noprof+0xa1/0x600 [ 1055.054137][T18905] ? __kernfs_new_node+0xe6/0x980 [ 1055.054162][T18905] ? kernfs_add_one+0xfc/0x6f0 [ 1055.054190][T18905] __kernfs_new_node+0xe6/0x980 [ 1055.054213][T18905] ? up_write+0x19d/0x4a0 [ 1055.054253][T18905] ? __pfx___kernfs_new_node+0x10/0x10 [ 1055.054279][T18905] ? kernfs_root+0x1c/0x230 [ 1055.054309][T18905] ? kernfs_root+0x1c/0x230 [ 1055.054330][T18905] ? kernfs_root+0x1c/0x230 [ 1055.054350][T18905] ? kernfs_root+0x1c/0x230 [ 1055.054378][T18905] kernfs_new_node+0xea/0x140 [ 1055.054411][T18905] __kernfs_create_file+0x4b/0x2e0 [ 1055.054444][T18905] sysfs_add_file_mode_ns+0x237/0x300 [ 1055.054486][T18905] sysfs_create_file_ns+0x12b/0x1b0 [ 1055.054521][T18905] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 1055.054553][T18905] ? __dev_fwnode+0x50/0x80 [ 1055.054580][T18905] ? device_create_file+0xf4/0x1b0 [ 1055.054608][T18905] device_add+0x432/0xb80 [ 1055.054636][T18905] netdev_register_kobject+0x197/0x350 [ 1055.054668][T18905] register_netdevice+0x1433/0x1eb0 [ 1055.054721][T18905] ? __pfx_register_netdevice+0x10/0x10 [ 1055.054755][T18905] ? macvlan_changelink_sources+0x22c/0x1650 [ 1055.054792][T18905] ? macvlan_changelink_sources+0x130e/0x1650 [ 1055.054839][T18905] macvlan_common_newlink+0x12e5/0x1a50 [ 1055.054871][T18905] ? alloc_netdev_mqs+0xd44/0x12a0 [ 1055.054906][T18905] ? alloc_netdev_mqs+0xd44/0x12a0 [ 1055.054954][T18905] ? __pfx_macvlan_common_newlink+0x10/0x10 [ 1055.054992][T18905] ? rtnl_create_link+0xa04/0xd70 [ 1055.055016][T18905] ? __pfx_macvlan_newlink+0x10/0x10 [ 1055.055049][T18905] rtnl_newlink_create+0x305/0x7b0 [ 1055.055090][T18905] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1055.055127][T18905] ? __pfx___mutex_lock+0x10/0x10 [ 1055.055168][T18905] ? ns_capable+0x89/0xe0 [ 1055.055203][T18905] rtnl_newlink+0x166d/0x1c30 [ 1055.055250][T18905] ? __pfx_rtnl_newlink+0x10/0x10 [ 1055.055278][T18905] ? do_syscall_64+0x166/0x520 [ 1055.055305][T18905] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1055.055369][T18905] ? kasan_quarantine_put+0xbb/0x1f0 [ 1055.055394][T18905] ? lockdep_hardirqs_on+0x7b/0x110 [ 1055.055427][T18905] ? nlmon_xmit+0xb0/0x100 [ 1055.055451][T18905] ? kmem_cache_free+0x182/0x650 [ 1055.055488][T18905] ? __lock_acquire+0x747/0x2de0 [ 1055.055524][T18905] ? __local_bh_enable_ip+0xd6/0x140 [ 1055.055554][T18905] ? lockdep_hardirqs_on+0x7b/0x110 [ 1055.055583][T18905] ? __dev_queue_xmit+0x29b/0x3820 [ 1055.055615][T18905] ? __local_bh_enable_ip+0xd6/0x140 [ 1055.055643][T18905] ? __dev_queue_xmit+0x29b/0x3820 [ 1055.055687][T18905] ? lock_acquire+0x115/0x350 [ 1055.055727][T18905] ? __pfx_rtnl_newlink+0x10/0x10 [ 1055.055756][T18905] rtnetlink_rcv_msg+0x802/0xc00 [ 1055.055789][T18905] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1055.055819][T18905] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1055.055845][T18905] ? ref_tracker_free+0x689/0x830 [ 1055.055878][T18905] ? __pfx_ref_tracker_free+0x10/0x10 [ 1055.055918][T18905] netlink_rcv_skb+0x226/0x4a0 [ 1055.055956][T18905] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1055.055988][T18905] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1055.056043][T18905] ? netlink_deliver_tap+0x2e/0x1b0 [ 1055.056079][T18905] ? netlink_deliver_tap+0x2e/0x1b0 [ 1055.056120][T18905] netlink_unicast+0x7bd/0x940 [ 1055.056166][T18905] netlink_sendmsg+0x813/0xb40 [ 1055.056213][T18905] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1055.056259][T18905] ? apparmor_socket_sendmsg+0x98/0x360 [ 1055.056288][T18905] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1055.056324][T18905] sock_sendmsg_nosec+0x13a/0x180 [ 1055.056352][T18905] ____sys_sendmsg+0x54e/0x850 [ 1055.056390][T18905] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1055.056433][T18905] ? import_iovec+0x73/0xa0 [ 1055.056468][T18905] ___sys_sendmsg+0x2a5/0x360 [ 1055.056498][T18905] ? __lock_acquire+0x747/0x2de0 [ 1055.056527][T18905] ? __pfx____sys_sendmsg+0x10/0x10 [ 1055.056598][T18905] ? __fget_files+0x2a/0x420 [ 1055.056631][T18905] ? __fget_files+0x3a2/0x420 [ 1055.056674][T18905] __x64_sys_sendmsg+0x1b1/0x290 [ 1055.056710][T18905] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1055.056766][T18905] do_syscall_64+0x166/0x520 [ 1055.056795][T18905] ? trace_irq_disable+0x3b/0x140 [ 1055.056818][T18905] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1055.056842][T18905] ? clear_bhb_loop+0x70/0xc0 [ 1055.056872][T18905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1055.056896][T18905] RIP: 0033:0x7fd6d859e159 [ 1055.056917][T18905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1055.056938][T18905] RSP: 002b:00007fd6d944a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1055.056964][T18905] RAX: ffffffffffffffda RBX: 00007fd6d8825fa0 RCX: 00007fd6d859e159 [ 1055.056981][T18905] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 1055.056997][T18905] RBP: 00007fd6d944a090 R08: 0000000000000000 R09: 0000000000000000 [ 1055.057011][T18905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1055.057025][T18905] R13: 00007fd6d8826038 R14: 00007fd6d8825fa0 R15: 00007fd6d894fa48 [ 1055.057069][T18905] [ 1055.223225][T18899] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1057.146414][T18915] syz.6.3454 (18915): drop_caches: 2 [ 1057.662081][T18931] netlink: 'syz.6.3461': attribute type 11 has an invalid length. [ 1057.662108][T18931] netlink: 140 bytes leftover after parsing attributes in process `syz.6.3461'. [ 1057.754078][T18919] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3457'. [ 1057.923265][T13054] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1058.054339][T13054] usb 7-1: device descriptor read/64, error -71 [ 1058.293170][T13054] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1058.385966][T18941] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3465'. [ 1058.428071][T13054] usb 7-1: device descriptor read/64, error -71 [ 1058.542338][T13054] usb usb7-port1: attempt power cycle [ 1058.888085][T13054] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1058.933767][T13054] usb 7-1: device descriptor read/8, error -71 [ 1058.985743][T18949] FAULT_INJECTION: forcing a failure. [ 1058.985743][T18949] name failslab, interval 1, probability 0, space 0, times 0 [ 1058.985788][T18949] CPU: 0 UID: 0 PID: 18949 Comm: syz.0.3468 Tainted: G L syzkaller #0 PREEMPT(full) [ 1058.985825][T18949] Tainted: [L]=SOFTLOCKUP [ 1058.985834][T18949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1058.985853][T18949] Call Trace: [ 1058.985867][T18949] [ 1058.985877][T18949] dump_stack_lvl+0xe8/0x150 [ 1058.985915][T18949] should_fail_ex+0x410/0x560 [ 1058.985951][T18949] ? __alloc_skb+0x1db/0x7a0 [ 1058.985988][T18949] should_failslab+0xa8/0x100 [ 1058.986027][T18949] ? __alloc_skb+0x1db/0x7a0 [ 1058.986052][T18949] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 1058.986088][T18949] ? __alloc_skb+0x18d/0x7a0 [ 1058.986120][T18949] ? __alloc_skb+0x1db/0x7a0 [ 1058.986165][T18949] __alloc_skb+0x1db/0x7a0 [ 1058.986207][T18949] netlink_sendmsg+0x5d4/0xb40 [ 1058.986252][T18949] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1058.986302][T18949] ? apparmor_socket_sendmsg+0x98/0x360 [ 1058.986353][T18949] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1058.986388][T18949] sock_sendmsg_nosec+0x13a/0x180 [ 1058.986416][T18949] ____sys_sendmsg+0x54e/0x850 [ 1058.986459][T18949] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1058.986526][T18949] ? import_iovec+0x73/0xa0 [ 1058.986559][T18949] ___sys_sendmsg+0x2a5/0x360 [ 1058.986595][T18949] ? __lock_acquire+0x747/0x2de0 [ 1058.986625][T18949] ? __pfx____sys_sendmsg+0x10/0x10 [ 1058.986710][T18949] ? __fget_files+0x2a/0x420 [ 1058.986757][T18949] ? __fget_files+0x3a2/0x420 [ 1058.986800][T18949] __x64_sys_sendmsg+0x1b1/0x290 [ 1058.986851][T18949] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1058.986906][T18949] do_syscall_64+0x166/0x520 [ 1058.986940][T18949] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1058.986966][T18949] ? clear_bhb_loop+0x70/0xc0 [ 1058.987004][T18949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1058.987028][T18949] RIP: 0033:0x7f8e2a59e159 [ 1058.987049][T18949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1058.987081][T18949] RSP: 002b:00007f8e2b3ea028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1058.987106][T18949] RAX: ffffffffffffffda RBX: 00007f8e2a825fa0 RCX: 00007f8e2a59e159 [ 1058.987124][T18949] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 1058.987144][T18949] RBP: 00007f8e2b3ea090 R08: 0000000000000000 R09: 0000000000000000 [ 1058.987158][T18949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1058.987185][T18949] R13: 00007f8e2a826038 R14: 00007f8e2a825fa0 R15: 00007f8e2a94fa48 [ 1058.987222][T18949] [ 1059.250103][T13054] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1059.332463][T13054] usb 7-1: device descriptor read/8, error -71 [ 1059.434183][T13054] usb usb7-port1: unable to enumerate USB device [ 1059.659276][T18953] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1059.674375][T18953] bond5 (unregistering): Released all slaves [ 1060.749934][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1060.886734][T18978] fuse: Unknown parameter 'rÓtmode' [ 1061.019975][T18982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3478'. [ 1061.150117][T18982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1061.151809][T18982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1061.363102][T13039] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1061.513093][T13039] usb 1-1: Using ep0 maxpacket: 16 [ 1061.514218][T13039] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1061.515390][T13039] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1061.515442][T13039] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1061.515474][T13039] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1061.515497][T13039] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1061.515523][T13039] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1061.516760][T13039] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1061.516787][T13039] usb 1-1: Manufacturer: syz [ 1061.611845][T18991] netlink: 'syz.7.3482': attribute type 1 has an invalid length. [ 1061.612837][T13039] usb 1-1: config 0 descriptor?? [ 1062.213273][T13039] rc_core: IR keymap rc-hauppauge not found [ 1062.213294][T13039] Registered IR keymap rc-empty [ 1062.213764][T13039] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1062.244004][T13039] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1062.266258][T13039] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1062.285721][T13039] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input105 [ 1062.321806][T13039] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1062.345289][T13039] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1062.363956][T13039] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1062.393109][T13039] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1062.413747][T13039] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1062.433671][T13039] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1062.453147][T13039] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1062.473306][T13039] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1062.493147][T13039] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1062.513162][T13039] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1062.535971][T13039] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1062.536026][T13039] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1062.913588][T13039] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1063.073122][T13039] usb 7-1: Using ep0 maxpacket: 8 [ 1063.074058][T13039] usb 7-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 1063.076468][T13039] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1063.129057][T13039] usb 7-1: config 0 descriptor?? [ 1063.151097][T13039] usb 7-1: probing VID:PID(0424:012C) [ 1063.190599][T13039] usb 7-1: vub300 testing BULK IN EndPoint(0) 81 [ 1063.190659][T13039] usb 7-1: vub300 testing BULK OUT EndPoint(1) 02 [ 1063.190682][T13039] usb 7-1: vub300 testing BULK IN EndPoint(2) 83 [ 1063.190703][T13039] usb 7-1: vub300 testing BULK OUT EndPoint(3) 04 [ 1063.190728][T13039] usb 7-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 1063.553150][T13054] usb 4-1: new low-speed USB device number 58 using dummy_hcd [ 1063.613177][T13039] usb 7-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 1063.800975][T13054] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1063.801108][T13054] usb 4-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 1063.838624][T13054] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1063.838654][T13054] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1063.838709][T13039] vub300 7-1:0.0: probe with driver vub300 failed with error -32 [ 1063.902912][T13054] usb 4-1: string descriptor 0 read error: -22 [ 1063.903369][T13054] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1063.969824][T13052] usb 1-1: USB disconnect, device number 38 [ 1064.048371][T13054] usb 4-1: 0:242 : does not exist [ 1064.048405][T13054] usb 4-1: 0:255 : does not exist [ 1065.599863][T13044] usb 7-1: USB disconnect, device number 18 [ 1065.998179][T13052] usb 4-1: USB disconnect, device number 58 [ 1066.451627][T19035] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3494'. [ 1066.505150][T19035] erspan1: entered allmulticast mode [ 1066.505389][T13044] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1066.508498][T19035] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3494'. [ 1066.633061][T13044] usb 7-1: device descriptor read/64, error -71 [ 1066.838821][T13031] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1066.906953][T13044] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1067.028985][T13031] usb 1-1: Using ep0 maxpacket: 16 [ 1067.046736][T13044] usb 7-1: device descriptor read/64, error -71 [ 1067.068976][T13031] usb 1-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1 [ 1067.075082][T19048] FAULT_INJECTION: forcing a failure. [ 1067.075082][T19048] name failslab, interval 1, probability 0, space 0, times 0 [ 1067.075129][T19048] CPU: 0 UID: 0 PID: 19048 Comm: syz.3.3501 Tainted: G L syzkaller #0 PREEMPT(full) [ 1067.075160][T19048] Tainted: [L]=SOFTLOCKUP [ 1067.075171][T19048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1067.075185][T19048] Call Trace: [ 1067.075195][T19048] [ 1067.075205][T19048] dump_stack_lvl+0xe8/0x150 [ 1067.075244][T19048] should_fail_ex+0x410/0x560 [ 1067.075277][T19048] should_failslab+0xa8/0x100 [ 