last executing test programs: 19m43.527516736s ago: executing program 1 (id=1886): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x1c, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x54}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x21}}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x10000000}}}, &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 19m43.128830453s ago: executing program 1 (id=1888): r0 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="671723d7c6012cbf5d6c1fd6765fcaa30ac25684ee8efa5ac2830519557c1b8d1e03fed31abcd539", 0x28}], 0x1}, 0x20008b88) 19m42.996955265s ago: executing program 1 (id=1890): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f0000000700)={{0x1, 0x2, 0xffffffff, 0x3}, 0x4, 0xc, 0x5}) sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f0000000280)={0x244, 0x0, 0x300, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x9, 0x20}}}}, [@NL80211_ATTR_TESTDATA={0x30, 0x45, "e8ffeb404ed78b98108c6c32e2f1dcda3802e6737db7780ecd22bb50e68df722dfc5396c27410e2fbd7bc070"}, @NL80211_ATTR_TESTDATA={0x33, 0x45, "b047ff1f5cdee44e5062e08240f5701cefbc1b1aaa4f71058139c0af10db51a392c6441dee80c5b68422d6237b0bdc"}, @NL80211_ATTR_TESTDATA={0xed, 0x45, "b8d1a8a9774b5bd47f7ab13932e88c7d52c00e5eb512be34389d2e3e78a416b39e89e486a48588e5c80a48042715732d11f9ebd37e297771df8618c44f4961b2a0f4597253ee7debeae174a729471f34c34e4b5759e8ccd3528e445555386bdfc1a29c39dbe82d05059c2727579dc8ac0ebb6df10c2c73f5c1923f39c74860f8cdaf8a5dd7856ecec0bdf9a98c81e2efb7efe560aa5c3419b539a838900eca755d7ed730cc8a8be2bf1ef352fb3cb962aaacb6222f850ab6171037b971d8ef74dcc92725f6817f1fe5bb56b5724ab335940efa99cc208de85262cb75e4165f72640c82b430e6866ff0"}, @NL80211_ATTR_TESTDATA={0xc5, 0x45, "5f0e0ecda763a0adecbb5a76798bb444befde9d5636196e9fc4e45848831e4618b5b3e24a141296a9ef4f372c08a4c508a6aa6e5cad8211c7d0fb255b1cabd7a875c1d970d3b0058253340b75018ee3281f0bfcbd19b33efef85ca33de7459febbf5370c6daf4517c85e9a39406c23c1d313b51628e035864d2782af21bdff7569bee27dae5667f88daafed170b0f46ff1bc8882218d0d8499e4f396289bc5d3f54a8dfe6841146b77d92c10f64161e2234dd2ade880f5dd5a101b38ac61423273"}]}, 0x244}, 0x1, 0x0, 0x0, 0x40801}, 0x8000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001940)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000001980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000019c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001a40)={0x0, 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001b40)=ANY=[@ANYBLOB="3c0000001000390400"/20, @ANYRES32=r5, @ANYBLOB="01980000000000001c000d0018210a8014000700fc010000000000000000000000000001"], 0x3c}, 0x1, 0x0, 0x0, 0xc811}, 0x8000) connect$can_bcm(0xffffffffffffffff, &(0x7f0000001b80)={0x1d, r5}, 0x10) r6 = syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0500000074000000430000000200000000000000", @ANYRES32, @ANYBLOB="0010000000000000f4006cfc3cccfbc10316d841d8b94ee8980f380156752e28cb1bf8f64dab3dc1c2acd79edf104dbd9257ab40f5a4e09c39622f79abc6bffa5f90d3", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) ioctl$KVM_CREATE_PIT2(r9, 0x4040ae77, &(0x7f0000000080)={0x9}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff}) fcntl$lock(r11, 0x6, &(0x7f00000005c0)={0x1, 0x0, 0x9, 0x401}) ioctl$TIOCSPGRP(r11, 0x5410, &(0x7f0000000600)=r6) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000100)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000140)={[0x5ffffffffff, 0xd4, 0x8, 0x61, 0x200002000001, 0x1, 0x2004c8, 0x0, 0x0, 0x36ae, 0x5, 0x6, 0x3, 0x400000001, 0x4, 0xf73c], 0x80a0000, 0x50}) ioctl$KVM_RUN(r10, 0xae80, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000640)="395e09cb95300d1e87fd73fda99e494ddf0ed69e82468b8c9b3ce5204f85696c024a3b4990c766eea220b415912ace54c3a3ee8361918942a8ae87480535fa8dc04739226800522a07600a7bef9cd609b3b3ef0be90000000000000000", &(0x7f0000000640), 0xfffffffe, r7}, 0x38) 19m42.127195464s ago: executing program 1 (id=1894): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) pselect6(0x40, &(0x7f0000000200)={0x3, 0x0, 0x1}, 0x0, &(0x7f0000000240)={0xb}, 0x0, 0x0) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000680)="020000000980ffff", 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x22301, 0x0) r3 = syz_open_dev$loop(&(0x7f00000006c0), 0x75f, 0xa8182) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x2, 0x7, 0x5, "a081a7d06d055d847676d8b32173e6b626e017ee6fbeadf0b7ada3965968fbb138b27bbea0a2ed6b523ae6b08c1939ae527d65af9b322dcd56f80e92d461458b", "ded80651536961e42c9c415ed902a7b468eff5c800531851c7b07cf3e1524830a5dfc6f858bd0e2bcafd71fde42819337ff6e9a343d8fc5eabff94ce4c4e7087", "917383bc2c193a436258bfe718a46fdd22be23288557ca8d9b26324c04f76ede", [0x1]}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYRES32, @ANYBLOB='1\x00\x00\x00\t\x00\x00\x00', @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) r4 = syz_open_dev$video(&(0x7f0000000180), 0x3, 0x88001) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000580)={0x9, @pix_mp={0x1, 0xfff, 0x41414270, 0x33565348, 0x8, [{0x6, 0x9}, {0x3, 0x9}, {0x10001, 0x3}, {0x4, 0x89}, {0x3, 0x1c0}, {0xffffffff, 0x7fffffff}, {0x800, 0x800}, {0x3, 0x7ffffffd}], 0x1, 0x0, 0x8, 0x1, 0x6}}) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000040)=0x1000) unshare(0x8040480) r5 = open(&(0x7f0000000800)='.\x00', 0x280040, 0x0) futimesat(r5, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000100)='hybla', 0x5) connect$inet(r6, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r6, &(0x7f0000000380)="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", 0xffffff5d, 0x12, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000540)='scalable', 0x8) recvfrom$inet(r6, &(0x7f0000000580), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) shutdown(r6, 0x1) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084000000060005"], 0x74}, 0x1, 0x0, 0x0, 0x30044803}, 0x20000040) 19m40.827635484s ago: executing program 1 (id=1899): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000140), 0x4a) sendmmsg$inet(r0, &(0x7f0000000400)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r1) r2 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x200015a, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x0, 0x10001, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xba}}], 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x5c0, 0x7f000000, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 19m39.543789117s ago: executing program 1 (id=1920): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000b00), 0x1, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000640)={0x2, @win={{0x9, 0x7, 0xb4, 0x1}, 0x5, 0x4, &(0x7f0000000740)={{0x8000006, 0xffc, 0x5, 0x7}}, 0x800, 0x0, 0xf4}}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local}) ptrace$setregs(0x1a, 0x0, 0x3, &(0x7f0000000140)="2d4773a69e6a938061a98b") syz_usb_connect(0x0, 0x51, &(0x7f0000000b40)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905ee63dd0000000009050300000000000009050cf2010002060209050f0000004000000905"], &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x2c, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8}]}, 0x2c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x1101000000000000, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0500000080000000001a0000f700000000000000a4978a3ef712cee06f79a5e87eda7d3d6bc9b65891422eafcd50266dd088c6aa4dbaa1188842b0ea37d480caec402028c5dd24a006d9206ed740897fc2d5d41188151b74dadfd6b4593c8e6c84cfa191f4edd5a152d90bedac1759a87497efe5f807e2aa4b96797739d69d4bbfd6996f5848d1cefe8f19bbd4a28b97df", @ANYRES32=0x1, @ANYBLOB="1dca00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000500"/28], 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x22, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000880)=0x14) sendmsg$nl_route(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000200)=@newqdisc={0x70, 0x24, 0xe0b, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xe}, {0xfff1, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xffffffff, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x2, 0x1ff, 0x4, 0x3, 0x4c}}]}]}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000810}, 0x0) sendto$packet(r3, &(0x7f0000000a80)="0422b9dd9210b75f1359c130211f", 0xe, 0x20000090, &(0x7f0000000ac0)={0x11, 0x86dd, r6, 0x1, 0x9, 0x6, @multicast}, 0x14) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x1, &(0x7f0000000540)=[{0x6, 0x0, 0x0, 0x6}]}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0xc) syz_io_uring_setup(0xf00, &(0x7f00000005c0)={0x0, 0x204c, 0x80000, 0x0, 0x55}, &(0x7f0000000d00)=0x0, &(0x7f0000000d40)=0x0, &(0x7f0000000d80)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f0000000dc0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x8, 0x0, 0x0, 0x26, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0, 0x6}}) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000e40)) socket$nl_generic(0x10, 0x3, 0x10) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000e80), 0x802, 0x0) write$UHID_CREATE2(r10, &(0x7f0000000ec0)=ANY=[@ANYBLOB='\v'], 0x119) 19m24.465651482s ago: executing program 32 (id=1920): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000b00), 0x1, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000640)={0x2, @win={{0x9, 0x7, 0xb4, 0x1}, 0x5, 0x4, &(0x7f0000000740)={{0x8000006, 0xffc, 0x5, 0x7}}, 0x800, 0x0, 0xf4}}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local}) ptrace$setregs(0x1a, 0x0, 0x3, &(0x7f0000000140)="2d4773a69e6a938061a98b") syz_usb_connect(0x0, 0x51, &(0x7f0000000b40)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905ee63dd0000000009050300000000000009050cf2010002060209050f0000004000000905"], &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x2c, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8}]}, 0x2c}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x1101000000000000, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0500000080000000001a0000f700000000000000a4978a3ef712cee06f79a5e87eda7d3d6bc9b65891422eafcd50266dd088c6aa4dbaa1188842b0ea37d480caec402028c5dd24a006d9206ed740897fc2d5d41188151b74dadfd6b4593c8e6c84cfa191f4edd5a152d90bedac1759a87497efe5f807e2aa4b96797739d69d4bbfd6996f5848d1cefe8f19bbd4a28b97df", @ANYRES32=0x1, @ANYBLOB="1dca00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000500"/28], 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x22, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000880)=0x14) sendmsg$nl_route(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000200)=@newqdisc={0x70, 0x24, 0xe0b, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xe}, {0xfff1, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xffffffff, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x2, 0x1ff, 0x4, 0x3, 0x4c}}]}]}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000810}, 0x0) sendto$packet(r3, &(0x7f0000000a80)="0422b9dd9210b75f1359c130211f", 0xe, 0x20000090, &(0x7f0000000ac0)={0x11, 0x86dd, r6, 0x1, 0x9, 0x6, @multicast}, 0x14) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x1, &(0x7f0000000540)=[{0x6, 0x0, 0x0, 0x6}]}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0xc) syz_io_uring_setup(0xf00, &(0x7f00000005c0)={0x0, 0x204c, 0x80000, 0x0, 0x55}, &(0x7f0000000d00)=0x0, &(0x7f0000000d40)=0x0, &(0x7f0000000d80)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f0000000dc0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x9, 0x8, 0x0, 0x0, 0x26, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0, 0x6}}) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000e40)) socket$nl_generic(0x10, 0x3, 0x10) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000e80), 0x802, 0x0) write$UHID_CREATE2(r10, &(0x7f0000000ec0)=ANY=[@ANYBLOB='\v'], 0x119) 16m29.79659715s ago: executing program 0 (id=2748): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'geneve0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x64, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x42, {0xd, 0x6}}]}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x5}}]}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x64}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r6], 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) 16m26.79864313s ago: executing program 0 (id=2760): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=@base={0x4, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x20, 0x18, 0x107, 0x70bd25, 0x25dfdbff, {0x13, 0x7c, 0x3f}, [@typed={0xc, 0xb8, 0x0, 0x0, @u64=0x6}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040895}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x2000c015}, 0x2404c8c0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x5, 0x200008, 0x8, 0x20001}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 16m26.618829595s ago: executing program 0 (id=2762): r0 = fsopen(&(0x7f0000000840)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) syz_usb_connect(0x6, 0x2d, &(0x7f0000000140)=ANY=[@ANYRESDEC=r0], 0x0) r1 = syz_open_dev$video(&(0x7f0000000180), 0x11e, 0x541280) mkdir(&(0x7f0000000bc0)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000c00), 0x200002, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000c40)='cpu.pressure\x00', 0x2, 0x0) pread64(r3, &(0x7f0000000c80)=""/56, 0x38, 0x100000000) ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f0000000880)={0x1, @raw_data="a419daf1560d06aee32275c3be6eee44507ee46bbc4f5628a1c2443cc1efa641b002815a9147e8f8b330bd76df4d38618072e2146b96dc901ffcfe023a2d12e82e303eb22e43ab7a4f5da0d89b7f716a4ecc1e1cbc1e7e6a9b4b50128245e5f68ceb15cab53bda2590bbd8faae6cfb3634afd09741b736a8b87c2c8e6933cd3d820e3c51ba19ff2920df5e86a97df526b24684d839180b828dc746da2c480a0fbb22ea836f2d028f7cb2d0693c24614e144db811d1804dae8700b64aad7a5a5082196991f30761eb"}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f00000000c0)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000700)={@hyper}) ioctl$XFS_IOC_ERROR_CLEARALL(r1, 0x40085875) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f0000000740)={{@host, 0x8}, @my=0x0, 0x3, 0x10, 0x2449, 0xffffffffffffffff}) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc01c5869, &(0x7f0000000ac0)={r1, &(0x7f00000009c0)='\x00', 0x40000, &(0x7f0000000a00)={@_ha_fsid={[0x3, 0x5]}, {0x7, 0x0, 0x3ff, 0xfffffffffffffffe}}, 