last executing test programs: 15m45.100406887s ago: executing program 32 (id=462): mkdirat(0xffffffffffffff9c, 0x0, 0x1a5) getxattr(&(0x7f0000000140)='./cgroup\x00', &(0x7f0000000180)=@known='trusted.overlay.impure\x00', &(0x7f00000001c0)=""/4096, 0x1000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3ffffffc) r0 = epoll_create(0x5) r1 = timerfd_create(0x0, 0x80800) epoll_ctl$EPOLL_CTL_ADD(r0, 0x300, r1, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)) name_to_handle_at(r2, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="280000004e000000010000000000000005581807eb95156ff401000004c300000000000008000000ffff000000000000"], &(0x7f0000000100), 0x600) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x90249c01dd736e4b, &(0x7f0000000000)=[&(0x7f0000ffd000/0x3000)=nil], 0x0, &(0x7f0000000040), 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 15m29.838352834s ago: executing program 33 (id=815): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x4, 0x2, 0x0, 0xd, 0x1}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000340)={0x0, 0x8}, &(0x7f00000003c0)=0x8) 15m25.446683776s ago: executing program 4 (id=862): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380), 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0) ptrace(0x10, 0x0) ptrace$poke(0x5, 0x0, &(0x7f0000000000), 0x8) 15m25.20018776s ago: executing program 4 (id=866): setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000002c0)={0x0, 0x1, 0x6000}, 0x8) 15m25.01097749s ago: executing program 4 (id=868): socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x3, 0x2c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x84) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="3c0000001000010026bd700000000000000e0000", @ANYRES32=0x0, @ANYBLOB="040101000000000014000300766c616e30000000000000000000000008000a00", @ANYRES32=r0], 0x3c}}, 0x0) 15m24.787397757s ago: executing program 4 (id=872): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', r0, &(0x7f0000000300)='./file0\x00', 0x41) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x220) 15m24.645873014s ago: executing program 4 (id=873): r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) unlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) open(&(0x7f0000000340)='./file0/file1\x00', 0x167bc2, 0x19d) 15m24.31529889s ago: executing program 4 (id=875): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380), 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$poke(0x5, r1, &(0x7f0000000000), 0x8) 15m23.985455285s ago: executing program 34 (id=875): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380), 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$poke(0x5, r1, &(0x7f0000000000), 0x8) 14m54.01904746s ago: executing program 5 (id=1316): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000080), &(0x7f0000000140)=0x8) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000006c0)={0x0, &(0x7f0000000500)}) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14m53.443585585s ago: executing program 5 (id=1321): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x6c50, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x10000008, 0x11b}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000200)=0x18) r2 = ioctl$TIOCGPTPEER(r0, 0x5441, 0xb3d) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TCXONC(r2, 0x540a, 0x2) 14m53.25889022s ago: executing program 5 (id=1322): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000080)=0x7fffffffffffffff) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000080)={0x7, 0x3, 0x6, 0xfffa}, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0xd, @loopback, 0xc}], 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = dup3(r2, r1, 0x80000) io_setup(0x1, &(0x7f0000002500)=0x0) io_submit(r4, 0x1, &(0x7f0000002680)=[&(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x1000, r1, &(0x7f0000002540)='\r', 0x1}]) sendto$inet(r3, &(0x7f0000000340)='.', 0x1, 0x12, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14m52.713382362s ago: executing program 5 (id=1326): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', r0, 0x0, 0x41) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x220) 14m52.497280068s ago: executing program 5 (id=1329): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0300000000000000640012800b0001006970366772650000540002800800150061d30a0008000100", @ANYRES32, @ANYBLOB="14000700fe8000000000000000000000000000aa08000d005fe1ffff060010004e22000008000500200c000014000600"], 0x94}}, 0x0) 14m52.237626169s ago: executing program 5 (id=1332): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x6c50, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x10000008, 0x11b}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000200)=0x18) r2 = ioctl$TIOCGPTPEER(r0, 0x5441, 0xb3d) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TCXONC(r2, 0x540a, 0x2) 14m51.590896131s ago: executing program 35 (id=1332): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x6c50, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x10000008, 0x11b}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000200)=0x18) r2 = ioctl$TIOCGPTPEER(r0, 0x5441, 0xb3d) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TCXONC(r2, 0x540a, 0x2) 11m7.927292978s ago: executing program 8 (id=2603): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x4}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000000)="d5", 0x101d0}], 0x1}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xfffffffe) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x400000000a882, 0x0) dup(r2) dup(0xffffffffffffffff) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000016c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad", 0xfffffffffffffecf) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000d71000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000179000/0x2000)=nil) r5 = io_uring_setup(0x1c61, &(0x7f0000000200)={0x0, 0x3, 0x2, 0xfffffffd, 0x3e5}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) migrate_pages(0x0, 0xffff2567, &(0x7f0000000380)=0xd, &(0x7f0000000300)=0x8000000000000002) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800"/14], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) userfaultfd(0x80001) syz_open_dev$usbfs(&(0x7f0000000340), 0x206, 0x8401) 11m6.973845435s ago: executing program 0 (id=2612): r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) unlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) open(&(0x7f0000000340)='./file0/file1\x00', 0x167bc2, 0x19d) 11m6.859236045s ago: executing program 8 (id=2613): r0 = socket$key(0xf, 0x3, 0x2) r1 = fsopen(&(0x7f0000000040)='binder\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) timer_create(0x7, &(0x7f0000001880)={0x0, 0x2b, 0x1, @thr={0x0, 0x0}}, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffb, 0xf, 0x29, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000280)="99d3a24738682d0c1c1cd66fd35b56", &(0x7f0000000480)=""/162, 0x28, 0x1, 0xffffffffffffffff, &(0x7f0000000180)}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x40}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44880}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd25, 0x25df9bfb, {0x0, 0x0, 0x0, r7, {0xd, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x8, 0x2, [@TCA_ROUTE4_ACT={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8010}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) close(r1) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2b04d, 0x11a20}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x2, 0x8}}]}]}, @IFLA_LINKMODE={0x5, 0x11, 0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008055}, 0x40040) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r9) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r10, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) write$cgroup_type(r9, &(0x7f0000000080), 0x11ffffce1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000000)) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) sendmmsg(r0, 0x0, 0x0, 0x0) 11m5.277766777s ago: executing program 0 (id=2620): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_DQEVENT(r0, 0xc0506107, &(0x7f0000002440)={0x0, 0x0, 0x0, @raw}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e21, 0x101, @loopback, 0x3}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @private0}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000200)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e21, 0xfa9, @private1={0xfc, 0x1, '\x00', 0xfe}, 0x9}], 0x2c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@ipv4_delrule={0x44, 0x21, 0x4, 0x70bd26, 0x25dfdbfe, {0x2, 0x14, 0x20, 0x0, 0x3, 0x0, 0x0, 0x8, 0x14}, [@FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x12}}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x2}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x8}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0xb84}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettfilter={0x3c, 0x2e, 0x100, 0x70bc25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0xfff1}, {0xe, 0xf}, {0x8, 0xffff}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xc0e}]}, 0x3c}}, 0x0) ioctl$CEC_DQEVENT(r0, 0xc0506107, &(0x7f0000000400)) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="140000001000010000000000000001000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000064000000060a010400000000000000000100000008000b4000000000340004803000018008000100636d7000240002801000038009000100000000fd80000000080001400000041008000240000000000900010073797a30"], 0xd8}}, 0x4000000) 11m5.195264646s ago: executing program 8 (id=2622): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="bc0400000a0a01030000000000000000030000030c001180070001006374000058"], 0x4bc}, 0x1, 0x0, 0x0, 0x4040044}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2400000021000100000000000000000002000000000000000000000005001e"], 0x24}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r3, 0x80) r4 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r4, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) listen(r4, 0x3a5) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00', 0x0}) sendto$packet(r5, &(0x7f0000000280)='D', 0x1, 0x805, &(0x7f0000000300)={0x11, 0x9, r7, 0x1, 0xf7}, 0x14) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r5, &(0x7f0000000000)={0x2}) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafd0d36020a8429000b4e230f00000000a2bc5603ca00000f7f89004e002050da742dac0000000101ff05020003000200000000000100000000005839", 0x48}], 0x1) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 11m4.549840205s ago: executing program 8 (id=2628): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', r0, 0x0, 0x41) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x220) 11m4.366340036s ago: executing program 8 (id=2629): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000040)={'virt_wifi0\x00', @link_local}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)={0x5c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r3, 0x8b27, &(0x7f0000000040)) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000080)) 11m4.275635451s ago: executing program 0 (id=2630): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000004000000080000fcff0000000095000000000002000000", @ANYRESHEX=0x0, @ANYRESOCT], &(0x7f00000000c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e22, 0xc, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000380)=0x10, 0x1c) syz_io_uring_setup(0xc48, &(0x7f00000003c0)={0x0, 0x4e88, 0x400, 0x2, 0x2d6}, &(0x7f0000000440)=0x0, &(0x7f0000000480)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f00000004c0)=0xb, 0x0, 0x4) sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000005c0)=ANY=[], 0x420}, 0x1, 0x0, 0x0, 0x300440c0}, 0x8811) syz_usb_connect(0x2, 0x53, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x88, 0xee, 0x20, 0x10, 0x104f, 0x4, 0xc6c3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xb6, 0xb3, 0x3c, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "940a0207da"}]}}, {{0x9, 0x5, 0x5, 0x2}}]}}]}}]}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xcd}) socket$packet(0x11, 0x3, 0x300) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) prctl$PR_SET_NAME(0x4, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo/4\x00') ioctl$UFFDIO_WRITEPROTECT(r5, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000adc000/0x2000)=nil, 0x2000}}) ioctl$UFFDIO_MOVE(r5, 0xc028aa05, &(0x7f0000000340)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x1000}) sendmsg$TIPC_NL_MON_SET(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="1719000000bc1d3671a28b0000000000110000000c0009800300010000000000"], 0x20}, 0x1, 0x0, 0x0, 0x24050010}, 0x0) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f0000000140)) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000240)="832ffd4f98caf4beaa1080af8cadeb5684de39711a261fb591429f216d345e4bc98c752a54732f6ac7abda657c2dc9a1b709a48077771ad8fc6085ef2c1a986cb3b18cb7e1472abab5fb37cf22ced7312851f72cbbdcd3ad5f8ed328354b409df612c4f868cebe3997c8c1105b06ad72572dd2cdd29c5925c89c723c51f50ac742490b1cdd61ee891caff0c6963d68896c6dd10f6212a20efb9fba44a522d90bffd379d134b07bb52c71bec17a4a11fc0c09ec1d299f25100d5bb6ae2dc15d5439c47c7b094e83abe86efe45e445bce23dbf9a74c12528", 0xd7}, {&(0x7f0000000540)="81d8c82c906a9d2a06e6a19ff58ac150f63bb93e237387135698de8a992096fc4a72fdf4f51621be5c139c13c84fb3b9a306f607e20760cffc38822d67e0e139a8a61e591dc3af1b6060b743f0b58541ef5721f2b74d75a5edb188729e6995017ce58baba18dc9ff5cc8e556218630b8e05e037fb2609419f2f3b3ec1255a1939f4fcfcb8de05380b261ae46a21d14e8d7b49739246628e6102fc15606db2345c9e6937bfff57d82ed0437e15fb413aaaa26cefb1f8cabf1f9b0e2cbd42051573b5c5ff95775be3e67a1103fca263f7ea21ee5e333c9875eadedb08dd6de39f28c65caa46a68cf666286fa59e40294ca79e12d", 0xf3}], 0x2) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000bc0)={0x0, @dev, @loopback}, &(0x7f0000000c00)=0xc) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f0000000e00)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000800)={0x150, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x150}}, 0x804) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x2004c0d0}, 0x800e805) syz_genetlink_get_family_id$devlink(&(0x7f00000012c0), r1) read$FUSE(r1, &(0x7f0000002580)={0x2020}, 0x2020) 11m4.208583181s ago: executing program 8 (id=2631): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) (async) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffef2) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x20004040) (async) sendmsg$nl_xfrm(r2, 0x0, 0x20004040) r3 = syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x1) r4 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r5 = inotify_init() fcntl$setstatus(r4, 0x4, 0x6400) inotify_add_watch(r5, &(0x7f0000000080)='./file1\x00', 0xd4000481) (async) inotify_add_watch(r5, &(0x7f0000000080)='./file1\x00', 0xd4000481) vmsplice(r4, &(0x7f0000000380)=[{&(0x7f0000000000)="9b", 0x1}], 0x1, 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="711008000b0000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41100}, 0x94) syz_open_dev$vim2m(0x0, 0x8, 0x2) (async) r6 = syz_open_dev$vim2m(0x0, 0x8, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) setpgid(0x0, r3) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) socket(0x10, 0x3, 0x0) (async) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f00000003c0)="1c000000612a98500214f9f4070009010000000000fe030001000000005728b80593fa91923f5b9995df6c7c36447af3e31fbb47cda5f3711d6ba96f4ac1c9c1548f342c19458639e10ed7b8896736fc81d2f42d4af1ba1a23138ea7cd39fa02cb35ef62104f6af4fe3f07da7a3f87431d2f7e61278c96b0b49462c698582419b6f65b18029d385e4ef08d5b6771f0d989a2c15506f9ab692a9fa3b82ee52418f0f21bd90158f81837566a1a4cbc4d1be1cf299f8bf3bf4125526e9542b5c4971ae68a249f58d80721836920f739249f3fd3b643f633c78020da1cd1a07cb78d2f75a69857b4f7f0428c01254ebda6fe843b20", 0xfffffffffffffe70) 11m3.804209296s ago: executing program 36 (id=2631): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) (async) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffef2) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x20004040) (async) sendmsg$nl_xfrm(r2, 0x0, 0x20004040) r3 = syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x1) r4 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r5 = inotify_init() fcntl$setstatus(r4, 0x4, 0x6400) inotify_add_watch(r5, &(0x7f0000000080)='./file1\x00', 0xd4000481) (async) inotify_add_watch(r5, &(0x7f0000000080)='./file1\x00', 0xd4000481) vmsplice(r4, &(0x7f0000000380)=[{&(0x7f0000000000)="9b", 0x1}], 0x1, 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="711008000b0000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41100}, 0x94) syz_open_dev$vim2m(0x0, 0x8, 0x2) (async) r6 = syz_open_dev$vim2m(0x0, 0x8, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) setpgid(0x0, r3) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) socket(0x10, 0x3, 0x0) (async) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f00000003c0)="1c000000612a98500214f9f4070009010000000000fe030001000000005728b80593fa91923f5b9995df6c7c36447af3e31fbb47cda5f3711d6ba96f4ac1c9c1548f342c19458639e10ed7b8896736fc81d2f42d4af1ba1a23138ea7cd39fa02cb35ef62104f6af4fe3f07da7a3f87431d2f7e61278c96b0b49462c698582419b6f65b18029d385e4ef08d5b6771f0d989a2c15506f9ab692a9fa3b82ee52418f0f21bd90158f81837566a1a4cbc4d1be1cf299f8bf3bf4125526e9542b5c4971ae68a249f58d80721836920f739249f3fd3b643f633c78020da1cd1a07cb78d2f75a69857b4f7f0428c01254ebda6fe843b20", 0xfffffffffffffe70) 11m2.76350658s ago: executing program 0 (id=2635): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', r0, 0x0, 0x41) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000100)='./file1\x00', 0x220) 11m2.644433794s ago: executing program 0 (id=2636): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000001d80)={0x0, @in={{0x2, 0x4e23, @private=0xa010101}}, 0x6, 0x2, 0x0, 0x5, 0x3da, 0x94}, 0x9c) (async) shutdown(r2, 0x0) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000380)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x208}}, 0x48000) setxattr$security_ima(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), &(0x7f0000000440)=ANY=[@ANYBLOB="e2a78cd69d"], 0x5, 0x1) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0x40, @local, 0x1}]}, &(0x7f0000000100)=0xc) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = fsopen(&(0x7f00000002c0)='hfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, 0x0, &(0x7f0000002280)='//\xf2b\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b///\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\xc5n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) io_uring_enter(0xffffffffffffffff, 0xeb6, 0x26f7, 0x1c, &(0x7f0000000100)={[0x1]}, 0x8) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffff9c, 0x0, 0x40000, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) sendmsg$NL80211_CMD_AUTHENTICATE(r3, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r4, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @random="766a78056ecf"}]}, 0x2c}, 0x1, 0x0, 0x0, 0x60000080}, 0x4000005) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1750bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2"], &(0x7f0000000100)='GPL\x00'}, 0x94) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x8000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/stat\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) getdents64(r5, &(0x7f0000001f00)=""/4093, 0xffd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'netdevsim0\x00'}) 32.458479562s ago: executing program 9 (id=5771): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) socket$netlink(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x64010000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 31.355788916s ago: executing program 9 (id=5778): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', r0, 0x0, 0x41) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x220) 31.272659286s ago: executing program 9 (id=5781): syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x43) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40182, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x88300, 0x0) ioctl$PTP_PEROUT_REQUEST2(r4, 0x40383d0c, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x5, 0x8, 0x8005, 0x0, 0x9, 0x1000000000, 0x7, 0xfa11, 0x6}, 0x0) r7 = syz_open_procfs(0x0, 0x0) getdents(r7, &(0x7f0000001fc0)=""/184, 0xb8) mknodat$loop(r7, &(0x7f0000000000)='./file0\x00', 0x4, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000002e00090027bd700000000000040000002900118031f9e05e2f826c49d898d85a5b2377f0025e92127969fc31dc2af82456e165f760b53d61ae5f9555704f63dac994ce05dc7224e5"], 0x40}, 0x1, 0x0, 0x0, 0x42804}, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x0, 0x11, r7, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x2) r9 = inotify_init() inotify_add_watch(r9, &(0x7f0000000080)='./file0\x00', 0x80000006) setxattr$incfs_metadata(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, 0x0, 0x1) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000001000010828bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="77c2700a090000000005200400ebff0400", @ANYRES32=0x0, @ANYBLOB="0800290044fa01000800290011010100"], 0x38}, 0x1, 0x0, 0x0, 0x48000}, 0x8080) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) 30.703973672s ago: executing program 9 (id=5785): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000016000300686173683a6e65742c706f72742c6e657400000005000400000000000900020073797a300000000a0c000780080012409efbffff050005000a000000050001000600"], 0x5c}}, 0x0) 30.212354525s ago: executing program 38 (id=5785): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000016000300686173683a6e65742c706f72742c6e657400000005000400000000000900020073797a300000000a0c000780080012409efbffff050005000a000000050001000600"], 0x5c}}, 0x0) 8.641458968s ago: executing program 3 (id=5879): r0 = socket$unix(0x1, 0x0, 0x0) (async) r1 = openat$vmci(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(r1, 0x7b3, &(0x7f0000000040)) (async) getpeername$unix(r0, &(0x7f0000000080), &(0x7f0000000100)=0x6e) (async) openat$nullb(0xffffff9c, &(0x7f0000000140), 0x200040, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000180)) lsetxattr$security_ima(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), &(0x7f0000000240)=@v1={0x2, "72865200"}, 0x5, 0x3) (async, rerun: 64) getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, &(0x7f0000000280)={'nat\x00', 0x37, "f69d113730298e53eb98f580d43f795275f14ef9b390748e964ce198b5b647deabba26cfddcf46da50d94e04922f6fe452a19ab2345304"}, &(0x7f0000000300)=0x5b) (rerun: 64) r3 = socket$inet_sctp(0x2, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000340)={0x0, 0x3, 0x10, 0x3, 0x9}, &(0x7f0000000380)=0x18) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f00000003c0)={r4, 0x877}, &(0x7f0000000400)=0x8) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000740)={'ip6tnl0\x00', &(0x7f00000006c0)={'ip6tnl0\x00', 0x0, 0x4, 0x1, 0x80, 0x9, 0x0, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x1, 0x1, 0x6}}) sendmsg$inet(r0, &(0x7f0000000840)={&(0x7f0000000440)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000480)="a97b6fff76e477e8493763eab8ce4cce82bbc3ef6dd097440f3564dce32e0ca2a1f3a12407106682599222d10f4ab4213dfbd7c4896597c769a1f77335da", 0x3e}, {&(0x7f00000004c0)="57a1033270aafc8d939835b9f2d5a9d4a8782b8fca6c257426a1c1081dee15b13122afd0bd908fc4de71dfabcfae2a91f1c75e96", 0x34}, {&(0x7f0000000500)="ab6e1239c45efb5779d3ab45b258ae379f11a898a24653b4851ed218a00d0540692f674cb94761d2bd49f607097bc53eca93efba253723251f", 0x39}, {&(0x7f0000000540)="8b533ae14489f88c051f3a414a802bbf7298b058cff84a0974b482e2afabe9faaa6c820d32cf9f80dd45d2ae8736aee07066498c366ab655eb53ecb982a3ad2876f131", 0x43}, {&(0x7f00000005c0)="c40b3e4ca585e39c2a881e865ac6be3cbed5f29721831d5410f4a64a29c370cfc318cd0b0ca8cdc1da8d2498d51868a359ba99dc1da24f6196c9e0d3319585bea37eed68da22a97f9f0dee2e", 0x4c}, {&(0x7f0000000640)="eaffd36f7e4193fee7ba1ac15a62aa691a906c3964ae697890", 0x19}], 0x6, &(0x7f0000000780)=[@ip_ttl={{0x10, 0x0, 0x2, 0x39b}}, @ip_ttl={{0x10, 0x0, 0x2, 0x7}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x2}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r5, @local, @multicast1}}}, @ip_retopts={{0x34, 0x0, 0x7, {[@noop, @generic={0x83, 0x4, "740e"}, @generic={0x44, 0x7, "9d7f65037b"}, @rr={0x7, 0xf, 0x2c, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @rand_addr=0x64010101]}, @ssrr={0x89, 0xb, 0xb0, [@broadcast, @multicast2]}, @end]}}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x6}}], 0x9c}, 0x20048890) (async) r6 = openat$vimc1(0xffffff9c, &(0x7f0000000880), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r6, 0xc0cc5604, &(0x7f00000008c0)={0x7, @vbi={0xffff, 0x7, 0xfffffffe, 0x31324d59, [0xb755, 0xa], [0x1], 0x1}}) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000009c0), r7) r8 = syz_open_dev$sndctrl(&(0x7f0000000a00), 0x520c, 0x18080) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r8, 0xc2c45512, &(0x7f0000000a40)={{0x6, 0x5, 0x40, 0x3, '\x00', 0x3}, 0x1, [0x1e5, 0xe, 0x800, 0x9, 0x1, 0x6, 0xf2, 0x9, 0x7f, 0x9, 0x8001, 0xa0f4c1d0, 0x6, 0x1a, 0xd885, 0x7fffffff, 0x7, 0x8001, 0x3e64, 0x4, 0x369, 0x10000, 0x3, 0x6, 0xfff, 0x2, 0x1, 0xff, 0x1, 0x9, 0xd, 0x9, 0xfffff800, 0x6, 0x1b25, 0xa, 0x1, 0x9, 0x8, 0x9, 0x400, 0x0, 0x8, 0x3f26, 0x40, 0x0, 0x0, 0x4, 0x8000, 0x7, 0x4, 0x4, 0x4, 0x2, 0x5, 0xb5c2, 0x39, 0x1824, 0x3, 0xffffff3b, 0x8001, 0x7fff, 0x5, 0x1, 0x4, 0x9319, 0x2, 0x9, 0x2, 0x9, 0xffffffff, 0x3, 0x8, 0x9a26, 0xffff6903, 0x9, 0xb, 0x8, 0x7, 0x4, 0xfffffff9, 0x3b42, 0xfffffff7, 0x5a, 0x2, 0x1, 0x7fffffff, 0x4532, 0xaf35, 0x2, 0x4, 0x2, 0x5, 0x9, 0x2, 0x5, 0x2, 0x2, 0xc5b, 0x2, 0x5, 0xd6, 0x1, 0x4a, 0x2, 0x7fffffff, 0x0, 0x6, 0x81, 0xfffffff1, 0x1, 0x10000000, 0xfffffff3, 0x3, 0x9, 0x5, 0x0, 0x4000000, 0x5, 0x7, 0x6, 0x7f, 0x59, 0x6, 0x80, 0x6, 0x0, 0x59]}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000d40)) (async, rerun: 32) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r7) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x18, r9, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40481c0}, 0x200000c0) r10 = dup3(r1, r0, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r10, 0x4018aee3, &(0x7f0000000f00)=@attr_other={0x0, 0x1522308d, 0xc578, &(0x7f0000000ec0)=0x7}) (async) r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000020c0)=@bpf_lsm={0x1d, 0x15, &(0x7f0000000f40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}, [@map_idx_val={0x18, 0xd, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x7}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @generic={0x6, 0x0, 0x5, 0x9, 0x6}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}]}, &(0x7f0000001000)='GPL\x00', 0xc, 0x1000, &(0x7f0000001040)=""/4096, 0x40f00, 0x0, '\x00', 0x0, 0x1b, r10, 0x8, &(0x7f0000002040)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000002080)=[r3, r10, r10, r10, r10, r10], 0x0, 0x10, 0x9}, 0x94) fsconfig$FSCONFIG_SET_FD(r10, 0x5, &(0x7f0000002180)='/-[+/\x00', 0x0, r11) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) add_key$keyring(&(0x7f00000021c0), &(0x7f0000002200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) unshare(0x0) 8.559282767s ago: executing program 3 (id=5880): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x541b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) io_uring_enter(0xffffffffffffffff, 0xeb6, 0x26f7, 0x1c, &(0x7f0000000100)={[0x1]}, 0x8) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffff9c, 0x0, 0x40000, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) sendmsg$NL80211_CMD_AUTHENTICATE(r3, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r4, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @random="766a78056ecf"}]}, 0x2c}, 0x1, 0x0, 0x0, 0x60000080}, 0x4000005) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1750bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2"], &(0x7f0000000100)='GPL\x00'}, 