1067.075309][T19048] __kmalloc_noprof+0xfe/0x720 [ 1067.075333][T19048] ? snd_pcm_hw_refine+0xa18/0x17d0 [ 1067.075361][T19048] ? snd_pcm_hw_refine+0xa18/0x17d0 [ 1067.075398][T19048] snd_pcm_hw_refine+0xa18/0x17d0 [ 1067.075444][T19048] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 1067.075498][T19048] ? rcu_is_watching+0x16/0xb0 [ 1067.075531][T19048] ? __kasan_kmalloc+0x93/0xb0 [ 1067.075559][T19048] ? __kmalloc_cache_noprof+0x321/0x600 [ 1067.075583][T19048] ? __kmalloc_cache_noprof+0x14d/0x600 [ 1067.075605][T19048] ? snd_pcm_oss_change_params_locked+0x910/0x3c80 [ 1067.075642][T19048] ? snd_pcm_oss_change_params_locked+0x910/0x3c80 [ 1067.075677][T19048] ? snd_pcm_oss_change_params_locked+0x92c/0x3c80 [ 1067.075712][T19048] ? snd_interval_refine+0x5f8/0xa40 [ 1067.075748][T19048] snd_pcm_oss_change_params_locked+0xb2d/0x3c80 [ 1067.075815][T19048] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1067.075866][T19048] ? kstrtouint+0x6e/0xe0 [ 1067.075914][T19048] snd_pcm_oss_read+0x26e/0x8d0 [ 1067.075965][T19048] vfs_readv+0x57c/0x850 [ 1067.075994][T19048] ? __pfx_snd_pcm_oss_read+0x10/0x10 [ 1067.076033][T19048] ? __pfx_vfs_readv+0x10/0x10 [ 1067.076058][T19048] ? vfs_write+0x9ce/0xba0 [ 1067.076115][T19048] ? do_sys_openat2+0x14e/0x200 [ 1067.076143][T19048] ? kmem_cache_free+0x182/0x650 [ 1067.076185][T19048] do_readv+0x154/0x2e0 [ 1067.076215][T19048] ? __pfx_do_readv+0x10/0x10 [ 1067.076255][T19048] do_syscall_64+0x166/0x520 [ 1067.076284][T19048] ? trace_irq_disable+0x3b/0x140 [ 1067.076307][T19048] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1067.076332][T19048] ? clear_bhb_loop+0x70/0xc0 [ 1067.076361][T19048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1067.076385][T19048] RIP: 0033:0x7fd6d859e159 [ 1067.076407][T19048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1067.076427][T19048] RSP: 002b:00007fd6d944a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 1067.076453][T19048] RAX: ffffffffffffffda RBX: 00007fd6d8825fa0 RCX: 00007fd6d859e159 [ 1067.076471][T19048] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000003 [ 1067.076486][T19048] RBP: 00007fd6d944a090 R08: 0000000000000000 R09: 0000000000000000 [ 1067.076501][T19048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1067.076556][T19048] R13: 00007fd6d8826038 R14: 00007fd6d8825fa0 R15: 00007fd6d894fa48 [ 1067.076592][T19048] [ 1067.158810][T13031] usb 1-1: config 129 has too many interfaces: 160, using maximum allowed: 32 [ 1067.158840][T13031] usb 1-1: config 129 has 1 interface, different from the descriptor's value: 160 [ 1067.158889][T13031] usb 1-1: config 129 interface 0 altsetting 0 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 1067.158915][T13031] usb 1-1: config 129 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1067.158943][T13031] usb 1-1: config 129 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1067.165058][T13044] usb usb7-port1: attempt power cycle [ 1067.313344][T13031] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1067.313425][T13031] usb 1-1: Product: syz [ 1067.313466][T13031] usb 1-1: Manufacturer: syz [ 1067.313507][T13031] usb 1-1: SerialNumber: syz [ 1067.593095][T13044] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1067.616026][T13044] usb 7-1: device descriptor read/8, error -71 [ 1067.704018][T19061] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 1067.853082][T13044] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1067.875872][T13044] usb 7-1: device descriptor read/8, error -71 [ 1067.983815][T13044] usb usb7-port1: unable to enumerate USB device [ 1070.286919][T19106] FAULT_INJECTION: forcing a failure. [ 1070.286919][T19106] name failslab, interval 1, probability 0, space 0, times 0 [ 1070.286960][T19106] CPU: 1 UID: 0 PID: 19106 Comm: syz.7.3514 Tainted: G L syzkaller #0 PREEMPT(full) [ 1070.286997][T19106] Tainted: [L]=SOFTLOCKUP [ 1070.287007][T19106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1070.287022][T19106] Call Trace: [ 1070.287033][T19106] [ 1070.287043][T19106] dump_stack_lvl+0xe8/0x150 [ 1070.287084][T19106] should_fail_ex+0x410/0x560 [ 1070.287116][T19106] should_failslab+0xa8/0x100 [ 1070.287150][T19106] __kmalloc_cache_noprof+0xa3/0x600 [ 1070.287176][T19106] ? snd_pcm_hw_param_near+0x80/0x4d0 [ 1070.287211][T19106] ? snd_pcm_hw_param_near+0x80/0x4d0 [ 1070.287254][T19106] snd_pcm_hw_param_near+0x80/0x4d0 [ 1070.287289][T19106] ? snd_pcm_oss_change_params_locked+0xf73/0x3c80 [ 1070.287324][T19106] ? snd_interval_refine+0x5f8/0xa40 [ 1070.287362][T19106] snd_pcm_oss_change_params_locked+0xfc5/0x3c80 [ 1070.287438][T19106] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1070.287490][T19106] ? kstrtouint+0x6e/0xe0 [ 1070.287538][T19106] snd_pcm_oss_read+0x26e/0x8d0 [ 1070.287590][T19106] vfs_readv+0x57c/0x850 [ 1070.287621][T19106] ? __pfx_snd_pcm_oss_read+0x10/0x10 [ 1070.287660][T19106] ? __pfx_vfs_readv+0x10/0x10 [ 1070.287685][T19106] ? vfs_write+0x9ce/0xba0 [ 1070.287737][T19106] ? do_sys_openat2+0x14e/0x200 [ 1070.287764][T19106] ? kmem_cache_free+0x182/0x650 [ 1070.287806][T19106] do_readv+0x154/0x2e0 [ 1070.287836][T19106] ? __pfx_do_readv+0x10/0x10 [ 1070.287875][T19106] do_syscall_64+0x166/0x520 [ 1070.287902][T19106] ? trace_irq_disable+0x3b/0x140 [ 1070.287927][T19106] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1070.287952][T19106] ? clear_bhb_loop+0x70/0xc0 [ 1070.287981][T19106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1070.288006][T19106] RIP: 0033:0x7f6c9c59e159 [ 1070.288027][T19106] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1070.288049][T19106] RSP: 002b:00007f6c9a7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 1070.288075][T19106] RAX: ffffffffffffffda RBX: 00007f6c9c825fa0 RCX: 00007f6c9c59e159 [ 1070.288094][T19106] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000003 [ 1070.288110][T19106] RBP: 00007f6c9a7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1070.288126][T19106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1070.288140][T19106] R13: 00007f6c9c826038 R14: 00007f6c9c825fa0 R15: 00007f6c9c94fa48 [ 1070.288178][T19106] [ 1071.223532][T13031] powermate: Expected payload of 3--6 bytes, found 0 bytes! [ 1071.223843][T13031] powermate 1-1:129.0: probe with driver powermate failed with error -5 [ 1071.228847][T13031] usb 1-1: USB disconnect, device number 39 [ 1071.723758][T19112] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3516'. [ 1072.396226][T13035] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1072.573068][T13035] usb 7-1: Using ep0 maxpacket: 32 [ 1072.573930][T13035] usb 7-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1072.575206][T13035] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1072.575232][T13035] usb 7-1: config 0 has no interface number 0 [ 1072.575273][T13035] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1072.575302][T13035] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1072.575340][T13035] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1072.578442][T13035] usb 7-1: config 0 descriptor?? [ 1072.703196][T13054] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1072.871065][T13054] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1072.890942][T13054] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1072.890989][T13054] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1072.891029][T13054] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1072.895898][T13054] usb 1-1: config 0 descriptor?? [ 1073.301572][T19118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1073.321280][T19118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1073.520441][T13035] uclogic 0003:28BD:0094.0032: failed retrieving string descriptor #100: -71 [ 1073.520506][T13035] uclogic 0003:28BD:0094.0032: failed retrieving pen parameters: -71 [ 1073.520526][T13035] uclogic 0003:28BD:0094.0032: pen probing failed: -71 [ 1073.520544][T13035] uclogic 0003:28BD:0094.0032: failed probing parameters: -71 [ 1073.520663][T13035] uclogic 0003:28BD:0094.0032: probe with driver uclogic failed with error -71 [ 1073.522160][T13054] usbhid 1-1:0.0: can't add hid device: -71 [ 1073.522415][T13054] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1073.591534][T13054] usb 1-1: USB disconnect, device number 40 [ 1073.592208][T13035] usb 7-1: USB disconnect, device number 23 [ 1073.874449][T19128] No such timeout policy "syz1" [ 1073.892646][T19128] loop3: detected capacity change from 0 to 7 [ 1073.921847][T19128] Dev loop3: unable to read RDB block 7 [ 1073.921971][T19128] loop3: unable to read partition table [ 1073.922468][T19128] loop3: partition table beyond EOD, truncated [ 1073.922559][T19128] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1074.484289][T13035] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1074.633142][T13035] usb 1-1: Using ep0 maxpacket: 16 [ 1074.634043][T13035] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1074.635249][T13035] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1074.635276][T13035] usb 1-1: config 0 has no interfaces? [ 1074.638234][T13035] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1074.638262][T13035] usb 1-1: Product: syz [ 1074.638278][T13035] usb 1-1: Manufacturer: syz [ 1074.638296][T13035] usb 1-1: SerialNumber: syz [ 1074.676411][T13035] usb 1-1: config 0 descriptor?? [ 1074.927667][T19134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1074.928151][T19134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1074.991496][T13039] usb 1-1: USB disconnect, device number 41 [ 1075.103055][T13044] usb 6-1: new full-speed USB device number 102 using dummy_hcd [ 1075.253772][T13044] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1075.254757][T13044] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1075.254812][T13044] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1075.254842][T13044] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 1075.254872][T13044] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1075.260108][T13044] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1075.260138][T13044] usb 6-1: Manufacturer: syz [ 1075.282033][T13044] usb 6-1: config 0 descriptor?? [ 1075.633595][T13044] rc_core: IR keymap rc-hauppauge not found [ 1075.633616][T13044] Registered IR keymap rc-empty [ 1075.634045][T13044] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1075.659871][T13044] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1075.680376][T13044] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1075.703862][T13044] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input107 [ 1075.741353][T13044] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1075.758146][T13044] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1075.776956][T13044] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1075.795906][T13044] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1075.817929][T13044] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1075.835376][T13044] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1075.856428][T13044] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1075.874379][T13044] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1075.893577][T13044] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1075.914684][T13044] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 1075.966280][T13044] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1075.966308][T13044] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1076.312544][T13044] usb 6-1: USB disconnect, device number 102 [ 1076.823236][T13035] usb 7-1: new low-speed USB device number 24 using dummy_hcd [ 1076.953165][T13035] usb 7-1: device descriptor read/64, error -71 [ 1077.193502][T13035] usb 7-1: new low-speed USB device number 25 using dummy_hcd [ 1077.324543][T13035] usb 7-1: device descriptor read/64, error -71 [ 1077.436661][T13035] usb usb7-port1: attempt power cycle [ 1077.506616][ T32] kauditd_printk_skb: 115 callbacks suppressed [ 1077.506663][ T32] audit: type=1326 audit(1789742386.297:3544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19177 comm="syz.5.3540" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc36af9e159 code=0x0 [ 1077.777344][T13035] usb 7-1: new low-speed USB device number 26 using dummy_hcd [ 1077.801615][T13035] usb 7-1: device descriptor read/8, error -71 [ 1078.033185][T13035] usb 7-1: new low-speed USB device number 27 using dummy_hcd [ 1078.054896][T13035] usb 7-1: device descriptor read/8, error -71 [ 1078.086683][T19184] FAULT_INJECTION: forcing a failure. [ 1078.086683][T19184] name failslab, interval 1, probability 0, space 0, times 0 [ 1078.086722][T19184] CPU: 1 UID: 0 PID: 19184 Comm: syz.7.3542 Tainted: G L syzkaller #0 PREEMPT(full) [ 1078.086754][T19184] Tainted: [L]=SOFTLOCKUP [ 1078.086763][T19184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1078.086778][T19184] Call Trace: [ 1078.086787][T19184] [ 1078.086797][T19184] dump_stack_lvl+0xe8/0x150 [ 1078.086838][T19184] should_fail_ex+0x410/0x560 [ 1078.086872][T19184] should_failslab+0xa8/0x100 [ 1078.086902][T19184] ? __kernfs_new_node+0xe6/0x980 [ 1078.086926][T19184] kmem_cache_alloc_noprof+0xa1/0x600 [ 1078.086964][T19184] ? __kernfs_new_node+0xe6/0x980 [ 1078.087004][T19184] __kernfs_new_node+0xe6/0x980 [ 1078.087039][T19184] ? __pfx___kernfs_new_node+0x10/0x10 [ 1078.087064][T19184] ? kernfs_root+0x1c/0x230 [ 1078.087099][T19184] ? kernfs_root+0x1c/0x230 [ 1078.087120][T19184] ? kernfs_root+0x1c/0x230 [ 1078.087140][T19184] ? kernfs_root+0x1c/0x230 [ 1078.087166][T19184] kernfs_new_node+0xea/0x140 [ 1078.087196][T19184] __kernfs_create_file+0x4b/0x2e0 [ 1078.087230][T19184] sysfs_add_file_mode_ns+0x237/0x300 [ 1078.087271][T19184] internal_create_group+0x679/0x1180 [ 1078.087325][T19184] ? __pfx_internal_create_group+0x10/0x10 [ 1078.087372][T19184] ? up_write+0x19d/0x4a0 [ 1078.087409][T19184] sysfs_create_groups+0x59/0x120 [ 1078.087449][T19184] device_add_attrs+0xde/0x600 [ 1078.087478][T19184] ? __pfx_device_add_attrs+0x10/0x10 [ 1078.087508][T19184] ? device_add_class_symlinks+0x21f/0x240 [ 1078.087538][T19184] device_add+0x488/0xb80 [ 1078.087565][T19184] netdev_register_kobject+0x197/0x350 [ 1078.087598][T19184] register_netdevice+0x1433/0x1eb0 [ 1078.087650][T19184] ? __pfx_register_netdevice+0x10/0x10 [ 1078.087688][T19184] ? macvlan_changelink_sources+0x130e/0x1650 [ 1078.087735][T19184] macvlan_common_newlink+0x12e5/0x1a50 [ 1078.087768][T19184] ? alloc_netdev_mqs+0xd44/0x12a0 [ 1078.087805][T19184] ? alloc_netdev_mqs+0xd44/0x12a0 [ 1078.087853][T19184] ? __pfx_macvlan_common_newlink+0x10/0x10 [ 1078.087892][T19184] ? rtnl_create_link+0xa04/0xd70 [ 