0x6, &(0x7f0000000a40)={@_ha_fsid}, &(0x7f0000000a80)=0x7}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000780)={0x1, &(0x7f00000007c0)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = syz_usb_connect$midi(0x6, 0xc5, &(0x7f0000000200)=ANY=[@ANYBLOB="120101020000001082053b004000010203010902b300010109800609040000080103300b0d2403000403017a4c0402fb600b24030202020005e70806072401a624070009050010ff03ff040405250101030905070c00044e037f0b250107e89cba9aed295709050f043c000306080425010009050200080040f8ec0425010009050e00000406030609250105e3b16946ef09050a002000a30009072501035213720905000407680509250105ed3395164709050600200006090c0925010582b09d54aa0000"], &(0x7f0000000600)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x300, 0x9, 0xd6, 0x9, 0x10, 0xe6}, 0x156, &(0x7f0000000e40)={0x5, 0xf, 0x156, 0x6, [@ssp_cap={0x14, 0x10, 0xa, 0xa, 0x2, 0x0, 0x0, 0x9, [0xff3f0f, 0xc000]}, @ssp_cap={0x18, 0x10, 0xa, 0xc, 0x3, 0xd10e, 0xf00, 0x50, [0xffc0f0, 0xc0, 0x3f00]}, @ssp_cap={0x10, 0x10, 0xa, 0x36, 0x1, 0xa7, 0xf, 0x1, [0x3fc0]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "5e70b5ba3edde72f3eb6ad750a092e3d"}, @generic={0xf7, 0x10, 0x3, "09feaaf2a9fb639ff9198b87ffdad8900c752af81a8733013324c6e44a78aeaee7fadeaa28d16d9a688f7d4b18f44b82626826fafe4f0602d98496e790ab5ae2226fdbe29b5b1428c2c4bf4dcedce5c9885485158e9bf3a97bcf90733a27794edad0e7650f4b7aea1ab47b344325cc69c6f72fcea3293b298771f31eafe3ffc5695841c47de30b022ce4cd2084aa539812d826511532e7ebc8dbc5e9942a2ec1521ab1dbc484d9660d8c1e3f5d425f7886679e3b06820191d03817ee68dd754811e7d67153d34d3e0d2b8c5d922a07a4e5b6f10c0a93013dd1ec8889040fbfcabce6a1b6020ecafda6e5090f2db14036e9d3f7cd"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0xed, 0xf, 0x7ff}]}, 0x4, [{0xd3, &(0x7f00000003c0)=ANY=[@ANYBLOB="d303e4ea5029a9268e29dbe0834cb5e2829ec53ff50a03d0673b2ac303cdb5958cc6b354cb2c7e69900c15d236f2768f0f6ca8782f4117f5c544ca8fcaa4572cd32abda1d2d7162aca3a8a38c1cef17acb4a7abd4bf4027fb096dd52642251d5db68f5e42d932e476a7a2f847bee8086168d5f294dc2b3ff1b9d049df7bbb0e53f77847c8d8f310a8272edcbd5f3b6d6cc13478a88c312a6d3ef701eb5d1194fccde335c01341a7cc36ccb8d8daa55f90e4572e37ca7855bc378d80d96c800ab2bf7bf562bdfb7f54705f315bf8373c0823e46"]}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x95, &(0x7f0000000500)=ANY=[]}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x1001}}]}) syz_usb_ep_read(r8, 0xf8, 0xa2, &(0x7f0000000640)=""/162) write$cgroup_netprio_ifpriomap(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="697006000000000000004f3700"], 0xd) setsockopt$inet6_int(r7, 0x29, 0x100000000001f, &(0x7f0000000080)=0x1, 0x4) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000980)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fanotify_mark(0xffffffffffffffff, 0x5ee, 0x9e44e53b86c828b7, r9, 0x0) r10 = socket$igmp(0x2, 0x3, 0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$MRT_DEL_MFC_PROXY(r10, 0x0, 0xd3, &(0x7f0000000b80)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x1, 0x201, 0x489c, 0x6}, 0x3c) open_tree(r5, &(0x7f0000000b00)='./file0\x00', 0x80000) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) 15m58.131277759s ago: executing program 0 (id=2771): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000003c0)='illinois', 0x8) connect$inet(r2, &(0x7f0000000400)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)="89000000120081ae08060cdc030000fe7f03446b000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000540)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x1}) ioctl$XFS_IOC_SCRUBV_METADATA(r1, 0xc0285840, &(0x7f00000001c0)={0x7, 0x80000001, 0x7fff, 0x0, 0x3, 0x2, 0x0, &(0x7f0000000000)=[{0x17, 0x101, 0x6}, {0x0, 0x101, 0x8}]}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = socket(0xa, 0x2, 0x0) getsockopt$sock_buf(r5, 0x1, 0x19, 0x0, &(0x7f0000000300)=0xf00) pipe(&(0x7f0000000140)) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x3, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x2004cb, 0x3, 0x100000000000000, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2ab, 0x200000000000400, 0x2, 0x0, 0x9], 0x2000, 0x200306}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 15m57.447152026s ago: executing program 0 (id=2846): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x2000c015}, 0x2404c8c0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x5, 0x200008, 0x8, 0x20001}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x14, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x6293a, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40845}, 0x4000000) 15m56.04973899s ago: executing program 0 (id=2853): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0xa0201, 0x0) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r5 = socket$inet(0x2b, 0x801, 0x0) listen(r5, 0xd0e) syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x2400) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r6, r6, &(0x7f0000000280)=0x7, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000002c0)={'vcan0\x00', 0x0}) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f00000017c0)=0x0) syz_clone3(&(0x7f0000001840)={0x101000000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x20}, &(0x7f00000015c0)=""/102, 0x66, &(0x7f0000001640)=""/201, &(0x7f0000001800)=[0x0, 0x0, r8], 0x3}, 0x58) clock_gettime(0x0, &(0x7f0000000340)) sendmsg$can_bcm(r6, &(0x7f0000000380)={&(0x7f00000003c0)={0x1d, r7}, 0x10, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4004021) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000400)=0x91b) read$dsp(r4, &(0x7f0000000440)=""/4096, 0x1000) write$dsp(r3, &(0x7f0000001440)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0xfffffffffffffd73) unshare(0x26020400) openat$kvm(0xffffffffffffff9c, &(0x7f0000001480), 0x200, 0x0) r9 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f00000014c0)={0x27800000000, 0x70000, 0x8, r9, 0x4}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000001500)=0x7, 0x4) r10 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r10, 0x4008ae9c, &(0x7f0000001540)={0x1, 0x4}) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000001580)={0x1, 0x0, [{0x281, 0x0, 0xffffffffffffffff}]}) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r11, 0xae03, 0xc9) socket$packet(0x11, 0x2, 0x300) 15m40.875210653s ago: executing program 33 (id=2853): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0xa0201, 0x0) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r5 = socket$inet(0x2b, 0x801, 0x0) listen(r5, 0xd0e) syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x2400) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r6, r6, &(0x7f0000000280)=0x7, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000002c0)={'vcan0\x00', 0x0}) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f00000017c0)=0x0) syz_clone3(&(0x7f0000001840)={0x101000000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x20}, &(0x7f00000015c0)=""/102, 0x66, &(0x7f0000001640)=""/201, &(0x7f0000001800)=[0x0, 0x0, r8], 0x3}, 0x58) clock_gettime(0x0, &(0x7f0000000340)) sendmsg$can_bcm(r6, &(0x7f0000000380)={&(0x7f00000003c0)={0x1d, r7}, 0x10, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4004021) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000400)=0x91b) read$dsp(r4, &(0x7f0000000440)=""/4096, 0x1000) write$dsp(r3, &(0x7f0000001440)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0xfffffffffffffd73) unshare(0x26020400) openat$kvm(0xffffffffffffff9c, &(0x7f0000001480), 0x200, 0x0) r9 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f00000014c0)={0x27800000000, 0x70000, 0x8, r9, 0x4}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000001500)=0x7, 0x4) r10 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r10, 0x4008ae9c, &(0x7f0000001540)={0x1, 0x4}) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000001580)={0x1, 0x0, [{0x281, 0x0, 0xffffffffffffffff}]}) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r11, 0xae03, 0xc9) socket$packet(0x11, 0x2, 0x300) 7m21.857877994s ago: executing program 6 (id=4896): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$adsp1(0xffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000140)=0x7) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) bind$can_raw(r5, &(0x7f00000001c0), 0x10) read(r3, &(0x7f0000000540)=""/4082, 0xff2) sendmsg$can_raw(r3, &(0x7f0000001540)={&(0x7f0000001580)={0x1d, r4}, 0x10, &(0x7f00000015c0)={&(0x7f0000001600)=@can={{0x1, 0x0, 0x1, 0x1}, 0x4, 0x2, 0x0, 0x0, "00119a7d1a39f603"}, 0x10}}, 0x4000040) ioctl$int_in(r0, 0x40000000af01, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)) r7 = dup(r6) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000000c0)=0x304008000) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r7}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000004c0)={0x1, r7}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000500)={0x1}) 7m20.772696819s ago: executing program 6 (id=4905): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x1, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8c1) socket$netlink(0x10, 0x3, 0x4) (async, rerun: 32) sendmsg$NFT_BATCH(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000030000000000000500000a2c000000180a05000000000000000000020000000900020073797a30000000000900010073797a3000000000140000001100010000000000000000000300000a"], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 7m19.393246832s ago: executing program 6 (id=4912): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0xc53a, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56561, 0x70bd2f, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0x0, 0x8}, {0xc, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x9}}]}, 0x38}}, 0x4048090) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10511000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 7m18.672709315s ago: executing program 6 (id=4920): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'pimreg\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001980)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x401449f0}, 0xc, &(0x7f0000001940)={&(0x7f00000003c0)=@newchain={0x1574, 0x64, 0x300, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x7, 0xffff}, {0xe, 0x5}, {0xffe0, 0xffff}}, [@TCA_CHAIN={0x8, 0xb, 0x1ff}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_RATE={0x6, 0x5, {0x9, 0xe}}, @TCA_RATE={0x6, 0x5, {0x2c, 0x9}}, @filter_kind_options=@f_route={{0xa}, {0x151c, 0x2, [@TCA_ROUTE4_ACT={0x14f0, 0x6, [@m_police={0x14ec, 0x2, 0x0, 0x0, {{0xb}, {0x1478, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x8a5a}, @TCA_POLICE_RATE={0x404, 0x2, [0xe655, 0x7, 0x8, 0x7, 0x800, 0x1, 0xe, 0x8001, 0x4, 0x6, 0x1eb, 0x26, 0x5, 0xfffffff8, 0x8, 0xffffffff, 0x7ff, 0x81, 0x3ff, 0x9, 0x8, 0x9, 0x9, 0x1, 0xfffffffb, 0x1ff, 0x4, 0x4, 0x9, 0x6, 0x6, 0x6, 0x5, 0x622, 0x1, 0x100, 0x2, 0x1, 0x40, 0x3ff, 0x1000000, 0x6, 0x80, 0x80000001, 0x8, 0x80000001, 0x8, 0x8000, 0x81, 0x7, 0x1, 0x20000000, 0x10001, 0x3, 0xc51, 0xa, 0x8, 0x0, 0x81, 0xffff, 0x7fffffff, 0x636354c2, 0x2, 0x10000, 0xfffffff8, 0x6, 0x80000000, 0xffffff01, 0x2, 0x200, 0xff, 0x62b, 0x5, 0x1, 0x8001, 0x95, 0xfffffff9, 0x2, 0x4, 0x8, 0xf90, 0x23cd, 0x8000, 0xe4f, 0x6, 0xb, 0x8, 0x6, 0x8, 0x6, 0x5, 0x8, 0x9, 0x9, 0x7, 0x1, 0x2, 0x2, 0xfffffffe, 0x4, 0x7, 0xc, 0x56, 0x6, 0xff, 0x2, 0x69e, 0x3, 0xffffffff, 0x3ef, 0xb, 0xfffffffb, 0x5eaa2580, 0x1, 0x8001, 0xffff, 0x0, 0x7, 0x3, 0xa04c, 0xdfc9, 0x8, 0x7, 0x1ff8, 0x3, 0x8, 0x1, 0x4, 0x6, 0x7, 0x9, 0x0, 0x9, 0x0, 0xea85, 0x8, 0x9, 0x7, 0x4900, 0x30, 0x1, 0xa, 0x5, 0x6, 0x9e, 0x2, 0xb3d, 0x1ff, 0x1, 0x6, 0xffff, 0x5, 0x7, 0xc, 0x3, 0xf, 0x7ff, 0x80000000, 0x80000001, 0x101, 0x3, 0x3, 0x81, 0x0, 0x8, 0x400, 0xe9, 0x1000, 0xaebd, 0x8, 0x80000001, 0x8001, 0x4, 0x3, 0x55c92889, 0x4, 0x1, 0x4, 0xffffffff, 0x0, 0x9, 0x7ff, 0x768, 0x8001000, 0xfffffbff, 0xfffffffe, 0x7, 0x2, 0x8, 0x0, 0x400, 0xc, 0x9000, 0xc8f4, 0x4, 0x800000, 0x80000000, 0x0, 0x5, 0x400, 0x1, 0x0, 0x9d, 0x755d, 0xf901, 0x8, 0x4, 0x100, 0x9, 0xfffffffc, 0xe917, 0x0, 0x4, 0x10000000, 0xf4c, 0x7, 0x5d, 0x2, 0x10001, 0x6, 0x0, 0x4d, 0x5, 0xb, 0x2, 0x100, 0x9, 0x10, 0x80000001, 0xd, 0x8, 0x2ab2f436, 0x5, 0x0, 0xff, 0x6, 0xfffff03f, 0x3d2, 0x3458, 0x5, 0x3, 0xe000000, 0x9, 0x6, 0x3, 0x1, 0x2, 0x88f8, 0xa5f, 0x1, 0x10, 0x1acb, 0x5, 0x4, 0xf8e, 0x3]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x104a0000, 0x3, 0x6, 0x6, 0x5, 0xfffffffc, 0x1b5, 0x2, 0x0, 0x6, 0xafa, 0x5, 0x7, 0x2, 0x7, 0xb2b, 0x7, 0x7, 0x0, 0xff, 0x7f, 0x8, 0x145f8f7e, 0x400, 0x6, 0x1, 0x7, 0x8, 0x6, 0x6, 0x3, 0x3, 0x80000001, 0x7, 0x62, 0x8, 0x1, 0x8, 0xc0a5, 0x4, 0x6, 0x2, 0x9, 0x6, 0xa, 0x2, 0x80000000, 0x6, 0x5, 0xfffffffa, 0x11ea43db, 0x8, 0x3be3, 0x4, 0x4e8, 0xd, 0xa6e2, 0x9, 0x0, 0x8, 0x10000, 0x8, 0xc8e0, 0x901c, 0x6, 0xead8, 0x10000, 0x7c5, 0x412, 0x1e45180a, 0x7a5d, 0x6, 0x1, 0x7f, 0x3, 0xfffffff9, 0x1, 0x9, 0x3ff, 0x96, 0x200, 0x8, 0x4, 0xee, 0xfffffffe, 0x8, 0xd9, 0x400, 0x401, 0xf, 0x8, 0x0, 0x4, 0x1, 0x2, 0x5, 0xa27d, 0x8, 0x8, 0x7, 0xfffffffb, 0x6, 0x0, 0x7, 0x7, 0x8000, 0x4bd, 0x7fffffff, 0xfffffff8, 0x9, 0x6, 0x1ff, 0x5, 0x9, 0x4, 0xffff, 0x1ff, 0x100, 0x5, 0x1, 0x0, 0xc4f1, 0x5, 0x3, 0x5e1, 0xac6, 0x0, 0x19f1, 0x99, 0x6, 0x8, 0x6, 0x800, 0x8, 0x4, 0x200, 0x7, 0x6, 0xdc, 0x10, 0xbf, 0x8, 0xfe, 0x0, 0x1000, 0x1, 0x2, 0xa2cb, 0x5, 0x40, 0x8, 0x245, 0x2, 0x0, 0x5, 0x10001, 0x80000001, 0x10000, 0x4, 0x6, 0x6, 0x4, 0xfffffeff, 0x1, 0x0, 0xfffe0000, 0x0, 0x0, 0x3, 0x6, 0x0, 0x4ccc, 0x0, 0x400, 0x257, 0x927, 0x4, 0x9, 0x80000001, 0x4, 0xf0b, 0xa, 0xf, 0x7, 0x6, 0xfff, 0x6, 0x5, 0x0, 0x80000001, 0x9, 0x8, 0x396b6d51, 0x1, 0x1, 0x40, 0xb0ff, 0x0, 0x6, 0x7f, 0x7ff, 0x8, 0x7fff, 0x6, 0x0, 0x9, 0x9, 0xf, 0xc, 0x8a, 0x3, 0x3642, 0x7ba4, 0xffffffd1, 0x9, 0x4, 0x200, 0x33d, 0x800, 0x80f2, 0x0, 0x16c80cf2, 0xfffffff7, 0xe, 0x7f, 0xfffffffc, 0xb, 0x1000, 0x200, 0x6, 0x80, 0x5, 0x40000000, 0xf64, 0x81, 0x7f55, 0x7, 0x50, 0x5, 0xffffff00, 0xa, 0x7, 0x80000001, 0xdd80, 0xffff, 0x5, 0x9, 0x4, 0x7, 0x0, 0xf609, 0xc, 0x20, 0x7f, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xd49, 0x1, 0x7, 0xffff, 0x60, {0x28, 0x0, 0x7, 0xb3ec, 0x9, 0xffffff00}, {0x9, 0x2, 0x6, 0x8, 0x2, 0x2}, 0x3, 0xffffffff, 0x8326}}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0xefb6, 0x34, 0x5, 0xb9, 0xa, 0x6, 0x2, 0xffffffff, 0x100, 0x80000000, 0x5, 0xfffff608, 0x81, 0x9, 0x4, 0x6, 0x2, 0x4, 0x9, 0x8, 0x6, 0x3, 0xc9, 0x7, 0x6fcb, 0x0, 0x8, 0x9, 0x101, 0xc, 0xc, 0x200, 0x3ff, 0x4, 0x3, 0xfffffffe, 