0x94) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x8000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/stat\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002f00)={0x2020}, 0x2020) getdents64(r5, &(0x7f0000001f00)=""/4093, 0xffd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) 6.859703307s ago: executing program 2 (id=5883): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)=@generic={&(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r0}, 0x18) ioctl$FS_IOC_SETVERSION(r0, 0x40047602, &(0x7f0000000080)=0x80000000) r1 = syz_usb_connect$cdc_ncm(0x5, 0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000008000905810300020000000904010000020d00000904010102020d000009058202000200"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000880)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x0, 0x0, 0xb, 0x1, 0x1, 0x4, 0x7, 0x40, 0x6, 0xe, 0x0, 0x1004}}, 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x74, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x30, 0x12, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xd}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xbc}}, 0x20050800) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) 6.647038468s ago: executing program 3 (id=5884): openat$kvm(0xffffff9c, 0x0, 0x800, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024917720042322023f77010203010902120001000010000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private0, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)={0x24, r3, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x40018) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @remote}, {0xa, 0x4e22, 0x0, @mcast1}, 0x0, {[0x0, 0x0, 0xa4]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @empty}}, 0x5c) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000001c0)={&(0x7f0000000200)=[{0xe4, 0x2200, 0x0, 0x0}], 0x1}) syz_usb_connect(0x0, 0x64, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000cb8be7406d04230848390102030109025200010000000009044000000e0100000a2401"], 0x0) 5.844115787s ago: executing program 6 (id=5887): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0x9) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000240)=0x2, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)='\x00', 0x1}], 0x1}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r3 = syz_open_dev$vcsu(&(0x7f0000000380), 0x8, 0x2a4102) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000100)={@empty}, 0x14) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_ENTRIES(r5, 0x0, 0x41, 0x0, &(0x7f0000000000)=0x88) r6 = getpid() getresgid(&(0x7f00000003c0)=0x0, &(0x7f0000000400), &(0x7f0000000440)) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f00000014c0)=0x0) fstat(r0, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000016c0)={0xffffffffffffffff}) shutdown(r10, 0x1) r11 = getpgid(0xffffffffffffffff) r12 = getuid() getresgid(&(0x7f0000001580)=0x0, &(0x7f00000015c0), &(0x7f0000001600)) r14 = socket$igmp(0x2, 0x3, 0x2) sendmsg$unix(r0, &(0x7f0000001780)={&(0x7f0000000080)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000300)=[{&(0x7f00000004c0)="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", 0x1000}, {&(0x7f0000000140)="1eab972782bc45c042b223d0e092f5c53a2866033853d34ea75448f78256fa69881037af096acde6863bb6cddfd44dfbfbc1cb68718a2446a8d08d39390c5f3d60f927efb3369ba38dc01f71b244ccc0131810c4cab4a5dbfe7683a9454c286ddd13ec2200154f9f05904e5d4e8aae9cc13c0c579d5a48d411c380736552358273e479f65182b0e3dbb870811e8442f9331126766ad8e41b677e47aa1800c241400cc29631b99f358b7c78ee04041aca0dd249ef3e95246fa9addf8855", 0xbd}, {&(0x7f0000000280)="c3ea53ef92e644e405c13d9ca121c88346ab2744c1fba53f63375006cb4a85d164d452cf2f3cf17d90f537f467588e8b6c2e2eac7565ad6dc600c9c2c4e64d255f30a143a4a45eb56056c3687be377c625f038af21a5e952804df505db0c", 0x5e}], 0x3, &(0x7f0000001640)=[@rights={{0x24, 0x1, 0x1, [r1, r3, r0, r1, r1, r1]}}, @rights={{0x1c, 0x1, 0x1, [r2, r0, r1, r4]}}, @rights={{0x2c, 0x1, 0x1, [r2, r5, r0, r2, r2, r1, r1, r2]}}, @cred={{0x18, 0x1, 0x2, {r6, 0xee01, r7}}}, @cred={{0x18, 0x1, 0x2, {0x0, r8, r9}}}, @rights={{0x24, 0x1, 0x1, [r2, r2, r10, r2, r0, r2]}}, @cred={{0x18, 0x1, 0x2, {r11, r12, r13}}}, @rights={{0x30, 0x1, 0x1, [r0, r0, r0, r2, r2, r0, r1, r2, r1]}}, @rights={{0x20, 0x1, 0x1, [r0, r2, r2, r14, r2]}}], 0x128, 0x8c01}, 0x40000) close_range(r2, 0xffffffffffffffff, 0x0) 5.802783853s ago: executing program 1 (id=5888): sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="74000000010701030000000000000000030000040900010073797a3100000000540007800800024000000002080002400000b55a0800014000000001080001400000000108000240000000070800014000000006080001400000000808000240ffffdfda0800014000e00000080600"], 0x74}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000004900010000000000000000000a0000000000000000000000140001"], 0x3c}}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050841) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) r2 = openat$hwrng(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) recvmsg$kcm(r2, &(0x7f0000001640)={&(0x7f0000000240)=@isdn, 0x80, &(0x7f00000015c0)=[{&(0x7f0000000300)=""/91, 0x5b}, {&(0x7f0000000380)=""/112, 0x70}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/16, 0x10}, {&(0x7f00000001c0)=""/7, 0x7}, {&(0x7f0000000400)=""/87, 0x57}, {&(0x7f0000000480)=""/177, 0xb1}, {&(0x7f00000016c0)=""/240, 0xf0}, {&(0x7f0000000540)=""/28, 0x1c}], 0x9, &(0x7f00000017c0)=""/179, 0xb3}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d697400"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendto$inet(r2, &(0x7f0000001880)="41b3af9a5f78e62f51c5eb697421894ba310539114381522157280602d53f34e9d1ddfa08091b61ee5e3cdc1571902596a620911c18806", 0x37, 0x8044, &(0x7f00000018c0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000140)={0x0, 0x0, 0x9}, 0x8) 5.598909166s ago: executing program 6 (id=5890): syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x319c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000529000/0x2000)=nil, 0x2000, 0x16) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000003b80), 0x0, 0x2082) r2 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x0, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x60}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0x1}}, 0x20) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x4c, r6, 0x1, 0x70bd25, 0xfffffffe, {0x3d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x82}, {0x5, 0x87}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x881}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001080)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$BLKTRACESETUP(r1, 0xc0481273, 0x0) sendmsg$nl_route(r0, 0x0, 0x24040040) r8 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r8, &(0x7f0000000580)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10) getpeername$inet(r8, 0x0, 0x0) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 4.9725329s ago: executing program 1 (id=5892): syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d0009058223"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40182, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r4 = socket(0x1e, 0x2, 0x0) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1000000000, 0x7, 0xfa11, 0xffffffff}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000480)=[@mss={0x2, 0x3}, @mss={0x2, 0xaf0}, @timestamp, @mss={0x2, 0x8}, @window={0x3, 0x8000, 0x81}, @sack_perm], 0x6) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents(r7, &(0x7f0000001fc0)=""/184, 0xb8) mknodat$loop(r7, &(0x7f0000000000)='./file0\x00', 0x4, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x40, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@nested={0x29, 0x11, 0x0, 0x1, [@generic="31f9e05e2f826cfc31dc2af824704f63dac994ce05dc7224e5479795b50d9015743a8b75c2"]}]}, 0x40}, 0x1, 0x4000, 0x0, 0x42804}, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) syz_usb_connect(0x2, 0x36, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) 4.89971695s ago: executing program 3 (id=5893): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$isdn(0x22, 0x3, 0x26) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x20, 0xffffffff}, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x15) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r2, &(0x7f0000000800)={'syz1\x00', {0x2, 0x10, 0x2}, 0xf, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4000, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x2, 0x5, 0x0, 0x7, 0x0, 0x80000, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2000, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x6, 0x5f1, 0x6], [0x3, 0x1, 0x8, 0x0, 0x1, 0x5, 0x0, 0x80, 0x8000, 0x5, 0x0, 0x0, 0x7344df08, 0x0, 0x2, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x4, 0x0, 0x7, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x3, 0x0, 0x200, 0x0, 0x5, 0x0, 0x3, 0x5, 0xfffffffd, 0x4000000, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xfffffffd, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffff], [0x4, 0xfc, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x0, 0x0, 0x1, 0x4, 0x1000, 0x80, 0x0, 0x200, 0x0, 0xffffffff, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x20, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x2, 0x0, 0x6, 0x1, 0x0, 0xbda6, 0xe, 0x0, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8], [0x40000000, 0x3, 0x74e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0xbd, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6, 0x9, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x101, 0x80000020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5cb9, 0xcaa, 0xfffffffe, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4]}, 0x45c) r3 = syz_open_dev$evdev(0x0, 0x235c0000, 0x141100) ioctl$EVIOCGREP(r3, 0x80084503, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r2, 0x5501) socket(0x28, 0x1, 0x0) syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x4, 0x1, 0x89}, &(0x7f00000003c0), &(0x7f0000000200)) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r5, 0x4038ae7a, &(0x7f0000000340)={0x80, 0x40000094, 0x0, 0x0}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) r7 = socket(0x18, 0xa, 0x0) r8 = syz_io_uring_setup(0x837, 0x0, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r7, 0x0, 0x0}) io_uring_enter(r8, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000500)={0x50, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/7, 0x7, 0x1, 0x31}, @fd={0x66642a85, 0x0, r6}}, &(0x7f0000000300)={0x0, 0x18, 0x40}}}, @dead_binder_done], 0x24, 0x0, &(0x7f0000000380)="221aa20bb2a35bf4a0d9241e69e1ed1b7f6457e024aa79cd25c71e7b3f21a3d16806fde2"}) ioctl$KVM_RUN(r6, 0xae80, 0x0) socket$packet(0x11, 0x3, 0x300) 4.159501466s ago: executing program 2 (id=5894): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000000)={0x2, 0x0, [{0x80000008, 0x1, 0x3, 0xfc, 0x4, 0x2, 0x7}, {0x80000000, 0x0, 0x6, 0xffff6947, 0x4, 0x6}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x9, 0x9, 0x4, 0xfffffffffffff7dc, 0xfa11, 0x1}, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r5, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f00000014c0)={0x3, 0x0, [{0xffffffff, 0x3, &(0x7f00000012c0)=""/3}, {0x25000, 0xbd, &(0x7f0000001300)=""/189}, {0xffffffff, 0xf1, &(0x7f00000013c0)=""/241}]}) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f00000003c0)={0x1}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000c00)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x80, &(0x7f0000001080)=[{&(0x7f0000000c80)="9f5735fd77a06ebe94394f8090596b40dc9bb514fe1bdb6c22895049df7fad8d3d4807b17dd709b3f9fee764c1863f560b040390c5c14b43cfa0a347086f477eb15b29f215f08bc40b37fde85eb0795d11c0d7084db3c88cc8b19a25c48130601f3ddb26625c3e5226397c3633b80273121a7e29af4cdd8a235b4e99e68389620e6ce1b7b566ea9c245c6897", 0x8c}, {&(0x7f0000001880)="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", 0x1000}, {&(0x7f0000000d40)="1685d10294b0143206f59822ffe528d8a1633325fdd154355d86a6955946e868aa2a7ca36d85390116c699d426421a509c2efcefde7b858630157aca04c36420e5ca1fcd55e2e39a2fbace220a93714ce13aa8d41290694a39ef9a2db312e891cd8cf38d73b453d01695084230f7791c6e48d6b657206fa16d79ca2488b0850afe4d3034b5c8f285a4ab6ee903b397e1a2ba201318d3ab4e49af2e0f3722be8d9350542e61b2c30a6a05fdcd52a4352123a8a2abc8cecdac0180b303ae93426a629ae67a12de0c6f0c50e31ad22419d9ba332721", 0xd4}, {&(0x7f0000000e40)="b97c9f18df5dfd215d168239725b24257dc72868d806e04db091b651360a3b3012442974a09e25225d6bd5404f107978d345a9a6d484106ba367e3e002397f1f427f3e546de399da1ff22fa5045eb54389b7b9967ee7c931c4432776171ad19ba93b74977402ef7c7b32dd2092aa9ad2c24b88760a3829179878acb5a11d7ec29687ca62c261e20f781fa91ea73bf2cf2718ec599c64941d5635514262cf81337c3a73601b7e877d97afec0e8f98bb851fff9176aa72330fe3c81fd9bce4242442f1", 0xc2}, {&(0x7f0000000f40)="afd2c38bf9d6c25aadeec06a638210033cb80cfa1072", 0x16}, {&(0x7f0000000f80)="acbcfec952eed18b203a", 0xa}, {&(0x7f0000000fc0)="ada17001cb80f8de040ca2143fac5eb5471b3671eec77b71cb4288d07f962c8336c12c249d213f3b978026777f979c0451fcbe20b8706bb1f5f06869c82c16a010c0c506dea1c74ae51cf5cdaad4fa7f23ae1959b9739ea3fa1ed5c3df1a6a5c3660a9c330a9a9ba0641a5f9bce22e03cfb23416a4987324cc328d159c2220aace23649baa9d75df3a9be601e390f3e6966d443d71979c023a1171d8fe2e1d4a", 0xa0}], 0x7, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], 0x170}, 0x40100) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x2, @remote}}}, 0x108) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="f000000010000100feffffff00010000fe880000000000000000000000000001fc0100000000000000000000000000010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f00000100000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c2508000000000000000000fcffffffffffffff0000008000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd7000043500000100200000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x88c5}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000ff000003bfa30000000000000703000000feffff620af0fff8ffffff71a4f0ff0000000015040200000000001d400200000000004704000001ed000062030000000000001d440000000000007a0a00fe00ffffffdb03000040000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa5b4e377184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7592566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6cb5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a00"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 2.726385048s ago: executing program 3 (id=5897): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) fsopen(0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff0300"/51], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) sendmmsg$inet6(r0, &(0x7f00000034c0)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x9, @mcast1, 0x9}, 0x1c, &(0x7f0000000040)=[{0x0}], 0x1}}, {{&(0x7f0000000240)={0xa, 0x4e23, 0x0, @mcast2, 0x7}, 0x1c, &(0x7f0000000340)=[{&(0x7f00000002c0)="3e091209cc3260237770420df481", 0xe}, {&(0x7f0000000940)="a150b13102e101c2bac8c6e104386a87caebce62b919c299e406a08f7c7248ed62c2fad2e99ed4105bba68ead9caf216b84e83fb5361c376a49a504bed83c56f6ee9970ec8f5ebec05cb417ef1dae65621105fc59bf9f8de7b30e8593ff2ddceffe484d3265aed06e295c0decefa8ad7e34cea97d61271797a5ac1ef1daea6c8b66690050a7c1b1189fcc67f6323d56b2f71283d32d0e0ec97ab2a9acf9c24b0cc2858264bc340bba5314e5841e19325f92288540717637123f1b90ba062e766a39fdfbf945c851f74b55c741e0846f212c9363c71720a0e1f92d219e572ddb66ff8ebffe8b8a66f7e7db0f1c70bdc50450753cef87e95465c4ce7f90c395c52cee0451877fa2a4a0cd788ccff57b365b44790bf2b591b454212e68a5ef60ffb4e0a17274b4bc2086a9305ff92814f207fb14d048ac07f1b788f5b8a075abb21e2c2e1964892f02b13323b169778cffa410071db088378865e29bd3e4a1441be6214e69db4f553dd8643724c3da2d02087ec5e5af4df2c64bba9d4c20930aff9ab92a11ee9a6ee142d515778d667683de22d0db38160cf596c6c333e7f12c23a5fe07f091dee3a49398a4d7b871e6bcb84b363ebc3b760c504a2c432659f3942149a8d13ce129a0b58922629aa6d9afc90a7301b30854529cab403ce246f622393429fe72c6ac31a47d106b4cb2d6b0c3ce8e9d3efd45c3a7b7d92a5a38fbd6c13fa159997c24886a36f0c1d3f1ae8cfd6336f5842330ad44c0dba886d7f2527e0ebb236af11317ff390094a694627676cf7b4aaff2ec7ee93c2ae6d0121d078fe80b462c8d568c9f19df539d01599c433ec8f13f66b09616d2127bd8bbdb9704af33273bd0946334f250bc277b59b0caa3077a0b6778f37e426d3eebe869032e382be47f9c8ef881f2394ae8dfb4767482f8ef480ac1c92ae7d9d44fc9cd7d7267a3cd5a86d4cd424aeeb25196668e44abfa51a0315ccb57a22e38d6d65ed6bb009868a46b1be425bc581922df0771d8eff326326408b1566198143d75136516320ad3b984c96ce25913367f2f9da9294bc7fd2b70c575ac5726cd550efdd3835950f35963090026bc9d5d48636b5b78f9c4e1cb0fb336b785d7bad7f26808b6eb5f203b5c7537f8aa981d990b47237f0172724a8b91f5011c6a9efbd47fd966057f69d62a69e466b44b47579dd721580524face05d1bc515d99702722d6867a57904070d21b61638f6ed26153e236db8dbb35eccd94f884535af69b886b1ea16c258c3eb797ffacae92665700ea60fe43087480879e367177aad9c09481c2a2a29c5d68770d830c5ea9435bdcb9619d79756455821f4abfde2ed36395a25caf9315c5a1056f353f8ed6e21303e8575570e647b6a721579ec2f878ac3dcea23af2f1e1b091454b866bd9258ab408f197f70d32e9b67a5033b59cfb379b5343a7213c59dc1f15690e513eef4f4bcbb62eb9980d3ecf6f695a42ffc3b73c078ca511caf1c2f4b068cfe9e87251b1a2210339fd12389fbf11e338e78a648f3d8057990fe548e6cd36722187a741c29533a7f492ae672bfe019c3fdea57053749851095ebe76e29e4bf3422f6d61c5bfd3f9a14d2463b18f60323f37f5ba63a6604586a116270fe5843194f8018b0dfed1ee2ca6c58f2b36713bd795728864086a5909892501e7042d5050db47eb2a20d5016ba3cbc4290d14651eca71ff2763ce10d0a0b144e9f5443d008a464ecd567cffb70d113d19f8dd87accdc2ca7c17168f716565e4359fa359d80de14860b4432523e249ec825a7023603028ff58217b594bc457c9be83bcab1277fe91ae1997ffa182ec9b28ea6d1b2c8a15c59e2276c6b7223c784aa39515a25c2292ceadd06c9847fd55cba606ca67fe15e77516b8631e0da696f20ca17af67f56a9f23856cc1f963b561e5c799da8eedca64fa6288cf8f7ec11602c14ce399d1708dbbeed9225eb29ce2a2955c1cafcf76fd9de76bf58d18870e8e9881aca5cc0f0f1871571b808fba1b904e6a09c23e3d5fad764d76d968cfff90f9d25771efd105f85606f7e04573ad3a3657ae9c0f26ac1b0ab2c91bc14addf8a6093c3e13bc5e16e3f4bcc068d8ed9e289a797f725cea9ec07d915434bd8c519958c1a1314c3b4ed156997e5f5ed727c112b04b1de75ca2366e5b1714ab0ea1556cedca38c05a8b9bef4dea019e9d909339ac9f5db8443fac92b056723e1fa6e19fbe21ead29adf577e7acfed8d399a242581e1af8606160d8d36e7a088eab073c62a38d88c9f066bebf6040f76d1152405707f1b6f1fd45ef880879624a7b876acadc882e286205c4d2250626ab80c97667be0d44530058540f5d27ae1e7e82e93fba3d5eb9120ae1a0ac6b0a283ffaccc0f244b1503e71eebe819d41d27eff8708283375a67b3e7f696a0bfda8edfaabdd041c8f5084f7e669ce2c7b39c92fa6a7aa5732c82a95aa5c79c62fd63d4fbcafdbb99b9f6c41a3b5fce23d9d646e141e9f998233cd8bca248fdad2770f36457d219c9b88dc1f361ee2cce7dcf19fcc61f64c9cf8a69f34c2898d3573cdfe7a65995ea2b36976da8fa58fe503df1d3644250034a8eab0ea803826943dead7e5c6c9b4d91930c484e94d12e31e734d0c1a55ff535914a4960cb5a8569ae91b3a9c92dc7cd0fb7bcffa73b81ab5e0cdfd62df0683550b8535811ae5049b24e8a29754f24dbc4ae8cc7c04517e715f15ef18b3e0a012f0e0c4fc475a8d79b4755d412dd024d3dfda6dffbe53020c24d165c33058feb398954e0e44bcf3603ee89d2ff704d9c54c93cb6851562d6dd502b8e56a1b255b0f629a1c54e7fa95631ef161a4a1c71ca69154f32e023708bfb55a86fc9cba9d2681c35bcee883f6925b0eb032837f8d0b22532", 0x800}, {&(0x7f0000000540)="664efcf9c97d0c858535b0c8b161a3721dde3194e29825cc78d2de8a1db8aabaff46e4f6c7597310df0e2dc3978c7ee24052600eebb9953b908b333c6d16b1cbc1fb9c5b77fa7859590a69f9291aada4b61b8a34ccd064320401dc02e6f87e78e7379003d7f20f5d337c573325777c2fff3d0b2476bb57304bcb9666a8bf100991b1890739dd929561", 0x89}, {&(0x7f0000000600)="0959b385074760289bc6dc38aa6ae8e96729bdab6cc53d82b86c023562f3242fff3667effc1bd56331b7ff16ea86b57c7a34d88eec7bed38b2184515d9a5eeb28cb7ab5368c272d4a8345e71b5795fb6afe5bf1faf2a622f20fc768d7db6845b22e7c4260dcc84cc37328cf8cf1fe612c4b796cd04bf4e4632d8a72b734fbca069f6480415fa10652ec61fea31ec88a67a05fe0087cf26dcdc0f88b54e3d5d1c4101256fe3e3026b6b9119cb00a746fa0470f69ac1cfbc88ee8d6490d686b1fffe88f3ef9e40a53d9c4792b506c3f44870c888ee4b82790468d0c02ad3432ff89bb36cc3be272dae27c87e5fa06c50ed", 0xf0}, {&(0x7f0000001940)="e1ce3b403cba220ae9728bc82501450215c39e6fe0e63ed9337f64dfadbbd034663840efc4a68a36b7632b6b350e0ea2af3d786ab457104abf253ea9bded9ca33a1ad53ddda785abd2bca4e23d03585e93e741418bd7fa2783815fef78d5407386eb46e6cacb7d946e1fcb535ab52785faee6d2acf3f0b8f3f7fb553ce5ebda1c366d1debf72a739de56645885f17221ad03bb6077468835407ccd2ea766dc4157d0275ab56db0be1bb2115796d5bc12fd9c4ed0f6b30a9325a0c4f525f019639cd91637726a33dddd7538f94afcf13c38ad67c6c3ac1f8653efc282e758", 0xde}, {&(0x7f0000001a40)="17ebb78ca5aa143aa6cd7c175c9c8d9c38fdb2ce4db1456d6c09a21df5079ad85e6ece2fe779ab7526332f492bf54f5d9a75a5c7353bb210c4115ffae6db5f98333de85d09c76975ea82c274bc950abd3ab8402e522d8c8789e7cd7b42a7666e7d3c7c71ce346acca27725f9b498ffb6f69d530a8afc1462ef4470497a686a9089b0dc50f8d288c57bcd4b6f8191a8b53fd908b4bb8373d3f1c02cf0e33b4141f233a3e55205c5ac9ede3c34107672be23650ce1d2baca000e29f0f412908b9e0ee56b7fba5e1230a91a43fc03", 0xcd}, {&(0x7f0000000300)="749511c8077c94dcc227ff7ef1f32a97", 0x10}], 0x7, &(0x7f00000007c0)=[@rthdr={{0x24, 0x29, 0x39, {0x0, 0x2, 0x0, 0x0, 0x0, [@remote]}}}, @dstopts={{0x74, 0x29, 0x37, {0x3b, 0xb, '\x00', [@pad1, @calipso={0x7, 0x38, {0x3, 0xc, 0xfd, 0x1ff, [0x5, 0x9, 0x11d46c03, 0x0, 0x9, 0x5]}}, @generic={0x1, 0x20, "26a5c6be2fa2af04b79d962e6d149ff73231ced15058c06dfcc7dc8c5534917e"}]}}}], 0x98}}, {{&(0x7f0000000700)={0xa, 0x4e20, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffffd2}, 0x1c, &(0x7f0000001e40)=[{&(0x7f0000001b40)="780bd0fe29268eb3502fb9429d0fed90890bc906effebbbd10160cc760196a443dc2ca252310692be047f385016630dc60d3efa800c6731c19dc9522457bc74749e42b185de84f6a7ccc0db80f1f6ed5e355fbd1981bf0000dc8817f3b423fe86b7e2e018fca", 0x66}, {&(0x7f0000001bc0)="bdfc826916c62ff37dd5ae78a642481c5516ded5831155e13c312440c2fc5873f481d194c8c7d152c9c81ef8a04eaf056e1af4f544105a0a33c3bea6b11046ea0cffff4be3af6b7fc029b2738e66877e78bc63fddb12ff00c42694a7f49fbcb3655740adcef5a30dfd91cf89e14a3f26593ffb84005683d8dbe20cf6253d85586469288d32444c36eb0f720759e8ce0a823de48435dd1974e34bd7407fca27e35603333c5ece4a9bb3bee1c23a86889a2b8e5175dbf84b9951753ff072c02f79a520ca02185a99966a4f51af0bdd", 0xce}, {&(0x7f0000001cc0)="ae61033de3a2ab953dbb4b77ec6dd0b2db4c18e3ced2d245f88d08a25899e5e5369d41c0fbbecdb5ddc04d666760819e7036be144af4a4eff102f24ff7203509ff3d759db9ac81f843824c57e2775893c7d4023a8ff3289b07313269b2f16a04801fdf7933478cb0dbf8c812e34bb2ef3b3c698a56d86187c79f80cdb08f37dd3696102708cf83", 0x87}, {&(0x7f0000001d80)="22ddeb49f6236fe810fa375dbe0357e4d59ff04db64fb9a33a507a588feb9e61f6de304ba85c33d2fa8874b4898384f7ce6c19967ac489ac14048c135c84c2c4c35765f65791a3a3be89eba54dcc52910e366f825f9db1e2675d8473105ae26190c7f1241fc899a3", 0x68}, {&(0x7f0000001e00)="29196aa2cd005e6e880c05fb55", 0xd}], 0x5, &(0x7f0000001e80)=[@rthdr={{0x64, 0x29, 0x39, {0x67, 0xa, 0x2, 0x2, 0x0, [@dev={0xfe, 0x80, '\x00', 0x11}, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @empty]}}}, @rthdr_2292={{0x74, 0x29, 0x39, {0x3a, 0xc, 0x0, 0x1, 0x0, [@mcast2, @ipv4={'\x00', '\xff\xff', @broadcast}, @private1, @loopback, @empty, @mcast2]}}}, @rthdr_2292={{0xb4, 0x29, 0x39, {0x73, 0x14, 0x0, 0x6, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast2}, @private2, @mcast2, @mcast2, @local, @ipv4={'\x00', '\xff\xff', @loopback}, @local, @private2, @private1={0xfc, 0x1, '\x00', 0x1}]}}}], 0x18c}}, {{&(0x7f0000002040)={0xa, 0x4e21, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f0000003400)=[{&(0x7f00000020c0)="c25029170ae27ee74d412aa8dfb204a379c3d490c36f0bd3853636522adfe36e14f4a07fd089eb6a7361fa85adf323e8b7dd5eb15d019271a1296c42db06187d5ec41da346efe505fc7799f33ee3c7ec752e89879fcd377f720f0cf87f2e2bdcc55d31a94e063f308de4f008215013a424da922343e6e5fa9d84075d391ff1d556ef9dafa57ae9d73fd7ac3f7f389d1d975868e9aac2eff206c1c520f040e85f168b923e874826b0bc2cecbb352e44", 0xaf}, {&(0x7f00000031c0)="24a2f0b81a", 0x5}, {&(0x7f0000003200)="ac1d1cf19d45906f68c1dd6113c7f52a36e28747ec70422e8923892900f97440229182102e6f46b87f006e8853c18884acc070e724f9f802d19051a530358055ddd937e65e1143a87566c2ddf3dab6f3b3aab87e3a736d97c2cca3d85b680f1ac3b8715fdd96dd2e63fc6124dc786fa6f800691fbcfcfd99e1508b7ca5a9290fcaecb7b6305debcb706931e3779f02735dd229736a2f8d067ee123f2ca5e1e2281f5faeb8b832d24afca01e31edae77b51da78d2655a181e2aa4b2b08ba70a", 0xbf}, {&(0x7f0000003300)="55adcad98951b8e8318ea0364004e409b88606d62c4d8fb3b3c900e5352a8f16ffa42348474d7336dd2f4097b40f4dfa3d6699d285e4ebf7c60f5e33e4caf0aec7aeea29045a52a49022230c3a5dc15572b1314dffd5de6f71becd33079356929af34a6b34f7582a5adf14bcfee2eb3a93e238dd017605ac70401d7a7335f19af9624c69100dbbc3c1ba68bdbd0bebc61b7d6d30266216eade6de415f776130bcfae5979c3965c39e8bc426f95ea19f77efc17da1f417b3be587a77bdd07a03c1a70f43e8e", 0xc5}], 0x4, &(0x7f0000003440)=ANY=[@ANYBLOB="0000000029000000390000003b00010900000000fc01000000000000000000000000000100000000000000000000000000000000fe880100000000000000000000000001fe800000000000000000000000000044"]}}], 0x4, 0x4c040) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r6, 0x6) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000100000000000000010000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$unix(0x1, 0x1, 0x0) connect$unix(r8, &(0x7f0000000000)=@file={0x1}, 0x6e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) recvmmsg(r8, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x2020, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) 2.679619044s ago: executing program 7 (id=5898): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098"], 0xfc}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffffffffffffba, &(0x7f0000000080)=[{&(0x7f0000000500)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00b17d10cc40a888a8b96648e582006e9644fb02faf23884372d474d8235b094550aff7f", 0x33fe0}], 0x1}, 0x8000) 2.511924085s ago: executing program 7 (id=5899): dup(0xffffffffffffffff) (async, rerun: 32) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = syz_open_dev$vbi(&(0x7f0000000380), 0x3, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc0f8565c, &(0x7f0000000180)={0x5, 0x9, 0x2, {0x5, @win={{0x7, 0xff, 0xac72, 0xb}, 0x7, 0x3, 0x0, 0x0, 0x0, 0x5}}, 0xc000000}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async, rerun: 32) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) (async, rerun: 32) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000016c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000d71000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000179000/0x2000)=nil) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async, rerun: 64) r3 = io_uring_setup(0x3454, &(0x7f0000000080)) (rerun: 64) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) (async) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000009500000052573abcbbb080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) (async, rerun: 32) r4 = userfaultfd(0x80001) (rerun: 32) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_REGISTER(r4, 0xc020aa07, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) (async) socket$netlink(0x10, 0x3, 0xc) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) (async) mkdir(0x0, 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) 2.360868245s ago: executing program 6 (id=5900): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b9090000000b01000000e8fe55a1180015000600140000000012080004003e000000a80016000a00001c06000200036010fab94dcf5c0461c1a6ced67f6f94007134cf6ee08000a0e408e8d8ef52878516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d95322fe7c9ffeffffff16a4683f1aeb4edbb57a5025ccca9e02360db70100000040fad95667e006dcffff951f215ce3bb9ad809d5e1cace81c639df2d04c343eb7a9db9596bb727ed0bffece0b42a9ecbee5de6ccd4", 0xd8}], 0x1}, 0x20004880) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x84) 2.22219115s ago: executing program 7 (id=5901): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000440)="7f80b99d4a0602185cd3346ac3a2e8ffda89e565ddc960295b12cc2753928474fa08c121198c9706c3de5ec18bb8ad7c6edf396e45d2067308132f39b7d472132cedfcb07b89844307a5403cf82a2954c0c3e9e6ffc2864b213bd232ed2adabddd0cb850047bbeeebba4facd01d3562866af277de8fe2a216b6db99693abcd0b", 0x80, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='reno', 