1078.087915][T19184] ? __pfx_macvlan_newlink+0x10/0x10 [ 1078.087942][T19184] rtnl_newlink_create+0x305/0x7b0 [ 1078.087982][T19184] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1078.088019][T19184] ? __pfx___mutex_lock+0x10/0x10 [ 1078.088060][T19184] ? ns_capable+0x89/0xe0 [ 1078.088096][T19184] rtnl_newlink+0x166d/0x1c30 [ 1078.088142][T19184] ? __pfx_rtnl_newlink+0x10/0x10 [ 1078.088169][T19184] ? do_syscall_64+0x166/0x520 [ 1078.088197][T19184] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1078.088261][T19184] ? kasan_quarantine_put+0xbb/0x1f0 [ 1078.088285][T19184] ? lockdep_hardirqs_on+0x7b/0x110 [ 1078.088317][T19184] ? nlmon_xmit+0xb0/0x100 [ 1078.088349][T19184] ? kmem_cache_free+0x182/0x650 [ 1078.088387][T19184] ? __lock_acquire+0x747/0x2de0 [ 1078.088422][T19184] ? __local_bh_enable_ip+0xd6/0x140 [ 1078.088454][T19184] ? lockdep_hardirqs_on+0x7b/0x110 [ 1078.088481][T19184] ? __dev_queue_xmit+0x29b/0x3820 [ 1078.088514][T19184] ? __local_bh_enable_ip+0xd6/0x140 [ 1078.088543][T19184] ? __dev_queue_xmit+0x29b/0x3820 [ 1078.088585][T19184] ? lock_acquire+0x115/0x350 [ 1078.088625][T19184] ? __pfx_rtnl_newlink+0x10/0x10 [ 1078.088653][T19184] rtnetlink_rcv_msg+0x802/0xc00 [ 1078.088686][T19184] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1078.088715][T19184] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1078.088743][T19184] ? ref_tracker_free+0x689/0x830 [ 1078.088776][T19184] ? __pfx_ref_tracker_free+0x10/0x10 [ 1078.088816][T19184] netlink_rcv_skb+0x226/0x4a0 [ 1078.088852][T19184] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1078.088884][T19184] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1078.088934][T19184] ? netlink_deliver_tap+0x2e/0x1b0 [ 1078.088969][T19184] ? netlink_deliver_tap+0x2e/0x1b0 [ 1078.089011][T19184] netlink_unicast+0x7bd/0x940 [ 1078.089056][T19184] netlink_sendmsg+0x813/0xb40 [ 1078.089103][T19184] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1078.089148][T19184] ? apparmor_socket_sendmsg+0x98/0x360 [ 1078.089177][T19184] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1078.089211][T19184] sock_sendmsg_nosec+0x13a/0x180 [ 1078.089239][T19184] ____sys_sendmsg+0x54e/0x850 [ 1078.089277][T19184] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1078.089320][T19184] ? import_iovec+0x73/0xa0 [ 1078.089360][T19184] ___sys_sendmsg+0x2a5/0x360 [ 1078.089390][T19184] ? __lock_acquire+0x747/0x2de0 [ 1078.089419][T19184] ? __pfx____sys_sendmsg+0x10/0x10 [ 1078.089490][T19184] ? __fget_files+0x2a/0x420 [ 1078.089521][T19184] ? __fget_files+0x3a2/0x420 [ 1078.089566][T19184] __x64_sys_sendmsg+0x1b1/0x290 [ 1078.089602][T19184] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1078.089659][T19184] do_syscall_64+0x166/0x520 [ 1078.089687][T19184] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1078.089712][T19184] ? clear_bhb_loop+0x70/0xc0 [ 1078.089741][T19184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1078.089765][T19184] RIP: 0033:0x7f6c9c59e159 [ 1078.089788][T19184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1078.089808][T19184] RSP: 002b:00007f6c9a7f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1078.089834][T19184] RAX: ffffffffffffffda RBX: 00007f6c9c825fa0 RCX: 00007f6c9c59e159 [ 1078.089852][T19184] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 1078.089867][T19184] RBP: 00007f6c9a7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1078.089883][T19184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1078.089897][T19184] R13: 00007f6c9c826038 R14: 00007f6c9c825fa0 R15: 00007f6c9c94fa48 [ 1078.089934][T19184] [ 1078.163873][T13035] usb usb7-port1: unable to enumerate USB device [ 1079.554704][T19185] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1080.574622][T19206] FAULT_INJECTION: forcing a failure. [ 1080.574622][T19206] name failslab, interval 1, probability 0, space 0, times 0 [ 1080.574661][T19206] CPU: 1 UID: 0 PID: 19206 Comm: syz.6.3545 Tainted: G L syzkaller #0 PREEMPT(full) [ 1080.574692][T19206] Tainted: [L]=SOFTLOCKUP [ 1080.574700][T19206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1080.574714][T19206] Call Trace: [ 1080.574724][T19206] [ 1080.574734][T19206] dump_stack_lvl+0xe8/0x150 [ 1080.574771][T19206] should_fail_ex+0x410/0x560 [ 1080.574803][T19206] should_failslab+0xa8/0x100 [ 1080.574834][T19206] __kmalloc_noprof+0xfe/0x720 [ 1080.574857][T19206] ? snd_pcm_hw_refine+0xa18/0x17d0 [ 1080.574884][T19206] ? snd_pcm_hw_refine+0xa18/0x17d0 [ 1080.574919][T19206] snd_pcm_hw_refine+0xa18/0x17d0 [ 1080.574964][T19206] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 1080.575020][T19206] ? __kasan_kmalloc+0x93/0xb0 [ 1080.575048][T19206] ? __kmalloc_cache_noprof+0x321/0x600 [ 1080.575071][T19206] ? __kmalloc_cache_noprof+0x14d/0x600 [ 1080.575092][T19206] ? snd_pcm_hw_param_near+0x80/0x4d0 [ 1080.575124][T19206] ? snd_pcm_hw_param_near+0x80/0x4d0 [ 1080.575164][T19206] snd_pcm_hw_param_near+0x108/0x4d0 [ 1080.575205][T19206] snd_pcm_oss_change_params_locked+0x1e07/0x3c80 [ 1080.575269][T19206] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1080.575318][T19206] ? kstrtouint+0x6e/0xe0 [ 1080.575362][T19206] snd_pcm_oss_read+0x26e/0x8d0 [ 1080.575414][T19206] vfs_readv+0x57c/0x850 [ 1080.575444][T19206] ? __pfx_snd_pcm_oss_read+0x10/0x10 [ 1080.575499][T19206] ? __pfx_vfs_readv+0x10/0x10 [ 1080.575524][T19206] ? vfs_write+0x9ce/0xba0 [ 1080.575573][T19206] ? do_sys_openat2+0x14e/0x200 [ 1080.575606][T19206] ? kmem_cache_free+0x182/0x650 [ 1080.575649][T19206] do_readv+0x154/0x2e0 [ 1080.575679][T19206] ? __pfx_do_readv+0x10/0x10 [ 1080.575718][T19206] do_syscall_64+0x166/0x520 [ 1080.575747][T19206] ? trace_irq_disable+0x3b/0x140 [ 1080.575770][T19206] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1080.575794][T19206] ? clear_bhb_loop+0x70/0xc0 [ 1080.575822][T19206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1080.575846][T19206] RIP: 0033:0x7f542f79e159 [ 1080.575867][T19206] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1080.575887][T19206] RSP: 002b:00007f5430635028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 1080.575913][T19206] RAX: ffffffffffffffda RBX: 00007f542fa25fa0 RCX: 00007f542f79e159 [ 1080.575931][T19206] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000003 [ 1080.575947][T19206] RBP: 00007f5430635090 R08: 0000000000000000 R09: 0000000000000000 [ 1080.575961][T19206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1080.575976][T19206] R13: 00007f542fa26038 R14: 00007f542fa25fa0 R15: 00007f542fb4fa48 [ 1080.576013][T19206] [ 1080.763211][ T32] audit: type=1326 audit(1789742389.547:3545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19197 comm="syz.7.3544" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=317 compat=0 ip=0x7f6c9c59e159 code=0x0 [ 1081.154520][T19213] fuse: Unknown parameter 'grom¡p_id' [ 1081.533215][T13039] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1081.702626][T13039] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1081.709245][T13039] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1081.709303][T13039] usb 1-1: config 0 has no interfaces? [ 1081.721934][T13039] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1081.721998][T13039] usb 1-1: Manufacturer: syz [ 1081.748497][T13039] usb 1-1: config 0 descriptor?? [ 1082.506091][T19231] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3551'. [ 1082.518112][T19231] random: crng reseeded on system resumption [ 1082.760318][ T5682] usb 1-1: USB disconnect, device number 42 [ 1083.593140][T13039] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1083.751234][T13039] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1083.756093][T13039] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1083.756187][T13039] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1083.793946][T13039] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1083.793978][T13039] usb 4-1: Product: syz [ 1083.793989][T13039] usb 4-1: Manufacturer: syz [ 1083.794000][T13039] usb 4-1: SerialNumber: syz [ 1084.047560][T19251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1084.050659][T19251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1084.131354][T13039] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 1084.161671][T13039] usb 4-1: USB disconnect, device number 59 [ 1084.215754][T19260] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3560'. [ 1084.536867][T19239] netlink: 'syz.0.3554': attribute type 2 has an invalid length. [ 1084.545577][T19239] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3554'. [ 1084.624064][T13039] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1084.774435][T13039] usb 4-1: Using ep0 maxpacket: 8 [ 1084.775572][T13039] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1084.777987][T13039] usb 4-1: config index 0 descriptor too short (expected 301, got 72) [ 1084.778017][T13039] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1084.778071][T13039] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1084.778097][T13039] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1084.778124][T13039] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1084.778151][T13039] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1084.778181][T13039] usb 4-1: config 16 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1084.778226][T13039] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1085.108658][T13039] usb 4-1: usb_control_msg returned -32 [ 1085.108714][T13039] usbtmc 4-1:16.0: can't read capabilities [ 1085.109017][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.109276][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.109520][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.109762][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.110003][ C1] usbtmc 4-1:16.0: invalid notification: 2f [ 1085.110268][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.110497][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.110714][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.110939][ C1] usbtmc 4-1:16.0: invalid notification: 11 [ 1085.111166][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.111608][ C1] usbtmc 4-1:16.0: invalid notification: 2 [ 1085.111828][ C1] usbtmc 4-1:16.0: invalid notification: 5 [ 1085.112041][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.112260][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.112502][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.112711][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.112920][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.113410][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.113808][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.114132][ C1] usbtmc 4-1:16.0: invalid notification: 73 [ 1085.114441][ C1] usbtmc 4-1:16.0: invalid notification: 2b [ 1085.114782][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.115102][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.115447][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.115831][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.116220][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.116650][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.117037][ C1] usbtmc 4-1:16.0: invalid notification: 73 [ 1085.117412][ C1] usbtmc 4-1:16.0: invalid notification: 1 [ 1085.117780][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.118147][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.118517][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.118837][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.119154][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.119468][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.119763][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.120072][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.120427][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.120807][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.125049][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.125925][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.126131][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.126334][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.126542][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.126753][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.126978][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.127191][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.127401][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.127611][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.127891][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.128213][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.128547][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.128868][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.129208][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.129557][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.129863][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.130182][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.130508][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.130836][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.131142][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.131463][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.131783][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.132112][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.132448][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.132752][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.133471][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.133821][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.134153][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.134509][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.134838][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.135183][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.135540][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.135890][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.136218][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.136573][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.136900][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.137239][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.137560][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.137887][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.138208][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.138543][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.145106][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.145346][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.145565][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