0x3, 0xffffffff, 0x5, 0x1, 0x4, 0x9, 0x0, 0x7, 0x6, 0x4, 0x0, 0x7119, 0x18, 0x1, 0x3, 0x2, 0x92, 0x8, 0x0, 0x518bbf44, 0x3, 0x5, 0x5, 0x3, 0xb635, 0x10, 0x1, 0x5, 0x7fffffff, 0xffff7fff, 0xf8, 0xfffff000, 0x1, 0x5, 0x7, 0x9, 0x3, 0x5, 0x3d54, 0x46, 0x1, 0x6, 0xe2e, 0x7d, 0x0, 0x4, 0x1000, 0x4, 0x4, 0x8, 0xffff0001, 0xfffffff7, 0xf2, 0x2, 0xe, 0x8, 0xd, 0x6, 0x6, 0x7ff, 0x6, 0xfffffac8, 0xffffffff, 0x3, 0x6, 0x7, 0x40, 0x5, 0x2, 0x0, 0x9, 0x100, 0x2, 0x8000, 0x7, 0x1, 0x8e3, 0x9, 0x8b, 0x1, 0x23d, 0x400, 0xc701, 0x7ff, 0x40, 0xe0000000, 0x80000001, 0x4, 0x7f, 0x9, 0x9, 0x401, 0x8, 0x1000, 0x101, 0x51, 0x3, 0xfffffffe, 0xa, 0x0, 0x9, 0x6, 0x100, 0x6, 0x3, 0x0, 0x4, 0x3fcd, 0x5, 0x1, 0x0, 0x7baa, 0xfd, 0x5, 0x7, 0xf9, 0x6, 0x8, 0x9, 0x7, 0x1d0, 0x6, 0x40000000, 0xfffff001, 0x7, 0x6de, 0x7, 0x8, 0x10, 0x2, 0x1000, 0x3, 0x4, 0x3, 0x7, 0x8, 0xe71, 0xfff, 0x6a95, 0xd, 0x1, 0x9, 0x8, 0x4, 0x8, 0x4, 0x7, 0xff, 0x7ff, 0xfffffffe, 0xbb8, 0x80000001, 0x9, 0x4, 0x3, 0x325, 0x87, 0x4, 0xf4e0, 0x2, 0x9e56, 0x1, 0x3ff, 0x3, 0x1, 0x1000, 0x6, 0xc5, 0x800, 0x10001, 0x6, 0x5, 0x9db4, 0x100, 0xc1, 0x4, 0x10000, 0x100, 0x10000, 0x2, 0x8001, 0xffff7fff, 0x0, 0x7e4, 0x7, 0x7fffffff, 0x9, 0x2, 0x10000, 0xffffff80, 0x6, 0x10001, 0x10000, 0x7, 0x1, 0x3, 0xf, 0x7, 0x0, 0x7, 0xfffff9df, 0x6, 0x6, 0xb, 0x7fffffff, 0x2, 0x9172, 0x4, 0x3, 0x8, 0x3, 0x3, 0x69f, 0x0, 0x7, 0xeeb5, 0x1, 0xffffffff, 0x7]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x7, 0x1, 0x0, 0x10, 0x4, 0x0, 0x40, 0x0, 0x3, 0xb3, 0xfffffff9, 0x5, 0x5, 0xaac, 0x6, 0x6f9d, 0x8001, 0x6a75, 0xc, 0x2, 0x6, 0x6, 0x8b51, 0xffff, 0x3f0, 0x8, 0x80, 0xfffffff7, 0x8, 0x1, 0xcf9, 0x0, 0x0, 0x8000, 0x9, 0x3, 0x401, 0x9, 0x11, 0x1, 0x8000, 0x871b, 0x7, 0x80000000, 0x4, 0x7, 0x3, 0x8000, 0x6, 0x6, 0xdfa7, 0xffffffff, 0x9, 0x9, 0x3, 0x3, 0x8, 0x55de, 0x10000000, 0x40, 0x679f3024, 0x5, 0x1, 0x4, 0x4, 0x7, 0xfffffa31, 0x0, 0x8, 0x4, 0x6, 0x6, 0x8, 0xfffffffa, 0xfffffffa, 0x0, 0x1, 0x2, 0x400000, 0x7, 0x4, 0x6, 0x7, 0x8, 0x1fe, 0x80000000, 0x101, 0x4, 0xed, 0x0, 0x40, 0x1, 0x2, 0x2, 0x2, 0x1, 0x97e3, 0x6, 0x5, 0x1000, 0x9, 0x8, 0x6, 0x71d959c1, 0x0, 0x7, 0x99, 0xce7, 0x2, 0x1, 0x7, 0x4f9e, 0xc, 0x9, 0x0, 0x0, 0x8001, 0xfffffffb, 0x3, 0x7, 0xf6ba, 0x1, 0xd4, 0x2a82, 0x9, 0x9, 0x89, 0x1, 0x6, 0x0, 0x3, 0xffffffff, 0xc, 0x7, 0xed2d, 0x7, 0x9, 0x4a2, 0x1, 0x5, 0x10, 0xcc5, 0xd, 0x2, 0x2, 0x100, 0x7f, 0x81, 0x2, 0x401, 0xca, 0xfffffff1, 0x8001, 0xe738, 0x4, 0x80000000, 0x10001, 0x3, 0xff, 0x87, 0x2, 0x400, 0x3, 0x2, 0x3ff, 0x2, 0xfffff360, 0x8, 0x4, 0x5, 0x0, 0x5, 0x1, 0x7, 0x9, 0x2, 0x400, 0x2, 0x80000000, 0x4, 0x200, 0x2, 0x5, 0x81, 0x9, 0x4, 0x101, 0xc1, 0xce6, 0x0, 0x8, 0x5, 0x7fff, 0x7ff, 0xfffffffc, 0x1, 0x7, 0x7ff, 0x8, 0x7, 0x10, 0xff, 0x0, 0x80000001, 0x1, 0x6, 0xa, 0x0, 0xc85, 0x10, 0x8787e0f6, 0x3aa70219, 0x401, 0x200, 0x9, 0xd, 0x2, 0x3a9, 0x80000000, 0x6, 0x401, 0x10001, 0x1, 0x80000000, 0x0, 0x1, 0x6, 0x1, 0xbb90, 0x9, 0x49, 0x2, 0x6, 0x6, 0x6, 0xff, 0xd651, 0x80000000, 0x2, 0x2, 0x1, 0x90, 0xfff, 0x2, 0x184c, 0xffffffff, 0xffffe603, 0xfffff91a, 0x5, 0x3, 0x4, 0x8, 0x7, 0x2, 0x6]}, @TCA_POLICE_RATE={0x404, 0x2, [0x1000, 0x4, 0x7f, 0xfffffff8, 0xf1f2, 0x24000000, 0x6, 0x2, 0x8a800, 0xfff, 0x4, 0xe1, 0x6, 0x9, 0x8, 0x1, 0x93, 0x8000, 0x0, 0x800, 0x8, 0x8000, 0xa, 0x10000, 0x1, 0x3, 0x0, 0x80, 0x3, 0x2, 0x80000001, 0x94, 0x80, 0x6, 0x2, 0x4, 0x0, 0xffff1af0, 0x5, 0x2, 0x5, 0x7e, 0xcfc, 0x5, 0x71, 0x0, 0x5, 0x7, 0x7, 0x7f, 0x23, 0x6, 0x4, 0x8, 0x200000, 0x7a10, 0x5, 0x1714, 0x9, 0x0, 0x101, 0x47, 0x5, 0xff, 0x0, 0x1c00000, 0x9, 0x4, 0x9, 0x40, 0x2, 0x3, 0xffff, 0xe2, 0x8, 0x8, 0x80, 0x8, 0x7, 0x5, 0xfffffffc, 0x6a9, 0xec1, 0x2, 0x66, 0x5, 0xbb9, 0x77, 0x0, 0x1, 0x9, 0x7f, 0x32, 0x9, 0x9, 0x9, 0x7, 0xc, 0x3e49, 0x7ff, 0x7, 0x9, 0x7ff, 0x2, 0xcce, 0x4, 0x4, 0x70, 0x3, 0x7fffffff, 0x5b23, 0xb, 0x1000, 0xfffffff9, 0xffffffff, 0xb86, 0x1, 0x1ff, 0x5, 0xfffffffb, 0x4, 0x2, 0x200, 0xdb9d, 0x4, 0x1, 0x4, 0x0, 0x6, 0x0, 0xfffffff9, 0x5, 0xe4a, 0x6, 0xb, 0x4, 0x4, 0x0, 0xffff0001, 0x2, 0x2, 0xf, 0x6, 0x7, 0x5, 0x7, 0x5, 0x0, 0x8, 0xcb0, 0x4, 0x4, 0x3, 0x7fff, 0x9, 0x8, 0x5, 0x7fff, 0x5, 0x1, 0x89e0, 0x8, 0x9, 0x3, 0x0, 0x8a8, 0xe70, 0x2, 0x5, 0x101, 0x82, 0x5, 0x5, 0x54ac, 0x401, 0x6, 0x1, 0x16, 0xee02, 0x8, 0xf, 0x4, 0x5, 0xb, 0x1, 0x2, 0x6, 0x1, 0x0, 0x9, 0x3, 0x9, 0x0, 0x10, 0x800000, 0x3953, 0x9, 0x800, 0x0, 0x8, 0x4, 0x0, 0x5, 0x6, 0x1200000, 0x5, 0x7, 0x54, 0x7, 0x1000, 0x70e, 0x3ff, 0x7ff, 0x5, 0x4, 0xfffffffc, 0x9, 0x1, 0xffff, 0x6, 0xad7, 0x2, 0xffff0000, 0x52, 0x9a, 0x2, 0x0, 0x4, 0x1, 0x200, 0x7ff, 0x9ed, 0x8, 0x4, 0x2, 0x7, 0x9, 0x4, 0x5, 0x6, 0x1, 0x400, 0x7, 0x3, 0x100, 0x5, 0xffffffff, 0x1000, 0x10001, 0x3, 0x5, 0xbb, 0x5, 0x2, 0x9, 0x7]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xc}]]}, {0x4a, 0x6, "99b56f52d0e236d61f8603680de2b56b2f07aa6266e1ad6d96ad91c730f63e170ba9e9a7ac9102decb3e600a78a0c547f66a760623cd13bbace6d95c4a0a587075e382eb3492"}, {0xc}, {0xc, 0x8, {0x2}}}}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0x66}, @TCA_ROUTE4_TO={0x8, 0x2, 0x71}, @TCA_ROUTE4_IIF={0x8, 0x4, r2}, @TCA_ROUTE4_IIF={0x8, 0x4, r3}, @TCA_ROUTE4_FROM={0x8}]}}]}, 0x1574}, 0x1, 0x0, 0x0, 0x100}, 0x4004080) accept4$inet6(r0, 0x0, 0x0, 0xc00) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a04000800ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 7m17.991992329s ago: executing program 6 (id=4924): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x74}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 7m17.642484974s ago: executing program 6 (id=4927): socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_open_dev$usbfs(&(0x7f00000005c0), 0x205, 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x0, 0xa100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0x2, 0xae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x4000, 0x2000000, 0xf8, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x20, 0x2, 0x24e}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x10000000, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 7m2.601220585s ago: executing program 34 (id=4927): socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_open_dev$usbfs(&(0x7f00000005c0), 0x205, 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x0, 0xa100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0x2, 0xae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x4000, 0x2000000, 0xf8, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x20, 0x2, 0x24e}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x10000000, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 1m13.312798358s ago: executing program 5 (id=6834): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x4ec}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) read(0xffffffffffffffff, &(0x7f0000000080)=""/172, 0xdc) 1m12.853371527s ago: executing program 5 (id=6838): socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000880)={0xa, 0x4e23, 0x6, @loopback, 0x3}, 0x1c) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd1e, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x9, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x5c, 0x2, [@TCA_FLOWER_ACT={0x58, 0x3, [@m_bpf={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x2, 0x2, 0x6, 0xfffffffc, 0x3fd}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x4}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8818}, 0x4080) (fail_nth: 5) 1m12.781796709s ago: executing program 5 (id=6839): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000040)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) listen(r0, 0xa) add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffe) listen(r0, 0xa00) 1m12.700769671s ago: executing program 5 (id=6840): r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040e60405000001010203010902200001010080320904000002080650000705810200020007050202"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000180)='\x00', 0x89901) move_mount(r2, &(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000240)='./file0/../file0\x00', 0x81900) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000280)='\x00', 0x9801) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)="5abfd7", &(0x7f0000000480), 0x20075, r5}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0xc, &(0x7f00000006c0)=ANY=[], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r6, 0x2000300, 0xe, 0x0, &(0x7f00000007c0)="63eced8e46dc3f0adf3389f7b986", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) move_mount(r4, &(0x7f00000002c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(r3, &(0x7f0000000380)='\x00', 0x89901) syz_usb_control_io(r0, 0x0, 0x0) 1m10.639439319s ago: executing program 5 (id=6843): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000380)={0x0, 0x1, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f00000003c0)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) keyctl$instantiate(0xc, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="6e65772064656661756c7420757365723a300200eb0213bb303030303030343039330000000000000000"], 0x2a, 0x0) r3 = add_key(&(0x7f0000000440)='encrypted\x00', &(0x7f0000000480), &(0x7f00000004c0), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)="13", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r3, &(0x7f00000005c0)=""/112, 0x349b7f55) recvmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000000280)=@isdn, 0x80, &(0x7f0000000a00)=[{&(0x7f00000007c0)=""/202, 0xca}, {&(0x7f00000008c0)=""/186, 0xba}, {&(0x7f0000000980)=""/70, 0x46}], 0x3}, 0x3}], 0x1, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5, r4}, 0x38) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @local}, 0xc) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0xb) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x1fe, 0x4, 0x40000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_NMI(r7, 0xae9a) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'geneve0\x00'}) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=@newlink={0x118, 0x10, 0x400, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x60823, 0x5a527}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_BROADCAST={0xa, 0x2, @link_local}, @IFLA_LINKINFO={0xd0, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc0, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x10}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000000, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffff5, 0x80}}]}, @IFLA_VLAN_INGRESS_QOS={0x4c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffff, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x200, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x600}}]}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x0, 0x1}}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x12}}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1}}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}]}, 0x118}}, 0x0) fsopen(&(0x7f0000000040)='binder\x00', 0x1) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) 1m10.073069725s ago: executing program 5 (id=6845): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000140)={0x0, 0xe8, "1c4bd4220cd6a661eae9a800b6d5f8c69e001e67362c6661360c3423a2300b6c59f3b0883b474db1ea14ae73e8fe5fdd0b9693f49606f92ff90b2690cf440bab2ad398b42167b210d7d1ce190be8b5725042d0b2d09dbf9f2446809c70e934460a8b8cd243e9f4b7b49d4d9e4583cc26a47d0dc40d78d37766f665fd9fbf4ac7cfb1b870ce1ae30e3f909318d712bcca965bf096afb777dbfd3de169084bb06040a833b8001465019745753ac0cd0d544c80dcd0c005bd1549bf16a9a38619278893351bd57906c3f099afde4e43943a155d1e876e92f681420c0cccba917b741464a979e7b91f76"}, &(0x7f0000000240)=0xf0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local}) syz_io_uring_setup(0xf04, &(0x7f0000000280)={0x0, 0x2595f, 0x10000, 0x0, 0x10000055}, 0x0, &(0x7f0000000340), 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000680)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="034886dd09032800050030000300600000000128290081e949b93897bc3b00fde10000007d01ff020000000000000000000000000001"], 0xfdef) 1m9.710293386s ago: executing program 35 (id=6845): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000140)={0x0, 0xe8, "1c4bd4220cd6a661eae9a800b6d5f8c69e001e67362c6661360c3423a2300b6c59f3b0883b474db1ea14ae73e8fe5fdd0b9693f49606f92ff90b2690cf440bab2ad398b42167b210d7d1ce190be8b5725042d0b2d09dbf9f2446809c70e934460a8b8cd243e9f4b7b49d4d9e4583cc26a47d0dc40d78d37766f665fd9fbf4ac7cfb1b870ce1ae30e3f909318d712bcca965bf096afb777dbfd3de169084bb06040a833b8001465019745753ac0cd0d544c80dcd0c005bd1549bf16a9a38619278893351bd57906c3f099afde4e43943a155d1e876e92f681420c0cccba917b741464a979e7b91f76"}, &(0x7f0000000240)=0xf0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local}) syz_io_uring_setup(0xf04, &(0x7f0000000280)={0x0, 0x2595f, 0x10000, 0x0, 0x10000055}, 0x0, &(0x7f0000000340), 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000680)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="034886dd09032800050030000300600000000128290081e949b93897bc3b00fde10000007d01ff020000000000000000000000000001"], 0xfdef) 6.616173179s ago: executing program 4 (id=7139): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000031000900259d7000000000040400000008000c"], 0x1c}, 0x1, 0x0, 0x0, 0x3004a041}, 0x4080040) 6.416278738s ago: executing program 4 (id=7140): r0 = syz_clone(0xe531885fbc70f1c8, &(0x7f00000003c0)="8132ee423e3ed7c0307a1634aa5dcc82fcd5be9966163fb572bdf5b1c6f2d4f7c71b6815d6b87531905007b77ba5c481b62ac1dec2543d47c4b72f6be7264fdd1ce554d791ffa5c59be4dffe6843b96d187686d2d169d2a1db45c6beb4250d6878bc77c55f6088201481d6967b5ccaf2369f86eadbaa855ece663cda6fca30646ebf32910b31ff5d1b46e2cdb2d14bbfa75e5360efb6d6dee303b1bae39f7499faeef8cc811f9d0ff3a3fc474032", 0xae, &(0x7f0000000480), &(0x7f0000000500), &(0x7f0000000a00)="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") ptrace$ARCH_SHSTK_LOCK(0x1e, r0, 0x3, 0x5003) socket$inet6(0xa, 0x2, 0x0) syz_ublk_setup_io_uring(0x22, &(0x7f0000000340)={0x0, 0x20000000, 0x8, 0x1, 0x1db}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0, &(0x7f00000004c0)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x1, {0x5640}}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f00000007c0)={0x0, 0x1, 0xe}, 0x8) r5 = socket$inet6(0xa, 0x80002, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000840)={'syzkaller0\x00', 0x2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000880), 