0x4) sendmmsg$inet6(r0, &(0x7f0000000c40)=[{{0x0, 0x300, &(0x7f00000003c0)=[{&(0x7f0000000140)='SK', 0x2}], 0x1}}], 0x1, 0x4000000) 2.20209294s ago: executing program 2 (id=5902): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@gettclass={0xfffffec6, 0x2a, 0x10, 0x70bd26, 0x25dfdc02, {0x0, 0x0, 0x0, 0x0, {0x2, 0xfff2}, {0xffff, 0x2}, {0x1, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4080) r0 = syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) syz_usb_connect$uac1(0x6, 0x71, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011003000000206b1d010140000102030109025f0003019920070904000000010100000a"], 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x38011, r1, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x800}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) r3 = openat$cgroup_root(0xffffff9c, &(0x7f0000001080)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r3, &(0x7f00000010c0)='cgroup.threads\x00', 0x2, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x40, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x10, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x1e, 0x4}, @sack={0x5, 0x16, [0x0, 0x200, 0x6, 0x1, 0xbcd5]}, @md5sig={0x13, 0x12, "7224407c80fe8a3616b4bf3400006cc8"}]}}}}}}}}, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x7e, &(0x7f0000000180)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6c, 0x2, 0x1, 0x7f, 0x10, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "49110bb4"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x81, 0x9, 0x8001, 0x10}, {0x6, 0x24, 0x1a, 0x202, 0x6}, [@network_terminal={0x7, 0x24, 0xa, 0x81, 0x1, 0x5, 0x3}, @obex={0x5, 0x24, 0x15, 0x8001}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x1, 0x4, 0xe0}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x0, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x1, 0xc1, 0x1}}}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x310, 0x1e, 0xe, 0xd, 0x20, 0xf}, 0x5, &(0x7f0000000240)={0x5, 0xf, 0x5}, 0x6, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0xc0a}}, {0x8d, &(0x7f0000000280)=@string={0x8d, 0x3, "a318ab2c57a8ab115a570d00c36a793788393d7a9272298f9b13c5f38e66ec7ad6af092708a78cb156cfd061109de4d9a60267db3e347267d5f351d42538a6a09ca08067da55bdc9c8fc47215dfc66cf06155a17a213a902b35b2a572dd22e8dfe5d5239e3bc067017aa05256d9a6e026432cd7d024deca8e3881f0870ebbaf05f52755a0768c255ac0c86"}}, {0xc7, &(0x7f0000000480)=@string={0xc7, 0x3, "ea714f565a4d8f66b0a9357d155897e2d24353e40bb78002fc9c91b66890c351360e4fd58a79411f37fe0b4f5d86757932ccbdd17b9d963da2ed351c65b3acfd2e4fc164a2e3ba897bf21d8acc92f787f4a95e57f4d4381efab041dc3a5148b4258465e5d20ad40f1df6793cb0116aba5ed36001532e50b81795da8dac56b182629ef98d6dce389087926e605849d9c4da75b135172020750556081f39526456daa10b599574fc0b76273c33c68eb36b8383b816a3db68d3345c349194d0afe6aee272098a"}}, {0x74, &(0x7f0000000580)=@string={0x74, 0x3, "84fbb89ab3b1fcaba29e4392685e5dd335bdeb5643edf0b0a5beecdb1770dd81af62ffc08c491d5ff9db395b1eb42ca0781e5c94554ee50e814917737e20c31f7f9334d41eb22eaa9df7a6c3eea6a81abcb18f02ce6648f0c53ef0edbc664db61e2d84be516590eda3e3d29a36fb8ed03b33"}}, {0x6, &(0x7f00000003c0)=@string={0x6, 0x3, "ec0e613f"}}, {0x3c, &(0x7f0000000600)=@string={0x3c, 0x3, "2d03ad9c4be7ec06e066e4c485a6827d4fdbf4a0dfa1907d851252c068050a46f5367689f64a357286332edbc12f15d7263f39f06bd3d8eda4ca"}}]}) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r4, &(0x7f0000000380)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0x5b, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_usb_connect(0x3, 0xf5, &(0x7f0000000100)=ANY=[@ANYRESOCT=r0], 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) syz_usb_connect(0x5, 0x7da, &(0x7f00000006c0)={{0x12, 0x1, 0x250, 0xee, 0xee, 0x3, 0x40, 0x19d2, 0x1059, 0xe4ce, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7c8, 0x2, 0x3, 0x3, 0x0, 0xf, [{{0x9, 0x4, 0x8c, 0x5, 0x5, 0xff, 0xff, 0xff, 0x5, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x6, 0x5, 0x6e}, [@call_mgmt={0x5, 0x24, 0x1, 0x3, 0x1}, @country_functional={0x10, 0x24, 0x7, 0x5, 0x7, [0x8, 0x5, 0x3, 0x762, 0x4]}, @mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x8c, 0x9}]}, @cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "c1117113"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x2, 0x9, 0xe}, [@acm={0x4, 0x24, 0x2, 0x3}, @country_functional={0xe, 0x24, 0x7, 0x9, 0x1, [0x55, 0x80, 0x1, 0x2800]}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0x3, 0x6, 0x4}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x12, 0x7}, @country_functional={0xc, 0x24, 0x7, 0x1, 0x9, [0x3ff, 0x5, 0x3]}, @obex={0x5, 0x24, 0x15, 0x200}]}], [{{0x9, 0x5, 0x6, 0x0, 0x8, 0xfb, 0x6, 0x8}}, {{0x9, 0x5, 0xc, 0x10, 0x40, 0x8, 0x7, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x3, 0x2}, @generic={0xd, 0x23, "92ec5bd6838f7dd5b011ed"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x400, 0x9, 0x3, 0x81, [@generic={0x1b, 0x23, "f0e91b488c41ab65980f2959fbfa8a8045069019e227498d84"}, @generic={0xfb, 0xa, "8e9a284cca9cbf2df6ac244951e80f2dfdc43350013e519431dd2102c8da63f4e33ea6c35de54cd313a55f23fbb7b0a99f5c3b2119117b34429d129dccea59507e652d691845cd5d3da4a5fe2a6197d3fde3db8ca23798fe6c861ea87493d5c2027563d9e05714207934f9023dda9ae8b878217dc5c745ceba82c65a5d3d7ed7217fdb1bcecaa160393d14f0cd422d5aaa22ef09b61543652cb0972bfa150681116fd4839b61b1ef09ff63e6c7938d57740bd92fd23ef78f70e711271ce7047a1ace49958af7bbb424680b52596299cf8e562bcc3b40e31b184c7842b81f139d7c09f3e139120fb2ab1dc9a9a62db3a7907fda69f409215af5"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0xe, 0x6, 0x4, [@generic={0xfa, 0x10, "c32839487756386c4750251e94d22179a0e4eb9198a54f18d6864466d1c97140ec140e06996d0fe196f23ea34818d9c1a56f77300e51f842f008c1e70f5d66f2fa916bcd9f606a432e2d416d78e29da13d9716034be1faa1234c8f7a4b2bc8dbbf95a4d1eb33f1975879a1088a9a85e7b7669b870925c719d3d1f0a4f28f65c22c76e7e463083727446248e6c7cfb41456b7f20e4a7c4dc865ee5ee39b1f9559f89043958e37e040222b9d72ed07efa39a6ea7d85a11014d932d118e0530d195b95b55647238797e4bc279f336d915fa5ed1bf7fb779710d8d1d7d987b1471fa14d56033323f77d9a84561940e80e02f783897c4531c4cb3"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x3ff, 0x0, 0x0, 0x6, [@generic={0xa, 0xd, "00ce22c1bab3a0c1"}, @generic={0xb, 0xe, "3b1f54902ac56ccb6d"}]}}]}}, {{0x9, 0x4, 0x98, 0xa, 0xd, 0x3b, 0x78, 0xcb, 0x8, [@uac_control={{0xa, 0x24, 0x1, 0x6, 0x6}, [@processing_unit={0xd, 0x24, 0x7, 0x3, 0x6, 0x6, "a08bfa41f2a4"}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x100, 0x1, 0x2, 0x0, 0x5d, 0x42}, @feature_unit={0x11, 0x24, 0x6, 0x1, 0x4, 0x5, [0x1, 0x2, 0x7, 0xa, 0x1], 0xcc}, @processing_unit={0x9, 0x24, 0x7, 0x4, 0x3, 0x1, "9fd8"}, @feature_unit={0xd, 0x24, 0x6, 0x3, 0x1, 0x3, [0x2, 0x6, 0x8], 0xff}, @selector_unit={0x7, 0x24, 0x5, 0x1, 0x1, "b2b2"}]}], [{{0x9, 0x5, 0x5, 0x0, 0x40, 0x0, 0x0, 0x9}}, {{0x9, 0x5, 0x9, 0x10, 0x3ff, 0x2, 0x9, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x4e, 0x8}, @generic={0xbe, 0x7, "55466c13864a6732249f910b7adecbd5f06d92eb3bd9a177d8b03d08ecfde777f6fc7f5ddcc14942c56be5787fe820883e8baf8988208f91e9453281c208a049d9970a87b6c0be2fc6d67f507a7aaff45a03e171e168d8646530ff470d20a97083f27a9b19b27c9f4fef1f4f00a108d980da31dc4d15c0cb1908be898691db75ef7659e25bc703749d4e3c5462fbcd23a8a62d39f3cad137ba0c1f4c9075b513c2d96ac3426bbf550dc395ea4503bdbe108261d31c7bf0441ec62f1f"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x20, 0x5, 0x8, 0x80, [@generic={0x5f, 0x31, "79a4942a15bef2d9c12737d87b0b7fbbcb78aa00bc7b347c16242751a36689af1511510eb20f9f2bd2467ea2a5bff889c96010f90cd5301e3bde05d122cfb6fe1f661b32feb6a833b60e8b00743310747e9afa95a528e0e04f0cfb08a9"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x400, 0x4, 0x1, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0xd, 0x8}]}}, {{0x9, 0x5, 0x4, 0x10, 0x10, 0x0, 0x0, 0x0, [@generic={0x99, 0xd, "6e0e08773bb7a45ab188ad42f065037a91088a2aa301ac0431f0cb80095eb34884842470a766f20581b18b163d4663f647f2bf0d88ea13195b04e6901215799341cef5c43c272c3ba58b55c4e9ae263b8a0d5bb60d20575be00bccc496eb06f2f57956f8936bd42b71f19b2ca8be934faa0309eb7353db4a828490654ff8bdb44b12694b61ec41b47c4e42d6232903d6560eb71e2fee22"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x608, 0xff, 0x1, 0x5, [@generic={0x69, 0x6, "0272fefee7ce2a10c1d2a0f1e18fa248ebc5da5fa189accb28ee5ba54149b708cf789b1ee524d064a81caeaa6845eaa9ff45b3cfe6fe6af2008313546a21fa0078cc91f0060b5311e3bc06f0166ccf4bf8890a8fef8fbe74fa7e53022ef57a1e00c76aa0413119"}, @generic={0x24, 0xe, "151006dda38a2fa604a85f887f92ec91b24eeaaf2eb2e3f99b8fbd8a2a9c47a0ffd2"}]}}, {{0x9, 0x5, 0x1, 0xc, 0x40, 0x6, 0x2, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x182}, @generic={0x27, 0xd, "873c734a2c945894bbe6e375422f530d5c34daa567752b2594acb3c125a6f2a5a637b15cd8"}]}}, {{0x9, 0x5, 0xb, 0x3, 0x400, 0x5f, 0x9, 0xc0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x92, 0x7}]}}, {{0x9, 0x5, 0x3, 0x8, 0x40, 0x3, 0x80, 0x5, [@generic={0x11, 0x3, "d74275294c7d0701751162a49423f3"}]}}, {{0x9, 0x5, 0x1, 0xc, 0x40, 0x4, 0x5, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0xd76a}, @generic={0x54, 0xa, "1b675211701b845640f137e618a58505dc0ed9973b7140d5a48923b4e4bb8e5c84a6cb696ec9786a34ccfd85c5d7320704aac178247f3613bfcfe5dd54be54b3ad64e5593c17270b91e67e2ea3a6e8a6b65e"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x3ff, 0xd, 0x6, 0x54, [@generic={0x61, 0x22, "91817c6ad73db400d0bc8a848bf741c6a91ac985fd5c2b86400514c70a378c59884058c6912d4cc9f75a7d097c15159031df38ee03bafa84f5b30dbce70447c93e5e96a4befc287ff3c57d9fad4890a48f41274079bdeb05c318034cb07e71"}]}}, {{0x9, 0x5, 0x622ea0c7c03a9fa, 0x3, 0x200, 0xd1, 0x6, 0x1, [@generic={0xa0, 0x24, "2ff58a6a4926584063165cc542c1b339671a7c105db670308a242d945b6b56f21fdf74dffb6f7ca832833c644e7aed36f5b5199d7b5c64cf5bbb0ff0737aa7037cbd5d75c71a8658ec92b787580a7aa997ba7a9c1026826a7639a08f28f299bd86919406879d77e76ebfd328be01d15885b8005ea00641a844c6ed9c30fc7a2b64dd360516195ee4373c9682cdf4c6976b9649bcb79fffc7bb4b4e23def4"}]}}, {{0x9, 0x5, 0x1, 0x4, 0x10, 0xfd, 0x3, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x2}]}}]}}]}}]}}, &(0x7f0000001040)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x250, 0xda, 0x7f, 0x7, 0x20, 0xfc}, 0x19, &(0x7f0000000ec0)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "c4187d5d2b46fa894d153a4fb3af26a4"}]}, 0x2, [{0x19, &(0x7f0000000f00)=@string={0x19, 0x3, "c55eec10e196541fed73f2aba67cf5ac2b24169a693e91"}}, {0xea, &(0x7f0000000f40)=@string={0xea, 0x3, "cc47c049e8958e79461e41b113835817f40f94831e61afa684c17371cdba07d5fff25118ba518fdf269504017354c203d4dc2c269b9c537a618542a79cc2f48179c8d4d23f2e0a9e20a334a73ca4895d6c18d6e943c18bfaeb357b59acf0a8ad70c749857df65ff237c99552a4ba37ab3363e47f015eb908195a73f2524ccdf0d8305464e40f2d41aeba9025886f1312d9aa232e9f1a6589034a2df75a1fc4af48e71bbc1222b49808cc11cc8794c148408d93a3b1be730174e7cff787b5a22f87575ce5d19d8e996347a759c0564ed98ad47e1606ba485a1d69c909b0883db7ddfafdd98f8a2edd"}}]}) r6 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r5, &(0x7f0000000000)={0x2c, 0xa, 0x0, 0x28, r6}, 0x10) 2.087810012s ago: executing program 6 (id=5903): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f00000000c0)=""/133) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000000)=0x5, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xa2732}], 0x1}, 0x0) 2.06630894s ago: executing program 7 (id=5904): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x541b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_open_dev$sg(&(0x7f0000000080), 0xffff0000, 0x40) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) io_uring_enter(0xffffffffffffffff, 0xeb6, 0x26f7, 0x1c, &(0x7f0000000100)={[0x1]}, 0x8) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffff9c, 0x0, 0x40000, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) sendmsg$NL80211_CMD_AUTHENTICATE(r3, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r4, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @random="766a78056ecf"}]}, 0x2c}, 0x1, 0x0, 0x0, 0x60000080}, 0x4000005) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1750bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2"], &(0x7f0000000100)='GPL\x00'}, 0x94) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x8000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/stat\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002f00)={0x2020}, 0x2020) getdents64(r5, &(0x7f0000001f00)=""/4093, 0xffd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'netdevsim0\x00'}) 1.751930719s ago: executing program 6 (id=5905): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x541b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_open_dev$sg(&(0x7f0000000080), 0xffff0000, 0x40) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) io_uring_enter(0xffffffffffffffff, 0xeb6, 0x26f7, 0x1c, &(0x7f0000000100)={[0x1]}, 0x8) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffff9c, 0x0, 0x40000, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) sendmsg$NL80211_CMD_AUTHENTICATE(r3, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r4, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @random="766a78056ecf"}]}, 0x2c}, 0x1, 0x0, 0x0, 0x60000080}, 0x4000005) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1750bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2"], &(0x7f0000000100)='GPL\x00'}, 0x94) r5 = openat(0xffffffffffffff9c, 0x0, 0x8000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/stat\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002f00)={0x2020}, 0x2020) getdents64(r5, &(0x7f0000001f00)=""/4093, 0xffd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'netdevsim0\x00'}) 1.351328353s ago: executing program 1 (id=5906): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x9b80696e07a3fc3a, &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b702000000", @ANYRESOCT], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x1200, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 1.146263056s ago: executing program 2 (id=5907): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x2, 0x6, 0x6c0, 0x50c, 0x11c, 0x1f4, 0x11c, 0x50c, 0x5f8, 0x5f8, 0x5f8, 0x5f8, 0x5f8, 0x6, 0x0, {[{{@uncond, 0x0, 0xec, 0x11c, 0x3fa, {0x7a00000010000000}, [@inet=@rpfilter={{0x24}, {0x8}}, @inet=@rpfilter={{0x24}, {0x3}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0x2}, {0x0, 0x3}, 0xaf3f, 0xdee7}}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @dev, [], [0xff], 'caif0\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x6, 0x6f}, 0x0, 0xa4, 0xd8}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{0x0, 0xff}, {0x3, 0xff}, {0x0, 0x0, 0x3}, 0x300}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0xff0000ff, 0xff000000, 0xff000000], [0x0, 0xff000000, 0xff000000], 'dummy0\x00', 'bond_slave_0\x00', {0xff}}, 0x0, 0xa4, 0xe8, 0x48000000}, @DNPT={0x44, 'DNPT\x00', 0x0, {@ipv4=@rand_addr=0x64010102, @ipv4=@empty, 0x3c, 0xd, 0x6856}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @empty, [0xff000000, 0xff000000, 0xff000000, 0xffffff00], [0xffffff00, 0x0, 0xff000000, 0xffffff00], 'ip6_vti0\x00', 'pimreg1\x00', {}, {0xff}, 0x67, 0x6, 0x0, 0x5}, 0x0, 0x20c, 0x230, 0x0, {}, [@common=@inet=@dccp={{0x30}, {[0x4e23, 0x4e20], [0x4e22, 0x4e21], 0x1, 0x2, 0x5, 0x81}}, @common=@rt={{0x138}, {0x4, [0x6, 0x4], 0x1, 0x20, 0x7, [@ipv4={'\x00', '\xff\xff', @loopback}, @private1, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @broadcast}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback], 0xc}}]}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0xc8, 0xec, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x8}}]}, @inet=@DSCP={0x24, 'DSCP\x00', 0x0, {0xd}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x71c) 1.030764131s ago: executing program 1 (id=5908): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r2, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000002140)={0x50, 0x0, r3, {0x7, 0x27, 0x0, 0x14a4014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x50) read$FUSE(r2, &(0x7f0000006c40)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r2, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r5}, 0x10) syz_fuse_handle_req(r2, &(0x7f000000b040)="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", 0x2000, &(0x7f0000004e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002600)={0x90, 0xffffffffffffffda, 0x2, {0x6, 0x0, 0x9, 0x4, 0x0, 0x9, {0x3, 0x2, 0x3, 0x5, 0x80000001, 0xfffffffffffffff8, 0x9, 0x1, 0x1, 0x6000, 0xf78, 0xee00, r4, 0x1890, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r4) r6 = dup3(r1, r0, 0x80000) io_setup(0x1, &(0x7f0000002500)=0x0) io_submit(r7, 0x0, &(0x7f0000002680)) sendto$inet(r6, &(0x7f0000000340)='.', 0x1, 0x12, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r6, 0xc00c5512, &(0x7f0000000000)) 415.329766ms ago: executing program 2 (id=5909): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000104fcfffffffcdbdf2500000900", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x24000000) 394.239648ms ago: executing program 7 (id=5910): r0 = syz_open_dev$loop(&(0x7f0000000040), 0x400000c, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) setsockopt$packet_int(r1, 0x107, 0xc, &(0x7f0000000100)=0x40049, 0x4) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/address_bits', 0x40000, 0xf) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000f80)={r2, 0x0, {0x0, 0x0, 0x0, 0x3, 0x4000000000000ffd, 0x0, 0x0, 0xd, 0x4, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0xe]}}) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000080), 0x3) readv(r0, &(0x7f0000000300)=[{&(0x7f0000001600)=""/4111, 0x100f}], 0x1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) epoll_create1(0x80000) r4 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0xe126, 0x8, 0x0, 0x272}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000000)={{0x1, 0x4000, 0xe, 0x0, 0x81, 0x4, 0xd, 0x4e, 0x0, 0x7, 0x6, 0x1}, {0x5000, 0x7000, 0x3, 0x5, 0x2, 0x8, 0x5, 0x7, 0x0, 0x81, 0x8, 0x1}, {0x5000, 0x0, 0x0, 0x7, 0x2, 0x1, 0x7, 0xf, 0x8, 0x6, 0x2}, {0xffff1000, 0xdddd1000, 0xe, 0x2, 0x1, 0x3, 0xc, 0x0, 0x1, 0x6, 0x4, 0x9}, {0x100002, 0xeeee8000, 0x9, 0xc, 0x80, 0xee, 0x0, 0x7, 0x7c, 0x0, 0xe, 0x9}, {0x3000, 0x4, 0x8, 0x1, 0x5, 0xf3, 0x1, 0x1, 0x6, 0x86, 0xb, 0x2}, {0xeeee8000, 0xeeee0000, 0x3, 0x7, 0x7, 0x3, 0x1d, 0x47, 0x30, 0x2, 0x8, 0xe1}, {0xf000, 0x2, 0xc, 0xf8, 0xfd, 0xa, 0x2, 0x4, 0x3, 0x8, 0x2, 0x8e}, {0x4, 0x7}, {0x6000, 0x5}, 0x80000035, 0x0, 0x0, 0x40, 0x7, 0x1000, 0xeeef0000, [0x5, 0x108001, 0x80]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000000080), 0x10) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r7, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @private2, 0x100}, 0x1c) shutdown(r7, 0x1) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x10, 0x1}) io_uring_enter(r4, 0x627, 0x4c1, 0x43, 0x0, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r9, 0x0, 0x0) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272) write$binfmt_aout(r3, &(0x7f00000003c0)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000040)={0x0, 0x7, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) r10 = syz_open_dev$vim2m(&(0x7f0000000040), 0x40003, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r10, 0xc0405602, &(0x7f0000000000)={0x18, 0x1, 0x0, "6906007722366ccee4ba568eb4f80102f5372f2c74f6024305f11fd3454ad23d", 0x3436324d}) syz_open_pts(r3, 0x0) 349.954214ms ago: executing program 3 (id=5911): syz_emit_ethernet(0x8d, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0) socket$unix(0x1, 0x5, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x800) sendmsg$can_bcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0xc8}, 0x2}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f00000000c0)=0x7, 0x3) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r2, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) bind$alg(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) 293.88065ms ago: executing program 1 (id=5912): r0 = syz_open_procfs(0x0, &(0x7f0000000340)='mountinfo\x00') syz_io_uring_setup(0xc97, &(0x7f0000000700)={0x0, 0x6015, 0x800, 0xff7fffff, 0x11c}, &(0x7f00000003c0), &(0x7f0000000140)) (async) r1 = syz_io_uring_setup(0xc97, &(0x7f0000000700)={0x0, 0x6015, 0x800, 0xff7fffff, 0x11c}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x1, 0x38775951944642b9, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0xf}}, 0x50) (async) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x1, 0x38775951944642b9, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0xf}}, 0x50) r8 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x24c01, 0x0) write$FUSE_ENTRY(r8, &(0x7f0000000340)={0x90, 0x0, r5, {0x2, 0x0, 0xa, 0x5, 0x800, 0x4, {0x2, 0x6, 0x27, 0x5, 0x4, 0x4, 0x1, 0x7fffffff, 0xf5, 0x8000, 0x9, r6, r7, 0x6, 0x3e}}}, 0x90) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r9, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r9, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x3fffffffffffe, {0x0, 0x200000000, 0x1, 0x4, 0x6, 0x0, {0x0, 0x10001, 0x200000000000, 0xd, 0x0, 0x100, 0x10000, 0x2, 0x80000000, 0x0, 0xd, r10, 0x0, 0x7, 0xa0}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r11 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r11, &(0x7f00000031c0)={0x2020}, 0x2020) (async) read$FUSE(r11, &(0x7f00000031c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_STATX(r11, &(0x7f00000002c0)={0x130, 0x0, r12, {0x4000000000007, 0xc, 0x0, '\x00', {0x6, 0x80000000, 0xf, 0x0, 0xffffffffffffffff, r13, 0xa000, '\x00', 0x3, 0x8004, 0xd60b, 0x8000000000000001, {0x200b, 0xfffffff0}, {0x203d7f, 0x2, 0xc000000}, {0x40c, 0x9}, {0xfffffffffffffffd, 0xdb23}, 0xffffffff, 0x5, 0x200, 0x8000}}}, 0x130) (async) write$FUSE_STATX(r11, &(0x7f00000002c0)={0x130, 0x0, r12, {0x4000000000007, 0xc, 0x0, '\x00', {0x6, 0x80000000, 0xf, 0x0, 0xffffffffffffffff, r13, 0xa000, '\x00', 0x3, 0x8004, 0xd60b, 0x8000000000000001, {0x200b, 0xfffffff0}, {0x203d7f, 0x2, 0xc000000}, {0x40c, 0x9}, {0xfffffffffffffffd, 0xdb23}, 0xffffffff, 0x5, 0x200, 0x8000}}}, 0x130) write$FUSE_ATTR(r0, &(0x7f0000000000)={0x78, 0xfffffffffffffffe, r5, {0x1, 0x1, 0x0, {0x0, 0x80, 0x4, 0x200, 0x4, 0x7f98, 0xffffffff, 0x3, 0x7, 0xf000, 0x0, r10, r13, 0x800, 0x6}}}, 0x78) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x4000, @fd_index=0x3, 0x5, 0x0, 0x0, 0x4}) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x11079, 0x2b}, [@IFLA_ADDRESS={0xa}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x40000) (async) sendmsg$nl_route(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x11079, 0x2b}, [@IFLA_ADDRESS={0xa}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x40000) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) 292.014558ms ago: executing program 6 (id=5913): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = io_uring_setup(0x594c, &(0x7f00000000c0)={0x0, 0x11c6, 0x200, 0x2, 0x177}) syz_io_uring_setup(0x6dae, &(0x7f00000001c0)={0x0, 0x85ef, 0x4000, 0x1, 0x26a, 0x0, r1}, &(0x7f0000000140), &(0x7f0000000240)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000180)=0xc, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x800, 0x0, 0x54}, 0x9c) 119.708735ms ago: executing program 7 (id=5914): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xf8, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0xfffffffffffffffd, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x1}, {0x0, 0x4000000000000000, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x4}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, 0x0, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}, 0xf000000}], 0x300, 0xf00) syz_usb_connect(0x2, 0x36, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) pipe2(0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0}, 0x40000c1) socket(0x10, 0x3, 0x0) 119.42431ms ago: executing program 2 (id=5915): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r2, 0x84, 0xd, &(0x7f0000003140)=""/4111, &(0x7f0000000080)=0x100f) r3 = getpid() fcntl$setownex(r1, 0xf, &(0x7f0000000240)={0x2, r3}) fcntl$notify(r1, 0x402, 0x80000027) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000000480)={'sit0\x00', &(0x7f0000000440)={@dev={0xac, 0x14, 0x14, 0x1c}, 0x1, 0x0, 0x30, 0x0, [{@private}, {@private}, {@remote}]}}) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180000002345f3870000000005000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x33, &(0x7f0000000000)=0x7, 0x4) getsockopt$inet6_buf(r7, 0x29, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000080)=0x13) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$inet(r5, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x4008) sendmsg(r5, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x8000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0xa1, 0xffffffffffffffa5, &(0x7f0000000180)="e30080670000ece7838717bd86dde148f0630962bb87dd44fe42904bcee14db4241544716b9ea42231ed3373a3e29953e3bb017d9c1fd05dacf5bb80b4b7ee0fae7aea53492b38978defbb39a1ffa8a175e8257c3c5386795f7aaa2b182cc4c3705dc9f253d21fba2eace93b558c750cfba810dc7a19dbb15a5a39c850a7541d5e2765acdedc133065149a3bb724ba84b3305aaecab5141901b2fe9df9b7000100", 0x0, 0xa4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xc}, 0x4c) r8 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x40) ioctl$FIBMAP(r8, 0x1, &(0x7f0000000040)=0x85) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r9, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000280)=r9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x2404c8d2}, 0x0) 0s ago: executing program 1 (id=5916): unshare(0x20040400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000001680)=ANY=[@ANYBLOB="18020000000000000000000000000000400000000000000095"], &(0x7f0000001600)='GPL\x00', 0x4, 0x98, &(0x7f00000001c0)=""/152, 0x41000, 0x44}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f000000f980)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=[@cred={{0x18, 0x1, 0x2, {0xffffffffffffffff}}}], 0x18, 0x40}}], 0x2, 0x4040010) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x0, 0x0, 0x0, 0x3, 0xd9, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x180, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5414, &(0x7f0000000000)) kernel console output (not intermixed with test programs): an invalid bInterval 0, changing to 7 [ 967.349855][T20574] iowarrior 10-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 967.360836][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 967.384613][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 967.397914][ T24] usb 4-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 967.407439][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 967.416441][T24586] FAULT_INJECTION: forcing a failure. [ 967.416441][T24586] name failslab, interval 1, probability 0, space 0, times 0 [ 967.423232][ T24] usb 4-1: config 0 descriptor?? [ 967.430420][T24586] CPU: 0 UID: 0 PID: 24586 Comm: syz.1.5454 Tainted: G L syzkaller #0 PREEMPT(full) [ 967.430447][T24586] Tainted: [L]=SOFTLOCKUP [ 967.430455][T24586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 967.430466][T24586] Call Trace: [ 967.430474][T24586] [ 967.430482][T24586] dump_stack_lvl+0xe8/0x150 [ 967.430513][T24586] should_fail_ex+0x412/0x560 [ 967.430538][T24586] should_failslab+0xa8/0x100 [ 967.430569][T24586] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 967.430600][T24586] ? __alloc_skb+0x1d0/0x7d0 [ 967.430622][T24586] ? __local_bh_enable_ip+0xd0/0x130 [ 967.430649][T24586] __alloc_skb+0x1d0/0x7d0 [ 967.430676][T24586] rtmsg_ifinfo_build_skb+0x84/0x260 [ 967.430703][T24586] rtmsg_ifinfo+0x8c/0x1a0 [ 967.430728][T24586] netif_state_change+0x297/0x3a0 [ 967.430748][T24586] ? __kasan_slab_free+0x5c/0x80 [ 967.430768][T24586] ? kfree+0x1c1/0x630 [ 967.430791][T24586] ? call_usermodehelper_exec+0x2ea/0x4b0 [ 967.430815][T24586] ? __pfx_netif_state_change+0x10/0x10 [ 967.430834][T24586] ? netlink_unicast+0x80f/0x9b0 [ 967.430858][T24586] ? netif_change_flags+0xe8/0x1a0 [ 967.430888][T24586] do_setlink+0xbf6/0x4590 [ 967.430925][T24586] ? __pfx_do_setlink+0x10/0x10 [ 