.145783][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.146000][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.146214][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.146435][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.146648][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.146864][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.147079][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.147298][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.147513][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.147729][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.148032][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.148388][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.148721][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.149056][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.149409][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.149742][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.150052][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.150506][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.150877][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.151232][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.151585][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.151929][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.152312][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.152658][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.152994][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.155596][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.155878][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.156204][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.156524][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.156835][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.157143][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.157494][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.157803][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.158120][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.158441][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.158764][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.159091][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.159411][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.159734][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.160070][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.160386][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.160714][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.161027][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.161336][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.161673][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.162010][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.162351][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.162650][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.162986][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.163573][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.163938][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.164260][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.164613][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.164953][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.165280][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.165596][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.165935][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.166280][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.166608][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.166945][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.167271][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.167556][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.167766][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.167976][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.168185][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.168391][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.168598][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.168804][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.169009][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.169215][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.169426][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.169635][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.169879][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.170084][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.170386][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.170728][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.171057][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.171398][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.171715][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.172078][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.172384][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.172697][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.173423][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.173768][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.174089][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.174400][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.174729][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.175036][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.175357][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.175700][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.176010][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.176319][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.176642][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.176971][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.177301][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.177661][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.178031][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.178354][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.178683][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.179043][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.179374][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.179713][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.180031][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.180383][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.180707][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.181024][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.181338][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.181649][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.181932][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.182126][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1085.182355][ C1] usbtmc 4-1:16.0: invalid notification: 0 [ 1086.058867][T19270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1086.181251][T13044] usb 4-1: USB disconnect, device number 60 [ 1086.206108][T19270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1086.206776][T19251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1086.234812][T19251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1086.883104][T13044] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1087.013165][T13044] usb 4-1: device descriptor read/64, error -71 [ 1087.122107][T19294] FAULT_INJECTION: forcing a failure. [ 1087.122107][T19294] name failslab, interval 1, probability 0, space 0, times 0 [ 1087.122161][T19294] CPU: 1 UID: 0 PID: 19294 Comm: syz.6.3567 Tainted: G L syzkaller #0 PREEMPT(full) [ 1087.122191][T19294] Tainted: [L]=SOFTLOCKUP [ 1087.122201][T19294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1087.122215][T19294] Call Trace: [ 1087.122224][T19294] [ 1087.122235][T19294] dump_stack_lvl+0xe8/0x150 [ 1087.122274][T19294] should_fail_ex+0x410/0x560 [ 1087.122306][T19294] should_failslab+0xa8/0x100 [ 1087.122334][T19294] ? __kernfs_new_node+0xe6/0x980 [ 1087.122359][T19294] kmem_cache_alloc_noprof+0xa1/0x600 [ 1087.122396][T19294] ? __kernfs_new_node+0xe6/0x980 [ 1087.122427][T19294] __kernfs_new_node+0xe6/0x980 [ 1087.122460][T19294] ? __pfx___kernfs_new_node+0x10/0x10 [ 1087.122488][T19294] ? kernfs_root+0x1c/0x230 [ 1087.122517][T19294] ? kernfs_root+0x1c/0x230 [ 1087.122538][T19294] ? kernfs_root+0x1c/0x230 [ 1087.122574][T19294] ? kernfs_root+0x1c/0x230 [ 1087.122625][T19294] kernfs_new_node+0xea/0x140 [ 1087.122656][T19294] __kernfs_create_file+0x4b/0x2e0 [ 1087.122690][T19294] sysfs_add_file_mode_ns+0x237/0x300 [ 1087.122732][T19294] internal_create_group+0x679/0x1180 [ 1087.122787][T19294] ? __pfx_internal_create_group+0x10/0x10 [ 1087.122828][T19294] ? up_write+0x19d/0x4a0 [ 1087.122866][T19294] sysfs_create_groups+0x59/0x120 [ 1087.122907][T19294] device_add_attrs+0xde/0x600 [ 1087.122936][T19294] ? __pfx_device_add_attrs+0x10/0x10 [ 1087.122965][T19294] ? device_add_class_symlinks+0x21f/0x240 [ 1087.122995][T19294] device_add+0x488/0xb80 [ 1087.123021][T19294] netdev_register_kobject+0x197/0x350 [ 1087.123053][T19294] register_netdevice+0x1433/0x1eb0 [ 1087.123105][T19294] ? __pfx_register_netdevice+0x10/0x10 [ 1087.123143][T19294] ? macvlan_changelink_sources+0x130e/0x1650 [ 1087.123191][T19294] macvlan_common_newlink+0x12e5/0x1a50 [ 1087.123224][T19294] ? alloc_netdev_mqs+0xd44/0x12a0 [ 1087.123259][T19294] ? alloc_netdev_mqs+0xd44/0x12a0 [ 1087.123306][T19294] ? __pfx_macvlan_common_newlink+0x10/0x10 [ 1087.123346][T19294] ? rtnl_create_link+0xa04/0xd70 [ 1087.123371][T19294] ? __pfx_macvlan_newlink+0x10/0x10 [ 1087.123397][T19294] rtnl_newlink_create+0x305/0x7b0 [ 1087.123438][T19294] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1087.123475][T19294] ? __pfx___mutex_lock+0x10/0x10 [ 1087.123516][T19294] ? ns_capable+0x89/0xe0 [ 1087.123553][T19294] rtnl_newlink+0x166d/0x1c30 [ 1087.123608][T19294] ? __pfx_rtnl_newlink+0x10/0x10 [ 1087.123634][T19294] ? do_syscall_64+0x166/0x520 [ 1087.123661][T19294] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1087.123726][T19294] ? kasan_quarantine_put+0xbb/0x1f0 [ 1087.123751][T19294] ? lockdep_hardirqs_on+0x7b/0x110 [ 1087.123797][T19294] ? nlmon_xmit+0xb0/0x100 [ 1087.123821][T19294] ? kmem_cache_free+0x182/0x650 [ 1087.123856][T19294] ? __lock_acquire+0x747/0x2de0 [ 1087.123901][T19294] ? __local_bh_enable_ip+0xd6/0x140 [ 1087.123929][T19294] ? lockdep_hardirqs_on+0x7b/0x110 [ 1087.123953][T19294] ? __dev_queue_xmit+0x29b/0x3820 [ 1087.123984][T19294] ? __local_bh_enable_ip+0xd6/0x140 [ 1087.124010][T19294] ? __dev_queue_xmit+0x29b/0x3820 [ 1087.124049][T19294] ? lock_acquire+0x115/0x350 [ 1087.124084][T19294] ? __pfx_rtnl_newlink+0x10/0x10 [ 1087.124111][T19294] rtnetlink_rcv_msg+0x802/0xc00 [ 1087.124142][T19294] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1087.124168][T19294] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1087.124193][T19294] ? ref_tracker_free+0x689/0x830 [ 1087.124222][T19294] ? __pfx_ref_tracker_free+0x10/0x10 [ 1087.124259][T19294] netlink_rcv_skb+0x226/0x4a0 [ 1087.124294][T19294] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1087.124323][T19294] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1087.124368][T19294] ? netlink_deliver_tap+0x2e/0x1b0 [ 1087.124401][T19294] ? netlink_deliver_tap+0x2e/0x1b0 [ 1087.124448][T19294] netlink_unicast+0x7bd/0x940 [ 1087.124487][T19294] netlink_sendmsg+0x813/0xb40 [ 1087.124527][T19294] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1087.124566][T19294] ? apparmor_socket_sendmsg+0x98/0x360 [ 1087.124597][T19294] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1087.124628][T19294] sock_sendmsg_nosec+0x13a/0x180 [ 1087.124652][T19294] ____sys_sendmsg+0x54e/0x850 [ 1087.124685][T19294] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1087.124721][T19294] ? import_iovec+0x73/0xa0 [ 1087.124749][T19294] ___sys_sendmsg+0x2a5/0x360 [ 1087.124775][T19294] ? __lock_acquire+0x747/0x2de0 [ 1087.124800][T19294] ? __pfx____sys_sendmsg+0x10/0x10 [ 1087.124860][T19294] ? __fget_files+0x2a/0x420 [ 1087.124887][T19294] ? __fget_files+0x3a2/0x420 [ 1087.124924][T19294] __x64_sys_sendmsg+0x1b1/0x290 [ 1087.124954][T19294] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1087.125001][T19294] do_syscall_64+0x166/0x520 [ 1087.125025][T19294] ? trace_irq_disable+0x3b/0x140 [ 1087.125046][T19294] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1087.125067][T19294] ? clear_bhb_loop+0x70/0xc0 [ 1087.125092][T19294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1087.125112][T19294] RIP: 0033:0x7f542f79e159 [ 1087.125131][T19294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1087.125165][T19294] RSP: 002b:00007f5430635028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1087.125188][T19294] RAX: ffffffffffffffda RBX: 00007f542fa25fa0 RCX: 00007f542f79e159 [ 1087.125205][T19294] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 1087.125218][T19294] RBP: 00007f5430635090 R08: 0000000000000000 R09: 0000000000000000 [ 1087.125232][T19294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1087.125245][T19294] R13: 00007f542fa26038 R14: 00007f542fa25fa0 R15: 00007f542fb4fa48 [ 1087.125279][T19294] [ 1087.173462][ T25] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 1087.265855][T13044] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1087.338225][ T25] usb 1-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 1087.354097][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 57343, setting to 64 [ 1087.354195][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1087.391185][ T25] usb 1-1: New USB device strings: Mfr=1, Product=66, SerialNumber=3 [ 1087.391344][ T25] usb 1-1: Product: syz [ 1087.391390][ T25] usb 1-1: Manufacturer: syz [ 1087.391430][ T25] usb 1-1: SerialNumber: syz [ 1087.394247][T13044] usb 4-1: device descriptor read/64, error -71 [ 1087.431359][ T25] usb 1-1: config 0 descriptor?? [ 1087.444435][T19286] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1087.504695][T13044] usb usb4-port1: attempt power cycle [ 1087.707902][T13039] usb 1-1: USB disconnect, device number 43 [ 1087.856379][T13044] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1088.119356][T13044] usb 4-1: device descriptor read/8, error -71 [ 1088.260799][T19300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1088.261246][T19300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1088.473334][T13039] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1088.624067][T13039] usb 7-1: Using ep0 maxpacket: 16 [ 1088.627172][T13039] usb 7-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 