0x8e40, 0x0) close(r7) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000008c0)={'syzkaller0\x00', @multicast}) r8 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000900)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000002bc0)={&(0x7f0000002c00)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r8, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002cc0)={&(0x7f0000000080)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0xffff}, {0xd, 0xffff}, {0x2, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xb0, 0x64}}, @TCA_RATE={0x6, 0x5, {0x2, 0xc6}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000002dc0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002e40)={&(0x7f0000002e80)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r13, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x3, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x80, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r14 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r14, 0x0, 0x0, 0x48040, &(0x7f0000002f40)={0x11, 0x7, r13, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000002f80)={0x200000000000001}, 0x8) connect$inet6(r5, &(0x7f0000002fc0)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000003000)=ANY=[@ANYBLOB="0017"], 0xc0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000003040)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00F', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 6.379202842s ago: executing program 4 (id=7141): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000001c0)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x29}, 0x6}, 0x1c) bind$inet6(r1, &(0x7f0000000240)={0xa, 0xe22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000380)=[{&(0x7f00000003c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000060000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x4, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x2000c015}, 0x2404c8c0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x5, 0x200008, 0x8, 0x20001}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r3], 0x4c}}, 0x0) add_key(&(0x7f0000000440)='pkcs7_test\x00', 0x0, &(0x7f0000000480)="307106092a864886f70d010702a0643062020111310f300d06096086480165030402010500300b06092a864886f70d010701313f303d0201013014300f310d300b0603550403130454657374020101300d06096086480165030402010500300d06092a864886f70d0101010500040401020304", 0x73, 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6.171748877s ago: executing program 4 (id=7143): syz_usb_connect$midi(0x1, 0xfffffffffffffec6, &(0x7f0000000480)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x644, 0x800f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1f, 0x1, 0x1, 0x8, 0xb0, 0x5, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x30, 0x4, [], [{{0x9, 0x5, 0x2, 0xa, 0x400, 0x40, 0x7, 0x4, {0x4}}}]}}}}}]}}, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 5.027764223s ago: executing program 3 (id=7147): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept4(r0, &(0x7f0000000200)=@sco={0x1f, @fixed}, &(0x7f0000000280)=0x80, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = getpgid(0x0) r3 = syz_pidfd_open(r2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2000000, 0x0, 0x7d, 0x500, 0xfffffffffffffffd, 0x9b0318}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={@loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, 0x10800006, 0x0, 0x4, 0x100, 0x4000000010000007, 0x10200}) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) pidfd_send_signal(r3, 0x21, 0x0, 0x4) 4.078002023s ago: executing program 3 (id=7151): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x59f543, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x0, 0x3}, 0x18, 0x0) r1 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000002c0)) setns(r1, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) sync() r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/diskstats\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000800)={0x2020}, 0x2020) read(r0, &(0x7f0000000000)=""/41, 0x29) openat$dsp1(0xffffff9c, &(0x7f00000000c0), 0x200000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000500)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x30, r4, 0x1, 0x70bd2b, 0x25dfdbfe, {0x2, 0x0, 0x500}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20000884) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$vhost_msg(r6, &(0x7f0000000340)={0x1, {0x0, 0x0, 0x0, 0x2, 0x1}}, 0x48) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'tunl0\x00', 0x0}) r9 = openat2(0xffffffffffffffff, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x202200, 0x107}, 0x18) landlock_restrict_self(r9, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r10, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x9, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x30, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}}, 0x0) r11 = openat$md(0xffffff9c, &(0x7f0000000240)={'/dev/md', @num=0x0}, 0x1, 0x0) r12 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffd000/0x1000)=nil) shmat(r12, &(0x7f0000ffa000/0x1000)=nil, 0x2000) shmctl$IPC_RMID(r12, 0x0) shmat(r12, &(0x7f0000001000/0x2000)=nil, 0x1000) ioctl$BLKIOOPT(r11, 0x1279, &(0x7f0000000280)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xa) 3.556614076s ago: executing program 3 (id=7153): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18ad000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.280292969s ago: executing program 3 (id=7154): r0 = fsopen(&(0x7f0000000140)='pvfs2\x00', 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000000)=@fd={0x5, 0x7, 0x4, 0x400, 0x4, {0x77359400}, {0x1, 0x8, 0x8, 0x8, 0xc1, 0x0, "e639f3d7"}, 0x9, 0x4, {}, 0x3, 0x0, r0}) r1 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000003c0)='crush_location\x00', &(0x7f0000000440)='rack:foo\x00', 0x0) 3.167903224s ago: executing program 3 (id=7156): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000600), 0x0, 0x2) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000080)={0x20, 0x16}, 0x0, 0x0}) r1 = syz_open_dev$video(&(0x7f0000000100), 0x485, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000000400)={0xc, &(0x7f00000002c0)={0x0, 0x23, 0xf2, {0xf2, 0x23, "c8baa9c4e9ee3339582bc53969dd1bbbd437b0d38ecb5f6155e8e0e6bdad96901c7f7b012b9f4fb789205955e95c218601ac90eb57849b3d60cb48c3be704b3b2c370e1b4d9def10e08bfc8c5832bb5c8f65434f24f0d18ed6f07b13b4e6905c30f16ff7dc956e2cd4d8a6fbda00792126f74f8acbaf452f5c476a52f50523ed7519baff1ab49edfe4ea18cb410502318a95387b0540bd66e9337a21ab27992ac6eaa184094e7fffed542fc315c5b4849c9871714c098c1a0d9fc233eee4e207bb150cb8522eaad5ada5184699f4c0c3e700e1374c0e4945ac3c368fbbb975e664c52296e9d4d13abd5b7652b2095ce6"}}, &(0x7f00000003c0)={0x0, 0x3, 0xf, @string={0xf, 0x3, "c1edbaa91fead45a540e1c5e65"}}}, &(0x7f00000005c0)={0x1c, &(0x7f0000000440)={0x20, 0xe, 0x1b, "62c3bf9bdc9d2a36745a1b7ee553cdfd4325376991f24e09a8620a"}, &(0x7f0000000480)={0x0, 0xa, 0x1}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0xa0}, &(0x7f0000000500)={0xc0, 0xa1, 0x4, 0x1}, &(0x7f0000000540)={0x40, 0xa0, 0x4, 0x9}, &(0x7f0000000580)={0xc0, 0xa2, 0x2f, "726d08b951372f8f2e196d9e7a5376cd4b9bee918eb0cbaa55d4d2d6a666f34f949723a9765ca56b794265f2cd2821"}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000680), 0x318, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000006c0)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000700)={0x0, 0x30b3, 0x0, 0x1, 0x158}, &(0x7f0000000780)=0x0, &(0x7f00000007c0)=0x0, &(0x7f0000000800)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000840)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000008c0)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x45}}}, &(0x7f0000000900)=0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8993, &(0x7f0000000940)={'bond0\x00', &(0x7f0000000980)=@ethtool_coalesce={0x1, 0xf0, 0x67598305, 0x9, 0x6, 0x0, 0x2, 0x80000001, 0x5, 0xfff, 0x5, 0x1, 0x2000, 0x3, 0x9, 0xa8, 0x5, 0x8000dff, 0xff, 0x452, 0x1000, 0xb, 0x4}}) syz_ublk_setup_queues(r12, r10, &(0x7f0000000a00)={0x0, 0x1fffd, 0x0, 0x3, 0x2000000}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x3, 0x10000004, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf7ff, 0x8, 0xfffffffe, 0x33e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7c10, 0x10, 0x2, 0xe3, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x29a7, 0x8000, 0x1, 0x392}}], 0x1, &(0x7f0000000d00)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r9, '\x00', {0x2, 0x0, 0x0, 0x0}}, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000d80)={0x2f, {0x9, 0x0, 0x200001, 0xffff, 0x4, 0x400}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x60, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x3b}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xfc}}, 0x80) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000140)={0x9, 0x100, 0xe7ff, {0xa, 0x0, 0x7, 0x6}}) 3.060559198s ago: executing program 4 (id=7158): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x8080, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000a80)={'syzkaller0\x00', 0x2}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000ac0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000bc0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000d00), 0x20a942, 0x0) close(r7) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000d40)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r8, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000e00)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b924, 0x80000, {0x0, 0x0, 0x0, r6, {0x7, 0x3}, {0xe, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x8044) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000000e40)={'syzkaller0\x00', @random="2b0100004ec6"}) r9 = socket$inet_udp(0x2, 0x2, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000010", @ANYBLOB="2bbd84ac6ab66cbdce922d0f4e6d434a58d1a42753e0e0353dc961d37054cd9d044513b5006ca164ff8ee3ba74df76c31d7a2d61885df5dc9daf9c554c02e4c287390e8877f6b102413caed4b6ec3abc73879bfb5106fc3ec863f35ed3ac6475150f7a237abc2dd12373eb86aa7b697b42bd7ba6479c537ee8226272efc991dee4c7447a129b23098ee013c77b043259928ba6913d45e1e34fe19104a913394098157bee4bfad0bbaf843651cf72e6f6aa01bdda457ef5fa702d678c08388e2b24eabea5878aa371d9ddb4eef86e276f9468c2be1444ca6a604060e30a24c3a60e3583a2103b5196228d59a727746f70", @ANYBLOB="0100000000000000000001000000080009000100000008000a0001000000050007000300000006000100050000000500060010000000"], 0x3c}}, 0x1) sendmsg$L2TP_CMD_SESSION_CREATE(r10, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="4800f939", @ANYRES16=r11, @ANYBLOB="0100000000000000000005000000080009000100000008000b000100000008000c000100000006000100050000001400080073797a6b616c6c657230000000000000"], 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000880)={'syzkaller0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="2000000013000100000000000000000080000000", @ANYRES32=r12, @ANYBLOB="0100000001000000"], 0x20}}, 0x20000010) r14 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r14, &(0x7f0000000980)='testpacketdata', 0xe, 0x0, &(0x7f00000009c0)={0x11, 0x0, r12, 0x1, 0x0, 0x6, @broadcast}, 0x14) write$UHID_CREATE(r0, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000040)=""/2, 0x2, 0x0, 0x0, 0xfffffffd, 0x9, 0xfffffffe}}, 0x11c) r15 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r15, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@delpolicy={0x64, 0x14, 0x1, 0x0, 0x25dfdbfb, {{@in=@multicast1, @in6=@mcast2, 0x0, 0x80, 0x7, 0x0, 0x0, 0x80}}, [@mark={0xc, 0x15, {0x0, 0x100}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008050}, 0x0) 2.825631076s ago: executing program 4 (id=7160): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xfffffc00, 0x40201) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000040)={0x3, 0x5, 0x7, 0x2, 0x1, 0x3}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000080)={0x7, 0xd, 0x0, 0x5, "4d29a9ccc7eb991bf2242e2b908d3209b0cd48965c92e76d85218489b7b7d79a"}) prctl$PR_SET_PDEATHSIG(0x1, 0x36) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f00000000c0)=""/9) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={0xffffffffffffffff}) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='veth0_to_bridge\x00', 0x10) prctl$PR_SET_PDEATHSIG(0x1, 0x1c) r2 = openat$kvm(0xffffff9c, &(0x7f0000000180), 0x181000, 0x0) r3 = landlock_create_ruleset(&(0x7f00000001c0)={0x8, 0xb, 0x3, 0x900, 0x1, 0x3}, 0x30, 0x1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$NILFS_IOCTL_RESIZE(r4, 0x40086e8b, &(0x7f0000000240)=0x61aa) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000280)='ro\x00', 0x0, 0x0) pipe2(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84880) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'pim6reg1\x00'}) prctl$PR_SET_PDEATHSIG(0x1, 0x11) setsockopt$IP_VS_SO_SET_DELDEST(r5, 0x0, 0x488, &(0x7f0000000340)={{0x1d, @dev={0xac, 0x14, 0x14, 0x3b}, 0x4e22, 0x0, 'lc\x00', 0x25, 0x7fffffff, 0x1000}, {@loopback, 0x4e20, 0x1, 0x1, 0xfffffc00, 0x4}}, 0x44) sendmsg$sock(r1, &(0x7f0000000780)={&(0x7f00000003c0)=@x25, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="3da63acca1f5c7d9e599115ce4f638d3a95fc136e9df4c151261ebc83a27e5724a9e9d4169cc3c4b14864ecfd7edee5d26735751e06ebef7e4b42754405abe2347a94a04efaa1f04e746953e13e5d7fd9cb31fccbb9cc2af71fd48d17b908acd27dc6f9926d3c13078f9e78e2f50b8713363ab2487a7ae0a6f5d510a6b0bda9263ef5dc3f2922821b566efabf806887c5e3ffa9c8f4234cc0c79cf", 0x9b}, {&(0x7f0000000500)="d8f7f7c84f68cfb1628a27af676188556389a150d48abbac4f275a86b39fc4f5d67536a7fa6fb755659f50f66a0d3c2e8cee2dacff50baab5c33c5383b043415ccdd55f8fc0c1fcd6f2092fac0a99f66da2fb66b6d40dd3edfc30cb2ed712af129dbabf15447f6bfbc7e1b619b3a06efe16376e251e62e74ff3f5d96e11eeb0468c5026e07ec37dd4d05c694a02f83c22801a55d060465e422b3a823c83e732fc46ee82cc388b371e2e43c1e45f7cfcba3c97e0e36fcf600eb0d03d737", 0xbd}, {&(0x7f00000005c0)="f1b1bfbbae2d88b51b9d6806c0283804b5494c890d8ee85a333f9806c02e618ee7b67d9a54568a8d59c6fde3ca617a7c22ebc4f62d0d4a2413bde6fb787c75d7f462b383ac6a3e536f1985e14011b349c9b3a80fe02bf7598f2fce2e46fd6f", 0x5f}, {&(0x7f0000000640)="305fa39948ef035aa0661d14908874416be9ecc4a57a61554046ef47b996052d8ce842e368440ce6cb300be632df60eb91db5862163043838f0d5adfcb3febc51c54967d3c506535aea39d96e8ca18d162ed7b32c7c29ddd03915d0c79507531978bf8b25a3b59aeb080abaca595eafc73e5e407956cd62cd34b05da7a24468abf19f2", 