967.430950][T24586] ? __lock_acquire+0x6b5/0x2cf0 [ 967.430984][T24586] ? do_raw_spin_lock+0x12b/0x2f0 [ 967.431006][T24586] ? __asan_memset+0x22/0x50 [ 967.431032][T24586] ? br_switchdev_set_port_flag+0x1d8/0x3b0 [ 967.431058][T24586] ? __pfx_br_switchdev_set_port_flag+0x10/0x10 [ 967.431084][T24586] ? __lock_acquire+0x6b5/0x2cf0 [ 967.431111][T24586] ? __mutex_lock+0x319/0x1300 [ 967.431129][T24586] ? __pfx___nla_validate_parse+0x10/0x10 [ 967.431153][T24586] ? br_port_flags_change+0x19f/0x1f0 [ 967.431178][T24586] ? br_setport+0x1294/0x1680 [ 967.431212][T24586] ? br_port_slave_changelink+0x139/0x150 [ 967.431241][T24586] ? __local_bh_enable_ip+0xd0/0x130 [ 967.431263][T24586] ? lockdep_hardirqs_on+0x7a/0x110 [ 967.431289][T24586] ? __local_bh_enable_ip+0xd0/0x130 [ 967.431312][T24586] ? br_port_slave_changelink+0x139/0x150 [ 967.431342][T24586] rtnl_newlink+0x15a9/0x1be0 [ 967.431369][T24586] ? rtnl_newlink+0x8c1/0x1be0 [ 967.431394][T24586] ? __pfx_rtnl_newlink+0x10/0x10 [ 967.431413][T24586] ? do_fast_syscall_32+0x33/0x70 [ 967.431460][T24586] ? kasan_quarantine_put+0xbb/0x1f0 [ 967.431478][T24586] ? lockdep_hardirqs_on+0x7a/0x110 [ 967.431508][T24586] ? kmem_cache_free+0x187/0x630 [ 967.431526][T24586] ? nlmon_xmit+0xb0/0x100 [ 967.431565][T24586] ? __lock_acquire+0x6b5/0x2cf0 [ 967.431592][T24586] ? __local_bh_enable_ip+0xd0/0x130 [ 967.431614][T24586] ? lockdep_hardirqs_on+0x7a/0x110 [ 967.431639][T24586] ? __dev_queue_xmit+0x274/0x38a0 [ 967.431664][T24586] ? __local_bh_enable_ip+0xd0/0x130 [ 967.431685][T24586] ? __dev_queue_xmit+0x274/0x38a0 [ 967.431733][T24586] ? __pfx_rtnl_newlink+0x10/0x10 [ 967.431754][T24586] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 967.431780][T24586] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 967.431802][T24586] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 967.431822][T24586] ? ref_tracker_free+0x693/0x840 [ 967.431842][T24586] ? __copy_skb_header+0xa3/0x4a0 [ 967.431868][T24586] ? __pfx_ref_tracker_free+0x10/0x10 [ 967.431899][T24586] netlink_rcv_skb+0x232/0x4b0 [ 967.431922][T24586] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 967.431945][T24586] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 967.431976][T24586] ? netlink_deliver_tap+0x2e/0x1b0 [ 967.432004][T24586] netlink_unicast+0x80f/0x9b0 [ 967.432030][T24586] ? __pfx_netlink_unicast+0x10/0x10 [ 967.432051][T24586] ? netlink_sendmsg+0x650/0xb40 [ 967.432071][T24586] ? skb_put+0x11b/0x210 [ 967.432097][T24586] netlink_sendmsg+0x813/0xb40 [ 967.432126][T24586] ? __pfx_netlink_sendmsg+0x10/0x10 [ 967.432151][T24586] ? aa_sock_msg_perm+0xf1/0x1b0 [ 967.432179][T24586] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 967.432200][T24586] ? __pfx_netlink_sendmsg+0x10/0x10 [ 967.432220][T24586] ____sys_sendmsg+0xa68/0xad0 [ 967.432254][T24586] ? __pfx_____sys_sendmsg+0x10/0x10 [ 967.432283][T24586] ? kstrtoull+0x12f/0x1d0 [ 967.432310][T24586] ___sys_sendmsg+0x2a5/0x360 [ 967.432339][T24586] ? __pfx____sys_sendmsg+0x10/0x10 [ 967.432367][T24586] ? get_pid_task+0x20/0x1f0 [ 967.432383][T24586] ? get_pid_task+0x20/0x1f0 [ 967.432399][T24586] ? get_pid_task+0x20/0x1f0 [ 967.432438][T24586] ? __fget_files+0x2a/0x420 [ 967.432469][T24586] ? __fget_files+0x3a0/0x420 [ 967.432502][T24586] __sys_sendmsg+0x183/0x260 [ 967.432529][T24586] ? __pfx___sys_sendmsg+0x10/0x10 [ 967.432581][T24586] __do_fast_syscall_32+0x20d/0x640 [ 967.432601][T24586] ? do_fast_syscall_32+0x33/0x70 [ 967.432617][T24586] ? asm_int80_emulation+0x1a/0x20 [ 967.432634][T24586] ? do_int80_emulation+0x274/0x4d0 [ 967.432650][T24586] ? trace_irq_disable+0x3b/0x150 [ 967.432679][T24586] do_fast_syscall_32+0x33/0x70 [ 967.432697][T24586] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 967.432719][T24586] RIP: 0023:0xf703ef6c [ 967.432736][T24586] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad [ 967.432752][T24586] RSP: 002b:00000000f542d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 967.432772][T24586] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 967.432785][T24586] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 967.432797][T24586] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 967.432808][T24586] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 967.432819][T24586] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 967.432844][T24586] [ 967.662008][T24551] iowarrior 10-1:0.1: Error -90 while submitting URB [ 967.780388][T24593] tipc: Enabling of bearer rejected, failed to enable media [ 968.007941][ T24] input: HID 0458:5013 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5013.001B/input/input47 [ 968.121287][ T24] input: HID 0458:5013 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5013.001B/input/input48 [ 968.191233][ T24] kye 0003:0458:5013.001B: input,hiddev1,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.3-1/input0 [ 968.260614][T13981] usb 4-1: USB disconnect, device number 60 [ 968.516557][T24646] syz.1.5457 (24646): drop_caches: 2 [ 968.539922][T24625] fido_id[24625]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 968.579594][T24646] netlink: 136 bytes leftover after parsing attributes in process `syz.1.5457'. [ 969.986928][T13981] usb 10-1: USB disconnect, device number 70 [ 970.210497][T24688] syz.7.5462 (24688): drop_caches: 2 [ 970.219675][T24688] netlink: 136 bytes leftover after parsing attributes in process `syz.7.5462'. [ 970.522722][ T24] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 970.695557][ T24] usb 4-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 970.704768][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 970.723277][ T24] usb 4-1: config 0 descriptor?? [ 970.747326][ T24] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input49 [ 970.793836][T13981] usb 10-1: new high-speed USB device number 71 using dummy_hcd [ 970.952727][T13981] usb 10-1: Using ep0 maxpacket: 32 [ 970.989248][T13981] usb 10-1: config 0 has an invalid interface number: 67 but max is 0 [ 971.003349][T13981] usb 10-1: config 0 has no interface number 0 [ 971.042903][T24725] random: crng reseeded on system resumption [ 971.121176][T13981] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 971.140715][T13981] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.153564][T13981] usb 10-1: Product: syz [ 971.157817][T13981] usb 10-1: Manufacturer: syz [ 971.162472][T13981] usb 10-1: SerialNumber: syz [ 971.213429][T13981] usb 10-1: config 0 descriptor?? [ 971.577391][T24732] bridge0: Device is already in use. [ 972.400945][T13981] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 972.430255][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 972.430273][ T29] audit: type=1800 audit(1772019310.536:2648): pid=24699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.5464" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 972.460519][T24697] delete_channel: no stack [ 972.471042][T13981] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 972.554358][T13981] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 972.587387][T13981] smsc95xx 10-1:0.67: probe with driver smsc95xx failed with error -71 [ 972.607269][T13981] usb 10-1: USB disconnect, device number 71 [ 972.919755][T24747] Cannot find del_set index 3 as target [ 972.987878][ T24] usb 4-1: USB disconnect, device number 61 [ 974.518829][T24789] ip6t_REJECT: ECHOREPLY is not supported [ 975.053164][ T24] usb 10-1: new high-speed USB device number 72 using dummy_hcd [ 975.571297][T24816] syz.1.5482 (24816): drop_caches: 2 [ 975.582749][ T24] usb 10-1: Using ep0 maxpacket: 8 [ 975.600232][ T24] usb 10-1: New USB device found, idVendor=0545, idProduct=800c, bcdDevice= 3.0a [ 975.612709][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 975.621846][ T24] usb 10-1: Product: syz [ 975.630194][ T24] usb 10-1: Manufacturer: syz [ 975.634931][ T24] usb 10-1: SerialNumber: syz [ 975.650979][T24816] netlink: 136 bytes leftover after parsing attributes in process `syz.1.5482'. [ 975.678079][ T24] usb 10-1: config 0 descriptor?? [ 975.685372][T24814] syz.7.5481 (24814): drop_caches: 2 [ 975.710742][ T24] gspca_main: xirlink-cit-2.14.0 probing 0545:800c [ 975.745782][ T24] input: xirlink-cit as /devices/platform/dummy_hcd.9/usb10/10-1/input/input50 [ 976.799753][T24842] FAULT_INJECTION: forcing a failure. [ 976.799753][T24842] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 976.865400][T24842] CPU: 1 UID: 0 PID: 24842 Comm: syz.7.5485 Tainted: G L syzkaller #0 PREEMPT(full) [ 976.865421][T24842] Tainted: [L]=SOFTLOCKUP [ 976.865425][T24842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 976.865431][T24842] Call Trace: [ 976.865437][T24842] [ 976.865442][T24842] dump_stack_lvl+0xe8/0x150 [ 976.865461][T24842] should_fail_ex+0x412/0x560 [ 976.865476][T24842] _copy_from_user+0x2d/0xb0 [ 976.865492][T24842] __sys_bpf+0x229/0x950 [ 976.865509][T24842] ? __pfx___sys_bpf+0x10/0x10 [ 976.865531][T24842] ? fput+0xa0/0xd0 [ 976.865545][T24842] ? ksys_write+0x242/0x270 [ 976.865559][T24842] __ia32_sys_bpf+0x7c/0x90 [ 976.865573][T24842] __do_fast_syscall_32+0x20d/0x640 [ 976.865585][T24842] ? do_fast_syscall_32+0x33/0x70 [ 976.865601][T24842] ? asm_int80_emulation+0x1a/0x20 [ 976.865611][T24842] ? do_int80_emulation+0x274/0x4d0 [ 976.865620][T24842] ? trace_irq_disable+0x3b/0x150 [ 976.865637][T24842] do_fast_syscall_32+0x33/0x70 [ 976.865647][T24842] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 976.865659][T24842] RIP: 0023:0xf7fd6f6c [ 976.865670][T24842] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad [ 976.865679][T24842] RSP: 002b:00000000f549650c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 976.865690][T24842] RAX: ffffffffffffffda RBX: 0000000000000018 RCX: 00000000800003c0 [ 976.865698][T24842] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 0000000000000000 [ 976.865704][T24842] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 976.865710][T24842] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 976.865716][T24842] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 976.865730][T24842] [ 977.811630][T13981] usb 10-1: USB disconnect, device number 72 [ 978.409736][T24896] syz.7.5496 (24896): drop_caches: 2 [ 978.417580][T24896] netlink: 136 bytes leftover after parsing attributes in process `syz.7.5496'. [ 979.815942][T24919] net_ratelimit: 214 callbacks suppressed [ 979.815961][T24919] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 979.972675][T20574] usb 10-1: new high-speed USB device number 73 using dummy_hcd [ 980.162699][T20574] usb 10-1: Using ep0 maxpacket: 32 [ 980.245454][T20574] usb 10-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 980.262638][T20574] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.270762][T20574] usb 10-1: Product: syz [ 980.326896][T20574] usb 10-1: Manufacturer: syz [ 980.339786][T20574] usb 10-1: SerialNumber: syz [ 980.358644][T20574] usb 10-1: config 0 descriptor?? [ 980.408752][T20574] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 980.463653][T20574] dvb-usb: bulk message failed: -22 (4/0) [ 980.469411][T20574] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 980.480536][T20574] dvb-usb: bulk message failed: -22 (5/0) [ 980.501624][T20574] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 980.518734][T20574] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 980.602126][T20574] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 980.612739][ T24] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 980.642689][T20574] usb 10-1: media controller created [ 980.664224][T20574] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 980.679886][T24965] dvb-usb: bulk message failed: -22 (7/0) [ 980.682789][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 980.686164][T24965] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 980.704511][T24965] ttusb2: i2c transfer failed. [ 980.743029][T20574] usb 10-1: selecting invalid altsetting 3 [ 980.748992][T20574] ttusb2: set interface to alts=3 failed [ 980.803158][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 980.808607][T20574] DVB: Unable to find symbol tda10086_attach() [ 980.815421][T20574] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 980.887677][ T24] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 980.900458][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 980.908465][ T24] usb 4-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 980.919311][T20574] dvb-usb: bulk message failed: -22 (4/0) [ 980.927353][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 980.936232][T20574] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 980.950454][ T24] usb 4-1: config 0 descriptor?? [ 980.955801][T20574] dvb-usb: bulk message failed: -22 (5/0) [ 980.962439][T20574] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 980.977313][T20574] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 981.173059][T24980] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5505'. [ 981.413379][ T24] magicmouse 0003:05AC:0265.001C: hidraw0: USB HID v0.07 Device [HID 05ac:0265] on usb-dummy_hcd.3-1/input0 [ 981.583053][T25003] syz.6.5510 (25003): drop_caches: 2 [ 981.590319][T25003] netlink: 136 bytes leftover after parsing attributes in process `syz.6.5510'. [ 981.632278][ T24] usb 4-1: USB disconnect, device number 62 [ 981.806097][T25000] fido_id[25000]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 982.888692][T13981] usb 10-1: USB disconnect, device number 73 [ 983.165020][T13981] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 983.165220][T25067] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5517'. [ 983.557319][T25079] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5515'. [ 983.573964][T13981] usb 10-1: new full-speed USB device number 74 using dummy_hcd [ 983.640352][T25081] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5520'. [ 983.736798][T13981] usb 10-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 983.746198][T13981] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.754335][T13981] usb 10-1: Product: syz [ 983.903142][T13981] usb 10-1: Manufacturer: syz [ 983.907959][T13981] usb 10-1: SerialNumber: syz [ 984.113547][T13981] usb 10-1: config 0 descriptor?? [ 984.132001][T13981] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 984.285566][T25087] netlink: 'syz.7.5522': attribute type 21 has an invalid length. [ 984.622959][T14817] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 984.859205][T14817] usb 4-1: config 0 has an invalid interface number: 145 but max is 0 [ 984.873546][T14817] usb 4-1: config 0 has no interface number 0 [ 984.882090][T14817] usb 4-1: too many endpoints for config 0 interface 145 altsetting 120: 36, using maximum allowed: 30 [ 984.903255][T14817] usb 4-1: config 0 interface 145 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 36 [ 984.926198][T14817] usb 4-1: config 0 interface 145 has no altsetting 0 [ 984.942838][T14817] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 984.953040][T14817] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.973358][T14817] usb 4-1: config 0 descriptor?? [ 985.344862][T25102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 985.413280][T25102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 985.428114][T14817] usb 4-1: string descriptor 0 read error: -71 [ 985.441485][T14817] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 985.450717][T14817] gp8psk: usb in 128 operation failed. [ 985.477012][T25122] fuse: Unknown parameter '' [ 985.505500][T14817] gp8psk: usb in 137 operation failed. [ 985.511069][T14817] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 985.521676][T14817] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 985.560391][T14817] usb 4-1: USB disconnect, device number 63 [ 985.720725][T25141] syz.1.5528 (25141): drop_caches: 2 [ 985.728190][T25141] netlink: 136 bytes leftover after parsing attributes in process `syz.1.5528'. [ 986.053146][T13981] gspca_stk1135: reg_w 0xf err -110 [ 986.061893][T13981] gspca_stk1135: serial bus timeout: status=0x00 [ 986.069624][T13981] gspca_stk1135: Sensor write failed [ 986.076182][T13981] gspca_stk1135: serial bus timeout: status=0x00 [ 986.083050][T13981] gspca_stk1135: Sensor write failed [ 986.088669][T13981] gspca_stk1135: serial bus timeout: status=0x00 [ 986.095569][T13981] gspca_stk1135: Sensor read failed [ 986.101117][T13981] gspca_stk1135: serial bus timeout: status=0x00 [ 986.110960][T13981] gspca_stk1135: Sensor read failed [ 986.123033][T13981] gspca_stk1135: Detected sensor type unknown (0x0) [ 986.147842][T13981] gspca_stk1135: serial bus timeout: status=0x00 [ 986.167705][T13981] gspca_stk1135: Sensor read failed [ 986.184774][T13981] gspca_stk1135: serial bus timeout: status=0x00 [ 986.209025][T13981] gspca_stk1135: Sensor read failed [ 986.224177][T13981] gspca_stk1135: serial bus timeout: status=0x00 [ 986.306473][T13981] gspca_stk1135: Sensor write failed [ 986.314331][T13981] gspca_stk1135: serial bus timeout: status=0x00 [ 986.327115][T13981] gspca_stk1135: Sensor write failed [ 986.336237][T13981] stk1135 10-1:0.0: probe with driver stk1135 failed with error -110 [ 986.582694][T13981] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 986.722664][T13981] usb 4-1: device descriptor read/64, error -71 [ 986.882490][ T24] usb 10-1: USB disconnect, device number 74 [ 986.964313][T13981] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 987.331634][T13981] usb 4-1: device descriptor read/64, error -71 [ 987.453271][T13981] usb usb4-port1: attempt power cycle [ 987.812687][T13981] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 987.833291][T13981] usb 4-1: device descriptor read/8, error -71 [ 988.092941][T13981] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 988.110629][ T29] audit: type=1800 audit(1772019326.216:2649): pid=25216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.5537" name="nullb0" dev="devtmpfs" ino=3937 res=0 errno=0 [ 988.142654][T13981] usb 4-1: device descriptor read/8, error -71 [ 988.196381][T14817] usb 10-1: new high-speed USB device number 75 using dummy_hcd [ 988.211711][T25217] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5535'. [ 988.262913][T13981] usb usb4-port1: unable to enumerate USB device [ 988.558271][T14817] usb 10-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 988.567796][T14817] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 988.582175][T14817] usb 10-1: Product: syz [ 988.591025][T14817] usb 10-1: Manufacturer: syz [ 988.600594][T14817] usb 10-1: SerialNumber: syz [ 988.613490][T25239] FAULT_INJECTION: forcing a failure. [ 988.613490][T25239] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 988.633546][T25239] CPU: 1 UID: 0 PID: 25239 Comm: syz.1.5538 Tainted: G L syzkaller #0 PREEMPT(full) [ 988.633573][T25239] Tainted: [L]=SOFTLOCKUP [ 988.633581][T25239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 988.633593][T25239] Call Trace: [ 988.633601][T25239] [ 988.633610][T25239] dump_stack_lvl+0xe8/0x150 [ 988.633640][T25239] should_fail_ex+0x412/0x560 [ 988.633666][T25239] _copy_from_user+0x2d/0xb0 [ 988.633692][T25239] get_compat_msghdr+0xb3/0x4c0 [ 988.633721][T25239] ? __pfx_get_compat_msghdr+0x10/0x10 [ 988.633747][T25239] ? kfree+0x4d/0x630 [ 988.633779][T25239] ___sys_recvmsg+0x1dd/0x590 [ 988.633818][T25239] ? __lock_acquire+0x6b5/0x2cf0 [ 988.633842][T25239] ? __pfx____sys_recvmsg+0x10/0x10 [ 988.633899][T25239] do_recvmmsg+0x3a5/0x800 [ 988.633932][T25239] ? __pfx_do_recvmmsg+0x10/0x10 [ 988.633971][T25239] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 988.634004][T25239] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 988.634037][T25239] __sys_recvmmsg+0x1a5/0x290 [ 988.634066][T25239] ? __pfx___sys_recvmmsg+0x10/0x10 [ 988.634093][T25239] ? ksys_write+0x242/0x270 [ 988.634119][T25239] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 988.634148][T25239] __do_fast_syscall_32+0x20d/0x640 [ 988.634167][T25239] ? do_fast_syscall_32+0x33/0x70 [ 988.634184][T25239] ? asm_int80_emulation+0x1a/0x20 [ 988.634202][T25239] ? do_int80_emulation+0x274/0x4d0 [ 988.634218][T25239] ? trace_irq_disable+0x3b/0x150 [ 988.634248][T25239] do_fast_syscall_32+0x33/0x70 [ 988.634266][T25239] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 988.634289][T25239] RIP: 0023:0xf703ef6c [ 988.634306][T25239] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad [ 988.634322][T25239] RSP: 002b:00000000f542d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 988.634342][T25239] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000300 [ 988.634355][T25239] RDX: 000000000000049e RSI: 00000000000000fe RDI: 0000000000000000 [ 988.634366][T25239] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 988.634377][T25239] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 988.634389][T25239] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 988.634415][T25239] [ 988.640915][T14817] usb 10-1: config 0 descriptor?? [ 989.288345][T25266] syz.9.5536: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 989.319887][T25266] CPU: 1 UID: 0 PID: 25266 Comm: syz.9.5536 Tainted: G L syzkaller #0 PREEMPT(full) [ 989.319920][T25266] Tainted: [L]=SOFTLOCKUP [ 989.319927][T25266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 989.319939][T25266] Call Trace: [ 989.319946][T25266] [ 989.319955][T25266] dump_stack_lvl+0xe8/0x150 [ 989.319987][T25266] warn_alloc+0x249/0x340 [ 989.320010][T25266] ? stack_trace_save+0xa9/0x100 [ 989.320034][T25266] ? __pfx_warn_alloc+0x10/0x10 [ 989.320062][T25266] ? kasan_save_track+0x4f/0x80 [ 989.320081][T25266] ? kasan_save_track+0x3e/0x80 [ 989.320099][T25266] ? __kasan_kmalloc+0x93/0xb0 [ 989.320118][T25266] ? __kmalloc_cache_noprof+0x31c/0x660 [ 989.320138][T25266] ? xskq_create+0x56/0x170 [ 989.320162][T25266] ? xsk_setsockopt+0x54c/0x990 [ 989.320184][T25266] ? do_sock_setsockopt+0x17c/0x1b0 [ 989.320209][T25266] ? __ia32_sys_setsockopt+0x13d/0x1b0 [ 989.320235][T25266] ? __do_fast_syscall_32+0x20d/0x640 [ 989.320258][T25266] __vmalloc_node_range_noprof+0x132/0x1730 [ 989.320306][T25266] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 989.320332][T25266] ? __kasan_kmalloc+0x93/0xb0 [ 989.320358][T25266] vmalloc_user_noprof+0xad/0xe0 [ 989.320378][T25266] ? xskq_create+0xbf/0x170 [ 989.320404][T25266] xskq_create+0xbf/0x170 [ 989.320432][T25266] xsk_init_queue+0x8a/0xe0 [ 989.320459][T25266] xsk_setsockopt+0x54c/0x990 [ 989.320487][T25266] ? __pfx_xsk_setsockopt+0x10/0x10 [ 989.320513][T25266] ? __pfx_aa_sk_perm+0x10/0x10 [ 989.320537][T25266] ? aa_sock_opt_perm+0xff/0x1a0 [ 989.320563][T25266] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 989.320583][T25266] ? __pfx_xsk_setsockopt+0x10/0x10 [ 989.320608][T25266] do_sock_setsockopt+0x17c/0x1b0 [ 989.320640][T25266] __ia32_sys_setsockopt+0x13d/0x1b0 [ 989.320672][T25266] __do_fast_syscall_32+0x20d/0x640 [ 989.320692][T25266] ? lockdep_hardirqs_on+0x7a/0x110 [ 989.320719][T25266] ? do_fast_syscall_32+0x33/0x70 [ 989.320745][T25266] ? irqentry_exit+0x10e/0x620 [ 989.320773][T25266] ? trace_irq_disable+0x3b/0x150 [ 989.320805][T25266] do_fast_syscall_32+0x33/0x70 [ 989.320825][T25266] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 989.320849][T25266] RIP: 0023:0xf7fa5f6c [ 989.320867][T25266] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad [ 989.320884][T25266] RSP: 002b:00000000f542450c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 989.320905][T25266] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 000000000000011b [ 989.320919][T25266] RDX: 0000000000000006 RSI: 0000000080000000 RDI: 0000000000000004 [ 989.320931][T25266] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 989.320942][T25266] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 989.320954][T25266] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 989.320981][T25266] [ 989.321015][T25266] Mem-Info: [ 989.706575][T25278] netlink: 276 bytes leftover after parsing attributes in process `syz.3.5541'. [ 989.716469][T25266] active_anon:11506 inactive_anon:0 isolated_anon:0 [ 989.716469][T25266] active_file:2840 inactive_file:3981 isolated_file:0 [ 989.716469][T25266] unevictable:768 dirty:319 writeback:0 [ 989.716469][T25266] slab_reclaimable:7212 slab_unreclaimable:112158 [ 989.716469][T25266] mapped:36219 shmem:4414 pagetables:2115 [ 989.716469][T25266] sec_pagetables:0 bounce:0 [ 989.716469][T25266] kernel_misc_reclaimable:0 [ 989.716469][T25266] free:1321859 free_pcp:9575 free_cma:0 [ 989.888992][T25266] Node 0 active_anon:45564kB inactive_anon:0kB active_file:11324kB inactive_file:15792kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:144840kB dirty:1328kB writeback:0kB shmem:15452kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14820kB pagetables:8192kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 989.969687][T25266] Node 1 active_anon:0kB inactive_anon:0kB active_file:36kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:36kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:172kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 990.137427][T25266] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 990.316454][T25301] syz.1.5542 (25301): drop_caches: 2 [ 990.328853][T25301] netlink: 136 bytes leftover after parsing attributes in process `syz.1.5542'. [ 990.522750][T20574] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 990.687891][T25266] lowmem_reserve[]: 0 2493 2493 2493 2493 [ 990.762716][T20574] usb 4-1: Using ep0 maxpacket: 16 [ 990.780501][T20574] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 990.793128][T20574] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 990.802344][T20574] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.814202][T20574] usb 4-1: Product: syz [ 990.818371][T20574] usb 4-1: Manufacturer: syz [ 990.854236][T20574] usb 4-1: SerialNumber: syz [ 990.957318][T25266] Node 0 DMA32 free:1340296kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:35292kB inactive_anon:0kB active_file:11324kB inactive_file:15792kB unevictable:1536kB writepending:956kB zspages:0kB present:3129332kB managed:2552844kB mlocked:0kB bounce:0kB free_pcp:36432kB local_pcp:21036kB free_cma:0kB [ 991.034584][T20574] usb 4-1: config 0 descriptor?? [ 991.080934][T20574] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 991.116160][T25266] lowmem_reserve[]: 0 0 0 0 0 [ 991.121128][T20574] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 991.140947][T25266] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:884kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 991.192712][T14817] usb 10-1: Firmware version (0.0) predates our first public release. [ 991.200883][T14817] usb 10-1: Please update to version 0.2 or newer [ 991.298796][T25295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 991.314952][T25266] lowmem_reserve[]: 0 [ 991.383640][T25295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 991.414726][T25266] 0 0 0 0 [ 991.421045][T25266] Node 1 Normal free:3942024kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:36kB inactive_file:132kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:2048kB local_pcp:0kB free_cma:0kB [ 991.498101][T25327] netlink: 'syz.6.5548': attribute type 29 has an invalid length. [ 991.514880][T25327] netlink: 'syz.6.5548': attribute type 29 has an invalid length. [ 991.553231][T25266] lowmem_reserve[]: 0 0 0 0 0 [ 991.563979][T25327] netlink: 600 bytes leftover after parsing attributes in process `syz.6.5548'. [ 991.579650][T25266] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 991.643020][T25266] Node 0 DMA32: 9310*4kB (UME) 6458*8kB (UME) 4580*16kB (UME) 766*32kB (UME) 802*64kB (UME) 700*128kB (UME) 553*256kB (UME) 385*512kB (UME) 264*1024kB (UME) 73*2048kB (UME) 62*4096kB (UM) = 1340104kB [ 991.743041][T20574] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 991.802925][T25341] loop2: detected capacity change from 0 to 7 [ 991.810299][T25266] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 