1088.643514][T13039] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1088.643606][T13039] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1088.643677][T13039] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1088.643760][T13039] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1088.643844][T13039] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1088.702365][T13039] usb 7-1: config 0 descriptor?? [ 1089.298067][T19319] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3570'. [ 1089.298404][T19319] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3570'. [ 1089.323240][T13044] usb 4-1: new full-speed USB device number 65 using dummy_hcd [ 1089.473841][T13044] usb 4-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1089.478898][T13044] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1089.478924][T13044] usb 4-1: config 0 has no interface number 0 [ 1089.511834][T13044] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.511862][T13044] usb 4-1: Product: syz [ 1089.511879][T13044] usb 4-1: Manufacturer: syz [ 1089.511896][T13044] usb 4-1: SerialNumber: syz [ 1089.551066][T13044] usb 4-1: config 0 descriptor?? [ 1089.577606][T13044] usb 4-1: selecting invalid altsetting 1 [ 1089.577728][T13044] dvb_ttusb_budget: ttusb_init_controller: error [ 1089.577749][T13044] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1089.798843][T19315] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1089.798879][T19315] IPv6: NLM_F_CREATE should be set when creating new route [ 1089.802877][T19315] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3575'. [ 1089.957552][T13044] DVB: Unable to find symbol stv0299_attach() [ 1090.039918][T19333] FAULT_INJECTION: forcing a failure. [ 1090.039918][T19333] name failslab, interval 1, probability 0, space 0, times 0 [ 1090.039994][T19333] CPU: 0 UID: 0 PID: 19333 Comm: syz.5.3579 Tainted: G L syzkaller #0 PREEMPT(full) [ 1090.040030][T19333] Tainted: [L]=SOFTLOCKUP [ 1090.040040][T19333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1090.040055][T19333] Call Trace: [ 1090.040064][T19333] [ 1090.040076][T19333] dump_stack_lvl+0xe8/0x150 [ 1090.040114][T19333] should_fail_ex+0x410/0x560 [ 1090.040148][T19333] should_failslab+0xa8/0x100 [ 1090.040178][T19333] ? __kernfs_new_node+0xe6/0x980 [ 1090.040203][T19333] kmem_cache_alloc_noprof+0xa1/0x600 [ 1090.040242][T19333] ? __kernfs_new_node+0xe6/0x980 [ 1090.040274][T19333] __kernfs_new_node+0xe6/0x980 [ 1090.040309][T19333] ? __pfx___kernfs_new_node+0x10/0x10 [ 1090.040335][T19333] ? kernfs_root+0x1c/0x230 [ 1090.040364][T19333] ? kernfs_root+0x1c/0x230 [ 1090.040385][T19333] ? kernfs_root+0x1c/0x230 [ 1090.040404][T19333] ? kernfs_root+0x1c/0x230 [ 1090.040431][T19333] kernfs_new_node+0xea/0x140 [ 1090.040461][T19333] __kernfs_create_file+0x4b/0x2e0 [ 1090.040493][T19333] sysfs_add_file_mode_ns+0x237/0x300 [ 1090.040543][T19333] internal_create_group+0x679/0x1180 [ 1090.040598][T19333] ? __pfx_internal_create_group+0x10/0x10 [ 1090.040638][T19333] ? up_write+0x19d/0x4a0 [ 1090.040675][T19333] sysfs_create_groups+0x59/0x120 [ 1090.040715][T19333] device_add_attrs+0xde/0x600 [ 1090.040744][T19333] ? __pfx_device_add_attrs+0x10/0x10 [ 1090.040774][T19333] ? device_add_class_symlinks+0x21f/0x240 [ 1090.040802][T19333] device_add+0x488/0xb80 [ 1090.040830][T19333] netdev_register_kobject+0x197/0x350 [ 1090.040861][T19333] register_netdevice+0x1433/0x1eb0 [ 1090.040914][T19333] ? __pfx_register_netdevice+0x10/0x10 [ 1090.040948][T19333] ? macvlan_changelink_sources+0x21e/0x1650 [ 1090.040984][T19333] ? macvlan_changelink_sources+0x130e/0x1650 [ 1090.041031][T19333] macvlan_common_newlink+0x12e5/0x1a50 [ 1090.041064][T19333] ? alloc_netdev_mqs+0xd44/0x12a0 [ 1090.041098][T19333] ? alloc_netdev_mqs+0xd44/0x12a0 [ 1090.041147][T19333] ? __pfx_macvlan_common_newlink+0x10/0x10 [ 1090.041185][T19333] ? rtnl_create_link+0xa04/0xd70 [ 1090.041220][T19333] ? __pfx_macvlan_newlink+0x10/0x10 [ 1090.041245][T19333] rtnl_newlink_create+0x305/0x7b0 [ 1090.041284][T19333] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1090.041320][T19333] ? __pfx___mutex_lock+0x10/0x10 [ 1090.041360][T19333] ? ns_capable+0x89/0xe0 [ 1090.041394][T19333] rtnl_newlink+0x166d/0x1c30 [ 1090.041439][T19333] ? __pfx_rtnl_newlink+0x10/0x10 [ 1090.041466][T19333] ? do_syscall_64+0x166/0x520 [ 1090.041492][T19333] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1090.041561][T19333] ? kasan_quarantine_put+0xbb/0x1f0 [ 1090.041586][T19333] ? lockdep_hardirqs_on+0x7b/0x110 [ 1090.041618][T19333] ? nlmon_xmit+0xb0/0x100 [ 1090.041642][T19333] ? kmem_cache_free+0x182/0x650 [ 1090.041678][T19333] ? __lock_acquire+0x747/0x2de0 [ 1090.041712][T19333] ? __local_bh_enable_ip+0xd6/0x140 [ 1090.041744][T19333] ? lockdep_hardirqs_on+0x7b/0x110 [ 1090.041769][T19333] ? __dev_queue_xmit+0x29b/0x3820 [ 1090.041802][T19333] ? __local_bh_enable_ip+0xd6/0x140 [ 1090.041829][T19333] ? __dev_queue_xmit+0x29b/0x3820 [ 1090.041870][T19333] ? lock_acquire+0x115/0x350 [ 1090.041909][T19333] ? __pfx_rtnl_newlink+0x10/0x10 [ 1090.041937][T19333] rtnetlink_rcv_msg+0x802/0xc00 [ 1090.041969][T19333] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1090.041995][T19333] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1090.042022][T19333] ? ref_tracker_free+0x689/0x830 [ 1090.042053][T19333] ? __pfx_ref_tracker_free+0x10/0x10 [ 1090.042091][T19333] netlink_rcv_skb+0x226/0x4a0 [ 1090.042126][T19333] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1090.042156][T19333] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1090.042204][T19333] ? netlink_deliver_tap+0x2e/0x1b0 [ 1090.042236][T19333] ? netlink_deliver_tap+0x2e/0x1b0 [ 1090.042274][T19333] netlink_unicast+0x7bd/0x940 [ 1090.042318][T19333] netlink_sendmsg+0x813/0xb40 [ 1090.042397][T19333] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1090.042442][T19333] ? apparmor_socket_sendmsg+0x98/0x360 [ 1090.042472][T19333] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1090.042513][T19333] sock_sendmsg_nosec+0x13a/0x180 [ 1090.042540][T19333] ____sys_sendmsg+0x54e/0x850 [ 1090.042578][T19333] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1090.042620][T19333] ? import_iovec+0x73/0xa0 [ 1090.042653][T19333] ___sys_sendmsg+0x2a5/0x360 [ 1090.042684][T19333] ? __lock_acquire+0x747/0x2de0 [ 1090.042713][T19333] ? __pfx____sys_sendmsg+0x10/0x10 [ 1090.042785][T19333] ? __fget_files+0x2a/0x420 [ 1090.042817][T19333] ? __fget_files+0x3a2/0x420 [ 1090.042859][T19333] __x64_sys_sendmsg+0x1b1/0x290 [ 1090.042894][T19333] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1090.042947][T19333] do_syscall_64+0x166/0x520 [ 1090.042975][T19333] ? trace_irq_disable+0x3b/0x140 [ 1090.042998][T19333] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1090.043021][T19333] ? clear_bhb_loop+0x70/0xc0 [ 1090.043050][T19333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1090.043072][T19333] RIP: 0033:0x7fc36af9e159 [ 1090.043094][T19333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1090.043115][T19333] RSP: 002b:00007fc36bd9e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1090.043140][T19333] RAX: ffffffffffffffda RBX: 00007fc36b225fa0 RCX: 00007fc36af9e159 [ 1090.043157][T19333] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 1090.043172][T19333] RBP: 00007fc36bd9e090 R08: 0000000000000000 R09: 0000000000000000 [ 1090.043187][T19333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1090.043201][T19333] R13: 00007fc36b226038 R14: 00007fc36b225fa0 R15: 00007fc36b34fa48 [ 1090.043238][T19333] [ 1090.762657][T13044] DVB: Unable to find symbol tda8083_attach() [ 1090.762675][T13044] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 1091.495804][T13044] usb 4-1: USB disconnect, device number 65 [ 1091.659764][T13039] usbhid 7-1:0.0: can't add hid device: -71 [ 1091.659885][T13039] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1091.711331][T13039] usb 7-1: USB disconnect, device number 28 [ 1093.021486][T19355] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 1093.103200][T13054] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1093.273790][T13054] usb 4-1: Using ep0 maxpacket: 32 [ 1093.277011][T13054] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1093.280474][T13054] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 1093.280511][T13054] usb 4-1: config 0 has no interface number 0 [ 1093.280572][T13054] usb 4-1: config 0 interface 12 has no altsetting 0 [ 1093.333700][T13054] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1093.333764][T13054] usb 4-1: Product: syz [ 1093.333821][T13054] usb 4-1: Manufacturer: syz [ 1093.333857][T13054] usb 4-1: SerialNumber: syz [ 1093.374790][T13054] usb 4-1: config 0 descriptor?? [ 1094.053545][T13039] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1094.086955][T13054] f81534 4-1:0.12: f81534_set_register: reg: 1003 data: 40 failed: -71 [ 1094.087095][T13054] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 1094.087157][T13054] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1094.087351][T13054] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 1094.116108][T13054] usb 4-1: USB disconnect, device number 66 [ 1094.223009][T13039] usb 1-1: Using ep0 maxpacket: 16 [ 1094.224794][T13039] usb 1-1: New USB device found, idVendor=41de, idProduct=4351, bcdDevice=84.53 [ 1094.226371][T13039] usb 1-1: config 12 has an invalid interface number: 159 but max is 0 [ 1094.226398][T13039] usb 1-1: config 12 has no interface number 0 [ 1094.226461][T13039] usb 1-1: config 12 interface 159 altsetting 234 bulk endpoint 0xC has invalid maxpacket 8 [ 1094.226490][T13039] usb 1-1: config 12 interface 159 altsetting 234 bulk endpoint 0xF has invalid maxpacket 32 [ 1094.226517][T13039] usb 1-1: config 12 interface 159 has no altsetting 0 [ 1094.247700][T13039] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1094.247738][T13039] usb 1-1: Product: syz [ 1094.247754][T13039] usb 1-1: Manufacturer: syz [ 1094.247770][T13039] usb 1-1: SerialNumber: syz [ 1094.273408][T13044] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1094.327878][T19367] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1094.328004][T19367] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1094.438212][T13044] usb 7-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 1094.439751][T13044] usb 7-1: config 1 has an invalid descriptor of length 110, skipping remainder of the config [ 1094.439778][T13044] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1094.439859][T13044] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1094.489687][T13044] uvcvideo 7-1:1.0: probe with driver uvcvideo failed with error -22 [ 1094.556301][T13039] usb-storage 1-1:12.159: USB Mass Storage device detected [ 1094.658493][T13039] usb 1-1: USB disconnect, device number 44 [ 1094.722019][T13035] usb 7-1: USB disconnect, device number 29 [ 1094.848874][T13052] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 1095.013117][T13052] usb 6-1: Using ep0 maxpacket: 8 [ 1095.020279][T13052] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1095.020414][T13052] usb 6-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice=32.07 [ 1095.022810][T13052] usb 6-1: config 4 has an invalid interface number: 202 but max is 0 [ 1095.022873][T13052] usb 6-1: config 4 has no interface number 0 [ 1095.023043][T13052] usb 6-1: config 4 interface 202 has no altsetting 0 [ 1095.106275][T13052] usb 6-1: New USB device strings: Mfr=1, Product=221, SerialNumber=3 [ 1095.106339][T13052] usb 6-1: Product: syz [ 1095.106395][T13052] usb 6-1: Manufacturer: syz [ 1095.106431][T13052] usb 6-1: SerialNumber: syz [ 1095.400757][T19386] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3595'. [ 1095.489613][T19407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1095.505123][T19407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1095.506261][T19409] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3595'. [ 1097.234570][T19429] netlink: 'syz.7.3607': attribute type 12 has an invalid length. [ 1097.234599][T19429] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3607'. [ 1097.363301][T19427] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1097.864528][T13052] usbhid 6-1:4.202: couldn't find an input interrupt endpoint [ 1097.904279][T13052] usb 6-1: USB disconnect, device number 103 [ 1098.168987][T19433] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 1098.860704][T19441] batman_adv: batadv0: Adding interface: syzkaller0 [ 1098.860724][T19441] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1098.860760][T19441] batman_adv: batadv0: Interface activated: syzkaller0 [ 1098.916508][T19440] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1099.015466][T19440] batman_adv: batadv0: Removing interface: syzkaller0 [ 1099.413423][T13052] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1099.416671][T13054] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 1099.583525][T13052] usb 1-1: Using ep0 maxpacket: 16 [ 1099.586775][T13054] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1099.587982][T13052] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1099.592601][T13054] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1099.592666][T13054] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1099.596632][T13052] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1099.596702][T13052] usb 1-1: config 0 has no interfaces? [ 1099.620359][T13054] usb 6-1: config 0 descriptor?? [ 1099.683152][T13052] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1099.683215][T13052] usb 1-1: Product: syz [ 1099.683266][T13052] usb 1-1: Manufacturer: syz [ 1099.683278][T13052] usb 1-1: SerialNumber: syz [ 1099.688611][T13052] usb 1-1: config 0 descriptor?? [ 1099.894700][T19450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1099.895212][T19450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1099.967848][T13031] usb 1-1: USB disconnect, device number 45 [ 1100.185556][T19464] FAULT_INJECTION: forcing a failure. [ 1100.185556][T19464] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1100.185596][T19464] CPU: 1 UID: 0 PID: 19464 Comm: syz.3.3622 Tainted: G L syzkaller #0 PREEMPT(full) [ 1100.185637][T19464] Tainted: [L]=SOFTLOCKUP [ 1100.185646][T19464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1100.185662][T19464] Call Trace: [ 1100.185672][T19464] [ 1100.185683][T19464] dump_stack_lvl+0xe8/0x150 [ 1100.185727][T19464] should_fail_ex+0x410/0x560 [ 1100.185760][T19464] _copy_from_iter+0x1d3/0x1660 [ 1100.185788][T19464] ? __alloc_skb+0x27a/0x7a0 [ 1100.185819][T19464] ? __alloc_skb+0x27a/0x7a0 [ 1100.185849][T19464] ? __alloc_skb+0x27a/0x7a0 [ 1100.185878][T19464] ? __pfx__copy_from_iter+0x10/0x10 [ 1100.185903][T19464] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 1100.185939][T19464] ? __alloc_skb+0x27a/0x7a0 [ 1100.185965][T19464] ? __alloc_skb+0x27a/0x7a0 [ 1100.185999][T19464] ? netlink_sendmsg+0x650/0xb40 [ 1100.186035][T19464] ? skb_put+0x112/0x210 [ 1100.186067][T19464] netlink_sendmsg+0x6c0/0xb40 [ 1100.186113][T19464] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1100.186158][T19464] ? apparmor_socket_sendmsg+0x98/0x360 [ 1100.186188][T19464] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1100.186223][T19464] sock_sendmsg_nosec+0x13a/0x180 [ 1100.186251][T19464] ____sys_sendmsg+0x54e/0x850 [ 1100.186290][T19464] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1100.186332][T19464] ? import_iovec+0x73/0xa0 [ 1100.186366][T19464] ___sys_sendmsg+0x2a5/0x360 [ 1100.186397][T19464] ? __lock_acquire+0x747/0x2de0 [ 1100.186426][T19464] ? __pfx____sys_sendmsg+0x10/0x10 [ 1100.186496][T19464] ? __fget_files+0x2a/0x420 [ 1100.186528][T19464] ? __fget_files+0x3a2/0x420 [ 1100.186571][T19464] __x64_sys_sendmsg+0x1b1/0x290 [ 1100.186613][T19464] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1100.186669][T19464] do_syscall_64+0x166/0x520 [ 1100.186698][T19464] ? trace_irq_disable+0x3b/0x140 [ 1100.186722][T19464] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1100.186746][T19464] ? clear_bhb_loop+0x70/0xc0 [ 1100.186775][T19464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1100.186799][T19464] RIP: 0033:0x7fd6d859e159 [ 1100.186821][T19464] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1100.186841][T19464] RSP: 002b:00007fd6d944a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1100.186868][T19464] RAX: ffffffffffffffda RBX: 00007fd6d8825fa0 RCX: 00007fd6d859e159 [ 1100.186887][T19464] RDX: 0000000000040000 RSI: 0000200000000240 RDI: 0000000000000003 [ 1100.186903][T19464] RBP: 00007fd6d944a090 R08: 0000000000000000 R09: 0000000000000000 [ 1100.186919][T19464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1100.186934][T19464] R13: 00007fd6d8826038 R14: 00007fd6d8825fa0 R15: 00007fd6d894fa48 [ 1100.186969][T19464] [ 1100.340901][T13054] ath6kl: mismatched byte count 0 vs. expected 12 [ 1100.346279][T13054] ath6kl: Failed to init ath6kl core: -22 [ 1100.347680][T13054] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 1100.534792][T19466] syzkaller0: entered promiscuous mode [ 1100.534817][T19466] syzkaller0: entered allmulticast mode [ 1100.609388][T19468] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3623'. [ 1100.661453][T13031] usb 6-1: USB disconnect, device number 104 [ 1100.840664][T19477] program syz.3.3627 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1100.920881][T19475] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 1101.060538][T19481] bond0: Error: CAN devices cannot be enslaved [ 1101.683031][T13039] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 1101.815221][T13039] usb 6-1: device descriptor read/64, error -71 [ 1101.873066][T13035] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1102.023707][T13035] usb 7-1: Using ep0 maxpacket: 16 [ 1102.024596][T13035] usb 7-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 1102.030540][T13035] usb 7-1: config 166 has an invalid interface number: 177 but max is 1 [ 1102.030571][T13035] usb 7-1: config 166 has an invalid interface number: 34 but max is 1 [ 1102.030595][T13035] usb 7-1: config 166 has no interface number 0 [ 1102.030614][T13035] usb 7-1: config 166 has no interface number 1 [ 1102.030667][T13035] usb 7-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1102.030691][T13035] usb 7-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1102.030728][T13035] usb 7-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 1102.030756][T13035] usb 7-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1102.030785][T13035] usb 7-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 1102.030814][T13035] usb 7-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 1102.030842][T13035] usb 7-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1102.030871][T13035] usb 7-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1102.030896][T13035] usb 7-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 1102.030925][T13035] usb 7-1: config 166 interface 177 has no altsetting 0 [ 1102.030946][T13035] usb 7-1: config 166 interface 34 has no altsetting 0 [ 1102.053191][T13039] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 1102.234255][T13035] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.234285][T13035] usb 7-1: Product: syz [ 1102.234302][T13035] usb 7-1: Manufacturer: syz [ 1102.234318][T13035] usb 7-1: SerialNumber: syz [ 1102.283213][T13039] usb 6-1: device descriptor read/64, error -71 [ 1102.393427][T13039] usb usb6-port1: attempt power cycle [ 1102.443960][T13035] ums-realtek 7-1:166.177: USB Mass Storage device detected [ 1102.650445][T13035] ums-realtek 7-1:166.34: USB Mass Storage device detected [ 1102.734526][T13039] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 1102.753795][T13039] usb 6-1: device descriptor read/8, error -71 [ 1102.941381][T13035] ums-realtek 7-1:166.34: probe with driver ums-realtek failed with error -5 [ 1103.015224][T13039] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 1103.042769][T13039] usb 6-1: device descriptor read/8, error -71 [ 1103.073369][T13035] uvcvideo 7-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 1103.073416][T13035] uvcvideo 7-1:166.34: No valid video chain found. [ 1103.109419][T13035] usb 7-1: USB disconnect, device number 30 [ 1103.143300][T13039] usb usb6-port1: unable to enumerate USB device [ 1103.256911][T19517] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 1104.576905][T19535] FAULT_INJECTION: forcing a failure. [ 1104.576905][T19535] name failslab, interval 1, probability 0, space 0, times 0 [ 1104.576946][T19535] CPU: 1 UID: 0 PID: 19535 Comm: syz.5.3647 Tainted: G L syzkaller #0 PREEMPT(full) [ 1104.576978][T19535] Tainted: [L]=SOFTLOCKUP [ 1104.576988][T19535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1104.577002][T19535] Call Trace: [ 1104.577012][T19535] [ 1104.577023][T19535] dump_stack_lvl+0xe8/0x150 [ 1104.577062][T19535] should_fail_ex+0x410/0x560 [ 1104.577093][T19535] ? __alloc_skb+0x1db/0x7a0 [ 1104.577122][T19535] should_failslab+0xa8/0x100 [ 1104.577153][T19535] ? __alloc_skb+0x1db/0x7a0 [ 1104.577179][T19535] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 1104.577217][T19535] ? __alloc_skb+0x18d/0x7a0 [ 1104.577245][T19535] ? __alloc_skb+0x1db/0x7a0 [ 1104.577279][T19535] __alloc_skb+0x1db/0x7a0 [ 1104.577313][T19535] netlink_dump+0x1e7/0xee0 [ 1104.577369][T19535] ? __pfx_netlink_dump+0x10/0x10 [ 1104.577417][T19535] ? netlink_lookup+0x30/0x200 [ 1104.577451][T19535] ? netlink_lookup+0x30/0x200 [ 1104.577491][T19535] __netlink_dump_start+0x589/0x7b0 [ 1104.577535][T19535] ip_set_dump+0x15b/0x1f0 [ 1104.577570][T19535] ? __pfx_ip_set_dump+0x10/0x10 [ 1104.577605][T19535] ? __pfx_ip_set_dump_start+0x10/0x10 [ 1104.577626][T19535] ? __pfx_ip_set_dump_do+0x10/0x10 [ 1104.577647][T19535] ? __pfx_ip_set_dump_done+0x10/0x10 [ 1104.577685][T19535] nfnetlink_rcv_msg+0xcc2/0x12b0 [ 1104.577718][T19535] ? unwind_get_return_address+0x4d/0x90 [ 1104.577752][T19535] ? nfnetlink_rcv_msg+0x228/0x12b0 [ 1104.577806][T19535] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1104.577892][T19535] netlink_rcv_skb+0x226/0x4a0 [ 1104.577929][T19535] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1104.577964][T19535] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1104.578013][T19535] ? bpf_lsm_capable+0x9/0x20 [ 1104.578034][T19535] ? security_capable+0x7e/0x2c0 [ 1104.578070][T19535] nfnetlink_rcv+0x2b9/0x28c0 [ 1104.578108][T19535] ? __dev_queue_xmit+0x29b/0x3820 [ 1104.578148][T19535] ? __local_bh_enable_ip+0xd6/0x140 [ 1104.578179][T19535] ? lockdep_hardirqs_on+0x7b/0x110 [ 1104.578207][T19535] ? __dev_queue_xmit+0x29b/0x3820 [ 1104.578239][T19535] ? __local_bh_enable_ip+0xd6/0x140 [ 1104.578269][T19535] ? __dev_queue_xmit+0x29b/0x3820 [ 1104.578303][T19535] ? __dev_queue_xmit+0x1edc/0x3820 [ 1104.578336][T19535] ? do_syscall_64+0x166/0x520 [ 1104.578370][T19535] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1104.578408][T19535] ? __dev_queue_xmit+0x29b/0x3820 [ 1104.578442][T19535] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1104.578480][T19535] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1104.578523][T19535] ? ref_tracker_free+0x689/0x830 [ 1104.578555][T19535] ? __pfx_ref_tracker_free+0x10/0x10 [ 1104.578593][T19535] ? __skb_clone+0x449/0x6c0 [ 1104.578632][T19535] ? skb_clone+0x246/0x3a0 [ 1104.578669][T19535] ? __netlink_deliver_tap+0x811/0x860 [ 1104.578704][T19535] ? netlink_deliver_tap+0x2e/0x1b0 [ 1104.578747][T19535] ? netlink_deliver_tap+0x2e/0x1b0 [ 1104.578782][T19535] ? netlink_deliver_tap+0x2e/0x1b0 [ 1104.578824][T19535] netlink_unicast+0x7bd/0x940 [ 1104.578868][T19535] netlink_sendmsg+0x813/0xb40 [ 1104.578915][T19535] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1104.578961][T19535] ? apparmor_socket_sendmsg+0x98/0x360 [ 1104.578990][T19535] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1104.579024][T19535] sock_sendmsg_nosec+0x13a/0x180 [ 1104.579052][T19535] ____sys_sendmsg+0x54e/0x850 [ 1104.579090][T19535] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1104.579133][T19535] ? import_iovec+0x73/0xa0 [ 1104.579167][T19535] ___sys_sendmsg+0x2a5/0x360 [ 1104.579198][T19535] ? __lock_acquire+0x747/0x2de0 [ 1104.579227][T19535] ? __pfx____sys_sendmsg+0x10/0x10 [ 1104.579299][T19535] ? __fget_files+0x2a/0x420 [ 1104.579332][T19535] ? __fget_files+0x3a2/0x420 [ 1104.579390][T19535] __x64_sys_sendmsg+0x1b1/0x290 [ 1104.579433][T19535] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1104.579490][T19535] do_syscall_64+0x166/0x520 [ 1104.579523][T19535] ? trace_irq_disable+0x3b/0x140 [ 1104.579548][T19535] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1104.579572][T19535] ? clear_bhb_loop+0x70/0xc0 [ 1104.579601][T19535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1104.579626][T19535] RIP: 0033:0x7fc36af9e159 [ 1104.579648][T19535] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1104.579668][T19535] RSP: 002b:00007fc36bd9e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1104.579694][T19535] RAX: ffffffffffffffda RBX: 00007fc36b225fa0 RCX: 00007fc36af9e159 [ 1104.579713][T19535] RDX: 0000000000040000 RSI: 0000200000000240 RDI: 0000000000000003 [ 1104.579729][T19535] RBP: 00007fc36bd9e090 R08: 0000000000000000 R09: 0000000000000000 [ 1104.579745][T19535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1104.579759][T19535] R13: 00007fc36b226038 R14: 00007fc36b225fa0 R15: 00007fc36b34fa48 [ 1104.579796][T19535] [ 1104.863942][T13039] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1105.017812][T13039] usb 4-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 1105.027058][T13039] usb 4-1: config 1 has an invalid interface number: 3 but max is 0 [ 1105.027130][T13039] usb 4-1: config 1 has no interface number 0 [ 1105.044739][T13039] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1105.044820][T13039] usb 4-1: Product: syz [ 1105.044864][T13039] usb 4-1: Manufacturer: syz [ 1105.044904][T13039] usb 4-1: SerialNumber: syz [ 1105.195217][T13039] usb 4-1: 3:1 : does not exist [ 1105.195250][T13039] usb 4-1: 3:2 : does not exist [ 1105.586423][T19548] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3649'. [ 1105.589010][T19547] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3650'. [ 1105.807655][T19552] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 1106.015321][T19556] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3654'. [ 1106.046683][T19559] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3654'. [ 1107.528855][T19586] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 1107.603396][T13039] usb 4-1: USB disconnect, device number 67 [ 1107.623240][T13054] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1107.773511][T13054] usb 7-1: Using ep0 maxpacket: 8 [ 1107.774820][T13054] usb 7-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 1107.781156][T13054] usb 7-1: config 0 has an invalid interface number: 186 but max is 0 [ 1107.781244][T13054] usb 7-1: config 0 has no interface number 0 [ 1107.781349][T13054] usb 7-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1107.781411][T13054] usb 7-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8 [ 1107.781477][T13054] usb 7-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 1107.781540][T13054] usb 7-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1107.781605][T13054] usb 7-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1107.914066][T13054] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1107.914125][T13054] usb 7-1: Product: syz [ 1107.914164][T13054] usb 7-1: Manufacturer: syz [ 1107.914219][T13054] usb 7-1: SerialNumber: syz [ 1107.922020][T13054] usb 7-1: config 0 descriptor?? [ 1108.171924][T13054] iowarrior 7-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 1108.383142][T13039] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 1108.533068][T13039] usb 6-1: Using ep0 maxpacket: 16 [ 1108.534435][T13039] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1108.562826][T13039] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1108.562974][T13039] usb 6-1: config 0 has no interfaces? [ 1108.590449][T13039] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1108.593151][T13039] usb 6-1: Product: syz [ 1108.593165][T13039] usb 6-1: Manufacturer: syz [ 1108.593177][T13039] usb 6-1: SerialNumber: syz [ 1108.599932][T13039] usb 6-1: config 0 descriptor?? [ 1108.726767][T13035] usb 7-1: USB disconnect, device number 31 [ 1108.835585][T19590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1108.836019][T19590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1108.960913][T13035] usb 6-1: USB disconnect, device number 109 [ 1109.189904][T19599] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3668'. [ 1109.256058][T19593] tipc: Started in network mode [ 1109.256092][T19593] tipc: Node identity 66d13bb18d9c, cluster identity 4711 [ 1109.256246][T19593] tipc: Enabled bearer , priority 0 [ 1109.256654][T19594] tipc: Enabling of bearer rejected, already enabled [ 1109.257516][T19593] syzkaller0: entered promiscuous mode [ 1109.257537][T19593] syzkaller0: entered allmulticast mode [ 1109.402335][T19595] tipc: Resetting bearer [ 1109.513845][T19616] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3671'. [ 1109.517306][T19616] veth1_macvtap: left promiscuous mode [ 1109.653407][T19592] tipc: Resetting bearer [ 