0x83}], 0x4, &(0x7f0000000740)=[@mark={{0x10, 0x1, 0x24, 0x7}}], 0x10}, 0x80) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f00000007c0)={0x0, r4, 0x3, 0x2, 0x8, 0x7}) ioctl$BTRFS_IOC_SET_FEATURES(r5, 0x40309439, &(0x7f0000000800)={0x0, 0x3}) fchdir(0xffffffffffffffff) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r5, 0x18, &(0x7f0000000840)={0x3, r1, 0x0, {0x7, 0xf}, 0x3c}, 0x1) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000880)=@ccm_128={{0x304}, "bc754e282a65e6db", "f7f973b8f27189206a1ad831c8adde56", "bb2ff1e7", "636c8684d2269d11"}, 0x28) mq_open(&(0x7f00000008c0)=',%\x14*\x00', 0x80, 0xa0, &(0x7f0000000900)={0x8, 0x326, 0xa26b, 0x2}) r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x19) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000940)={0x0, 0x7, 0x1ffe, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r8 = syz_usb_connect$midi(0x5, 0x7d, &(0x7f0000000980)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6b, 0x1, 0x1, 0x7, 0x70, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x3, 0x1, 0x3, 0x20, 0x9, [@ms_header={0x7, 0x24, 0x1, 0x8, 0x7}, @midi_out_jack={0x13, 0x24, 0x3, 0x1, 0x5, 0x6, [{0x6}, {0x6, 0x7}, {0x3, 0x5}, {0x6, 0x5}, {0x4, 0x8}, {0x9}], 0xfe}], [{{0x9, 0x5, 0xc, 0x0, 0x200, 0x5, 0xc9, 0x5, {0xc, 0x25, 0x1, 0x8, "b2f9edb98a28402d"}}}, {{0x9, 0x5, 0x5, 0x10, 0x8, 0x6, 0x8b, 0x6, {0xa, 0x25, 0x1, 0x6, "9e394ff2d2b8"}}}, {{0x9, 0x5, 0x6, 0x8, 0x20, 0x8, 0x3, 0x8, {0xe, 0x25, 0x1, 0xa, "b8a052be3babd59d8904"}}}]}}}}}]}}, &(0x7f0000000d80)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x310, 0x40, 0x5, 0x6, 0xff, 0x9}, 0x1a, &(0x7f0000000a40)={0x5, 0xf, 0x1a, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0xfe, 0x6, 0x800, 0x18}, @ext_cap={0x7, 0x10, 0x2, 0xe, 0x2, 0x5, 0x3}, @ptm_cap={0x3}]}, 0x7, [{0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0xfcff}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x813}}, {0x7e, &(0x7f0000000b00)=@string={0x7e, 0x3, "0879be09e580006eef43087cec6ff7573cd8391c8f8d1025a6adecedc97b8e612a648efe4dbf0eb392d2ba993681f6c52977cd65ac5c4d10135f4f96109b0bf40aacd13f57ee4206c7ce99d471e3cb1f39a09f0b9763963e06d83173e64378d04a013ed326aa049b44a3a0500ff2a1e10983ffd56fa377c3967b11e4"}}, {0xb9, &(0x7f0000000b80)=@string={0xb9, 0x3, "f085bb14e465a8efaeba306231ded3229712586afd1b2b11ff892432f9bc8d786bc5258969d6a0604346605f446fd1b2b4c3869a3ef4f74a264a9ec00ef2f50823b4ad41d16dba52cafffa0b8f1f8bdb217bfffeb128e1af547b0a0d96d0a18651fa054547c02fde041c0434775eeeeead2fdda5732375bb1154f8268467d266887b113d42088fc02753b65e3c766f7e9056e44c2e2f47e12cc47df5d98c159f85fe35fa3997646f27c527b8f8bb9932d75536c9c868aa"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x1007}}, {0x31, &(0x7f0000000c80)=@string={0x31, 0x3, "63945fa55d971ca59777daec3da1fd3ded2cbbba2376f278e56fced4077f9b65dd30f7225f8369d994e5a79049dd45"}}, {0x85, &(0x7f0000000cc0)=@string={0x85, 0x3, "727f8d6846400b8ab940d3183698a17da081429fe58216e2a6f19bf789297a1f3408c20211a1a7a7e9ed591f0009b03832e0d0072c12aac28a53fb6a77fb0ffae83fc306df940dd180da88673c51ee13786cf6b31aa82a66eb9216270e9040292fb49153e66d3b5187b5253fde772935b79f03e61c5a2a189311e2d978d76cc441aba1"}}]}) syz_usb_control_io$uac3(r8, &(0x7f0000000e80)={0xc, &(0x7f0000000e00)={0x40, 0x22, 0xa, {0xa, 0x23, "646370e64687fd1e"}}, &(0x7f0000000e40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3001}}}, &(0x7f0000001100)={0x24, &(0x7f0000000ec0)={0x0, 0xecfd99b105cce777, 0x4a, "9e180b041013dd68d6075cedc5d7c5716540fac66ba2b0999d7c5cf56b91a7f5963b1fd79cc951c03c5cdca5bc886601531577a49f54fd06c520003e5805b7ab36a03b24e4e2bcedebbb"}, &(0x7f0000000f40)={0x0, 0xa, 0x1, 0x59}, &(0x7f0000000f80)={0x0, 0x8, 0x1, 0x2c}, &(0x7f0000000fc0)={0x20, 0x81, 0x1, 'p'}, &(0x7f0000001000)={0x20, 0x82, 0x3, "328e41"}, &(0x7f0000001040)={0x20, 0x83, 0x1, "c1"}, &(0x7f0000001080)={0x20, 0x84, 0x2, "ae66"}, &(0x7f00000010c0)={0x20, 0x85, 0x3, "52b245"}}) syz_usb_control_io$uac1(r8, &(0x7f0000001200)={0xc, &(0x7f0000001140)={0x0, 0x8, 0x4f, {0x4f, 0x5, "39e22093435f4b82345ee1737b6a70c050c3831ce4ba4a95b90fc661789817934c540e955d8101a09e9e82658948d7f0d09332d3cb14e6a67f5c12509f5b453efcf62e184b02091bc12bca307a"}}, &(0x7f00000011c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x425}}}, &(0x7f0000001480)={0x24, &(0x7f0000001240)={0x0, 0x12, 0x75, "9b77294771924a93be111826888c604f62844f40edb3658ee8756cd8fe7316d2cbb7ad012aa46fbeb4ce14db4ae319c0849b095e9592ae1e49e7c0c3af0c4503783f961e0765c6a7b365019770bce85c9cf865cf820511a73ae3c547599e5cd67310861e14dfd0d5ae3acb2ca40916c67cb494cadc"}, &(0x7f00000012c0)={0x0, 0xa, 0x1, 0x73}, &(0x7f0000001300)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000001340)={0x20, 0x81, 0x3, "e92920"}, &(0x7f0000001380)={0x20, 0x82, 0x3, ':}.'}, &(0x7f00000013c0)={0x20, 0x83, 0x1, "16"}, &(0x7f0000001400)={0x20, 0x84, 0x3, "0e8398"}, &(0x7f0000001440)={0x20, 0x85, 0x3, "99cc1b"}}) 2.732796207s ago: executing program 8 (id=7161): socket(0x2b, 0x1, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000003020000000900010073797a30000000002c000000030a01040000000000000002020000000900010073797a30000000000900030073797a300000000078000000060a01040000000000000000020000000900010073797a30000000000900020073797a30000000004c000480480001800a0001006d61746368000000380002800e000100636f6e6e627974657300000008000240000000001c0003"], 0xec}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 2.604558102s ago: executing program 8 (id=7162): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0cc5605, &(0x7f00000000c0)={0x1, @pix={0x0, 0x0, 0x34325852, 0x0, 0x8000000}}) 2.558095699s ago: executing program 8 (id=7163): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x80}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000006f40)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000006f80)={0x0, 0x0, &(0x7f0000006fc0)={&(0x7f00000003c0)=@newqdisc={0x28, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0xf}}, [@TCA_STAB={0x4}]}, 0x28}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) r9 = socket$netlink(0x10, 0x3, 0x13) bind$netlink(r9, &(0x7f0000007040)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f0000007080), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000070c0), r9) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, 0x0) sendmsg$kcm(r8, &(0x7f0000007100)={0x0, 0x0, &(0x7f0000007140)=[{&(0x7f0000007180)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f00000071c0)="03000000", 0x4}], 0x2}, 0x0) sendmsg$nl_route(r7, &(0x7f0000007200)={0x0, 0x0, &(0x7f0000007240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000010000108faffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000200000000800a83e240ba6be1b0000002a0b18241959e8e0e71b8cd8a5efb600961a6d34800800409541c724e69bd584e18f5d418e6114a49144526c46a7227d4f3d779fec33fff1924e9ac4b7161393f35611a63cf2ecacedbaa0bccce3605f419a7d365542afcf251b1df3c174382096be1247c4b24d1ccb0f60e14c68f085510d3505a079509af52183ce3f78848ff5f998365126ba"], 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000072c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000007300)={0x0, 0x0, &(0x7f0000007340)={&(0x7f0000007380)=@newtclass={0x24, 0x28, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x1, 0xfff1}, {0x1, 0xfff1}, {0xfff2}}}, 0x24}}, 0x448c0) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000200)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) r11 = socket(0x1e, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000080)={0x3}, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="260000001200010a00000000000000000740"], 0x26}}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='sessionid\x00') 2.16044109s ago: executing program 7 (id=7167): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=@allocspi={0x100, 0x16, 0x1, 0x0, 0x0, {{{@in, @in=@broadcast, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@local, 0x0, 0x33}, @in=@remote, {0x800000000000000, 0x1}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0xa, 0x0, 0x4}, 0x5, 0x8}, [@sa_dir={0x5, 0x21, 0x2}]}, 0x100}}, 0x0) 1.953418232s ago: executing program 7 (id=7168): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@updsa={0x198, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in=@local, 0x0, 0x32}, @in=@private, {}, {}, {}, 0x0, 0x0, 0x2, 0x1}, [@sec_ctx={0xc, 0x8, {0x8}}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, @tfcpad={0x8}, @algo_aead={0x4c, 0x12, {{'aegis128l-aesni\x00'}, 0xfffffffffffffedd}}, @extra_flags={0x0, 0x18, 0x7}]}, 0x198}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$sock(r1, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000002140)="44000000100001040000000000000000000000000fff00002111000000000000240012000a00010076786c616e00000014000200080000207b00002108000f0017ca0304", 0x44}], 0x1}, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc01c5869, &(0x7f0000000300)={r0, &(0x7f0000000200)='aegis128l-aesni\x00', 0x4808c2, &(0x7f0000000240)={@_ha_fsid={[0x3]}, {0xfff0, 0x2, 0x9, 0xa}}, 0xffffc3b7, &(0x7f0000000280)={@_ha_fsid}, &(0x7f00000002c0)=0x7}) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, &(0x7f0000000340)={0x5, r0, 0x10, {0x3ff, 0x8}, 0x9}, 0x1) 1.951918834s ago: executing program 8 (id=7169): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000940)=ANY=[@ANYBLOB="1800b000068a000000000000041800001801000020696c2500000000002020207b1ad8ff000000007ba1000000000000070100000400ffffb702000008000000b703000002000000850000002e00000095"], &(0x7f00000009c0)='GPL\x00', 0x6, 0xffa, &(0x7f0000000d00)=""/4090, 0x0, 0xa8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94) 1.930381964s ago: executing program 2 (id=7170): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2800001, 0xc3072, 0xffffffffffffffff, 0x9a46c000) r0 = openat$binfmt(0xffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_misc(r0, 0x0, 0x0) rseq(&(0x7f0000000000), 0x20, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f0000000200)=[@in6={0xa, 0x4e23, 0x1, @private1, 0x8}]}, &(0x7f0000000240)=0xc) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) syz_pidfd_open(0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) capget(&(0x7f00000013c0)={0x19980330}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r2, 0x40045402, &(0x7f00000002c0)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000300)={{0x1, 0x1}}) read(r2, &(0x7f0000000340)=""/4096, 0x20) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000001340)={0x7, 0x6, 0x0, 0x0, 0x7}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001400), 0x42, 0x0) read$FUSE(r3, &(0x7f0000001440)={0x2020}, 0x2020) syz_fuse_handle_req(r3, &(0x7f0000003480)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f0000005480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000005500)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup2(0xffffffffffffffff, r3) r4 = syz_ublk_setup_io_uring(0x155a, &(0x7f0000005540)={0x0, 0x30b5, 0x800, 0x2, 0x158}, &(0x7f00000055c0)=0x0, &(0x7f0000005600)=0x0, &(0x7f0000005640)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000005680)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000005700)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000005740)) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) sendmsg$NFT_BATCH(r9, 0x0, 0x24004025) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000140)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xb, 0x6f76, 0x5, 0x4809, 0x1, 0x8, 0x7, 0x3}) syz_open_dev$usbmon(&(0x7f0000000100), 0x9c0, 0x0) 1.752964488s ago: executing program 2 (id=7171): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) rt_sigqueueinfo(r0, 0x36, &(0x7f0000000040)={0x1f, 0xc4, 0xff7ffffe}) ptrace$peeksig(0x4209, r0, &(0x7f00000000c0)={0x2000000000000, 0x1, 0x1}, &(0x7f0000000100)=[{}]) syz_usb_connect(0x0, 0x5a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e010000084101", @ANYBLOB="32b683adf11f83220156c564000400000000000089c5"], 0x0) 1.752452519s ago: executing program 8 (id=7172): r0 = syz_open_dev$vcsa(&(0x7f0000000440), 0x1, 0x102) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x9, 0x1, 0xffffffffffffffff}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000000480)={0x200f, {"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", 0x1000}}, 0x1006) write(r0, &(0x7f00000014c0)="1c00", 0x2) 1.701324241s ago: executing program 7 (id=7173): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000101050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000000c00078008000640", @ANYRESHEX], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x300, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="74000000090601020000000003000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x30044803}, 0x20000040) 1.569404244s ago: executing program 7 (id=7174): r0 = syz_open_dev$loop(&(0x7f00000004c0), 0xe01c, 0x80000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000540)={'#! ', './file1/../file0', [{0x20, '#2 \x00\x00\x00\x00\x00\x00\x00'}, {}, {0x20, '#! '}], 0xa, "439118890b9c0900594ee00405742a995f23b807e61af392f8a0e955270a56dd2b47f43ab161753b19d9e86fc19e5ccf0105e35acf39568863b6d30520666b44732fed1e58a2cd11c247e52013e04d1f6bd62c7ac0750dea0e472938c6ff329ec4e0e1482d80f3e5fd9d56"}, 0x8f) write$UHID_INPUT(r1, &(0x7f0000000600)={0x8, {"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", 0xfffffffffffffd4f}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000001640)={r1, 0x0, {0x2a00, 0x80010000, 0x2200, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) 1.45187091s ago: executing program 8 (id=7175): socket$nl_xfrm(0x10, 0x3, 0x6) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x40) socket$nl_route(0x10, 0x3, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000100), 0x10106, 0x2, 0x0) (async, rerun: 32) syz_usb_connect(0x6, 0x36, 0x0, 0x0) (async, rerun: 32) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000700)={0xf0f020}) (async) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e1f, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) (async) setsockopt$sock_int(r1, 0x1, 0x49, &(0x7f0000000200)=0x4, 0x4) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000240)=0x1, 0x4) (async) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000740)='veno', 0x4) (async) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000007c0)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x13f, 