991.822208][T25266] Node 1 Normal: 2*4kB (U) 8*8kB (UM) 10*16kB (UME) 13*32kB (UM) 8*64kB (UM) 8*128kB (UME) 6*256kB (UM) 4*512kB (UM) 2*1024kB (UE) 3*2048kB (UME) 959*4096kB (M) = 3942024kB [ 991.839860][T25266] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 991.855288][T25341] Dev loop2: unable to read RDB block 7 [ 991.861351][T25266] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 991.879760][T20574] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 991.889372][T25341] loop2: unable to read partition table [ 991.898124][T25266] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 991.942200][T20574] em28xx 4-1:0.0: board has no eeprom [ 991.948465][T25266] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 991.973608][T25266] 8197 total pagecache pages [ 991.978216][T25266] 0 pages in swap cache [ 992.012719][T25341] loop2: partition table beyond EOD, truncated [ 992.045740][T25367] macsec0: entered promiscuous mode [ 992.051407][T25367] macsec0: entered allmulticast mode [ 992.067010][T25341] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 992.083112][T25266] Free swap = 124996kB [ 992.087278][T25266] Total swap = 124996kB [ 992.123336][T20574] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 992.131289][T20574] em28xx 4-1:0.0: dvb set to bulk mode. [ 992.138192][ T24] em28xx 4-1:0.0: Binding DVB extension [ 992.151987][T20574] usb 4-1: USB disconnect, device number 68 [ 992.160523][T25266] 2097051 pages RAM [ 992.165319][T20574] em28xx 4-1:0.0: Disconnecting em28xx [ 992.175124][T25266] 0 pages HighMem/MovableOnly [ 992.251352][T25266] 427004 pages reserved [ 992.310876][T25266] 0 pages cma reserved [ 992.394492][ T24] em28xx 4-1:0.0: Registering input extension [ 992.434449][T20574] em28xx 4-1:0.0: Closing input extension [ 992.447320][T25383] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5553'. [ 992.542292][T20574] em28xx 4-1:0.0: Freeing device [ 992.847462][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.868433][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.216070][T20574] usb 10-1: USB disconnect, device number 75 [ 993.890731][T25455] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5563'. [ 993.931881][T25455] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 993.971344][ T29] audit: type=1326 audit(1772019332.076:2650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25454 comm="syz.7.5562" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fd6f6c code=0x0 [ 994.311231][T25479] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5566'. [ 994.515195][T25500] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5573'. [ 994.662948][T20574] usb 4-1: new full-speed USB device number 69 using dummy_hcd [ 994.792758][T20574] usb 4-1: device descriptor read/64, error -71 [ 995.037314][T25549] netlink: 'syz.1.5576': attribute type 49 has an invalid length. [ 995.192683][T20574] usb 4-1: new full-speed USB device number 70 using dummy_hcd [ 995.394546][T20574] usb 4-1: device descriptor read/64, error -71 [ 995.637033][T20574] usb usb4-port1: attempt power cycle [ 995.794160][T25573] netlink: 'syz.9.5580': attribute type 10 has an invalid length. [ 995.815977][T25573] 8021q: adding VLAN 0 to HW filter on device team0 [ 995.945779][T25579] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5581'. [ 995.984066][T20574] usb 4-1: new full-speed USB device number 71 using dummy_hcd [ 996.016824][T20574] usb 4-1: device descriptor read/8, error -71 [ 996.262706][T20574] usb 4-1: new full-speed USB device number 72 using dummy_hcd [ 996.287643][T20574] usb 4-1: device descriptor read/8, error -71 [ 996.402762][T13981] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 996.403435][T20574] usb usb4-port1: unable to enumerate USB device [ 996.554094][T13981] usb 2-1: config 0 has an invalid interface number: 72 but max is 3 [ 996.562417][T13981] usb 2-1: config 0 has an invalid interface number: 98 but max is 3 [ 996.570610][T13981] usb 2-1: config 0 has 3 interfaces, different from the descriptor's value: 4 [ 996.579717][T13981] usb 2-1: config 0 has no interface number 1 [ 996.586148][T13981] usb 2-1: config 0 has no interface number 2 [ 996.592425][T13981] usb 2-1: config 0 interface 72 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 996.602273][T13981] usb 2-1: config 0 interface 72 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 996.612146][T13981] usb 2-1: config 0 interface 72 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 996.622062][T13981] usb 2-1: config 0 interface 72 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 996.631983][T13981] usb 2-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x82, skipping [ 996.643548][T13981] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 996.655408][T13981] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 996.666224][T13981] usb 2-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 996.677324][T13981] usb 2-1: New USB device found, idVendor=1943, idProduct=2255, bcdDevice=13.03 [ 996.686531][T13981] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 996.695273][T13981] usb 2-1: Product: syz [ 996.699460][T13981] usb 2-1: Manufacturer: syz [ 996.704148][T13981] usb 2-1: SerialNumber: syz [ 996.711139][T13981] usb 2-1: config 0 descriptor?? [ 996.722744][T13981] s2255 2-1:0.72: Could not find bulk-in endpoint [ 996.729236][T13981] Sensoray 2255 driver load failed: 0xfffffff4 [ 996.735493][T13981] s2255 2-1:0.72: probe with driver s2255 failed with error -12 [ 996.746771][T13981] s2255 2-1:0.98: Could not find bulk-in endpoint [ 996.753724][T13981] Sensoray 2255 driver load failed: 0xfffffff4 [ 996.759879][T13981] s2255 2-1:0.98: probe with driver s2255 failed with error -12 [ 996.770785][T13981] s2255 2-1:0.0: Could not find bulk-in endpoint [ 996.777217][T13981] Sensoray 2255 driver load failed: 0xfffffff4 [ 996.783457][T13981] s2255 2-1:0.0: probe with driver s2255 failed with error -12 [ 996.945189][T20574] usb 2-1: USB disconnect, device number 73 [ 996.977025][T25607] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5585'. [ 997.802955][T20574] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 997.907421][ T29] audit: type=1800 audit(1772019336.016:2651): pid=25658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5589" name="nullb0" dev="devtmpfs" ino=3937 res=0 errno=0 [ 998.000941][T20574] usb 4-1: Using ep0 maxpacket: 32 [ 998.015510][T20574] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 998.031700][T20574] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 998.043426][T20574] usb 4-1: Product: syz [ 998.047617][T20574] usb 4-1: Manufacturer: syz [ 998.052426][T20574] usb 4-1: SerialNumber: syz [ 998.082181][T20574] usb 4-1: config 0 descriptor?? [ 998.242758][T14817] usb 10-1: new full-speed USB device number 76 using dummy_hcd [ 998.300818][T20574] airspy 4-1:0.0: usb_control_msg() failed -71 request 09 [ 998.331686][T20574] airspy 4-1:0.0: Could not detect board [ 998.351734][T20574] airspy 4-1:0.0: probe with driver airspy failed with error -71 [ 998.390164][T20574] usb 4-1: USB disconnect, device number 73 [ 998.404300][T14817] usb 10-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 998.413649][T14817] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 998.434000][T14817] usb 10-1: config 0 descriptor?? [ 998.450104][T14817] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 998.643542][T14817] gp8psk: usb in 128 operation failed. [ 998.862175][T14817] gp8psk: usb in 137 operation failed. [ 998.868912][T25661] netlink: 'syz.9.5590': attribute type 1 has an invalid length. [ 998.892220][T14817] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 998.926321][T14817] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 999.140069][T25661] 8021q: adding VLAN 0 to HW filter on device bond7 [ 999.494239][T25709] macvlan3: entered promiscuous mode [ 999.499577][T25709] macvlan3: entered allmulticast mode [ 999.587274][T25709] bond7: entered promiscuous mode [ 999.628385][T25709] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 999.649188][T25709] team0: Port device macvlan3 added [ 999.728681][T25711] bond7: (slave ip6gretap1): making interface the new active one [ 999.738886][T25711] ip6gretap1: entered promiscuous mode [ 999.746943][T25711] bond7: (slave ip6gretap1): Enslaving as an active interface with an up link [ 999.769957][T20576] usb 10-1: USB disconnect, device number 76 [ 999.922547][T25776] block device autoloading is deprecated and will be removed. [ 999.939622][T25776] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5595'. [ 999.966154][T25776] netlink: 'syz.7.5595': attribute type 4 has an invalid length. [ 1000.029856][T25780] netlink: 'syz.1.5596': attribute type 9 has an invalid length. [ 1000.038296][T25780] netlink: 'syz.1.5596': attribute type 11 has an invalid length. [ 1000.049719][T25780] netlink: 'syz.1.5596': attribute type 12 has an invalid length. [ 1000.057853][T25780] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.5596'. [ 1000.284500][T25797] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1000.413219][T20576] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1000.684858][T20576] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 1000.703668][T20576] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1000.718230][T20576] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1000.730494][T20576] usb 4-1: too many endpoints for config 0 interface 0 altsetting 48: 48, using maximum allowed: 30 [ 1000.741531][T20576] usb 4-1: config 0 interface 0 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 1000.772367][T20576] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1000.782023][T20576] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1000.806372][T20576] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1000.882980][T20576] usb 4-1: too many endpoints for config 0 interface 0 altsetting 48: 48, using maximum allowed: 30 [ 1000.932660][T20576] usb 4-1: config 0 interface 0 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 1000.986484][T20576] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1001.039529][T20576] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1001.067377][T25815] tap0: tun_chr_ioctl cmd 2147767507 [ 1001.072918][T20576] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1001.083881][T20576] usb 4-1: too many endpoints for config 0 interface 0 altsetting 48: 48, using maximum allowed: 30 [ 1001.110848][T20576] usb 4-1: config 0 interface 0 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 1001.202637][T20576] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1001.228583][T20576] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1001.252744][T20576] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1001.276588][T20576] usb 4-1: too many endpoints for config 0 interface 0 altsetting 48: 48, using maximum allowed: 30 [ 1001.304362][T20576] usb 4-1: config 0 interface 0 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 1001.345880][T25812] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5601'. [ 1001.533118][T20576] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1001.634748][T20576] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1001.692796][T25820] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5601'. [ 1001.815172][T20576] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1001.887468][T20576] usb 4-1: too many endpoints for config 0 interface 0 altsetting 48: 48, using maximum allowed: 30 [ 1001.977641][T20576] usb 4-1: config 0 interface 0 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 1002.032687][T20576] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1002.053847][T20576] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1002.068565][T20576] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1002.173397][T20576] usb 4-1: too many endpoints for config 0 interface 0 altsetting 48: 48, using maximum allowed: 30 [ 1002.194808][T20576] usb 4-1: config 0 interface 0 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 1002.217644][T20576] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1002.233846][T20576] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1002.244395][T20576] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1002.275952][T20576] usb 4-1: too many endpoints for config 0 interface 0 altsetting 48: 48, using maximum allowed: 30 [ 1002.313535][T20576] usb 4-1: config 0 interface 0 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 1002.345897][T20576] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1002.363911][T20576] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1002.382653][T20576] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1002.402705][T20576] usb 4-1: too many endpoints for config 0 interface 0 altsetting 48: 48, using maximum allowed: 30 [ 1002.415468][T20576] usb 4-1: config 0 interface 0 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 1002.433000][T20576] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1002.469536][T20576] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1002.482643][T20576] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1002.496010][T20576] usb 4-1: Product: syz [ 1002.500188][T20576] usb 4-1: Manufacturer: syz [ 1002.511438][T20576] usb 4-1: SerialNumber: syz [ 1002.517062][T25869] netlink: 'syz.7.5606': attribute type 1 has an invalid length. [ 1002.537319][T20576] usb 4-1: config 0 descriptor?? [ 1002.552032][T25869] netlink: 'syz.7.5606': attribute type 2 has an invalid length. [ 1002.706831][T25884] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5610'. [ 1002.736426][T25890] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5611'. [ 1002.746937][T25890] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5611'. [ 1002.758164][T25890] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5611'. [ 1002.795358][T25884] vlan4: entered allmulticast mode [ 1002.801070][T25884] bridge9: entered allmulticast mode [ 1002.987003][T20576] yurex 4-1:0.0: Could not find endpoints [ 1003.017771][T20576] usb 4-1: USB disconnect, device number 74 [ 1003.258801][T25943] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5617'. [ 1003.312721][T13981] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1003.472886][T13981] usb 2-1: Using ep0 maxpacket: 16 [ 1003.479718][T13981] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1003.491452][T13981] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1003.501386][T13981] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1003.510669][T13981] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1003.522724][T13981] usb 2-1: config 0 descriptor?? [ 1003.761620][T25930] syzkaller1: entered promiscuous mode [ 1003.767330][T25930] syzkaller1: entered allmulticast mode [ 1003.785172][T25955] tipc: Invalid UDP bearer configuration [ 1003.785203][T25955] tipc: Enabling of bearer rejected, failed to enable media [ 1003.888950][T25930] fuse: root generation should be zero [ 1003.900388][T25960] syzkaller0: entered promiscuous mode [ 1003.905925][T25960] syzkaller0: entered allmulticast mode [ 1004.272662][T20574] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1004.365544][T13981] usbhid 2-1:0.0: can't add hid device: -71 [ 1004.379415][T13981] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1004.390702][T13981] usb 2-1: USB disconnect, device number 74 [ 1004.444320][T20574] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1004.456824][T20574] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1004.465895][T20574] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1004.477246][T20574] usb 4-1: config 0 descriptor?? [ 1004.492179][T20574] pwc: Askey VC010 type 2 USB webcam detected. [ 1004.886861][T20574] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1004.894044][T20574] pwc: recv_control_msg error -32 req 02 val 2700 [ 1004.901195][T20574] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1005.192729][T20574] pwc: recv_control_msg error -71 req 04 val 1300 [ 1005.201147][T20574] pwc: recv_control_msg error -71 req 04 val 1400 [ 1005.208603][T20574] pwc: recv_control_msg error -71 req 02 val 2000 [ 1005.215573][T20574] pwc: recv_control_msg error -71 req 02 val 2100 [ 1005.222279][T20574] pwc: recv_control_msg error -71 req 04 val 1500 [ 1005.229867][T20574] pwc: recv_control_msg error -71 req 02 val 2500 [ 1005.236771][T20574] pwc: recv_control_msg error -71 req 02 val 2400 [ 1005.246129][T20574] pwc: recv_control_msg error -71 req 02 val 2600 [ 1005.253004][T20574] pwc: recv_control_msg error -71 req 02 val 2900 [ 1005.259914][T20574] pwc: recv_control_msg error -71 req 02 val 2800 [ 1005.267227][T20574] pwc: recv_control_msg error -71 req 04 val 1100 [ 1005.274414][T20574] pwc: recv_control_msg error -71 req 04 val 1200 [ 1005.286385][T20574] pwc: Registered as video103. [ 1005.302867][T20574] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input53 [ 1005.336119][T20574] usb 4-1: USB disconnect, device number 75 [ 1006.107420][T26070] loop2: detected capacity change from 0 to 7 [ 1006.118148][T26070] Dev loop2: unable to read RDB block 7 [ 1006.129432][T26070] loop2: AHDI p1 p2 [ 1006.133375][T13981] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1006.190859][T26070] loop2: partition table partially beyond EOD, truncated [ 1006.280443][T26070] loop2: p1 start 926365495 is beyond EOD, truncated [ 1006.332683][T13981] usb 2-1: Using ep0 maxpacket: 8 [ 1006.348478][T26084] net veth1_virt_wifi : renamed from virt_wifi0 [ 1006.417988][T13981] usb 2-1: config 190 has too many interfaces: 138, using maximum allowed: 32 [ 1006.432842][T13981] usb 2-1: config 190 has an invalid interface number: 187 but max is 137 [ 1006.585294][T13981] usb 2-1: config 190 has an invalid descriptor of length 0, skipping remainder of the config [ 1006.595743][T13981] usb 2-1: config 190 has 1 interface, different from the descriptor's value: 138 [ 1006.658226][T13981] usb 2-1: config 190 has no interface number 0 [ 1006.668928][T26091] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5632'. [ 1006.677989][T13981] usb 2-1: config 190 interface 187 altsetting 1 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1006.690812][T13981] usb 2-1: config 190 interface 187 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1006.717551][T13981] usb 2-1: config 190 interface 187 altsetting 1 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1006.744932][T13981] usb 2-1: config 190 interface 187 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 0 [ 1006.782653][T13981] usb 2-1: config 190 interface 187 has no altsetting 0 [ 1006.811597][T13981] usb 2-1: New USB device found, idVendor=13d3, idProduct=3346, bcdDevice=62.b7 [ 1006.821458][T13981] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1006.829619][T13981] usb 2-1: Product: syz [ 1006.842394][T13981] usb 2-1: Manufacturer: syz [ 1006.860990][T13981] usb 2-1: SerialNumber: syz [ 1007.116520][T26135] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5634'. [ 1007.672731][T14178] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1007.870053][T26160] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5639'. [ 1007.882695][T14178] usb 4-1: Using ep0 maxpacket: 8 [ 1007.973407][T14178] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1007.998687][T14178] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1008.020159][T14178] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1008.042030][T14178] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1008.092042][T14178] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1008.131840][T14178] hub 4-1:1.0: bad descriptor, ignoring hub [ 1008.168094][T14178] hub 4-1:1.0: probe with driver hub failed with error -5 [ 1008.184747][T14178] cdc_wdm 4-1:1.0: skipping garbage [ 1008.189426][T26171] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5642'. [ 1008.198946][T14178] cdc_wdm 4-1:1.0: skipping garbage [ 1008.208356][T14178] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1008.231147][T26171] batadv0: entered promiscuous mode [ 1008.240456][T26171] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1008.250594][T26171] batadv0: left promiscuous mode [ 1008.393663][T20581] usb 10-1: new high-speed USB device number 77 using dummy_hcd [ 1008.434361][T20574] usb 4-1: USB disconnect, device number 76 [ 1008.576877][T13981] usb 2-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 1008.602744][T20581] usb 10-1: Using ep0 maxpacket: 16 [ 1008.608815][T13981] usb 2-1: USB disconnect, device number 75 [ 1008.630136][T20581] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1008.772421][T20581] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1008.903989][T20581] usb 10-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b [ 1008.945670][T20581] usb 10-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 1008.972640][T20581] usb 10-1: Product: syz [ 1009.013127][T20581] usb 10-1: Manufacturer: syz [ 1009.079958][T20581] usb 10-1: SerialNumber: syz [ 1009.123379][T20581] usb 10-1: config 0 descriptor?? [ 1009.242522][T20581] usb 10-1: NFC: intf ffff888029a5f000 id ffffffff8f1d0c40 [ 1009.468597][T26229] syzkaller0: entered promiscuous mode [ 1009.483054][T26229] syzkaller0: entered allmulticast mode [ 1009.503695][T26229] 0: reclassify loop, rule prio 0, protocol 800 [ 1009.841313][T26245] syzkaller0: entered promiscuous mode [ 1009.850517][T26245] syzkaller0: entered allmulticast mode [ 1009.868916][T26164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1009.893477][T26164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1009.927389][T17866] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1009.937908][T17866] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1009.946936][T17866] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1009.963511][T17866] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1009.981639][T17866] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1010.022795][ T5818] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1010.030799][ T5818] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1010.039491][ T5818] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1010.048287][ T5818] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1010.057245][ T5818] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1010.509854][T20581] usb 10-1: USB disconnect, device number 77 [ 1010.738646][T26398] netlink: 136 bytes leftover after parsing attributes in process `syz.1.5656'. [ 1010.799499][T26307] chnl_net:caif_netlink_parms(): no params data found [ 1010.816030][T26388] syz.1.5656 (26388): drop_caches: 2 [ 1010.981242][T25841] bridge_slave_1: left allmulticast mode [ 1010.987822][T25841] bridge_slave_1: left promiscuous mode [ 1011.000433][T25841] bridge0: port 2(bridge_slave_1) entered disabled state [ 1011.011695][T25841] bridge_slave_0: left allmulticast mode [ 1011.017544][T25841] bridge_slave_0: left promiscuous mode [ 1011.024016][T25841] bridge0: port 1(bridge_slave_0) entered disabled state [ 1011.627948][T26462] FAULT_INJECTION: forcing a failure. [ 1011.627948][T26462] name failslab, interval 1, probability 0, space 0, times 0 [ 1011.661052][T26462] CPU: 1 UID: 0 PID: 26462 Comm: syz.9.5658 Tainted: G L syzkaller #0 PREEMPT(full) [ 1011.661081][T26462] Tainted: [L]=SOFTLOCKUP [ 1011.661089][T26462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1011.661099][T26462] Call Trace: [ 1011.661107][T26462] [ 1011.661115][T26462] dump_stack_lvl+0xe8/0x150 [ 1011.661145][T26462] should_fail_ex+0x412/0x560 [ 1011.661171][T26462] should_failslab+0xa8/0x100 [ 1011.661195][T26462] __kmalloc_noprof+0xe8/0x760 [ 1011.661215][T26462] ? ethnl_default_doit+0x1ac/0xf40 [ 1011.661238][T26462] ? __kmalloc_noprof+0x1b8/0x760 [ 1011.661261][T26462] ethnl_default_doit+0x1ac/0xf40 [ 1011.661290][T26462] ? genl_family_rcv_msg_attrs_parse+0x212/0x2a0 [ 1011.661324][T26462] genl_family_rcv_msg_doit+0x22a/0x330 [ 1011.661351][T26462] ? __asan_memcpy+0x40/0x70 [ 1011.661387][T26462] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1011.661426][T26462] ? __lock_acquire+0x6b5/0x2cf0 [ 1011.661455][T26462] genl_rcv_msg+0x61c/0x7a0 [ 1011.661486][T26462] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1011.661512][T26462] ? __pfx_ethnl_default_doit+0x10/0x10 [ 1011.661536][T26462] ? __lock_acquire+0x6b5/0x2cf0 [ 1011.661567][T26462] netlink_rcv_skb+0x232/0x4b0 [ 1011.661590][T26462] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1011.661618][T26462] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1011.661656][T26462] ? down_read+0x272/0x2e0 [ 1011.661674][T26462] ? genl_rcv+0xd/0x40 [ 1011.661701][T26462] genl_rcv+0x28/0x40 [ 1011.661723][T26462] netlink_unicast+0x80f/0x9b0 [ 1011.661750][T26462] ? __pfx_netlink_unicast+0x10/0x10 [ 1011.661770][T26462] ? netlink_sendmsg+0x650/0xb40 [ 1011.661790][T26462] ? skb_put+0x11b/0x210 [ 1011.661819][T26462] netlink_sendmsg+0x813/0xb40 [ 1011.661849][T26462] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1011.661874][T26462] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1011.661898][T26462] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1011.661919][T26462] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1011.661940][T26462] ____sys_sendmsg+0xa68/0xad0 [ 1011.661974][T26462] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1011.662004][T26462] ? kstrtoull+0x12f/0x1d0 [ 1011.662032][T26462] ___sys_sendmsg+0x2a5/0x360 [ 1011.662064][T26462] ? __pfx____sys_sendmsg+0x10/0x10 [ 1011.662092][T26462] ? get_pid_task+0x20/0x1f0 [ 1011.662109][T26462] ? get_pid_task+0x20/0x1f0 [ 1011.662124][T26462] ? get_pid_task+0x20/0x1f0 [ 1011.662165][T26462] ? __fget_files+0x2a/0x420 [ 1011.662190][T26462] ? __fget_files+0x3a0/0x420 [ 1011.662224][T26462] __sys_sendmsg+0x183/0x260 [ 1011.662253][T26462] ? __pfx___sys_sendmsg+0x10/0x10 [ 1011.662298][T26462] __do_fast_syscall_32+0x20d/0x640 [ 1011.662319][T26462] ? do_fast_syscall_32+0x33/0x70 [ 1011.662335][T26462] ? asm_int80_emulation+0x1a/0x20 [ 1011.662352][T26462] ? do_int80_emulation+0x274/0x4d0 [ 1011.662375][T26462] ? trace_irq_disable+0x3b/0x150 [ 1011.662404][T26462] do_fast_syscall_32+0x33/0x70 [ 1011.662422][T26462] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1011.662445][T26462] RIP: 0023:0xf7fa5f6c [ 1011.662462][T26462] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad [ 1011.662479][T26462] RSP: 002b:00000000f546650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1011.662499][T26462] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800001c0 [ 1011.662512][T26462] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1011.662524][T26462] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1011.662535][T26462] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1011.662547][T26462] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1011.662576][T26462] [ 1012.127266][T17866] Bluetooth: hci0: command tx timeout [ 1012.138809][T26461] netlink: 'syz.6.5659': attribute type 11 has an invalid length. [ 1012.336271][T25841] bond1 (unregistering): Released all slaves [ 1012.348762][T25841] bond0 (unregistering): Released all slaves [ 1012.387520][T26476] bond3: option mode: unable to set because the bond device has slaves [ 1012.455951][T26467] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1012.473129][T26467] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1012.568740][T26467] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1012.584967][T25841] tipc: Disabling bearer [ 1012.614936][T25841] tipc: Left network mode [ 1012.620220][T26307] bridge0: port 1(bridge_slave_0) entered blocking state [ 1012.636747][T26307] bridge0: port 1(bridge_slave_0) entered disabled state [ 1012.664210][T26307] bridge_slave_0: entered allmulticast mode [ 1012.694078][T26307] bridge_slave_0: entered promiscuous mode [ 1012.724935][T26307] bridge0: port 2(bridge_slave_1) entered blocking state [ 1012.732109][T26307] bridge0: port 2(bridge_slave_1) entered disabled state [ 1012.752809][T26307] bridge_slave_1: entered allmulticast mode [ 1012.760454][T26307] bridge_slave_1: entered promiscuous mode [ 1012.811785][T26398] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1012.848186][T26398] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1012.994839][T26307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1013.016658][T26307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1013.289436][T26307] team0: Port device team_slave_0 added [ 1013.311021][T26307] team0: Port device team_slave_1 added [ 1013.597320][T26307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1013.605208][T26307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1013.645846][T26307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1013.692105][T26307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1013.704142][T26307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1013.812084][T26307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1014.186095][T26307] hsr_slave_0: entered promiscuous mode [ 1014.216627][T26307] hsr_slave_1: entered promiscuous mode [ 1014.234539][T26307] debugfs: 'hsr0' already exists in 'hsr' [ 1014.247076][T26307] Cannot create hsr debugfs directory [ 1014.660382][T25841] hsr_slave_0: left promiscuous mode [ 1014.666613][T25841] hsr_slave_1: left promiscuous mode [ 1014.672488][T25841] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1015.366859][T25841] IPVS: stop unused estimator thread 0... [ 1015.798886][T26838] tap0: tun_chr_ioctl cmd 2147767507 [ 1015.831461][T26307] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1015.908425][T26307] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1015.920132][T26307] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1015.948996][T26307] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1016.099641][T26307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1016.185401][T26307] 8021q: adding VLAN 0 to HW filter on device team0 [ 1016.207781][T23293] bridge0: port 1(bridge_slave_0) entered blocking state [ 1016.214988][T23293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1016.269540][ T492] bridge0: port 2(bridge_slave_1) entered blocking state [ 1016.276762][ T492] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1016.292783][T20581] usb 10-1: new high-speed USB device number 78 using dummy_hcd [ 1016.473599][T26884] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5674'. [ 1016.488687][T20581] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1016.514636][T20581] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1016.528257][T26307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1016.540100][T20581] usb 10-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 1016.564457][T20581] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1016.591259][T20581] usb 10-1: Product: syz [ 1016.611549][T20581] usb 10-1: Manufacturer: syz [ 1016.626715][T20581] usb 10-1: SerialNumber: syz [ 1016.675269][T20581] usb 10-1: config 0 descriptor?? [ 1016.691759][T26307] veth0_vlan: entered promiscuous mode [ 1016.691863][T20581] uvcvideo 10-1:0.0: Found UVC 0.00 device syz (18ec:3288) [ 1016.714396][T20581] uvcvideo 10-1:0.0: No valid video chain found. [ 1016.746840][T26307] veth1_vlan: entered promiscuous mode [ 1016.811903][T26307] veth0_macvtap: entered promiscuous mode [ 1016.838160][T26307] veth1_macvtap: entered promiscuous mode [ 1016.905259][T26307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1016.944647][T26307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1016.960257][T16723] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.970848][T16723] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.990692][T16723] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1017.017887][T16723] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1017.186274][T16723] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1017.206709][T16723] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1017.243852][ T492] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1017.253789][ T492] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1018.151485][T26982] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5679'. [ 1018.325282][T26990] netlink: 'syz.6.5680': attribute type 9 has an invalid length. [ 1018.346260][T26990] netlink: 'syz.6.5680': attribute type 11 has an invalid length. [ 1018.382735][T26990] netlink: 'syz.6.5680': attribute type 12 has an invalid length. [ 1018.409722][T26990] netlink: 210020 bytes leftover after parsing attributes in process `syz.6.5680'. [ 1019.033591][T27012] syz.1.5683 (27012): drop_caches: 2 [ 1019.103646][T20582] usb 10-1: USB disconnect, device number 78 [ 1019.163751][T27017] netlink: 136 bytes leftover after parsing attributes in process `syz.1.5683'. [ 1019.872759][T20582] usb 10-1: new high-speed USB device number 79 using dummy_hcd [ 1020.045201][T20582] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1020.060373][T20582] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1020.105219][T20582] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1020.119973][T27091] FAULT_INJECTION: forcing a failure. [ 1020.119973][T27091] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1020.139776][T20582] usb 10-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1020.150590][T20582] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1020.167342][T20582] usb 10-1: Product: syz [ 1020.171776][T27091] CPU: 1 UID: 0 PID: 27091 Comm: syz.6.5689 Tainted: G L syzkaller #0 PREEMPT(full) [ 1020.171806][T27091] Tainted: [L]=SOFTLOCKUP [ 1020.171814][T27091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1020.171826][T27091] Call Trace: [ 1020.171834][T27091] [ 1020.171842][T27091] dump_stack_lvl+0xe8/0x150 [ 1020.171873][T27091] should_fail_ex+0x412/0x560 [ 1020.171900][T27091] _copy_from_user+0x2d/0xb0 [ 1020.171927][T27091] kstrtouint_from_user+0xd6/0x180 [ 1020.171952][T27091] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1020.171991][T27091] proc_fail_nth_write+0x8e/0x210 [ 1020.172017][T27091] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1020.172047][T27091] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1020.172074][T27091] vfs_write+0x29a/0xb90 [ 1020.172102][T27091] ? __pfx_vfs_write+0x10/0x10 [ 1020.172122][T27091] ? __fget_files+0x2a/0x420 [ 1020.172151][T27091] ? __fget_files+0x3a0/0x420 [ 1020.172173][T27091] ? __fget_files+0x2a/0x420 [ 1020.172204][T27091] ksys_write+0x150/0x270 [ 1020.172225][T27091] ? __pfx_ksys_write+0x10/0x10 [ 1020.172249][T27091] ? asm_int80_emulation+0x1a/0x20 [ 1020.172273][T27091] do_int80_emulation+0x173/0x4d0 [ 1020.172292][T27091] ? trace_irq_disable+0x3b/0x150 [ 1020.172318][T27091] ? asm_int80_emulation+0x1a/0x20 [ 1020.172336][T27091] ? clear_bhb_loop+0x40/0x90 [ 1020.172354][T27091] ? clear_bhb_loop+0x40/0x90 [ 1020.172377][T27091] asm_int80_emulation+0x1a/0x20 [ 1020.172396][T27091] RIP: 0023:0xf7125b6b [ 1020.172413][T27091] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1020.172429][T27091] RSP: 002b:00000000f53e64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 1020.172449][T27091] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53e65d0 [ 1020.172462][T27091] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 1020.172474][T27091] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1020.172485][T27091] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1020.172505][T27091] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1020.172533][T27091] [ 1020.386777][T20582] usb 10-1: Manufacturer: syz [ 1020.391472][T20582] usb 10-1: SerialNumber: syz [ 1020.409908][T20582] usb 10-1: config 0 descriptor?? [ 1020.417932][T27071] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1020.425616][T27071] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1020.555508][T20582] usb 10-1: ucan: probing device on interface #0 [ 1020.695435][T14178] hid_parser_main: 4086 callbacks suppressed [ 1020.695450][T14178] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 1020.763541][T14178] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1020.884908][T27114] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1021.239400][T20582] ucan 10-1:0.0 can0: registered device [ 1021.421232][T20582] ucan 10-1:0.0 can0: firmware string: unknown [ 1021.456556][T20582] usb 10-1: USB disconnect, device number 79 [ 1021.460417][T27105] hid-generic 0000:0000:0000.001D: pid 27105 passed too large report [ 1022.208530][T27153] loop2: detected capacity change from 0 to 7 [ 1022.236557][T27153] Dev loop2: unable to read RDB block 7 [ 1022.277783][T27153] loop2: unable to read partition table [ 1022.290117][T27153] loop2: partition table beyond EOD, truncated [ 1022.302678][T27153] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1022.426341][T27160] netlink: 6 bytes leftover after parsing attributes in process `syz.6.5697'. [ 1022.469281][ T5818] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1022.479870][ T5818] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1022.487820][ T5818] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1022.500300][ T5818] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1022.508941][ T5818] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1022.590426][T17866] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1022.610190][T27179] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5696'. [ 1022.641073][T27179] netlink: 'syz.1.5696': attribute type 10 has an invalid length. [ 1022.934257][T17866] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1022.942253][T17866] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1022.969608][T17866] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1022.980462][T17866] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1023.634007][T27213] chnl_net:caif_netlink_parms(): no params data found [ 1024.027705][T27213] bridge0: port 1(bridge_slave_0) entered blocking state [ 1024.036665][T27213] bridge0: port 1(bridge_slave_0) entered disabled state [ 1024.045347][T27213] bridge_slave_0: entered allmulticast mode [ 1024.060332][T27213] bridge_slave_0: entered promiscuous mode [ 1024.094071][T27213] bridge0: port 2(bridge_slave_1) entered blocking state [ 1024.117826][T27213] bridge0: port 2(bridge_slave_1) entered disabled state [ 1024.146261][T27213] bridge_slave_1: entered allmulticast mode [ 1024.238034][T27213] bridge_slave_1: entered promiscuous mode [ 1024.358388][T27213] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1024.424663][T27213] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1024.554409][T27405] syz.7.5707 (27405) used obsolete PPPIOCDETACH ioctl [ 1024.659716][T27213] team0: Port device team_slave_0 added [ 1024.715488][T27213] team0: Port device team_slave_1 added [ 1025.026312][T27213] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1025.033596][T27213] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1025.062810][T27213] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1025.073968][T27444] netlink: 'syz.6.5709': attribute type 2 has an invalid length. [ 1025.075775][T27213] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1025.089984][ T5818] Bluetooth: hci2: command tx timeout [ 1025.119462][T27444] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist [ 1025.132837][T27213] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1025.165096][T27213] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1025.234087][T27456] netlink: 136 bytes leftover after parsing attributes in process `syz.3.5708'. [ 1025.270623][T27434] syz.3.5708 (27434): drop_caches: 2 [ 1025.346829][T27213] hsr_slave_0: entered promiscuous mode [ 1025.355330][T27213] hsr_slave_1: entered promiscuous mode [ 1025.364878][T27452] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5710'. [ 1025.418777][T27213] debugfs: 'hsr0' already exists in 'hsr' [ 1025.428350][T27213] Cannot create hsr debugfs directory [ 1026.083019][T27456] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1026.091098][T27456] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1026.234298][T27590] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5715'. [ 1026.296289][T27590] netlink: 'syz.6.5715': attribute type 10 has an invalid length. [ 1026.325480][T13981] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1026.477518][T27612] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5716'. [ 1026.512693][T13981] usb 2-1: Using ep0 maxpacket: 8 [ 1026.527434][T13981] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 1026.590260][T13981] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1026.612183][T13981] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1026.649489][T13981] usb 2-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad [ 1026.661712][T13981] usb 2-1: New USB device strings: Mfr=55, Product=237, SerialNumber=3 [ 1026.681004][T13981] usb 2-1: Product: syz [ 1026.686572][T13981] usb 2-1: Manufacturer: syz [ 1026.691282][T13981] usb 2-1: SerialNumber: syz [ 1026.743474][T13981] usb 2-1: config 0 descriptor?? [ 1026.886529][T13981] smsusb:smsusb_probe: board id=2, interface number 0 [ 1026.922718][T13981] smsusb:smsusb_probe: Device initialized with return code -19 [ 1027.123899][T13981] usb 2-1: USB disconnect, device number 76 [ 1027.305262][T27213] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1027.339413][T27213] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1027.365375][T27213] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1027.387443][T27213] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1027.619019][T27213] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1027.696239][T27213] 8021q: adding VLAN 0 to HW filter on device team0 [ 1027.713210][T16723] bridge0: port 1(bridge_slave_0) entered blocking state [ 1027.720341][T16723] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1027.770192][ T492] bridge0: port 2(bridge_slave_1) entered blocking state [ 1027.777358][ T492] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1028.056745][T27213] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1028.067702][T27213] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1028.175226][T27213] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1028.303252][T27213] veth0_vlan: entered promiscuous mode [ 1028.457843][T27213] veth1_vlan: entered promiscuous mode [ 1028.531137][T27213] veth0_macvtap: entered promiscuous mode [ 1028.544554][T27213] veth1_macvtap: entered promiscuous mode [ 1028.590794][T27213] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1028.624936][T27213] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1028.668744][T25843] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.690544][T25843] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.708699][T25843] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.741929][T25843] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.930312][T16723] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1028.949643][T16723] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1028.988116][T27753] tipc: Started in network mode [ 1028.997383][T27753] tipc: Node identity 1a7023a83fbe, cluster identity 4711 [ 1029.005518][T27753] tipc: Enabled bearer , priority 0 [ 1029.012940][T25843] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1029.027202][T27753] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5728'. [ 1029.036596][T25843] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1029.049783][T27753] syzkaller0: entered promiscuous mode [ 1029.056210][T27753] syzkaller0: entered allmulticast mode [ 1029.092836][T27753] tipc: Resetting bearer [ 1029.123068][T27752] tipc: Resetting bearer [ 1029.183445][T27752] tipc: Disabling bearer [ 1029.207317][T27763] loop2: detected capacity change from 0 to 7 [ 1029.230580][T27763] Dev loop2: unable to read RDB block 7 [ 1029.242868][T27763] loop2: unable to read partition table [ 1029.248798][T27763] loop2: partition table beyond EOD, truncated [ 1029.272824][T27763] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1029.682740][T20574] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1029.807019][T17866] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1029.817965][T17866] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1029.830762][T17866] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1029.833126][T20574] usb 4-1: Using ep0 maxpacket: 32 [ 1029.846664][T17866] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1029.857065][T17866] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1029.891283][T20574] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1029.904784][T20574] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1029.926855][T20574] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1029.946628][T20574] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1029.972466][T20574] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.999427][T20574] usb 4-1: Product: syz [ 1030.017630][T20574] usb 4-1: Manufacturer: syz [ 1030.035308][T20574] usb 4-1: SerialNumber: syz [ 1030.079143][T27775] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1030.219681][T27790] chnl_net:caif_netlink_parms(): no params data found [ 1030.330332][T27790] bridge0: port 1(bridge_slave_0) entered blocking state [ 1030.340253][T27790] bridge0: port 1(bridge_slave_0) entered disabled state [ 1030.348315][T27790] bridge_slave_0: entered allmulticast mode [ 1030.357565][T27790] bridge_slave_0: entered promiscuous mode [ 1030.366988][T27790] bridge0: port 2(bridge_slave_1) entered blocking state [ 1030.374430][T27790] bridge0: port 2(bridge_slave_1) entered disabled state [ 1030.379753][T27775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1030.382014][T27790] bridge_slave_1: entered allmulticast mode [ 1030.396396][T27775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1030.398575][T27790] bridge_slave_1: entered promiscuous mode [ 1030.420536][T27775] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1030.472152][T27790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1030.507355][T20574] usb 4-1: USB disconnect, device number 77 [ 1030.533665][T27790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1030.639784][T27790] team0: Port device team_slave_0 added [ 1030.648271][T27954] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5735'. [ 1030.661449][T27790] team0: Port device team_slave_1 added [ 1030.670908][T27954] netlink: 60 bytes leftover after parsing attributes in process `syz.9.5735'. [ 1030.731448][T27790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1030.747655][T27790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1030.803708][T27790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1030.833470][T27790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1030.840435][T27790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1030.874632][T27790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1030.947034][T27790] hsr_slave_0: entered promiscuous mode [ 1030.953494][T27790] hsr_slave_1: entered promiscuous mode [ 1030.959464][T27790] debugfs: 'hsr0' already exists in 'hsr' [ 1030.965858][T27790] Cannot create hsr debugfs directory [ 1031.284795][T28065] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5738'. [ 1031.306130][T28067] netlink: 'syz.3.5739': attribute type 2 has an invalid length. [ 1031.323415][T28067] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5739'. [ 1031.467460][T28079] loop2: detected capacity change from 0 to 7 [ 1031.501986][T18095] Dev loop2: unable to read RDB block 7 [ 1031.510073][T18095] loop2: unable to read partition table [ 1031.516457][T18095] loop2: partition table beyond EOD, truncated [ 1031.528073][T28079] Dev loop2: unable to read RDB block 7 [ 1031.530634][T27790] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.586452][T28079] loop2: unable to read partition table [ 1031.622148][T28079] loop2: partition table beyond EOD, truncated [ 1031.623295][T28079] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1031.819453][T27790] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.883034][ T5818] Bluetooth: hci4: command tx timeout [ 1032.020599][T28106] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5744'. [ 1032.041535][T27790] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1032.068576][T28106] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5744'. [ 1032.203263][T14178] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1032.292120][T27790] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1032.333320][T28113] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5746'. [ 1032.366982][T28114] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5745'. [ 1032.402188][T14178] usb 4-1: Using ep0 maxpacket: 32 [ 1032.441276][T14178] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1032.450536][T14178] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.459206][T14178] usb 4-1: Product: syz [ 1032.463582][T14178] usb 4-1: Manufacturer: syz [ 1032.468302][T14178] usb 4-1: SerialNumber: syz [ 1032.484198][T14178] usb 4-1: config 0 descriptor?? [ 1032.488126][T28125] input: syz0 as /devices/virtual/input/input54 [ 1032.507218][T14178] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1032.530730][T14178] dvb-usb: bulk message failed: -22 (4/0) [ 1032.572701][T14178] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1032.583036][T14178] dvb-usb: bulk message failed: -22 (5/0) [ 1032.589179][T14178] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1032.611261][T14178] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1032.643301][T14178] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1032.651772][T14178] usb 4-1: media controller created [ 1032.694402][T14178] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1032.720745][T28100] dvb-usb: bulk message failed: -22 (7/0) [ 1032.726562][T28100] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 1032.747010][T28138] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5747'. [ 1032.787445][T28100] ttusb2: i2c transfer failed. [ 1032.825540][T14178] usb 4-1: selecting invalid altsetting 3 [ 1032.842359][T14178] ttusb2: set interface to alts=3 failed [ 1032.982108][T14178] DVB: Unable to find symbol tda10086_attach() [ 1032.989153][T14178] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1033.019367][T14178] dvb-usb: bulk message failed: -22 (4/0) [ 1033.025676][T14178] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1033.076794][T14178] dvb-usb: bulk message failed: -22 (5/0) [ 1033.293471][T14178] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1033.304047][T14178] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1033.322139][T14178] usb 4-1: USB disconnect, device number 78 [ 1033.373287][T14178] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1033.550512][T27790] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1033.560190][T27790] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1033.570046][T27790] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1033.631987][T27790] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1033.967132][ T5818] Bluetooth: hci4: command tx timeout [ 1034.083529][T28197] ALSA: mixer_oss: invalid OSS volume '00000000000000000000012' [ 1034.172446][T28197] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5752'. [ 1034.246491][T28197] hsr_slave_1 (unregistering): left promiscuous mode [ 1034.375533][T27790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1034.422515][T27790] 8021q: adding VLAN 0 to HW filter on device team0 [ 1034.442504][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 1034.449690][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1034.495586][T25843] bridge0: port 2(bridge_slave_1) entered blocking state [ 1034.502741][T25843] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1034.594347][T27790] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1034.708265][T27790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1035.166093][T27790] veth0_vlan: entered promiscuous mode [ 1035.190648][T27790] veth1_vlan: entered promiscuous mode [ 1035.308108][T27790] veth0_macvtap: entered promiscuous mode [ 1035.335856][T27790] veth1_macvtap: entered promiscuous mode [ 1035.567595][T27790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1035.656570][T27790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1035.804938][T25843] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1035.824984][T25843] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1035.864583][T25843] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1035.892999][T25843] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1035.917367][T28255] tipc: Started in network mode [ 1035.922308][T28255] tipc: Node identity 6e775643fbaa, cluster identity 4711 [ 1035.935147][T28255] tipc: Enabled bearer , priority 0 [ 1035.943202][T28257] netlink: 32 bytes leftover after parsing attributes in process `syz.9.5760'. [ 1035.971036][T28255] syzkaller0: entered promiscuous mode [ 1035.977607][T28255] syzkaller0: entered allmulticast mode [ 1036.043422][ T5818] Bluetooth: hci4: command tx timeout [ 1036.049857][T28255] tipc: Resetting bearer [ 1036.094038][T28254] tipc: Resetting bearer [ 1036.121180][T28266] netlink: 'syz.7.5762': attribute type 8 has an invalid length. [ 1036.142133][T28266] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5762'. [ 1036.174658][T28268] netlink: 'syz.3.5763': attribute type 2 has an invalid length. [ 1036.187719][T28254] tipc: Disabling bearer [ 1036.256943][T28266] bond0: entered promiscuous mode [ 1036.274978][T28266] bond_slave_0: entered promiscuous mode [ 1036.280881][T28266] bond_slave_1: entered promiscuous mode [ 1036.312930][T28266] bridge0: entered promiscuous mode [ 1036.325807][T28282] netlink: 'syz.6.5772': attribute type 10 has an invalid length. [ 1036.334786][T28266] gretap0: entered promiscuous mode [ 1036.340268][ T29] audit: type=1804 audit(1772019374.436:2652): pid=28282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.5772" name="bus" dev="ramfs" ino=118979 res=1 errno=0 [ 1036.360522][T28282] openvswitch: netlink: Flow actions attr not present in new flow. [ 1036.378820][T28266] bond0: left promiscuous mode [ 1036.392963][T28266] bond_slave_0: left promiscuous mode [ 1036.399325][T28266] bond_slave_1: left promiscuous mode [ 1036.405681][T28266] bridge0: left promiscuous mode [ 1036.412077][T28266] gretap0: left promiscuous mode [ 1036.481641][T23294] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1036.510549][T23294] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1036.545348][T28292] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5764'. [ 1036.563094][T28287] debugfs: '1^!lIؘZ[#w^yi1*$Ve`=a' already exists in 'ieee80211' [ 1037.549271][ T93] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1037.565434][T28322] sock: sock_set_timeout: `syz.6.5768' (pid 28322) tries to set negative timeout [ 1037.581183][ T93] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1038.022670][T14178] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1038.191923][ T5818] Bluetooth: hci4: command tx timeout [ 1038.273226][T14178] usb 2-1: Using ep0 maxpacket: 8 [ 1038.291467][T14178] usb 2-1: config 0 has no interfaces? [ 1038.304441][T14178] usb 2-1: New USB device found, idVendor=0bb4, idProduct=0a46, bcdDevice=90.4a [ 1038.331581][T14178] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.346671][T14178] usb 2-1: Product: syz [ 1038.356078][T14178] usb 2-1: Manufacturer: syz [ 1038.370594][T14178] usb 2-1: SerialNumber: syz [ 1038.389265][T14178] usb 2-1: config 0 descriptor?? [ 1038.616820][T20574] usb 2-1: USB disconnect, device number 77 [ 1039.085505][T28354] fuse: Unknown parameter '' [ 