1109.684875][T13039] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1109.713714][T19592] tipc: Disabling bearer [ 1109.823060][T13039] usb 1-1: device descriptor read/64, error -71 [ 1109.954956][T19626] FAULT_INJECTION: forcing a failure. [ 1109.954956][T19626] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1109.955016][T19626] CPU: 0 UID: 0 PID: 19626 Comm: syz.6.3674 Tainted: G L syzkaller #0 PREEMPT(full) [ 1109.955051][T19626] Tainted: [L]=SOFTLOCKUP [ 1109.955061][T19626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1109.955076][T19626] Call Trace: [ 1109.955085][T19626] [ 1109.955096][T19626] dump_stack_lvl+0xe8/0x150 [ 1109.955134][T19626] should_fail_ex+0x410/0x560 [ 1109.955166][T19626] _copy_from_user+0x2d/0xb0 [ 1109.955197][T19626] __copy_msghdr+0x390/0x590 [ 1109.955234][T19626] ___sys_sendmsg+0x213/0x360 [ 1109.955264][T19626] ? __lock_acquire+0x747/0x2de0 [ 1109.955293][T19626] ? __pfx____sys_sendmsg+0x10/0x10 [ 1109.955330][T19626] ? kstrtouint+0x6e/0xe0 [ 1109.955392][T19626] ? __fget_files+0x2a/0x420 [ 1109.955424][T19626] ? __fget_files+0x3a2/0x420 [ 1109.955466][T19626] __sys_sendmmsg+0x273/0x4d0 [ 1109.955503][T19626] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1109.955545][T19626] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1109.955590][T19626] ? ksys_write+0x242/0x270 [ 1109.955628][T19626] ? __pfx_ksys_write+0x10/0x10 [ 1109.955669][T19626] __x64_sys_sendmmsg+0xa0/0xc0 [ 1109.955703][T19626] do_syscall_64+0x166/0x520 [ 1109.955731][T19626] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1109.955756][T19626] ? clear_bhb_loop+0x70/0xc0 [ 1109.955784][T19626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1109.955808][T19626] RIP: 0033:0x7f542f79e159 [ 1109.955829][T19626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1109.955849][T19626] RSP: 002b:00007f5430635028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1109.955874][T19626] RAX: ffffffffffffffda RBX: 00007f542fa25fa0 RCX: 00007f542f79e159 [ 1109.955898][T19626] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 0000000000000016 [ 1109.955913][T19626] RBP: 00007f5430635090 R08: 0000000000000000 R09: 0000000000000000 [ 1109.955928][T19626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1109.955942][T19626] R13: 00007f542fa26038 R14: 00007f542fa25fa0 R15: 00007f542fb4fa48 [ 1109.955977][T19626] [ 1110.066137][T13039] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1110.224172][T13039] usb 1-1: device descriptor read/64, error -71 [ 1110.338745][T13039] usb usb1-port1: attempt power cycle [ 1110.466439][T19633] bond0: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 1110.572717][T19639] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3679'. [ 1110.594662][T19639] bridge0: port 2(bridge_slave_1) entered disabled state [ 1110.706119][T19639] bridge_slave_1 (unregistering): left allmulticast mode [ 1110.706151][T19639] bridge_slave_1 (unregistering): left promiscuous mode [ 1110.706165][T13039] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1110.706245][T19639] bridge0: port 2(bridge_slave_1) entered disabled state [ 1110.732902][T13039] usb 1-1: device descriptor read/8, error -71 [ 1110.829547][T19643] batman_adv: batadv0: Adding interface: vlan2 [ 1110.829569][T19643] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1110.829601][T19643] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 1110.973903][T13039] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1110.993787][T13039] usb 1-1: device descriptor read/8, error -71 [ 1111.103437][T13039] usb usb1-port1: unable to enumerate USB device [ 1112.151323][T19669] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3686'. [ 1112.239350][T19671] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3687'. [ 1112.896215][T19664] netlink: 268 bytes leftover after parsing attributes in process `syz.5.3685'. [ 1113.133577][ T5682] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1113.293250][ T5682] usb 1-1: Using ep0 maxpacket: 16 [ 1113.296369][ T5682] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1113.330049][ T5682] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1113.330090][ T5682] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1113.330139][ T5682] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1113.330184][ T5682] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1113.386733][ T5682] usb 1-1: config 0 descriptor?? [ 1113.653029][ T25] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 1113.805002][ T25] usb 6-1: Using ep0 maxpacket: 16 [ 1113.808710][ T25] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=f4.9b [ 1113.839582][ T25] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1113.839610][ T25] usb 6-1: Product: syz [ 1113.839627][ T25] usb 6-1: SerialNumber: syz [ 1113.867165][ T5682] microsoft 0003:045E:07DA.0033: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 1113.867600][ T25] usb 6-1: config 0 descriptor?? [ 1113.935814][ T25] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1113.965728][ T25] dvb_usb_af9015 6-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 1113.969551][ T25] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1113.969643][ T25] dvb_usb_af9035 6-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 1114.097225][ T25] usb 6-1: USB disconnect, device number 110 [ 1114.379785][ T25] usb 1-1: USB disconnect, device number 50 [ 1115.479858][T19703] FAULT_INJECTION: forcing a failure. [ 1115.479858][T19703] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1115.479901][T19703] CPU: 0 UID: 0 PID: 19703 Comm: syz.3.3697 Tainted: G L syzkaller #0 PREEMPT(full) [ 1115.479925][T19703] Tainted: [L]=SOFTLOCKUP [ 1115.479932][T19703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1115.479943][T19703] Call Trace: [ 1115.479950][T19703] [ 1115.479957][T19703] dump_stack_lvl+0xe8/0x150 [ 1115.479987][T19703] should_fail_ex+0x410/0x560 [ 1115.480010][T19703] _copy_to_user+0x31/0xb0 [ 1115.480033][T19703] simple_read_from_buffer+0xe1/0x170 [ 1115.480060][T19703] proc_fail_nth_read+0x1bb/0x230 [ 1115.480085][T19703] ? common_file_perm+0x20e/0x2b0 [ 1115.480107][T19703] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1115.480135][T19703] ? rw_verify_area+0x24a/0x4c0 [ 1115.480161][T19703] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1115.480185][T19703] vfs_read+0x213/0xa80 [ 1115.480213][T19703] ? __pfx___mutex_lock+0x10/0x10 [ 1115.480234][T19703] ? __pfx_vfs_read+0x10/0x10 [ 1115.480265][T19703] ? __fget_files+0x2a/0x420 [ 1115.480291][T19703] ? __fget_files+0x3a2/0x420 [ 1115.480313][T19703] ? __fget_files+0x2a/0x420 [ 1115.480342][T19703] ksys_read+0x150/0x270 [ 1115.480369][T19703] ? __pfx_ksys_read+0x10/0x10 [ 1115.480416][T19703] do_syscall_64+0x166/0x520 [ 1115.480437][T19703] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1115.480453][T19703] ? clear_bhb_loop+0x70/0xc0 [ 1115.480478][T19703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1115.480495][T19703] RIP: 0033:0x7fd6d855e98e [ 1115.480510][T19703] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1115.480524][T19703] RSP: 002b:00007fd6d9449fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1115.480542][T19703] RAX: ffffffffffffffda RBX: 00007fd6d944a6c0 RCX: 00007fd6d855e98e [ 1115.480554][T19703] RDX: 000000000000000f RSI: 00007fd6d944a0a0 RDI: 0000000000000005 [ 1115.480565][T19703] RBP: 00007fd6d944a090 R08: 0000000000000000 R09: 0000000000000000 [ 1115.480576][T19703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1115.480586][T19703] R13: 00007fd6d8826038 R14: 00007fd6d8825fa0 R15: 00007fd6d894fa48 [ 1115.480611][T19703] [ 1115.776596][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.776661][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.867267][T19704] syzkaller0: entered promiscuous mode [ 1115.867294][T19704] syzkaller0: entered allmulticast mode [ 1115.958650][T19710] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 1116.493526][ T25] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 1116.645332][ T25] usb 6-1: Using ep0 maxpacket: 16 [ 1116.646087][ T25] usb 6-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 1116.647320][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1116.647362][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1116.647388][ T25] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1116.647431][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1116.671850][ T25] usb 6-1: config 0 descriptor?? [ 1116.883061][T13044] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1117.074957][T13044] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1117.079584][T13044] usb 7-1: config 0 interface 0 altsetting 255 bulk endpoint 0x3 has invalid maxpacket 61 [ 1117.079647][T13044] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1117.089888][T13044] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1117.090003][T13044] usb 7-1: Product: syz [ 1117.090052][T13044] usb 7-1: Manufacturer: syz [ 1117.090158][T13044] usb 7-1: SerialNumber: syz [ 1117.118250][T13044] usb 7-1: config 0 descriptor?? [ 1117.122769][T19721] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1117.172302][T13044] usb 7-1: selecting invalid altsetting 0 [ 1117.192569][ T25] usbhid 6-1:0.0: can't add hid device: -71 [ 1117.192682][ T25] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1117.219879][ T25] usb 6-1: USB disconnect, device number 111 [ 1117.483190][T19729] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3708'. [ 1117.489175][T19721] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 1117.713310][T19719] snd-usb-audio 7-1:0.0: Runtime PM usage count underflow! [ 1117.718148][T13044] usb 7-1: USB disconnect, device number 32 [ 1117.917531][T19731] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3708'. [ 1118.688171][T13052] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1118.883090][T13052] usb 1-1: Using ep0 maxpacket: 16 [ 1118.888459][T13052] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1118.888563][T13052] usb 1-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 1118.941861][T13052] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1118.941896][T13052] usb 1-1: Product: syz [ 1118.941907][T13052] usb 1-1: Manufacturer: syz [ 1118.941932][T13052] usb 1-1: SerialNumber: syz [ 1119.508790][T19760] batadv_slave_1: entered promiscuous mode [ 1119.530576][T19761] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3718'. [ 1119.923171][T13052] usb 1-1: reset high-speed USB device number 51 using dummy_hcd [ 1120.170212][T13052] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1120.287908][T19760] batadv_slave_1: left promiscuous mode [ 1120.457284][T19744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1120.473138][T19744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1120.547741][T19775] netlink: 164 bytes leftover after parsing attributes in process `syz.6.3723'. [ 1120.756613][T13044] usb 1-1: USB disconnect, device number 51 [ 1121.227278][T19789] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1121.373338][T13044] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1121.525189][T13044] usb 7-1: Using ep0 maxpacket: 32 [ 1121.525955][T13044] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1121.528638][T13044] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 1121.528680][T13044] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1121.528722][T13044] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1121.528751][T13044] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1121.528775][T13044] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1121.528805][T13044] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1121.535003][T13044] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1121.535185][T13044] usb 7-1: Product: syz [ 1121.535229][T13044] usb 7-1: Manufacturer: syz [ 1121.535271][T13044] usb 7-1: SerialNumber: syz [ 1121.601805][T13044] usb 7-1: config 0 descriptor?? [ 1121.625885][T13044] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1121.631115][T13044] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1121.831187][T19786] ldusb 7-1:0.0: Couldn't submit interrupt_in_urb -90 [ 1121.850930][T13044] usb 7-1: USB disconnect, device number 33 [ 1121.864763][T13044] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 1123.955671][T19821] netlink: 'syz.3.3738': attribute type 5 has an invalid length. [ 1124.048412][T19821] 0: reclassify loop, rule prio 0, protocol 800 [ 1124.715179][T13031] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 1124.875117][T13031] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1124.877517][T13031] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1124.877581][T13031] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1124.927720][T13031] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1124.927786][T13031] usb 1-1: Product: syz [ 1124.927844][T13031] usb 1-1: Manufacturer: syz [ 1124.927881][T13031] usb 1-1: SerialNumber: syz [ 1124.967641][T13031] usb 1-1: config 0 descriptor?? [ 1124.996270][T13031] usb 1-1: selecting invalid altsetting 0 [ 1125.774567][T19832] snd-usb-audio 1-1:0.0: Runtime PM usage count underflow! [ 1125.793703][T13031] usb 1-1: USB disconnect, device number 52 [ 1126.368853][T19866] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3754'. [ 1128.774367][T13044] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1128.926766][T13044] usb 1-1: Using ep0 maxpacket: 32 [ 1128.930675][T13044] usb 1-1: New USB device found, idVendor=2899, idProduct=012c, bcdDevice=fd.42 [ 1128.932231][T13044] usb 1-1: config 64 has an invalid interface number: 102 but max is 0 [ 1128.932259][T13044] usb 1-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config [ 1128.932282][T13044] usb 1-1: config 64 has no interface number 0 [ 1128.932315][T13044] usb 1-1: config 64 interface 102 has no altsetting 0 [ 1128.938919][T13044] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1128.938946][T13044] usb 1-1: Product: syz [ 1128.938963][T13044] usb 1-1: SerialNumber: syz [ 1130.000251][T13044] rndis_host 1-1:64.102: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 1130.027485][T13044] gspca_main: spca500-2.14.0 probing 2899:012c [ 1130.066231][T13044] usb 1-1: USB disconnect, device number 53 [ 1130.633413][ T25] usb 4-1: new full-speed USB device number 68 using dummy_hcd [ 1130.787439][ T25] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1130.803016][ T25] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1130.803047][ T25] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1130.829583][ T25] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1130.829614][ T25] usb 4-1: Product: syz [ 1130.829630][ T25] usb 4-1: Manufacturer: syz [ 1130.829647][ T25] usb 4-1: SerialNumber: syz [ 1130.863769][ T25] usb 4-1: config 0 descriptor?? [ 1130.882626][ T25] usb 4-1: selecting invalid altsetting 0 [ 1131.472177][T19924] ALSA: mixer_oss: invalid OSS volume 'SPEA9¦KŸsË â¢+ñI2KER' [ 1131.658831][T13035] usb 4-1: USB disconnect, device number 68 [ 1131.829001][ T5703] usb 7-1: new full-speed USB device number 34 using dummy_hcd [ 1131.991956][T19931] netlink: 'syz.0.3776': attribute type 1 has an invalid length. [ 1132.102241][T19927] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3774'. [ 1132.166759][T19931] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1132.285682][T19927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1132.286254][T19927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1132.318467][ T5703] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1132.320046][ T5703] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1132.320137][ T5703] usb 7-1: can't read configurations, error -71 [ 1132.449158][T19931] bond1: (slave geneve2): making interface the new active one [ 1132.452483][T19931] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1132.903063][ T1163] IPVS: starting estimator thread 0... [ 1132.993048][T19952] IPVS: using max 24 ests per chain, 57600 per kthread [ 1133.144172][T13039] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1133.246325][T19950] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3780'. [ 1133.294844][T13039] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 1133.297740][T13039] usb 4-1: config 0 has an invalid interface number: 106 but max is 0 [ 1133.297769][T13039] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1133.297792][T13039] usb 4-1: config 0 has no interface number 0 [ 1133.297837][T13039] usb 4-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1133.297863][T13039] usb 4-1: config 0 interface 106 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1133.297889][T13039] usb 4-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 1133.297934][T13039] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1133.339201][T13039] usb 4-1: config 0 descriptor?? [ 1133.414900][T13039] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1133.615100][ T1163] usb 4-1: Failed to submit usb control message: -71 [ 1133.615204][ T1163] usb 4-1: unable to send the bmi data to the device: -71 [ 1133.615271][ T1163] usb 4-1: unable to get target info from device [ 1133.615336][ T1163] usb 4-1: could not get target info (-71) [ 1133.615393][ T1163] usb 4-1: could not probe fw (-71) [ 1133.618466][T13039] usb 4-1: USB disconnect, device number 69 [ 1134.923248][T13031] usb 4-1: new full-speed USB device number 70 using dummy_hcd [ 1135.095771][T13031] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1135.098588][T13031] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1135.098654][T13031] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1135.131430][T13031] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1135.131460][T13031] usb 4-1: Product: syz [ 1135.131475][T13031] usb 4-1: Manufacturer: syz [ 1135.131500][T13031] usb 4-1: SerialNumber: syz [ 1135.134617][T13031] usb 4-1: config 0 descriptor?? [ 1135.188048][T13031] usb 4-1: selecting invalid altsetting 0 [ 1135.918354][T13031] usb 4-1: USB disconnect, device number 70 [ 1136.263394][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1136.533511][T13031] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1136.729274][T13031] usb 4-1: Using ep0 maxpacket: 8 [ 1136.733193][T13031] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1136.806924][T13031] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1136.806977][T13031] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1136.806995][T13031] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1136.807014][T13031] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1136.807032][T13031] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1136.807064][T13031] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1137.047749][T13031] usb 4-1: usb_control_msg returned -32 [ 1137.047888][T13031] usbtmc 4-1:16.0: can't read capabilities [ 1137.411401][T11043] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1137.415919][T11043] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1137.418351][T11043] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1137.419396][T11043] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1137.422230][T11043] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1137.438289][T19972] usb 4-1: usbtmc_ioctl_clear_out_halt returned -32 [ 1139.177656][T13035] usb 4-1: USB disconnect, device number 71 [ 1139.541915][ T52] Bluetooth: hci2: command tx timeout [ 1141.179544][T20015] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1141.179576][T20015] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1141.232264][T20015] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1141.232291][T20015] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1141.362059][T20015] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1141.362106][T20015] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 1141.430841][T20015] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1141.431031][T20015] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1141.474609][T20015] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1141.474650][T20015] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1141.531877][T19973] bridge0: port 1(bridge_slave_0) entered blocking state [ 1141.533390][T19973] bridge0: port 1(bridge_slave_0) entered disabled state [ 1141.533567][T19973] bridge_slave_0: entered allmulticast mode [ 1141.537628][T20015] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1141.537667][T20015] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1141.590106][T19973] bridge_slave_0: entered promiscuous mode [ 1141.606596][T19973] bridge0: port 2(bridge_slave_1) entered blocking state [ 1141.606850][T19973] bridge0: port 2(bridge_slave_1) entered disabled state [ 1141.607012][T19973] bridge_slave_1: entered allmulticast mode [ 1141.613108][ C1] ------------[ cut here ]------------ [ 1141.613124][ C1] workqueue: cannot queue hci_cmd_timeout on wq hci2 [ 1141.613162][ C1] WARNING: kernel/workqueue.c:2353 at __queue_work+0xd83/0x10d0, CPU#1: swapper/1/0 [ 1141.654776][ C1] Modules linked in: [ 1141.658692][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1141.669235][ C1] Tainted: [L]=SOFTLOCKUP [ 1141.673609][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1141.683703][ C1] RIP: 0010:__queue_work+0xd9f/0x10d0 [ 1141.689140][ C1] Code: 49 81 c7 70 01 00 00 4c 8d 35 9d d8 ee 0e 48 89 f8 48 c1 e8 03 80 3c 18 00 74 05 e8 0b 9c a9 00 49 8b 75 18 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 4c 89 e8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ef e8 [ 1141.708798][ C1] RSP: 0018:ffffc90000a18bc0 EFLAGS: 00010046 [ 1141.714921][ C1] RAX: 1ffff1100a90a14e RBX: dffffc0000000000 RCX: ffff88801e68ddc0 [ 1141.722927][ C1] RDX: ffff88801c2d7970 RSI: ffffffff8ad629e0 RDI: ffffffff907d16e0 [ 1141.730940][ C1] RBP: 0000000000010000 R08: 0000000000000100 R09: 1ffffffff20f482f [ 1141.738946][ C1] R10: dffffc0000000000 R11: ffffffff818e4560 R12: 0000000000000008 [ 1141.746952][ C1] R13: ffff888054850a58 R14: ffffffff907d16e0 R15: ffff88801c2d7970 [ 1141.754958][ C1] FS: 0000000000000000(0000) GS:ffff888124dce000(0000) knlGS:0000000000000000 [ 1141.763920][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1141.770534][ C1] CR2: 00007fd6d85eb840 CR3: 000000004f968000 CR4: 00000000003526f0 [ 1141.778516][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1141.786528][ C1] DR3: 000000000000000c DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1141.794524][ C1] Call Trace: [ 1141.797836][ C1] [ 1141.800688][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1141.806084][ C1] call_timer_fn+0x18d/0x5f0 [ 1141.810707][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1141.816632][ C1] ? call_timer_fn+0xd5/0x5f0 [ 1141.821323][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1141.826473][ C1] ? do_raw_spin_unlock+0xf5/0x200 [ 1141.831643][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1141.837469][ C1] __run_timer_base+0x67e/0x8b0 [ 1141.842340][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 1141.847726][ C1] ? ktime_get+0x1f5/0x220 [ 1141.852179][ C1] ? lapic_next_event+0x11/0x20 [ 1141.857042][ C1] run_timer_softirq+0xb7/0x170 [ 1141.861900][ C1] handle_softirqs+0x226/0x860 [ 1141.866691][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 1141.871495][ C1] __irq_exit_rcu+0xcb/0x220 [ 1141.876095][ C1] irq_exit_rcu+0x9/0x30 [ 1141.880345][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1141.885995][ C1] [ 1141.888949][ C1] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1141.891910][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1141.897915][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1141.903574][ C1] Code: cc 88 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 e1 23 00 fb f4 8c 08 03 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 1141.923201][ C1] RSP: 0018:ffffc900001a7e40 EFLAGS: 00000242 [ 1141.929310][ C1] RAX: 000000000086d107 RBX: ffffffff819bb370 RCX: 8000000000000001 [ 1141.937317][ C1] RDX: 0000000000000001 RSI: ffffffff8e413fe8 RDI: ffffffff8c6da080 [ 1141.945321][ C1] RBP: ffffc900001a7f10 R08: ffff8880b8733a1b R09: 1ffff110170e6743 [ 1141.953321][ C1] R10: dffffc0000000000 R11: ffffed10170e6744 R12: 0000000000000000 [ 1141.961316][ C1] R13: 1ffff11003cd1bb8 R14: 1ffff92000034fd0 R15: dffffc0000000000 [ 1141.969322][ C1] ? do_idle+0x2e0/0x540 [ 1141.973614][ C1] default_idle+0x9/0x20 [ 1141.977890][ C1] default_idle_call+0x72/0xb0 [ 1141.982685][ C1] do_idle+0x2e0/0x540 [ 1141.986776][ C1] ? __pfx_do_idle+0x10/0x10 [ 1141.991400][ C1] cpu_startup_entry+0x43/0x60 [ 1141.996242][ C1] start_secondary+0x101/0x110 [ 1142.001263][ C1] common_startup_64+0x13e/0x157 [ 1142.006266][ C1] [ 1142.009360][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1142.016677][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1142.027227][ C1] Tainted: [L]=SOFTLOCKUP [ 1142.031570][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1142.041655][ C1] Call Trace: [ 1142.044973][ C1] [ 1142.047847][ C1] vpanic+0x56d/0xa60 [ 1142.051882][ C1] ? __pfx__printk+0x10/0x10 [ 1142.056509][ C1] ? __pfx_vpanic+0x10/0x10 [ 1142.061049][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 1142.066391][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 1142.071654][ C1] panic+0xc5/0xd0 [ 1142.075432][ C1] ? __pfx_panic+0x10/0x10 [ 1142.079937][ C1] ? common_startup_64+0x13e/0x157 [ 1142.085093][ C1] __warn+0x315/0x4c0 [ 1142.089107][ C1] ? __queue_work+0xd83/0x10d0 [ 1142.093903][ C1] ? __queue_work+0xd83/0x10d0 [ 1142.099232][ C1] __report_bug+0x276/0x570 [ 1142.103871][ C1] ? __queue_work+0xd83/0x10d0 [ 1142.108680][ C1] ? __pfx___report_bug+0x10/0x10 [ 1142.113741][ C1] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 1142.119155][ C1] ? look_up_lock_class+0x57/0x110 [ 1142.124303][ C1] ? register_lock_class+0x31/0x2e0 [ 1142.129563][ C1] report_bug_entry+0x19b/0x290 [ 1142.134474][ C1] ? __queue_work+0xd9f/0x10d0 [ 1142.139294][ C1] ? __queue_work+0xda4/0x10d0 [ 1142.144102][ C1] handle_bug+0xce/0x200 [ 1142.148380][ C1] exc_invalid_op+0x1a/0x50 [ 1142.152920][ C1] asm_exc_invalid_op+0x1a/0x20 [ 1142.157792][ C1] RIP: 0010:__queue_work+0xd9f/0x10d0 [ 1142.163209][ C1] Code: 49 81 c7 70 01 00 00 4c 8d 35 9d d8 ee 0e 48 89 f8 48 c1 e8 03 80 3c 18 00 74 05 e8 0b 9c a9 00 49 8b 75 18 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 4c 89 e8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ef e8 [ 1142.187405][ C1] RSP: 0018:ffffc90000a18bc0 EFLAGS: 00010046 [ 1142.197084][ C1] RAX: 1ffff1100a90a14e RBX: dffffc0000000000 RCX: ffff88801e68ddc0 [ 1142.205101][ C1] RDX: ffff88801c2d7970 RSI: ffffffff8ad629e0 RDI: ffffffff907d16e0 [ 1142.213096][ C1] RBP: 0000000000010000 R08: 0000000000000100 R09: 1ffffffff20f482f [ 1142.221085][ C1] R10: dffffc0000000000 R11: ffffffff818e4560 R12: 0000000000000008 [ 1142.229098][ C1] R13: ffff888054850a58 R14: ffffffff907d16e0 R15: ffff88801c2d7970 [ 1142.237095][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1142.242946][ C1] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 1142.248282][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1142.253708][ C1] call_timer_fn+0x18d/0x5f0 [ 1142.258344][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1142.264240][ C1] ? call_timer_fn+0xd5/0x5f0 [ 1142.268965][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1142.274112][ C1] ? do_raw_spin_unlock+0xf5/0x200 [ 1142.279250][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1142.285179][ C1] __run_timer_base+0x67e/0x8b0 [ 1142.290077][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 1142.295458][ C1] ? ktime_get+0x1f5/0x220 [ 1142.299879][ C1] ? lapic_next_event+0x11/0x20 [ 1142.304737][ C1] run_timer_softirq+0xb7/0x170 [ 1142.309612][ C1] handle_softirqs+0x226/0x860 [ 1142.314385][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 1142.319155][ C1] __irq_exit_rcu+0xcb/0x220 [ 1142.323756][ C1] irq_exit_rcu+0x9/0x30 [ 1142.328036][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1142.333677][ C1] [ 1142.336619][ C1] [ 1142.339550][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1142.345558][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1142.351225][ C1] Code: cc 88 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 e1 23 00 fb f4 8c 08 03 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 1142.370835][ C1] RSP: 0018:ffffc900001a7e40 EFLAGS: 00000242 [ 1142.376908][ C1] RAX: 000000000086d107 RBX: ffffffff819bb370 RCX: 8000000000000001 [ 1142.384881][ C1] RDX: 0000000000000001 RSI: ffffffff8e413fe8 RDI: ffffffff8c6da080 [ 1142.392875][ C1] RBP: ffffc900001a7f10 R08: ffff8880b8733a1b R09: 1ffff110170e6743 [ 1142.401193][ C1] R10: dffffc0000000000 R11: ffffed10170e6744 R12: 0000000000000000 [ 1142.409184][ C1] R13: 1ffff11003cd1bb8 R14: 1ffff92000034fd0 R15: dffffc0000000000 [ 1142.417164][ C1] ? do_idle+0x2e0/0x540 [ 1142.421419][ C1] default_idle+0x9/0x20 [ 1142.425672][ C1] default_idle_call+0x72/0xb0 [ 1142.430472][ C1] do_idle+0x2e0/0x540 [ 1142.434570][ C1] ? __pfx_do_idle+0x10/0x10 [ 1142.439169][ C1] cpu_startup_entry+0x43/0x60 [ 1142.443955][ C1] start_secondary+0x101/0x110 [ 1142.448776][ C1] common_startup_64+0x13e/0x157 [ 1142.453753][ C1] [ 1142.457397][ C1] Kernel Offset: disabled [ 1142.461736][ C1] Rebooting in 86400 seconds..