0x3}}, 0x20) (async, rerun: 32) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000800)={0x1, 0x10, 0xfa00, {0x0}}, 0x18) (rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000840)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8948, &(0x7f0000000880)={'bond0\x00'}) (async) r6 = add_key$fscrypt_v1(0x0, 0x0, &(0x7f00000008c0)={0x0, "8527d2100090af54bfbca283be11c0de7af30e90937920fcba13d90af61beaa44d66a6535daf1bc35fb3af1e9197e31d26589d073c10184095fb00", 0x14}, 0x48, 0xffffffffffffffff) (async) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000940)={0x1}) (async, rerun: 32) r7 = add_key$user(&(0x7f0000000980), &(0x7f00000009c0), 0x0, 0x0, 0xfffffffffffffffe) (async, rerun: 32) r8 = add_key$user(&(0x7f0000000a00), &(0x7f0000000a40), &(0x7f0000000a80), 0x390, 0xfffffffffffffffd) (async) r9 = socket$nl_rdma(0x10, 0x3, 0x14) connect$netlink(r9, &(0x7f0000000ac0)=@proc={0x10, 0x0, 0x1}, 0xc) (async) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x10}, 0x1, 0x0, 0x0, 0x4008041}, 0x2000c090) (async) keyctl$dh_compute(0x17, &(0x7f0000000bc0)={r7, r8, r6}, 0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)={'streebog512-generic\x00'}}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c80)) (async, rerun: 32) connect$unix(0xffffffffffffffff, 0x0, 0x0) (rerun: 32) 1.38491741s ago: executing program 7 (id=7176): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) syz_emit_ethernet(0x42, &(0x7f0000000740)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x5, 0x0, 0x6, {[@timestamp={0x8, 0xa, 0x4, 0x200}]}}}}}}}, 0x0) syz_emit_ethernet(0x46, &(0x7f00000007c0)={@local, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xffffa888, 0x1000000}]}}}}}}}, 0x0) 1.300742253s ago: executing program 7 (id=7177): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000004680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f00000046c0)={0x0, 0x0, &(0x7f0000004700)={&(0x7f0000004740)={0x24, r1, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x201cc244cd0232ac}]}, 0x24}}, 0x44) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000004780)=ANY=[@ANYRES64=r1], 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$audio(0xffffff9c, &(0x7f0000000080), 0x8000, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000240)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000280)=0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002380), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000023c0)='./file0\x00', &(0x7f0000002400), 0x0, &(0x7f0000002440)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r6 = fsopen(&(0x7f00000000c0)='devpts\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f00000047c0)='uid', &(0x7f0000004800)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) syz_fuse_handle_req(r5, &(0x7f00000024c0)="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", 0x2000, &(0x7f00000044c0)={&(0x7f0000004540)={0x50, 0xffffffffffffffda, 0x8000000000000003, {0x7, 0x2b, 0x8097b7, 0x22048b0, 0xffff, 0xfffd, 0x100, 0x0, 0x0, 0x0, 0x10, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) removexattr(&(0x7f00000045c0)='./file0\x00', &(0x7f0000004600)=ANY=[@ANYBLOB="73797374656d2e73797a6b613d3e0f0c95"]) r7 = dup2(r4, r4) read$FUSE(r7, &(0x7f0000000340)={0x2020}, 0x2020) ioctl$SOUND_MIXER_READ_DEVMASK(r7, 0x80044dfe, &(0x7f00000002c0)) fremovexattr(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="736563757269749d40b226be3aabc9de90de792e00"]) syz_usb_control_io(r3, &(0x7f0000000140)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="20b52c020000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac3(r3, 0x0, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000300), 0x1, 0x0) socket$kcm(0x29, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f0000000080), 0x0, 0x0, 0x1d, 0x0, 0x0, 0x2e}) 1.049422975s ago: executing program 2 (id=7178): socket$inet6_tcp(0xa, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x5, 0x87, 0x7ffc0201}]}) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000280)={0x28, 0x0, 0x2710}, 0x10) accept4(r0, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="7f454c460004faffffff00"], 0x78) r3 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2000413, &(0x7f0000000100)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_fuse_handle_req(r4, &(0x7f0000000480)="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", 0x2000, &(0x7f0000002480)={&(0x7f0000002500)={0x50, 0xfffffffffffffffe, 0x2, {0x7, 0x29, 0xcf940281, 0x4c3400a3, 0xfff, 0x1a76, 0x4, 0x1801, 0x0, 0x0, 0x3, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_INVAL_INODE(r4, &(0x7f0000002580)={0x28, 0x2, 0x0, {0x1, 0x8000000000000001, 0x800000}}, 0x28) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) close(r2) execveat(r2, &(0x7f0000000440)='./file1\x00', 0x0, 0x0, 0x1000) 564.919794ms ago: executing program 2 (id=7179): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x300}, 0x0) 516.550112ms ago: executing program 2 (id=7180): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r1, &(0x7f00000004c0)='0', 0x1) sendto(r0, &(0x7f0000000000)="340000003e000500010000000000000001020000000000000c0001006f76732d647030000800020000000000080009000f000f00", 0x34, 0x0, 0x0, 0x0) 31.165973ms ago: executing program 3 (id=7181): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x40) r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) syz_usb_connect(0x6, 0x36, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e1f, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="f800000019000100000000000000000000000000000000f8ffffffffffffff00fe8000000000000000000000000000bb40000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000700000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000044000500ff01000000000000000000000000000100000002320000000a000000fc010000000000000000000000000000000000000400"/176], 0xf8}}, 0x0) connect$inet(r2, &(0x7f0000000280)={0x2, 0x4, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20000895}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42902, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)=@newtfilter={0x12c, 0x2c, 0xd27, 0x870b525, 0x8000, {0x0, 0x0, 0x0, r7, {0x8, 0xc}, {}, {0xa, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0xfc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0xf0, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x80}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x54, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xf1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xc}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xfffa}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x34, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x14}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x2}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xff}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x30}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x34, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0xb2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}]}]}]}}]}, 0x12c}, 0x1, 0x0, 0x0, 0x2204403c}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) unshare(0x400) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r8, 0x1, 0x2b, 0x0, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000240)={0x0, 0x1, 0x6, @remote}, 0x10) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f00000002c0)='vlan1\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=7191): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x4, 0x4, 0x4, 0x10005}, 0x48) close(r0) kernel console output (not intermixed with test programs): k speed/duplex [ 1611.869696][T23550] bond1: (slave bridge1): failed to get link speed/duplex [ 1611.981036][T23552] bond1: (slave bridge1): failed to get link speed/duplex [ 1612.089438][T23550] bond1: (slave bridge1): failed to get link speed/duplex [ 1612.119453][T28536] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1612.201471][T23550] bond1: (slave bridge1): failed to get link speed/duplex [ 1612.309816][ T6024] bond1: (slave bridge1): failed to get link speed/duplex [ 1612.365920][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1612.365938][ T30] audit: type=1326 audit(1792926286.664:9073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28541 comm="syz.5.6662" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cef1c code=0x7ffc0000 [ 1612.366416][ T30] audit: type=1326 audit(1792926286.664:9074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28541 comm="syz.5.6662" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf73cef1c code=0x7ffc0000 [ 1612.431296][ T30] audit: type=1326 audit(1792926286.734:9075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28541 comm="syz.5.6662" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cef1c code=0x7ffc0000 [ 1612.431339][ T30] audit: type=1326 audit(1792926286.734:9076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28541 comm="syz.5.6662" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cef1c code=0x7ffc0000 [ 1612.451045][ T30] audit: type=1326 audit(1792926286.754:9077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28541 comm="syz.5.6662" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf73cef1c code=0x7ffc0000 [ 1612.451186][ T30] audit: type=1326 audit(1792926286.754:9078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28541 comm="syz.5.6662" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cef1c code=0x7ffc0000 [ 1612.451317][ T30] audit: type=1326 audit(1792926286.754:9079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28541 comm="syz.5.6662" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cef1c code=0x7ffc0000 [ 1612.478064][ T30] audit: type=1326 audit(1792926286.774:9080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28541 comm="syz.5.6662" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf73cef1c code=0x7ffc0000 [ 1612.597699][ T30] audit: type=1326 audit(1792926286.814:9081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28541 comm="syz.5.6662" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cef1c code=0x7ffc0000 [ 1612.597742][ T30] audit: type=1326 audit(1792926286.894:9082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28541 comm="syz.5.6662" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf73cef1c code=0x7ffc0000 [ 1612.609748][ T6024] bond1: (slave bridge1): failed to get link speed/duplex [ 1612.894735][T28547] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1613.120200][T14209] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1613.128737][T28551] fuse: Bad value for 'fd' [ 1613.153346][T28555] tipc: Started in network mode [ 1613.153371][T28555] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 1613.153411][T28555] tipc: Enabling of bearer rejected, failed to enable media [ 1613.269568][T14209] usb 6-1: Using ep0 maxpacket: 16 [ 1613.277564][T14209] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1613.277619][T14209] usb 6-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.02 [ 1613.284567][T14209] usb 6-1: config index 0 descriptor too short (expected 11602, got 18) [ 1613.284597][T14209] usb 6-1: config 0 has an invalid descriptor of length 224, skipping remainder of the config [ 1613.284619][T14209] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 18 [ 1613.334075][T14209] usb 6-1: New USB device strings: Mfr=1, Product=5, SerialNumber=0 [ 1613.334105][T14209] usb 6-1: Product: syz [ 1613.334123][T14209] usb 6-1: Manufacturer: syz [ 1613.358684][T14209] usb 6-1: config 0 descriptor?? [ 1613.425540][T28559] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6668'. [ 1613.440786][T25442] usb 8-1: new high-speed USB device number 65 using dummy_hcd [ 1613.599308][T25442] usb 8-1: Using ep0 maxpacket: 32 [ 1613.600096][T25442] usb 8-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 1613.600663][T28542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1613.601666][T25442] usb 8-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1613.606152][T25442] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 1613.606179][T25442] usb 8-1: Product: syz [ 1613.606195][T25442] usb 8-1: Manufacturer: syz [ 1613.606211][T25442] usb 8-1: SerialNumber: syz [ 1613.608886][T28542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1613.643177][T25442] asix 8-1:2.0: probe with driver asix failed with error -22 [ 1613.700801][T28542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1613.701297][T28542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1613.746149][T14209] usb 6-1: USB disconnect, device number 13 [ 1614.398403][T28569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1614.408275][T28569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1615.321245][T28588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1615.321695][T28588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1615.411984][T28583] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6676'. [ 1616.356246][T28553] syz.7.6667 (28553): drop_caches: 1 [ 1616.448140][T25439] usb 8-1: USB disconnect, device number 65 [ 1616.619423][ T62] net_ratelimit: 36 callbacks suppressed [ 1616.619449][ T62] bond1: (slave bridge1): failed to get link speed/duplex [ 1616.732003][ T50] bond1: (slave bridge1): failed to get link speed/duplex [ 1616.802139][T28602] netlink: 'syz.3.6682': attribute type 4 has an invalid length. [ 1616.818869][T28602] netlink: 'syz.3.6682': attribute type 4 has an invalid length. [ 1616.840765][ T62] bond1: (slave bridge1): failed to get link speed/duplex [ 1616.952628][T23552] bond1: (slave bridge1): failed to get link speed/duplex [ 1617.019355][T14209] usb 8-1: new high-speed USB device number 66 using dummy_hcd [ 1617.061407][T23561] bond1: (slave bridge1): failed to get link speed/duplex [ 1617.144968][T28614] FAULT_INJECTION: forcing a failure. [ 1617.144968][T28614] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1617.145009][T28614] CPU: 0 UID: 0 PID: 28614 Comm: syz.2.6690 Tainted: G L syzkaller #0 PREEMPT(full) [ 1617.145050][T28614] Tainted: [L]=SOFTLOCKUP [ 1617.145058][T28614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1617.145073][T28614] Call Trace: [ 1617.145082][T28614] [ 1617.145093][T28614] dump_stack_lvl+0xe8/0x150 [ 