1040.221311][T28375] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5779'. [ 1040.253768][T28375] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1040.744162][ T35] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.787501][T28393] ALSA: mixer_oss: invalid OSS volume '00000000000000000000012' [ 1040.893753][T28394] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5784'. [ 1041.157629][T28394] hsr_slave_1 (unregistering): left promiscuous mode [ 1041.284604][ T35] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1041.488519][T17866] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1041.513483][T17866] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1041.521446][T17866] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1041.529598][T17866] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1041.537346][T17866] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1041.587162][ T35] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1041.842073][ T35] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.591103][ T35] bridge_slave_1: left allmulticast mode [ 1042.615011][ T35] bridge_slave_1: left promiscuous mode [ 1042.643455][T28508] netlink: 'syz.1.5808': attribute type 10 has an invalid length. [ 1042.667585][T28508] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5808'. [ 1042.671911][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 1042.701182][ T35] bridge_slave_0: left allmulticast mode [ 1042.724410][ T35] bridge_slave_0: left promiscuous mode [ 1042.749834][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 1043.408544][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1043.451311][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1043.521900][ T35] bond0 (unregistering): Released all slaves [ 1043.569793][T28508] ipvlan1: entered allmulticast mode [ 1043.575472][T28508] veth0_vlan: entered allmulticast mode [ 1043.588599][T28508] bridge0: port 3(ipvlan1) entered blocking state [ 1043.623457][T28508] bridge0: port 3(ipvlan1) entered disabled state [ 1043.699196][T17866] Bluetooth: hci2: command tx timeout [ 1043.751237][T28508] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1043.915581][ T35] tipc: Left network mode [ 1044.042801][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1044.178557][T28554] FAULT_INJECTION: forcing a failure. [ 1044.178557][T28554] name failslab, interval 1, probability 0, space 0, times 0 [ 1044.201927][T28554] CPU: 0 UID: 0 PID: 28554 Comm: syz.7.5803 Tainted: G L syzkaller #0 PREEMPT(full) [ 1044.201957][T28554] Tainted: [L]=SOFTLOCKUP [ 1044.201964][T28554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1044.201976][T28554] Call Trace: [ 1044.201984][T28554] [ 1044.201992][T28554] dump_stack_lvl+0xe8/0x150 [ 1044.202023][T28554] should_fail_ex+0x412/0x560 [ 1044.202057][T28554] should_failslab+0xa8/0x100 [ 1044.202082][T28554] __kmalloc_cache_noprof+0x88/0x660 [ 1044.202104][T28554] ? sctp_add_bind_addr+0x8c/0x370 [ 1044.202132][T28554] sctp_add_bind_addr+0x8c/0x370 [ 1044.202159][T28554] sctp_copy_local_addr_list+0x314/0x4f0 [ 1044.202185][T28554] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1044.202208][T28554] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1044.202234][T28554] ? sctp_v6_is_any+0x64/0x80 [ 1044.202258][T28554] ? sctp_copy_one_addr+0x93/0x360 [ 1044.202284][T28554] sctp_bind_addr_copy+0xb3/0x3c0 [ 1044.202307][T28554] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1044.202330][T28554] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1044.202360][T28554] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1044.202392][T28554] ? __local_bh_enable_ip+0xd0/0x130 [ 1044.202416][T28554] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1044.202437][T28554] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1044.202468][T28554] sctp_sendmsg+0x1528/0x2c10 [ 1044.202509][T28554] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1044.202542][T28554] ? aa_sk_perm+0x6d5/0x900 [ 1044.202566][T28554] ? __pfx_aa_sk_perm+0x10/0x10 [ 1044.202588][T28554] ? sock_rps_record_flow+0x19/0x400 [ 1044.202616][T28554] ? inet_sendmsg+0x2f4/0x370 [ 1044.202646][T28554] __sys_sendto+0x627/0x7a0 [ 1044.202674][T28554] ? __pfx___sys_sendto+0x10/0x10 [ 1044.202721][T28554] ? fput+0xa0/0xd0 [ 1044.202746][T28554] ? ksys_write+0x242/0x270 [ 1044.202771][T28554] __ia32_sys_sendto+0xdd/0x100 [ 1044.202799][T28554] __do_fast_syscall_32+0x20d/0x640 [ 1044.202820][T28554] ? do_fast_syscall_32+0x33/0x70 [ 1044.202837][T28554] ? asm_int80_emulation+0x1a/0x20 [ 1044.202855][T28554] ? do_int80_emulation+0x274/0x4d0 [ 1044.202872][T28554] ? trace_irq_disable+0x3b/0x150 [ 1044.202902][T28554] do_fast_syscall_32+0x33/0x70 [ 1044.202921][T28554] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1044.202943][T28554] RIP: 0023:0xf7fd6f6c [ 1044.202961][T28554] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad [ 1044.202977][T28554] RSP: 002b:00000000f549650c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 1044.202996][T28554] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080847fff [ 1044.203010][T28554] RDX: 0000000000034000 RSI: 00000000000000e0 RDI: 000000008005ffe4 [ 1044.203022][T28554] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 1044.203033][T28554] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1044.203045][T28554] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1044.203078][T28554] [ 1044.550813][T28426] chnl_net:caif_netlink_parms(): no params data found [ 1044.724962][T28577] loop2: detected capacity change from 0 to 7 [ 1044.794842][T28587] netlink: 'syz.7.5806': attribute type 10 has an invalid length. [ 1044.805680][T28577] Dev loop2: unable to read RDB block 7 [ 1044.811247][T28577] loop2: unable to read partition table [ 1044.923596][T28577] loop2: partition table beyond EOD, truncated [ 1044.955608][T28577] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1045.006908][T28587] 8021q: adding VLAN 0 to HW filter on device team0 [ 1045.051339][T28587] bond0: (slave team0): Enslaving as an active interface with an up link [ 1045.306143][T28635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1045.437488][T28635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1045.524689][T28677] input: syz1 as /devices/virtual/input/input55 [ 1045.546093][T28426] bridge0: port 1(bridge_slave_0) entered blocking state [ 1045.563422][T28426] bridge0: port 1(bridge_slave_0) entered disabled state [ 1045.572941][T28426] bridge_slave_0: entered allmulticast mode [ 1045.594095][T28426] bridge_slave_0: entered promiscuous mode [ 1045.606149][T28426] bridge0: port 2(bridge_slave_1) entered blocking state [ 1045.614135][T28426] bridge0: port 2(bridge_slave_1) entered disabled state [ 1045.621589][T28426] bridge_slave_1: entered allmulticast mode [ 1045.637545][T28426] bridge_slave_1: entered promiscuous mode [ 1045.734161][ T35] hsr_slave_0: left promiscuous mode [ 1045.756109][ T35] hsr_slave_1: left promiscuous mode [ 1045.773359][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1045.802189][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1045.814789][T17866] Bluetooth: hci2: command tx timeout [ 1045.855801][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1045.876827][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1045.921402][ T35] veth1_macvtap: left promiscuous mode [ 1045.948454][ T35] veth0_macvtap: left promiscuous mode [ 1045.970996][ T35] veth1_vlan: left promiscuous mode [ 1045.983725][ T35] veth0_vlan: left promiscuous mode [ 1046.985131][ T35] team0 (unregistering): Port device team_slave_1 removed [ 1047.015749][ T35] team0 (unregistering): Port device team_slave_0 removed [ 1047.171430][T28426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1047.224969][T28426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1047.296278][T28426] team0: Port device team_slave_0 added [ 1047.312204][T28754] netlink: 136 bytes leftover after parsing attributes in process `syz.1.5815'. [ 1047.428239][T28722] syz.1.5815 (28722): drop_caches: 2 [ 1047.510097][T28426] team0: Port device team_slave_1 added [ 1047.752184][T28426] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1047.759609][T28426] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1048.012313][T17866] Bluetooth: hci2: command tx timeout [ 1048.039574][T28426] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1048.064653][T28754] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1048.074291][T28754] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1048.088120][T28426] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1048.096671][T28426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1048.123212][T28426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1048.359277][T28754] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1048.414360][T28754] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1048.445307][T28426] hsr_slave_0: entered promiscuous mode [ 1048.451980][T28426] hsr_slave_1: entered promiscuous mode [ 1048.499992][T28426] debugfs: 'hsr0' already exists in 'hsr' [ 1048.645768][T28426] Cannot create hsr debugfs directory [ 1049.387529][T20582] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1049.563002][T20582] usb 2-1: Using ep0 maxpacket: 32 [ 1049.615816][T20582] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1049.677532][T20582] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1049.694482][T20582] usb 2-1: Product: syz [ 1049.745501][T20582] usb 2-1: Manufacturer: syz [ 1049.750450][T20582] usb 2-1: SerialNumber: syz [ 1049.763553][T20582] usb 2-1: config 0 descriptor?? [ 1050.013223][T20582] airspy 2-1:0.0: usb_control_msg() failed -71 request 09 [ 1050.026664][T20582] airspy 2-1:0.0: Could not detect board [ 1050.036925][T20582] airspy 2-1:0.0: probe with driver airspy failed with error -71 [ 1050.053223][T20582] usb 2-1: USB disconnect, device number 78 [ 1050.205422][T28991] FAULT_INJECTION: forcing a failure. [ 1050.205422][T28991] name failslab, interval 1, probability 0, space 0, times 0 [ 1050.218248][T28991] CPU: 1 UID: 0 PID: 28991 Comm: syz.7.5824 Tainted: G L syzkaller #0 PREEMPT(full) [ 1050.218275][T28991] Tainted: [L]=SOFTLOCKUP [ 1050.218282][T28991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1050.218294][T28991] Call Trace: [ 1050.218303][T28991] [ 1050.218312][T28991] dump_stack_lvl+0xe8/0x150 [ 1050.218341][T28991] should_fail_ex+0x412/0x560 [ 1050.218377][T28991] should_failslab+0xa8/0x100 [ 1050.218402][T28991] __kmalloc_noprof+0xe8/0x760 [ 1050.218423][T28991] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1050.218453][T28991] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1050.218486][T28991] ? tomoyo_path_number_perm+0x219/0x630 [ 1050.218507][T28991] tomoyo_path_number_perm+0x246/0x630 [ 1050.218530][T28991] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1050.218553][T28991] ? __lock_acquire+0x6b5/0x2cf0 [ 1050.218606][T28991] ? __fget_files+0x2a/0x420 [ 1050.218635][T28991] ? __fget_files+0x3a0/0x420 [ 1050.218659][T28991] ? __fget_files+0x2a/0x420 [ 1050.218688][T28991] security_file_ioctl_compat+0xc3/0x2a0 [ 1050.218720][T28991] __ia32_compat_sys_ioctl+0x139/0x950 [ 1050.218745][T28991] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1050.218770][T28991] ? __fget_files+0x3a0/0x420 [ 1050.218801][T28991] ? fput+0xa0/0xd0 [ 1050.218827][T28991] ? ksys_write+0x242/0x270 [ 1050.218857][T28991] __do_fast_syscall_32+0x20d/0x640 [ 1050.218879][T28991] ? do_fast_syscall_32+0x33/0x70 [ 1050.218896][T28991] ? asm_int80_emulation+0x1a/0x20 [ 1050.218914][T28991] ? do_int80_emulation+0x274/0x4d0 [ 1050.218931][T28991] ? trace_irq_disable+0x3b/0x150 [ 1050.218961][T28991] do_fast_syscall_32+0x33/0x70 [ 1050.218980][T28991] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1050.219003][T28991] RIP: 0023:0xf7fd6f6c [ 1050.219020][T28991] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad [ 1050.219037][T28991] RSP: 002b:00000000f545450c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1050.219057][T28991] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000c0303e03 [ 1050.219070][T28991] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1050.219082][T28991] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1050.219093][T28991] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1050.219104][T28991] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1050.219131][T28991] [ 1050.219148][T28991] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1051.540819][T29074] netlink: 'syz.3.5829': attribute type 9 has an invalid length. [ 1051.548397][T28426] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1051.572927][T29074] netlink: 'syz.3.5829': attribute type 11 has an invalid length. [ 1051.583693][T29074] netlink: 'syz.3.5829': attribute type 12 has an invalid length. [ 1051.601789][T29074] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.5829'. [ 1051.640934][T28426] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1051.651720][T29074] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5829'. [ 1051.706842][T28426] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1051.736760][T29099] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5831'. [ 1051.792654][T29100] syz.7.5830 (29100): drop_caches: 2 [ 1051.804969][T29100] netlink: 136 bytes leftover after parsing attributes in process `syz.7.5830'. [ 1051.854733][T29099] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5831'. [ 1051.883955][T29099] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5831'. [ 1051.891365][T28426] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1052.027917][T29107] tipc: Enabled bearer , priority 0 [ 1052.090325][T29107] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5832'. [ 1052.194284][T29107] syzkaller0: entered promiscuous mode [ 1052.296028][T29107] syzkaller0: entered allmulticast mode [ 1052.796950][T29126] tipc: Resetting bearer [ 1052.818592][T29106] tipc: Resetting bearer [ 1053.248986][T29106] tipc: Disabling bearer [ 1053.371545][T20576] tipc: Node number set to 634266536 [ 1053.431837][T29147] syz.1.5835 (29147): drop_caches: 2 [ 1053.447230][T29147] netlink: 136 bytes leftover after parsing attributes in process `syz.1.5835'. [ 1053.547228][T28426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1053.574216][T29152] FAULT_INJECTION: forcing a failure. [ 1053.574216][T29152] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1053.597029][T28426] 8021q: adding VLAN 0 to HW filter on device team0 [ 1053.615346][T29152] CPU: 0 UID: 0 PID: 29152 Comm: syz.3.5837 Tainted: G L syzkaller #0 PREEMPT(full) [ 1053.615375][T29152] Tainted: [L]=SOFTLOCKUP [ 1053.615382][T29152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1053.615394][T29152] Call Trace: [ 1053.615402][T29152] [ 1053.615410][T29152] dump_stack_lvl+0xe8/0x150 [ 1053.615440][T29152] should_fail_ex+0x412/0x560 [ 1053.615465][T29152] _copy_to_user+0x31/0xb0 [ 1053.615493][T29152] drm_ioctl+0x6da/0xb80 [ 1053.615521][T29152] ? __pfx_drm_mode_dirtyfb_ioctl+0x10/0x10 [ 1053.615543][T29152] ? __pfx_drm_ioctl+0x10/0x10 [ 1053.615575][T29152] ? __fget_files+0x3a0/0x420 [ 1053.615599][T29152] ? __fget_files+0x2a/0x420 [ 1053.615623][T29152] ? drm_compat_ioctl+0x112/0x330 [ 1053.615651][T29152] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 1053.615677][T29152] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 1053.615701][T29152] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1053.615726][T29152] ? __fget_files+0x3a0/0x420 [ 1053.615756][T29152] ? fput+0xa0/0xd0 [ 1053.615780][T29152] ? ksys_write+0x242/0x270 [ 1053.615807][T29152] __do_fast_syscall_32+0x20d/0x640 [ 1053.615827][T29152] ? do_fast_syscall_32+0x33/0x70 [ 1053.615843][T29152] ? asm_int80_emulation+0x1a/0x20 [ 1053.615861][T29152] ? do_int80_emulation+0x274/0x4d0 [ 1053.615878][T29152] ? trace_irq_disable+0x3b/0x150 [ 1053.615908][T29152] do_fast_syscall_32+0x33/0x70 [ 1053.615926][T29152] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1053.615948][T29152] RIP: 0023:0xf6fdef6c [ 1053.615966][T29152] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad [ 1053.615982][T29152] RSP: 002b:00000000f53cd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1053.616001][T29152] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c01864b1 [ 1053.616015][T29152] RDX: 0000000080000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 1053.616027][T29152] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1053.616038][T29152] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1053.616050][T29152] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1053.616076][T29152] [ 1053.891173][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 1053.898318][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1054.127779][T23293] bridge0: port 2(bridge_slave_1) entered blocking state [ 1054.134982][T23293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1054.290151][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.296641][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.604138][T28426] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1054.650217][T29166] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5839'. [ 1054.713893][T28426] veth0_vlan: entered promiscuous mode [ 1054.826814][T28426] veth1_vlan: entered promiscuous mode [ 1054.939042][T29173] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5840'. [ 1054.955667][T28426] veth0_macvtap: entered promiscuous mode [ 1054.976631][T28426] veth1_macvtap: entered promiscuous mode [ 1055.058034][T28426] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1055.104518][T28426] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1055.146228][ T35] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1055.331799][ T35] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1055.350853][ T35] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1055.366672][ T35] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1055.967595][T16723] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1056.033421][T16723] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1056.133826][T16723] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1056.145143][T16723] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1056.213894][T29253] loop2: detected capacity change from 0 to 7 [ 1056.223763][T18095] Dev loop2: unable to read RDB block 7 [ 1056.229362][T18095] loop2: unable to read partition table [ 1056.253574][T18095] loop2: partition table beyond EOD, truncated [ 1056.263935][T29253] Dev loop2: unable to read RDB block 7 [ 1056.269519][T29253] loop2: unable to read partition table [ 1056.316868][T29253] loop2: partition table beyond EOD, truncated [ 1056.335084][T29253] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1056.758158][T29267] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5845'. [ 1056.803526][T29274] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5786'. [ 1056.925590][T29277] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5846'. [ 1057.091083][T29291] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5849'. [ 1057.272869][T29294] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5847'. [ 1058.580158][ T29] audit: type=1800 audit(1772019396.686:2653): pid=29294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5847" name="bus" dev="ramfs" ino=121290 res=0 errno=0 [ 1058.719504][T29328] syzkaller0: entered promiscuous mode [ 1058.725100][T29328] syzkaller0: entered allmulticast mode [ 1058.732896][ T24] usb 4-1: new full-speed USB device number 79 using dummy_hcd [ 1058.742038][T29328] 0: reclassify loop, rule prio 0, protocol 800 [ 1058.894510][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1058.921518][ T24] usb 4-1: not running at top speed; connect to a high speed hub [ 1058.941753][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1058.953905][T29337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5853'. [ 1058.972219][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1059.011040][ T24] usb 4-1: string descriptor 0 read error: -22 [ 1059.032528][ T24] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1059.062868][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1059.101123][ T24] usb 4-1: 0:2 : does not exist [ 1059.184623][T29355] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1059.210845][T29355] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5854'. [ 1059.246758][T29357] syz.6.5855 (29357): drop_caches: 2 [ 1059.255250][T29357] netlink: 136 bytes leftover after parsing attributes in process `syz.6.5855'. [ 1059.318194][T29355] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5854'. [ 1059.419817][T29403] loop2: detected capacity change from 0 to 7 [ 1059.450470][T29403] Dev loop2: unable to read RDB block 7 [ 1059.513260][T29403] loop2: unable to read partition table [ 1059.573936][T29403] loop2: partition table beyond EOD, truncated [ 1059.626513][T29403] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1059.930964][ T24] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 1059.963397][ T24] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1060.032200][ T24] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 1060.090635][ T24] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1060.152686][T20576] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1060.224738][ T24] usb 4-1: USB disconnect, device number 79 [ 1060.324280][T20576] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1060.387010][T29453] syzkaller1: entered promiscuous mode [ 1060.392585][T29453] syzkaller1: entered allmulticast mode [ 1060.409776][T20576] usb 3-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 1060.449844][T20576] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1060.523480][T20576] usb 3-1: config 0 descriptor?? [ 1060.904753][T29470] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.5862'. [ 1060.954063][T20576] hid (null): invalid report_count 50514 [ 1060.956966][T20576] hid-alps 0003:044E:1215.001E: invalid report_count 50514 [ 1060.985427][T20576] hid-alps 0003:044E:1215.001E: item 0 2 1 9 parsing failed [ 1060.986131][T20576] hid-alps 0003:044E:1215.001E: parse failed [ 1060.986230][T20576] hid-alps 0003:044E:1215.001E: probe with driver hid-alps failed with error -22 [ 1061.163745][T20576] usb 3-1: USB disconnect, device number 2 [ 1061.284404][T29493] ALSA: mixer_oss: invalid OSS volume '' [ 1062.539147][T29567] input: syz1 as /devices/virtual/input/input57 [ 1062.837864][T29586] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1063.629475][T29602] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5881'. [ 1063.725498][T29602] netlink: 'syz.6.5881': attribute type 10 has an invalid length. [ 1064.912695][T20576] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1065.073043][T20578] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1065.097772][T20576] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1065.109263][T20576] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1065.131163][T20576] usb 3-1: config 1 has no interface number 0 [ 1065.151162][T20576] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1065.189268][T20576] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1065.221884][T20576] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1065.255380][T20576] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1065.265629][T20576] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1065.273751][T20578] usb 4-1: Using ep0 maxpacket: 32 [ 1065.279808][T20576] usb 3-1: Product: syz [ 1065.297098][T20576] usb 3-1: Manufacturer: syz [ 1065.302210][T20576] usb 3-1: SerialNumber: syz [ 1065.312982][T20578] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1065.325008][T20578] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1065.339693][T20578] usb 4-1: Product: syz [ 1065.353544][T20578] usb 4-1: Manufacturer: syz [ 1065.368283][T20578] usb 4-1: SerialNumber: syz [ 1065.391976][T20578] usb 4-1: config 0 descriptor?? [ 1065.409471][T20578] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1065.435220][T20578] dvb-usb: bulk message failed: -22 (4/0) [ 1065.441114][T20578] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1065.531347][T20578] dvb-usb: bulk message failed: -22 (5/0) [ 1065.561617][T20578] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1065.615664][T20578] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1065.628829][T29630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1065.659108][T29630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1065.673627][T20578] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1065.682002][T29666] netlink: 212336 bytes leftover after parsing attributes in process `syz.1.5888'. [ 1065.704325][T20578] usb 4-1: media controller created [ 1065.735329][T20578] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1065.778467][T20578] usb 4-1: selecting invalid altsetting 3 [ 1065.778688][T29677] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5888'. [ 1065.811529][T20578] ttusb2: set interface to alts=3 failed [ 1065.905739][T20578] DVB: Unable to find symbol tda10086_attach() [ 1065.911993][T20578] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1065.942145][T20578] dvb-usb: bulk message failed: -22 (4/0) [ 1065.955594][T20578] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1065.970698][T20578] dvb-usb: bulk message failed: -22 (5/0) [ 1065.980276][T20578] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1065.991677][T20578] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1066.024218][T20578] usb 4-1: USB disconnect, device number 80 [ 1066.131680][T20578] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1066.195903][T20576] cdc_ncm 3-1:1.1: bind() failure [ 1066.209243][T29692] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5891'. [ 1066.419733][T20576] usb 3-1: USB disconnect, device number 3 [ 1066.695469][T29731] input: syz1 as /devices/virtual/input/input58 [ 1066.898958][T20576] usb 2-1: new low-speed USB device number 79 using dummy_hcd [ 1067.667750][T20576] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1067.675916][T20576] usb 2-1: config 0 has no interface number 0 [ 1067.686070][T20576] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1067.733553][T20576] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1067.782756][T20576] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1067.805227][T20576] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1067.816876][ T29] audit: type=1800 audit(1772019405.906:2654): pid=29692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.5891" name="bus" dev="ramfs" ino=121918 res=0 errno=0 [ 1067.846739][T29750] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5894'. [ 1067.881008][T29750] netlink: 'syz.2.5894': attribute type 10 has an invalid length. [ 1067.889612][T20576] usb 2-1: config 0 descriptor?? [ 1067.890405][T29750] bridge0: port 2(bridge_slave_1) entered disabled state [ 1067.902253][T29750] bridge0: port 1(bridge_slave_0) entered disabled state [ 1067.925438][T20576] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1067.961676][T29750] bridge0: port 2(bridge_slave_1) entered blocking state [ 1067.968885][T29750] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1067.976422][T29750] bridge0: port 1(bridge_slave_0) entered blocking state [ 1067.983606][T29750] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1068.086950][T29750] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1068.190126][T29722] iowarrior 2-1:0.1: Error -90 while submitting URB [ 1068.278269][T29767] debugfs: '1^!l1*$pOcɔr$Gt:u' already exists in 'ieee80211' [ 1068.932720][T29794] syz.3.5897 (29794): drop_caches: 2 [ 1068.944842][T29794] netlink: 136 bytes leftover after parsing attributes in process `syz.3.5897'. [ 1069.083936][T29805] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1069.674976][T14178] usb 2-1: USB disconnect, device number 79 [ 1070.073503][T29840] loop2: detected capacity change from 0 to 7 [ 1070.094756][T29840] Dev loop2: unable to read RDB block 7 [ 1070.101091][T29840] loop2: unable to read partition table [ 1070.213426][T29840] loop2: partition table beyond EOD, truncated [ 1070.219627][T29840] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1070.606318][T29852] Cannot find del_set index 0 as target [ 1071.070772][T29865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5909'. [ 1071.138029][T29865] macvtap1: entered promiscuous mode [ 1071.201715][T29878] CUSE: unknown device info "" [ 1071.206928][T29878] CUSE: unknown device info "" [ 1071.211788][T29878] CUSE: unknown device info "" [ 1071.216755][T29878] CUSE: unknown device info "" [ 1071.221610][T29878] CUSE: unknown device info "" [ 1071.275955][T29878] CUSE: unknown device info "" [ 1071.287973][T29878] CUSE: unknown device info "" [ 1071.296134][T29878] CUSE: unknown device info "" [ 1071.301006][T29878] CUSE: zero length info key specified [ 1071.339912][T29891] program syz.2.5915 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1071.353614][T29891] [ 1071.355958][T29891] ===================================================== [ 1071.362888][T29891] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1071.370348][T29891] syzkaller #0 Tainted: G L [ 1071.376309][T29891] ----------------------------------------------------- [ 1071.383222][T29891] syz.2.5915/29891 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1071.390919][T29891] ffffffff8e40c058 (tasklist_lock){.