1617.145133][T28614] should_fail_ex+0x410/0x560 [ 1617.145169][T28614] _copy_from_iter+0x1d3/0x1660 [ 1617.145197][T28614] ? __alloc_skb+0x27a/0x7a0 [ 1617.145231][T28614] ? __alloc_skb+0x27a/0x7a0 [ 1617.145267][T28614] ? __alloc_skb+0x27a/0x7a0 [ 1617.145300][T28614] ? __pfx__copy_from_iter+0x10/0x10 [ 1617.145324][T28614] ? kmem_cache_alloc_node_noprof+0x1f4/0x600 [ 1617.145360][T28614] ? __alloc_skb+0x27a/0x7a0 [ 1617.145391][T28614] ? __alloc_skb+0x27a/0x7a0 [ 1617.145433][T28614] ? netlink_sendmsg+0x64f/0xb20 [ 1617.145464][T28614] ? skb_put+0x112/0x210 [ 1617.145501][T28614] netlink_sendmsg+0x6bb/0xb20 [ 1617.145538][T28614] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1617.145573][T28614] ? aa_sock_msg_perm+0x144/0x210 [ 1617.145604][T28614] ? apparmor_socket_sendmsg+0x98/0x360 [ 1617.145642][T28614] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1617.145672][T28614] sock_sendmsg_nosec+0x14e/0x190 [ 1617.145704][T28614] ____sys_sendmsg+0x54e/0x850 [ 1617.145733][T28614] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1617.145773][T28614] ___sys_sendmsg+0x2a5/0x360 [ 1617.145794][T28614] ? __lock_acquire+0x747/0x2de0 [ 1617.145827][T28614] ? __pfx____sys_sendmsg+0x10/0x10 [ 1617.145849][T28614] ? get_pid_task+0x20/0x1f0 [ 1617.145874][T28614] ? get_pid_task+0x20/0x1f0 [ 1617.145896][T28614] ? get_pid_task+0x20/0x1f0 [ 1617.145953][T28614] ? __fget_files+0x3a2/0x420 [ 1617.145975][T28614] ? __fget_files+0x2a/0x420 [ 1617.146007][T28614] __sys_sendmsg+0x177/0x240 [ 1617.146039][T28614] ? __pfx___sys_sendmsg+0x10/0x10 [ 1617.146075][T28614] ? __might_fault+0xaf/0x130 [ 1617.146113][T28614] __do_fast_syscall_32+0x28b/0x6c0 [ 1617.146141][T28614] ? do_fast_syscall_32+0x33/0x70 [ 1617.146166][T28614] ? asm_int80_emulation+0x1a/0x20 [ 1617.146187][T28614] ? do_int80_emulation+0x299/0x500 [ 1617.146212][T28614] ? trace_irq_disable+0x3b/0x140 [ 1617.146247][T28614] do_fast_syscall_32+0x33/0x70 [ 1617.146273][T28614] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1617.146301][T28614] RIP: 0023:0xf741ef1c [ 1617.146322][T28614] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1617.146342][T28614] RSP: 002b:00000000f543650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1617.146369][T28614] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 1617.146385][T28614] RDX: 000000000000c000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1617.146400][T28614] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1617.146413][T28614] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1617.146427][T28614] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1617.146461][T28614] [ 1617.171302][T23561] bond1: (slave bridge1): failed to get link speed/duplex [ 1617.217891][T14209] usb 8-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1617.241127][T14209] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1617.281736][T23550] bond1: (slave bridge1): failed to get link speed/duplex [ 1617.407580][ T62] bond1: (slave bridge1): failed to get link speed/duplex [ 1617.428918][T14209] usb 8-1: config 0 descriptor?? [ 1617.513098][ T62] bond1: (slave bridge1): failed to get link speed/duplex [ 1617.622173][T23550] bond1: (slave bridge1): failed to get link speed/duplex [ 1617.731845][T14209] udl 8-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1618.033210][T28627] netlink: 156 bytes leftover after parsing attributes in process `syz.5.6694'. [ 1618.539374][T14209] [drm:udl_init] *ERROR* Selecting channel failed [ 1618.569382][T14207] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1618.577020][T14209] [drm] Initialized udl 0.0.1 for 8-1:0.0 on minor 1 [ 1618.577049][T14209] [drm] Initialized udl on minor 1 [ 1618.605854][T14209] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1618.607920][T14209] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 1618.609956][ T5785] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1618.627538][ T5785] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1618.644423][ T5785] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 1618.657780][T14209] usb 8-1: USB disconnect, device number 66 [ 1618.732646][T14207] usb 6-1: Using ep0 maxpacket: 16 [ 1618.736517][T14207] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1618.739088][T14207] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1618.739285][T14207] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1618.785054][T14207] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1618.785314][T14207] usb 6-1: Product: syz [ 1618.785333][T14207] usb 6-1: Manufacturer: syz [ 1618.785350][T14207] usb 6-1: SerialNumber: syz [ 1618.837204][T14207] usb 6-1: 0:2 : does not exist [ 1619.055410][T28638] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6698'. [ 1619.493365][T28647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1619.493867][T28647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1619.601471][T28647] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 1620.005557][T28652] FAULT_INJECTION: forcing a failure. [ 1620.005557][T28652] name failslab, interval 1, probability 0, space 0, times 0 [ 1620.005606][T28652] CPU: 1 UID: 0 PID: 28652 Comm: syz.3.6699 Tainted: G L syzkaller #0 PREEMPT(full) [ 1620.005629][T28652] Tainted: [L]=SOFTLOCKUP [ 1620.005636][T28652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1620.005645][T28652] Call Trace: [ 1620.005652][T28652] [ 1620.005659][T28652] dump_stack_lvl+0xe8/0x150 [ 1620.005690][T28652] should_fail_ex+0x410/0x560 [ 1620.005714][T28652] should_failslab+0xa8/0x100 [ 1620.005739][T28652] __kmalloc_cache_noprof+0x9e/0x600 [ 1620.005758][T28652] ? kernel_text_address+0xa5/0xe0 [ 1620.005778][T28652] ? madvise_collapse+0x15a/0x790 [ 1620.005801][T28652] ? madvise_collapse+0x15a/0x790 [ 1620.005823][T28652] ? unwind_get_return_address+0x4d/0x90 [ 1620.005848][T28652] madvise_collapse+0x15a/0x790 [ 1620.005871][T28652] ? register_lock_class+0x31/0x2e0 [ 1620.005894][T28652] madvise_vma_behavior+0x1351/0x43b0 [ 1620.005921][T28652] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 1620.005940][T28652] ? ima_match_policy+0x21a6/0x2230 [ 1620.005974][T28652] ? lock_acquire+0x115/0x350 [ 1620.006005][T28652] ? process_measurement+0x7b2/0x1c10 [ 1620.006032][T28652] ? up_write+0x19d/0x4a0 [ 1620.006058][T28652] ? __lock_acquire+0x747/0x2de0 [ 1620.006082][T28652] ? __lock_acquire+0x747/0x2de0 [ 1620.006107][T28652] ? __pfx_process_measurement+0x10/0x10 [ 1620.006133][T28652] ? lock_acquire+0x115/0x350 [ 1620.006162][T28652] ? mas_prev_slot+0xb76/0xbf0 [ 1620.006192][T28652] ? find_vma_prev+0x123/0x1b0 [ 1620.006216][T28652] ? __pfx_find_vma_prev+0x10/0x10 [ 1620.006266][T28652] ? __lock_acquire+0x747/0x2de0 [ 1620.006309][T28652] madvise_walk_vmas+0x576/0xb00 [ 1620.006352][T28652] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 1620.006385][T28652] ? blk_start_plug+0x6e/0x1b0 [ 1620.006412][T28652] madvise_do_behavior+0x385/0x540 [ 1620.006445][T28652] ? __pfx_madvise_do_behavior+0x10/0x10 [ 1620.006484][T28652] ? down_read+0x2b9/0x320 [ 1620.006520][T28652] do_madvise+0x327/0x3a0 [ 1620.006549][T28652] ? __pfx_do_madvise+0x10/0x10 [ 1620.006595][T28652] __ia32_sys_madvise+0xa6/0xc0 [ 1620.006616][T28652] __do_fast_syscall_32+0x28b/0x6c0 [ 1620.006636][T28652] ? do_fast_syscall_32+0x33/0x70 [ 1620.006654][T28652] ? asm_int80_emulation+0x1a/0x20 [ 1620.006670][T28652] ? do_int80_emulation+0x299/0x500 [ 1620.006687][T28652] ? trace_irq_disable+0x3b/0x140 [ 1620.006712][T28652] do_fast_syscall_32+0x33/0x70 [ 1620.006731][T28652] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1620.006751][T28652] RIP: 0023:0xf7f53f1c [ 1620.006766][T28652] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1620.006781][T28652] RSP: 002b:00000000f53e550c EFLAGS: 00000206 ORIG_RAX: 00000000000000db [ 1620.006802][T28652] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000600003 [ 1620.006816][T28652] RDX: 0000000000000019 RSI: 0000000000000000 RDI: 0000000000000000 [ 1620.006828][T28652] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1620.006838][T28652] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1620.006847][T28652] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1620.006870][T28652] [ 1620.932770][T28643] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6698'. [ 1620.958467][T14207] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1621.042319][T14207] usb 6-1: USB disconnect, device number 14 [ 1621.086117][T28667] input: syz0 as /devices/virtual/input/input149 [ 1621.160317][T23214] udevd[23214]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1621.207373][T28667] syzkaller1: entered promiscuous mode [ 1621.207401][T28667] syzkaller1: entered allmulticast mode [ 1621.447192][T28679] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1621.539828][T25442] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1621.669987][T23552] net_ratelimit: 36 callbacks suppressed [ 1621.670011][T23552] bond1: (slave bridge1): failed to get link speed/duplex [ 1621.689423][T25442] usb 4-1: Using ep0 maxpacket: 16 [ 1621.698971][T25442] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1621.714020][T25442] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1621.714073][T25442] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1621.722329][T25442] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1621.722417][T25442] usb 4-1: Product: syz [ 1621.722467][T25442] usb 4-1: Manufacturer: syz [ 1621.722509][T25442] usb 4-1: SerialNumber: syz [ 1621.779048][T25442] usb 4-1: config 0 descriptor?? [ 1621.785192][ T62] bond1: (slave bridge1): failed to get link speed/duplex [ 1621.802439][T25442] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1621.802465][T25442] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1621.833299][T28694] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6710'. [ 1621.891611][T23552] bond1: (slave bridge1): failed to get link speed/duplex [ 1622.003085][ T62] bond1: (slave bridge1): failed to get link speed/duplex [ 1622.109578][ T62] bond1: (slave bridge1): failed to get link speed/duplex [ 1622.219420][ T62] bond1: (slave bridge1): failed to get link speed/duplex [ 1622.329622][ T62] bond1: (slave bridge1): failed to get link speed/duplex [ 1622.426532][T25442] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1622.442770][ T6024] bond1: (slave bridge1): failed to get link speed/duplex [ 1622.449380][T25442] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 1622.549552][T23550] bond1: (slave bridge1): failed to get link speed/duplex [ 1622.660273][ T6024] bond1: (slave bridge1): failed to get link speed/duplex [ 1622.722903][T28706] vlan4: entered allmulticast mode [ 1622.722936][T28706] bond0: entered allmulticast mode [ 1622.722954][T28706] bond_slave_0: entered allmulticast mode [ 1622.722973][T28706] bond_slave_1: entered allmulticast mode [ 1622.722994][T28706] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 1622.725731][T28706] bridge0: port 3(vlan4) entered blocking state [ 1622.725940][T28706] bridge0: port 3(vlan4) entered disabled state [ 1622.728799][T28706] vlan4: entered promiscuous mode [ 1622.728821][T28706] bond0: entered promiscuous mode [ 1622.728837][T28706] bond_slave_0: entered promiscuous mode [ 1622.729073][T28706] bond_slave_1: entered promiscuous mode [ 1622.789466][T28706] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 1622.805491][T28706] bridge0: port 3(vlan4) entered blocking state [ 1622.805797][T28706] bridge0: port 3(vlan4) entered forwarding state [ 1623.066209][T25442] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 1623.066963][T25442] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 1623.080312][T25442] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 1623.096061][T25442] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 1623.098742][T25442] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 1623.331200][T25442] em28xx 4-1:0.0: AC97 command still being executed: not handled properly! [ 1623.331228][T25442] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 1623.529464][T25442] usb 4-1: USB disconnect, device number 60 [ 1623.533741][T28709] netlink: 'syz.2.6716': attribute type 1 has an invalid length. [ 1623.609765][T28709] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1623.704238][T28711] bond2: (slave veth3): Enslaving as an active interface with a down link [ 1623.866217][T28721] netlink: 'syz.2.6719': attribute type 1 has an invalid length. [ 1623.928443][T28721] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1623.996211][T28721] bond3: (slave geneve3): making interface the new active one [ 1624.012649][T28721] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 1624.238909][T28741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1624.252623][T28741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1624.441019][T14209] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1624.569242][T14209] usb 4-1: device descriptor read/64, error -71 [ 1624.809323][T14209] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1624.939239][T14209] usb 4-1: device descriptor read/64, error -71 [ 1624.955662][T17347] Bluetooth: hci1: command 0x0406 tx timeout [ 1625.050365][T14209] usb usb4-port1: attempt power cycle [ 1625.181021][T28754] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6728'. [ 1625.279413][ T5785] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1625.399363][T14209] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1625.419556][ T5785] usb 6-1: device descriptor read/64, error -71 [ 1625.420668][T14209] usb 4-1: device descriptor read/8, error -71 [ 1625.594398][T28752] tc_dump_action: action bad kind [ 1625.669637][T14209] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1625.669947][ T5785] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1625.697234][T14209] usb 4-1: device descriptor read/8, error -71 [ 1625.799867][T14209] usb usb4-port1: unable to enumerate USB device [ 1626.167684][T28759] netlink: 'syz.5.6730': attribute type 1 has an invalid length. [ 1626.234566][T28759] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1626.287050][T28761] bond6: (slave veth3): Enslaving as an active interface with a down link [ 