+.+}-{3:3}, at: send_sigio+0x101/0x370 [ 1071.399511][T29891] [ 1071.399511][T29891] and this task is already holding: [ 1071.406855][T29891] ffff88807f8158a0 (&f_owner->lock){....}-{3:3}, at: send_sigio+0x38/0x370 [ 1071.415444][T29891] which would create a new lock dependency: [ 1071.421347][T29891] (&f_owner->lock){....}-{3:3} -> (tasklist_lock){.+.+}-{3:3} [ 1071.428895][T29891] [ 1071.428895][T29891] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1071.438356][T29891] (&dev->event_lock#2){..-.}-{3:3} [ 1071.438379][T29891] [ 1071.438379][T29891] ... which became SOFTIRQ-irq-safe at: [ 1071.451225][T29891] lock_acquire+0xf0/0x2e0 [ 1071.455729][T29891] _raw_spin_lock_irqsave+0x40/0x60 [ 1071.460996][T29891] input_event+0x76/0xe0 [ 1071.465310][T29891] atp_complete_geyser_3_4+0xf0c/0x1d90 [ 1071.470926][T29891] __usb_hcd_giveback_urb+0x376/0x540 [ 1071.476361][T29891] dummy_timer+0xbbd/0x45d0 [ 1071.480931][T29891] __hrtimer_run_queues+0x53a/0xcc0 [ 1071.486196][T29891] hrtimer_run_softirq+0x182/0x5a0 [ 1071.491376][T29891] handle_softirqs+0x22a/0x870 [ 1071.496207][T29891] __irq_exit_rcu+0x5f/0x150 [ 1071.500864][T29891] irq_exit_rcu+0x9/0x30 [ 1071.505178][T29891] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1071.510877][T29891] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1071.516923][T29891] _raw_spin_unlock_irqrestore+0x47/0x80 [ 1071.522627][T29891] dummy_urb_enqueue+0x58a/0x780 [ 1071.527628][T29891] usb_hcd_submit_urb+0x328/0x1b70 [ 1071.532802][T29891] atp_open+0x60/0x90 [ 1071.536854][T29891] input_open_device+0x1f8/0x3b0 [ 1071.541852][T29891] mousedev_open_device+0xcc/0x150 [ 1071.547028][T29891] mousedev_open+0x2ef/0x4a0 [ 1071.551680][T29891] chrdev_open+0x4cd/0x5e0 [ 1071.556159][T29891] do_dentry_open+0x785/0x14e0 [ 1071.560995][T29891] vfs_open+0x3b/0x340 [ 1071.565132][T29891] path_openat+0x2e08/0x3860 [ 1071.569797][T29891] do_file_open+0x23e/0x4a0 [ 1071.574372][T29891] do_sys_openat2+0x113/0x200 [ 1071.579120][T29891] __x64_sys_openat+0x138/0x170 [ 1071.584038][T29891] do_syscall_64+0x14d/0xf80 [ 1071.588699][T29891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1071.594655][T29891] [ 1071.594655][T29891] to a SOFTIRQ-irq-unsafe lock: [ 1071.601648][T29891] (tasklist_lock){.+.+}-{3:3} [ 1071.601667][T29891] [ 1071.601667][T29891] ... which became SOFTIRQ-irq-unsafe at: [ 1071.614292][T29891] ... [ 1071.614298][T29891] lock_acquire+0xf0/0x2e0 [ 1071.621338][T29891] _raw_read_lock+0x36/0x50 [ 1071.625907][T29891] __do_wait+0xde/0x740 [ 1071.630126][T29891] do_wait+0x1e7/0x540 [ 1071.634276][T29891] kernel_wait+0xd6/0x1c0 [ 1071.638670][T29891] call_usermodehelper_exec_work+0xbe/0x230 [ 1071.644633][T29891] process_scheduled_works+0xb02/0x1830 [ 1071.650244][T29891] worker_thread+0xa50/0xfc0 [ 1071.654901][T29891] kthread+0x388/0x470 [ 1071.659034][T29891] ret_from_fork+0x51e/0xb90 [ 1071.663691][T29891] ret_from_fork_asm+0x1a/0x30 [ 1071.668527][T29891] [ 1071.668527][T29891] other info that might help us debug this: [ 1071.668527][T29891] [ 1071.678731][T29891] Chain exists of: [ 1071.678731][T29891] &dev->event_lock#2 --> &f_owner->lock --> tasklist_lock [ 1071.678731][T29891] [ 1071.691742][T29891] Possible interrupt unsafe locking scenario: [ 1071.691742][T29891] [ 1071.700038][T29891] CPU0 CPU1 [ 1071.705395][T29891] ---- ---- [ 1071.710736][T29891] lock(tasklist_lock); [ 1071.714957][T29891] local_irq_disable(); [ 1071.721686][T29891] lock(&dev->event_lock#2); [ 1071.728864][T29891] lock(&f_owner->lock); [ 1071.735688][T29891] [ 1071.739116][T29891] lock(&dev->event_lock#2); [ 1071.743954][T29891] [ 1071.743954][T29891] *** DEADLOCK *** [ 1071.743954][T29891] [ 1071.752072][T29891] 5 locks held by syz.2.5915/29891: [ 1071.757247][T29891] #0: ffff888040e9e420 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 1071.766359][T29891] #1: ffff88802903a320 (&type->i_mutex_dir_key#5){++++}-{4:4}, at: path_openat+0xb4c/0x3860 [ 1071.776512][T29891] #2: ffffffff9a2e8278 (&fsnotify_mark_srcu){.+.?}-{0:0}, at: fsnotify+0x74c/0x1ae0 [ 1071.785978][T29891] #3: ffff888058ce18d0 (&mark->lock){+.+.}-{3:3}, at: dnotify_handle_event+0x62/0x440 [ 1071.795603][T29891] #4: ffff88807f8158a0 (&f_owner->lock){....}-{3:3}, at: send_sigio+0x38/0x370 [ 1071.804628][T29891] [ 1071.804628][T29891] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1071.815043][T29891] -> (&dev->event_lock#2){..-.}-{3:3} { [ 1071.820849][T29891] IN-SOFTIRQ-W at: [ 1071.825064][T29891] lock_acquire+0xf0/0x2e0 [ 1071.831646][T29891] _raw_spin_lock_irqsave+0x40/0x60 [ 1071.838993][T29891] input_event+0x76/0xe0 [ 1071.845387][T29891] atp_complete_geyser_3_4+0xf0c/0x1d90 [ 1071.853087][T29891] __usb_hcd_giveback_urb+0x376/0x540 [ 1071.860613][T29891] dummy_timer+0xbbd/0x45d0 [ 1071.867266][T29891] __hrtimer_run_queues+0x53a/0xcc0 [ 1071.874617][T29891] hrtimer_run_softirq+0x182/0x5a0 [ 1071.881881][T29891] handle_softirqs+0x22a/0x870 [ 1071.888809][T29891] __irq_exit_rcu+0x5f/0x150 [ 1071.895559][T29891] irq_exit_rcu+0x9/0x30 [ 1071.901950][T29891] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1071.909734][T29891] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1071.917890][T29891] _raw_spin_unlock_irqrestore+0x47/0x80 [ 1071.925675][T29891] dummy_urb_enqueue+0x58a/0x780 [ 1071.932761][T29891] usb_hcd_submit_urb+0x328/0x1b70 [ 1071.940023][T29891] atp_open+0x60/0x90 [ 1071.946189][T29891] input_open_device+0x1f8/0x3b0 [ 1071.953273][T29891] mousedev_open_device+0xcc/0x150 [ 1071.960532][T29891] mousedev_open+0x2ef/0x4a0 [ 1071.967268][T29891] chrdev_open+0x4cd/0x5e0 [ 1071.973836][T29891] do_dentry_open+0x785/0x14e0 [ 1071.980752][T29891] vfs_open+0x3b/0x340 [ 1071.986966][T29891] path_openat+0x2e08/0x3860 [ 1071.993705][T29891] do_file_open+0x23e/0x4a0 [ 1072.000351][T29891] do_sys_openat2+0x113/0x200 [ 1072.007172][T29891] __x64_sys_openat+0x138/0x170 [ 1072.014174][T29891] do_syscall_64+0x14d/0xf80 [ 1072.020914][T29891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1072.028950][T29891] INITIAL USE at: [ 1072.033082][T29891] lock_acquire+0xf0/0x2e0 [ 1072.039559][T29891] _raw_spin_lock_irqsave+0x40/0x60 [ 1072.046818][T29891] input_inject_event+0xa5/0x340 [ 1072.053819][T29891] kbd_led_trigger_activate+0xbc/0x100 [ 1072.061335][T29891] led_trigger_set+0x535/0x960 [ 1072.068159][T29891] led_trigger_set_default+0x260/0x2a0 [ 1072.075682][T29891] led_classdev_register_ext+0x787/0x9c0 [ 1072.083374][T29891] input_leds_connect+0x517/0x790 [ 1072.090456][T29891] input_register_device+0xd00/0x1160 [ 1072.097884][T29891] atkbd_connect+0x731/0xa50 [ 1072.104537][T29891] serio_driver_probe+0x82/0xd0 [ 1072.111444][T29891] really_probe+0x267/0xaf0 [ 1072.118008][T29891] __driver_probe_device+0x18c/0x320 [ 1072.125377][T29891] driver_probe_device+0x4f/0x240 [ 1072.132469][T29891] __driver_attach+0x3e7/0x710 [ 1072.139299][T29891] bus_for_each_dev+0x23b/0x2c0 [ 1072.146219][T29891] serio_handle_event+0x20a/0xdd0 [ 1072.153313][T29891] process_scheduled_works+0xb02/0x1830 [ 1072.160935][T29891] worker_thread+0xa50/0xfc0 [ 1072.167605][T29891] kthread+0x388/0x470 [ 1072.173741][T29891] ret_from_fork+0x51e/0xb90 [ 1072.180405][T29891] ret_from_fork_asm+0x1a/0x30 [ 1072.187240][T29891] } [ 1072.189981][T29891] ... key at: [] input_allocate_device.__key.7+0x0/0x20 [ 1072.199293][T29891] -> (&client->buffer_lock){....}-{3:3} { [ 1072.205189][T29891] INITIAL USE at: [ 1072.209241][T29891] lock_acquire+0xf0/0x2e0 [ 1072.215555][T29891] _raw_spin_lock+0x2e/0x40 [ 1072.221958][T29891] evdev_handle_get_val+0x70/0x9f0 [ 1072.228969][T29891] evdev_ioctl_handler+0x127b/0x1fe0 [ 1072.236163][T29891] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 1072.243527][T29891] __do_fast_syscall_32+0x20d/0x640 [ 1072.250619][T29891] do_fast_syscall_32+0x33/0x70 [ 1072.257362][T29891] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1072.265588][T29891] } [ 1072.268245][T29891] ... key at: [] evdev_open.__key.27+0x0/0x20 [ 1072.276557][T29891] ... acquired at: [ 1072.280512][T29891] _raw_spin_lock+0x2e/0x40 [ 1072.285179][T29891] evdev_handle_get_val+0x70/0x9f0 [ 1072.290450][T29891] evdev_ioctl_handler+0x127b/0x1fe0 [ 1072.295894][T29891] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 1072.301511][T29891] __do_fast_syscall_32+0x20d/0x640 [ 1072.306867][T29891] do_fast_syscall_32+0x33/0x70 [ 1072.311875][T29891] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1072.318363][T29891] [ 1072.320671][T29891] -> (&new->fa_lock){....}-{3:3} { [ 1072.325878][T29891] INITIAL USE at: [ 1072.329844][T29891] lock_acquire+0xf0/0x2e0 [ 1072.335985][T29891] _raw_write_lock_irq+0x3d/0x50 [ 1072.342648][T29891] fasync_remove_entry+0xf1/0x1c0 [ 1072.349389][T29891] sock_fasync+0x85/0xf0 [ 1072.355353][T29891] __fput+0x8a5/0xa70 [ 1072.361062][T29891] task_work_run+0x1d9/0x270 [ 1072.367372][T29891] exit_to_user_mode_loop+0xed/0x480 [ 1072.374398][T29891] __do_fast_syscall_32+0x415/0x640 [ 1072.381315][T29891] do_fast_syscall_32+0x33/0x70 [ 1072.387900][T29891] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1072.395970][T29891] INITIAL READ USE at: [ 1072.400375][T29891] lock_acquire+0xf0/0x2e0 [ 1072.406959][T29891] _raw_read_lock_irqsave+0x48/0x60 [ 1072.414324][T29891] kill_fasync+0x199/0x4d0 [ 1072.420920][T29891] sock_wake_async+0x137/0x160 [ 1072.427843][T29891] unix_write_space+0x3bb/0x470 [ 1072.434859][T29891] sock_wfree+0x1d9/0x750 [ 1072.441350][T29891] unix_destruct_scm+0x15f/0x1b0 [ 1072.448444][T29891] skb_release_head_state+0x358/0x360 [ 1072.455978][T29891] __kfree_skb+0x24/0x210 [ 1072.462467][T29891] skb_queue_purge_reason+0x2ee/0x3b0 [ 1072.469993][T29891] unix_dgram_connect+0x773/0xc20 [ 1072.477177][T29891] __sys_connect+0x312/0x450 [ 1072.483927][T29891] __ia32_sys_connect+0x7a/0x90 [ 1072.490942][T29891] __do_fast_syscall_32+0x20d/0x640 [ 1072.498296][T29891] do_fast_syscall_32+0x33/0x70 [ 1072.505301][T29891] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1072.513793][T29891] } [ 1072.516361][T29891] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1072.525118][T29891] ... acquired at: [ 1072.528989][T29891] _raw_read_lock_irqsave+0x48/0x60 [ 1072.534351][T29891] kill_fasync+0x199/0x4d0 [ 1072.538922][T29891] evdev_pass_values+0x627/0xbd0 [ 1072.544018][T29891] evdev_events+0x1e6/0x340 [ 1072.548680][T29891] input_pass_values+0x288/0x890 [ 1072.553776][T29891] input_event_dispose+0x330/0x6b0 [ 1072.559058][T29891] input_inject_event+0x1dd/0x340 [ 1072.564253][T29891] evdev_write+0x325/0x4c0 [ 1072.568861][T29891] vfs_write+0x29a/0xb90 [ 1072.573264][T29891] ksys_write+0x150/0x270 [ 1072.577750][T29891] __do_fast_syscall_32+0x20d/0x640 [ 1072.583110][T29891] do_fast_syscall_32+0x33/0x70 [ 1072.588116][T29891] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1072.594604][T29891] [ 1072.596909][T29891] -> (&f_owner->lock){....}-{3:3} { [ 1072.602117][T29891] INITIAL USE at: [ 1072.606001][T29891] lock_acquire+0xf0/0x2e0 [ 1072.611969][T29891] _raw_write_lock_irq+0x3d/0x50 [ 1072.618459][T29891] __f_setown+0x67/0x370 [ 1072.624249][T29891] generic_setlease+0xacf/0xff0 [ 1072.630651][T29891] do_fcntl_add_lease+0x35e/0x470 [ 1072.637227][T29891] fcntl_setlease+0x123/0x180 [ 1072.643459][T29891] do_fcntl+0x8b3/0x1a20 [ 1072.649247][T29891] do_compat_fcntl64+0x51e/0x7e0 [ 1072.655737][T29891] __do_fast_syscall_32+0x20d/0x640 [ 1072.662485][T29891] do_fast_syscall_32+0x33/0x70 [ 1072.668921][T29891] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1072.676797][T29891] INITIAL READ USE at: [ 1072.681117][T29891] lock_acquire+0xf0/0x2e0 [ 1072.687513][T29891] _raw_read_lock_irqsave+0x48/0x60 [ 1072.694705][T29891] send_sigio+0x38/0x370 [ 1072.700926][T29891] kill_fasync+0x24d/0x4d0 [ 1072.707321][T29891] n_tty_receive_buf_common+0x974/0x1300 [ 1072.714934][T29891] tty_port_default_receive_buf+0x6e/0xa0 [ 1072.722642][T29891] flush_to_ldisc+0x24a/0x6e0 [ 1072.729300][T29891] process_scheduled_works+0xb02/0x1830 [ 1072.736830][T29891] worker_thread+0xa50/0xfc0 [ 1072.743404][T29891] kthread+0x388/0x470 [ 1072.749449][T29891] ret_from_fork+0x51e/0xb90 [ 1072.756023][T29891] ret_from_fork_asm+0x1a/0x30 [ 1072.762774][T29891] } [ 1072.765253][T29891] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1072.774091][T29891] ... acquired at: [ 1072.777874][T29891] _raw_read_lock_irqsave+0x48/0x60 [ 1072.783235][T29891] send_sigio+0x38/0x370 [ 1072.787631][T29891] kill_fasync+0x24d/0x4d0 [ 1072.792203][T29891] n_tty_receive_buf_common+0x974/0x1300 [ 1072.797991][T29891] tty_port_default_receive_buf+0x6e/0xa0 [ 1072.803875][T29891] flush_to_ldisc+0x24a/0x6e0 [ 1072.808709][T29891] process_scheduled_works+0xb02/0x1830 [ 1072.814419][T29891] worker_thread+0xa50/0xfc0 [ 1072.819178][T29891] kthread+0x388/0x470 [ 1072.823401][T29891] ret_from_fork+0x51e/0xb90 [ 1072.828152][T29891] ret_from_fork_asm+0x1a/0x30 [ 1072.833078][T29891] [ 1072.835384][T29891] [ 1072.835384][T29891] the dependencies between the lock to be acquired [ 1072.835393][T29891] and SOFTIRQ-irq-unsafe lock: [ 1072.848867][T29891] -> (tasklist_lock){.+.+}-{3:3} { [ 1072.853982][T29891] HARDIRQ-ON-R at: [ 1072.857944][T29891] lock_acquire+0xf0/0x2e0 [ 1072.864002][T29891] _raw_read_lock+0x36/0x50 [ 1072.870146][T29891] __do_wait+0xde/0x740 [ 1072.875967][T29891] do_wait+0x1e7/0x540 [ 1072.881670][T29891] kernel_wait+0xd6/0x1c0 [ 1072.887635][T29891] call_usermodehelper_exec_work+0xbe/0x230 [ 1072.895166][T29891] process_scheduled_works+0xb02/0x1830 [ 1072.902350][T29891] worker_thread+0xa50/0xfc0 [ 1072.908576][T29891] kthread+0x388/0x470 [ 1072.914280][T29891] ret_from_fork+0x51e/0xb90 [ 1072.920525][T29891] ret_from_fork_asm+0x1a/0x30 [ 1072.926930][T29891] SOFTIRQ-ON-R at: [ 1072.930893][T29891] lock_acquire+0xf0/0x2e0 [ 1072.936947][T29891] _raw_read_lock+0x36/0x50 [ 1072.943089][T29891] __do_wait+0xde/0x740 [ 1072.948879][T29891] do_wait+0x1e7/0x540 [ 1072.954581][T29891] kernel_wait+0xd6/0x1c0 [ 1072.960542][T29891] call_usermodehelper_exec_work+0xbe/0x230 [ 1072.968070][T29891] process_scheduled_works+0xb02/0x1830 [ 1072.975250][T29891] worker_thread+0xa50/0xfc0 [ 1072.981475][T29891] kthread+0x388/0x470 [ 1072.987185][T29891] ret_from_fork+0x51e/0xb90 [ 1072.993438][T29891] ret_from_fork_asm+0x1a/0x30 [ 1072.999847][T29891] INITIAL USE at: [ 1073.003731][T29891] lock_acquire+0xf0/0x2e0 [ 1073.009695][T29891] _raw_write_lock_irq+0x3d/0x50 [ 1073.016190][T29891] copy_process+0x247a/0x3cf0 [ 1073.022420][T29891] kernel_clone+0x248/0x8e0 [ 1073.028478][T29891] user_mode_thread+0x110/0x180 [ 1073.034883][T29891] rest_init+0x23/0x300 [ 1073.040588][T29891] start_kernel+0x385/0x3d0 [ 1073.046644][T29891] x86_64_start_reservations+0x24/0x30 [ 1073.053653][T29891] x86_64_start_kernel+0x143/0x1c0 [ 1073.060352][T29891] common_startup_64+0x13e/0x147 [ 1073.066848][T29891] INITIAL READ USE at: [ 1073.071164][T29891] lock_acquire+0xf0/0x2e0 [ 1073.077564][T29891] _raw_read_lock+0x36/0x50 [ 1073.084051][T29891] __do_wait+0xde/0x740 [ 1073.090187][T29891] do_wait+0x1e7/0x540 [ 1073.096239][T29891] kernel_wait+0xd6/0x1c0 [ 1073.102550][T29891] call_usermodehelper_exec_work+0xbe/0x230 [ 1073.110425][T29891] process_scheduled_works+0xb02/0x1830 [ 1073.117953][T29891] worker_thread+0xa50/0xfc0 [ 1073.124528][T29891] kthread+0x388/0x470 [ 1073.130578][T29891] ret_from_fork+0x51e/0xb90 [ 1073.137160][T29891] ret_from_fork_asm+0x1a/0x30 [ 1073.143913][T29891] } [ 1073.146405][T29891] ... key at: [] tasklist_lock+0x18/0x40 [ 1073.154113][T29891] ... acquired at: [ 1073.157897][T29891] _raw_read_lock+0x36/0x50 [ 1073.162564][T29891] send_sigio+0x101/0x370 [ 1073.167051][T29891] dnotify_handle_event+0x169/0x440 [ 1073.172406][T29891] fsnotify+0x1831/0x1ae0 [ 1073.176901][T29891] path_openat+0x15c2/0x3860 [ 1073.181645][T29891] do_file_open+0x23e/0x4a0 [ 1073.186303][T29891] do_sys_openat2+0x113/0x200 [ 1073.191143][T29891] __ia32_compat_sys_openat+0x131/0x160 [ 1073.196857][T29891] __do_fast_syscall_32+0x20d/0x640 [ 1073.202246][T29891] do_fast_syscall_32+0x33/0x70 [ 1073.207261][T29891] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1073.213753][T29891] [ 1073.216059][T29891] [ 1073.216059][T29891] stack backtrace: [ 1073.221932][T29891] CPU: 1 UID: 0 PID: 29891 Comm: syz.2.5915 Tainted: G L syzkaller #0 PREEMPT(full) [ 1073.221954][T29891] Tainted: [L]=SOFTLOCKUP [ 1073.221960][T29891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1073.221971][T29891] Call Trace: [ 1073.221979][T29891] [ 1073.221987][T29891] dump_stack_lvl+0xe8/0x150 [ 1073.222009][T29891] __lock_acquire+0x2a94/0x2cf0 [ 1073.222036][T29891] lock_acquire+0xf0/0x2e0 [ 1073.222053][T29891] ? send_sigio+0x101/0x370 [ 1073.222071][T29891] _raw_read_lock+0x36/0x50 [ 1073.222091][T29891] ? send_sigio+0x101/0x370 [ 1073.222104][T29891] send_sigio+0x101/0x370 [ 1073.222119][T29891] dnotify_handle_event+0x169/0x440 [ 1073.222139][T29891] fsnotify+0x1831/0x1ae0 [ 1073.222161][T29891] ? ktime_get_coarse_real_ts64_mg+0x1c5/0x1e0 [ 1073.222184][T29891] ? fsnotify+0x74c/0x1ae0 [ 1073.222204][T29891] ? __pfx_fsnotify+0x10/0x10 [ 1073.222224][T29891] ? do_raw_spin_unlock+0xf5/0x210 [ 1073.222240][T29891] ? d_make_persistent+0x10f/0x180 [ 1073.222257][T29891] ? shmem_mknod+0x2ea/0x360 [ 1073.222275][T29891] path_openat+0x15c2/0x3860 [ 1073.222300][T29891] ? __pfx_path_openat+0x10/0x10 [ 1073.222314][T29891] ? __ia32_compat_sys_openat+0x131/0x160 [ 1073.222338][T29891] ? __lock_acquire+0x6b5/0x2cf0 [ 1073.222358][T29891] do_file_open+0x23e/0x4a0 [ 1073.222374][T29891] ? __pfx_do_file_open+0x10/0x10 [ 1073.222395][T29891] ? _raw_spin_unlock+0x28/0x50 [ 1073.222414][T29891] ? alloc_fd+0x64b/0x6c0 [ 1073.222436][T29891] do_sys_openat2+0x113/0x200 [ 1073.222457][T29891] ? __pfx_do_sys_openat2+0x10/0x10 [ 1073.222478][T29891] ? rcu_is_watching+0x15/0xb0 [ 1073.222499][T29891] __ia32_compat_sys_openat+0x131/0x160 [ 1073.222522][T29891] __do_fast_syscall_32+0x20d/0x640 [ 1073.222540][T29891] ? do_fast_syscall_32+0x33/0x70 [ 1073.222554][T29891] ? asm_int80_emulation+0x1a/0x20 [ 1073.222569][T29891] ? do_int80_emulation+0x274/0x4d0 [ 1073.222583][T29891] ? trace_irq_disable+0x3b/0x150 [ 1073.222606][T29891] do_fast_syscall_32+0x33/0x70 [ 1073.222620][T29891] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1073.222639][T29891] RIP: 0023:0xf701ef6c [ 1073.222654][T29891] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1073.222668][T29891] RSP: 002b:00000000f540d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 1073.222685][T29891] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000080 [ 1073.222696][T29891] RDX: 000000000000275a RSI: 0000000000000000 RDI: 0000000000000000 [ 1073.222706][T29891] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1073.222720][T29891] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1073.222730][T29891] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1073.222745][T29891] [ 1075.015208][T25843] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1075.025288][T25843] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1075.036355][T25843] bond0 (unregistering): Released all slaves [ 1075.043932][T25843] bond1 (unregistering): Released all slaves [ 1075.534276][T25843] hsr_slave_0: left promiscuous mode [ 1075.540061][T25843] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1075.548380][T25843] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1075.628994][T25843] team0 (unregistering): Port device team_slave_1 removed [ 1075.639642][T25843] team0 (unregistering): Port device team_slave_0 removed [ 1075.979494][T16723] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1076.052075][T16723] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1076.085136][T16723] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1076.121715][T16723] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1076.254715][T16723] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1076.295663][T16723] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1076.338185][T16723] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1076.408932][T16723] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1076.789138][T16723] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1076.848740][T16723] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1076.902957][T16723] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1076.963097][T16723] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.060297][T16723] bridge_slave_1: left allmulticast mode [ 1077.066095][T16723] bridge_slave_1: left promiscuous mode [ 1077.071938][T16723] bridge0: port 2(bridge_slave_1) entered disabled state [ 1077.081711][T16723] bridge_slave_0: left allmulticast mode [ 1077.087723][T16723] bridge_slave_0: left promiscuous mode [ 1077.093510][T16723] bridge0: port 1(bridge_slave_0) entered disabled state [ 1077.101879][T16723] bridge_slave_1: left allmulticast mode [ 1077.107719][T16723] bridge_slave_1: left promiscuous mode [ 1077.113481][T16723] bridge0: port 2(bridge_slave_1) entered disabled state [ 1077.121328][T16723] bridge_slave_0: left allmulticast mode [ 1077.127130][T16723] bridge_slave_0: left promiscuous mode [ 1077.133421][T16723] bridge0: port 1(bridge_slave_0) entered disabled state [ 1077.141867][T16723] bridge0: port 3(dummy0) entered disabled state [ 1077.150520][T16723] bridge_slave_1: left allmulticast mode [ 1077.156274][T16723] bridge_slave_1: left promiscuous mode [ 1077.161875][T16723] bridge0: port 2(bridge_slave_1) entered disabled state [ 1077.169725][T16723] bridge_slave_0: left allmulticast mode [ 1077.175385][T16723] bridge_slave_0: left promiscuous mode [ 1077.180982][T16723] bridge0: port 1(bridge_slave_0) entered disabled state [ 1077.190022][T16723] bridge_slave_1: left allmulticast mode [ 1077.195752][T16723] bridge_slave_1: left promiscuous mode [ 1077.201356][T16723] bridge0: port 2(bridge_slave_1) entered disabled state [ 1077.209379][T16723] bridge_slave_0: left allmulticast mode [ 1077.215097][T16723] bridge_slave_0: left promiscuous mode [ 1077.220688][T16723] bridge0: port 1(bridge_slave_0) entered disabled state [ 1077.318592][T16723] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1077.328532][T16723] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1077.338046][T16723] bond0 (unregistering): Released all slaves [ 1077.360714][T16723] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1077.382171][T16723] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1077.391881][T16723] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1077.402191][T16723] bond0 (unregistering): Released all slaves [ 1077.454741][T16723] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1077.505705][T16723] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1077.515162][T16723] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1077.524602][T16723] bond0 (unregistering): (slave team0): Releasing backup interface [ 1077.533360][T16723] bond0 (unregistering): Released all slaves [ 1077.540713][T16723] bond1 (unregistering): Released all slaves [ 1077.550752][T16723] bond2 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1077.559940][T16723] bond2 (unregistering): Released all slaves [ 1077.568381][T16723] bond3 (unregistering): Released all slaves [ 1077.715003][T16723] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1077.724654][T16723] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1077.734566][T16723] bond0 (unregistering): Released all slaves [ 1077.825569][T16723] tipc: Left network mode [ 1077.839351][T16723] tipc: Left network mode [ 1078.536497][T16723] hsr_slave_0: left promiscuous mode [ 1078.542101][T16723] hsr_slave_1: left promiscuous mode [ 1078.547851][T16723] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1078.555327][T16723] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1078.562978][T16723] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1078.570358][T16723] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1078.581045][T16723] hsr_slave_0: left promiscuous mode [ 1078.587094][T16723] hsr_slave_1: left promiscuous mode [ 1078.592740][T16723] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1078.600106][T16723] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1078.609793][T16723] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1078.617260][T16723] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1078.626418][T16723] hsr_slave_0: left promiscuous mode [ 1078.631998][T16723] hsr_slave_1: left promiscuous mode [ 1078.637714][T16723] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1078.645173][T16723] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1078.654522][T16723] hsr_slave_0: left promiscuous mode [ 1078.660084][T16723] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1078.667759][T16723] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1078.676862][T16723] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1078.685787][T16723] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1078.698503][T16723] veth1_macvtap: left promiscuous mode [ 1078.704024][T16723] veth0_macvtap: left promiscuous mode [ 1078.710049][T16723] veth1_macvtap: left promiscuous mode [ 1078.715791][T16723] veth0_macvtap: left promiscuous mode [ 1078.721301][T16723] veth1_vlan: left promiscuous mode [ 1078.727160][T16723] veth0_vlan: left promiscuous mode [ 1078.733863][T16723] veth1_macvtap: left promiscuous mode [ 1078.739311][T16723] veth0_macvtap: left promiscuous mode [ 1078.744896][T16723] veth1_vlan: left promiscuous mode [ 1078.750104][T16723] veth0_vlan: left promiscuous mode [ 1078.866748][T16723] team0 (unregistering): Port device team_slave_1 removed [ 1078.876549][T16723] team0 (unregistering): Port device team_slave_0 removed [ 1078.981733][T16723] team0 (unregistering): Port device team_slave_1 removed [ 1078.991549][T16723] team0 (unregistering): Port device team_slave_0 removed [ 1079.091503][T16723] team0 (unregistering): Port device team_slave_1 removed [ 1079.101713][T16723] team0 (unregistering): Port device team_slave_0 removed [ 1079.205440][T16723] team0 (unregistering): Port device team_slave_1 removed [ 1079.215367][T16723] team0 (unregistering): Port device team_slave_0 removed [ 1079.892700][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1079.988028][T16723] IPVS: stop unused estimator thread 0...