1626.567851][T28771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1626.577615][T28771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1626.729366][T23561] net_ratelimit: 33 callbacks suppressed [ 1626.729398][T23561] bond1: (slave bridge1): failed to get link speed/duplex [ 1626.839344][ T62] bond1: (slave bridge1): failed to get link speed/duplex [ 1626.879344][ T5785] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1626.950258][T23550] bond1: (slave bridge1): failed to get link speed/duplex [ 1627.039403][ T5785] usb 6-1: Using ep0 maxpacket: 16 [ 1627.040562][ T5785] usb 6-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1627.041784][ T5785] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1627.041819][ T5785] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1627.044341][ T5785] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1627.044369][ T5785] usb 6-1: Product: syz [ 1627.044387][ T5785] usb 6-1: Manufacturer: syz [ 1627.044404][ T5785] usb 6-1: SerialNumber: syz [ 1627.047699][ T5785] usb 6-1: config 0 descriptor?? [ 1627.113070][T23550] bond1: (slave bridge1): failed to get link speed/duplex [ 1627.220064][T23561] bond1: (slave bridge1): failed to get link speed/duplex [ 1627.277843][ T5785] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input150 [ 1627.334944][T23550] bond1: (slave bridge1): failed to get link speed/duplex [ 1627.441605][T23550] bond1: (slave bridge1): failed to get link speed/duplex [ 1627.560523][ T50] bond1: (slave bridge1): failed to get link speed/duplex [ 1627.690399][ T50] bond1: (slave bridge1): failed to get link speed/duplex [ 1627.809484][T23561] bond1: (slave bridge1): failed to get link speed/duplex [ 1628.136969][ T5785] rc_core: IR keymap rc-imon-pad not found [ 1628.136992][ T5785] Registered IR keymap rc-empty [ 1628.137054][ T5785] imon 6-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1628.137068][ T5785] imon 6-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1628.212149][ T5785] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1628.309650][ T5785] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input151 [ 1628.380346][ T5785] imon 6-1:0.0: iMON device (15c2:0041, intf0) on usb<6:17> initialized [ 1628.698406][ T30] kauditd_printk_skb: 95 callbacks suppressed [ 1628.698423][ T30] audit: type=1326 audit(1792926302.994:9178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28798 comm="syz.4.6741" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fef1c code=0x7ffc0000 [ 1628.703331][ T30] audit: type=1326 audit(1792926303.004:9179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28798 comm="syz.4.6741" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fef1c code=0x7ffc0000 [ 1628.720082][ T30] audit: type=1326 audit(1792926303.004:9180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28798 comm="syz.4.6741" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf73fef1c code=0x7ffc0000 [ 1628.728229][ T30] audit: type=1326 audit(1792926303.004:9181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28798 comm="syz.4.6741" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fef1c code=0x7ffc0000 [ 1628.728390][ T30] audit: type=1326 audit(1792926303.004:9182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28798 comm="syz.4.6741" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fef1c code=0x7ffc0000 [ 1628.737293][ T30] audit: type=1326 audit(1792926303.034:9183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28798 comm="syz.4.6741" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf73fef1c code=0x7ffc0000 [ 1628.737355][ T30] audit: type=1326 audit(1792926303.034:9184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28798 comm="syz.4.6741" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fef1c code=0x7ffc0000 [ 1628.737410][ T30] audit: type=1326 audit(1792926303.034:9185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28798 comm="syz.4.6741" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fef1c code=0x7ffc0000 [ 1628.750507][ T30] audit: type=1326 audit(1792926303.034:9186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28798 comm="syz.4.6741" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=363 compat=1 ip=0xf73fef1c code=0x7ffc0000 [ 1628.765836][ T30] audit: type=1326 audit(1792926303.034:9187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28798 comm="syz.4.6741" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fef1c code=0x7ffc0000 [ 1629.325336][T28805] trusted_key: encrypted_key: insufficient parameters specified [ 1629.504104][T28808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1629.504706][T28808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1629.931762][ C1] imon 6-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1629.932229][T25442] usb 6-1: USB disconnect, device number 17 [ 1630.468752][T28822] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6750'. [ 1630.468918][T28822] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6750'. [ 1630.514713][T28824] bridge0: port 2(bridge_slave_1) entered disabled state [ 1630.515174][T28824] bridge0: port 1(bridge_slave_0) entered disabled state [ 1630.545784][T28824] bridge0: port 2(bridge_slave_1) entered blocking state [ 1630.545915][T28824] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1630.546231][T28824] bridge0: port 1(bridge_slave_0) entered blocking state [ 1630.546374][T28824] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1630.597783][T28824] team0: Port device bridge0 added [ 1630.976278][T28841] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6755'. [ 1630.977511][T28841] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6755'. [ 1630.978244][T28841] netlink: 100 bytes leftover after parsing attributes in process `syz.3.6755'. [ 1630.978264][T28841] netlink: 100 bytes leftover after parsing attributes in process `syz.3.6755'. [ 1631.109584][ T5785] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1631.199370][T28847] input: syz0 as /devices/virtual/input/input152 [ 1631.251271][T28850] team0: Device xfrm0 is of different type [ 1631.267131][ T5785] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1631.271102][ T5785] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1631.271231][ T5785] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1631.295294][T28850] tipc: Enabled bearer , priority 0 [ 1631.311582][ T5785] usb 6-1: config 0 descriptor?? [ 1631.511839][T28857] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6762'. [ 1631.534245][ T5785] usbhid 6-1:0.0: can't add hid device: -71 [ 1631.534335][ T5785] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1631.555281][ T5785] usb 6-1: USB disconnect, device number 18 [ 1631.765452][T28861] netlink: 'syz.4.6764': attribute type 1 has an invalid length. [ 1631.832055][T23561] net_ratelimit: 33 callbacks suppressed [ 1631.832079][T23561] bond1: (slave bridge1): failed to get link speed/duplex [ 1631.940010][ T155] bond1: (slave bridge1): failed to get link speed/duplex [ 1632.041039][ T5785] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1632.052086][T23561] bond1: (slave bridge1): failed to get link speed/duplex [ 1632.159700][ T155] bond1: (slave bridge1): failed to get link speed/duplex [ 1632.195228][ T5785] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1632.196961][ T5785] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1632.197012][ T5785] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1632.224504][ T5785] usb 6-1: config 0 descriptor?? [ 1632.269636][ T50] bond1: (slave bridge1): failed to get link speed/duplex [ 1632.379485][ T155] bond1: (slave bridge1): failed to get link speed/duplex [ 1632.412436][T25425] tipc: Node number set to 4269801488 [ 1632.472973][T28883] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6771'. [ 1632.489533][ T155] bond1: (slave bridge1): failed to get link speed/duplex [ 1632.491188][T28837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1632.498667][T28837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1632.576368][T28887] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6754'. [ 1632.601470][ T155] bond1: (slave bridge1): failed to get link speed/duplex [ 1632.676633][ T5785] usbhid 6-1:0.0: can't add hid device: -71 [ 1632.676752][ T5785] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1632.710912][T23561] bond1: (slave bridge1): failed to get link speed/duplex [ 1632.728948][ T5785] usb 6-1: USB disconnect, device number 19 [ 1632.767021][T28892] netlink: 'syz.3.6775': attribute type 21 has an invalid length. [ 1632.767045][T28892] netlink: 'syz.3.6775': attribute type 7 has an invalid length. [ 1632.820582][ T155] bond1: (slave bridge1): failed to get link speed/duplex [ 1633.441408][T28912] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6781'. [ 1633.849418][T25441] usb 8-1: new high-speed USB device number 67 using dummy_hcd [ 1633.924877][T28923] netlink: 'syz.5.6786': attribute type 15 has an invalid length. [ 1634.010139][T25441] usb 8-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 1634.011860][T25441] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1634.040908][T25441] usb 8-1: config 0 descriptor?? [ 1634.058371][T25441] pwc: Philips SPC 900NC USB webcam detected. [ 1634.413478][T28921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1634.413988][T28921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1634.518602][T28902] fuse: Bad value for 'rootmode' [ 1634.543532][T25441] pwc: send_video_command error -71 [ 1634.543555][T25441] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1634.543662][T25441] Philips webcam 8-1:0.0: probe with driver Philips webcam failed with error -71 [ 1634.578852][T25441] usb 8-1: USB disconnect, device number 67 [ 1635.779096][T28939] __nla_validate_parse: 2 callbacks suppressed [ 1635.779206][T28939] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6789'. [ 1636.159309][T25441] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1636.210013][T14209] usb 8-1: new high-speed USB device number 68 using dummy_hcd [ 1636.312460][T25441] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1636.315180][T25441] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1636.339046][T25441] usb 4-1: config 0 descriptor?? [ 1636.369473][T14209] usb 8-1: Using ep0 maxpacket: 16 [ 1636.375820][T14209] usb 8-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1636.377934][T14209] usb 8-1: config 0 has an invalid interface number: 255 but max is 0 [ 1636.377962][T14209] usb 8-1: config 0 has no interface number 0 [ 1636.386118][T14209] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1636.386192][T14209] usb 8-1: Product: syz [ 1636.386241][T14209] usb 8-1: Manufacturer: syz [ 1636.386282][T14209] usb 8-1: SerialNumber: syz [ 1636.429064][T14209] usb 8-1: config 0 descriptor?? [ 1636.454822][T14209] visor 8-1:0.255: Sony Clie 3.5 converter detected [ 1636.784883][T25441] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1636.785350][T25441] [drm:udl_init] *ERROR* Selecting channel failed [ 1636.830027][T25441] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1 [ 1636.830056][T25441] [drm] Initialized udl on minor 1 [ 1636.831331][T25441] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1636.831772][T25441] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1636.836854][T25439] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1636.837481][T25439] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1636.837700][T25439] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1636.894928][T28945] netlink: 8212 bytes leftover after parsing attributes in process `syz.7.6792'. [ 1636.918033][T25441] usb 4-1: USB disconnect, device number 65 [ 1637.008523][T14209] usb 8-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 1637.069243][ T6024] net_ratelimit: 22 callbacks suppressed [ 1637.069266][ T6024] bond1: (slave bridge1): failed to get link speed/duplex [ 1637.197373][ T6024] bond1: (slave bridge1): failed to get link speed/duplex [ 1637.222769][T25439] usb 8-1: USB disconnect, device number 68 [ 1637.244735][T25439] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 1637.248031][T25439] visor 8-1:0.255: device disconnected [ 1637.300887][ T62] bond1: (slave bridge1): failed to get link speed/duplex [ 1637.419371][T23561] bond1: (slave bridge1): failed to get link speed/duplex [ 1637.529297][T23561] bond1: (slave bridge1): failed to get link speed/duplex [ 1637.659833][ T6023] bond1: (slave bridge1): failed to get link speed/duplex [ 1637.770141][T23561] bond1: (slave bridge1): failed to get link speed/duplex [ 1637.879742][T23561] bond1: (slave bridge1): failed to get link speed/duplex [ 1637.959229][T25442] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1637.997205][T23561] bond1: (slave bridge1): failed to get link speed/duplex [ 1638.010730][T28982] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6808'. [ 1638.010880][T28982] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6808'. [ 1638.058211][T28980] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6807'. [ 1638.109956][T23561] bond1: (slave bridge1): failed to get link speed/duplex [ 1638.110111][T25442] usb 4-1: Using ep0 maxpacket: 8 [ 1638.112261][T25442] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1638.113863][T25442] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1638.113915][T25442] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1638.113941][T25442] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1638.113967][T25442] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1638.113992][T25442] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1638.114035][T25442] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1638.221823][T28986] sch_tbf: burst 2048 is lower than device syzkaller0 mtu (65589) ! [ 1638.363317][T25442] usb 4-1: usb_control_msg returned -32 [ 1638.363372][T25442] usbtmc 4-1:16.0: can't read capabilities [ 1638.647766][T29004] FAULT_INJECTION: forcing a failure. [ 1638.647766][T29004] name failslab, interval 1, probability 0, space 0, times 0 [ 1638.647806][T29004] CPU: 0 UID: 0 PID: 29004 Comm: syz.2.6813 Tainted: G L syzkaller #0 PREEMPT(full) [ 1638.647838][T29004] Tainted: [L]=SOFTLOCKUP [ 1638.647847][T29004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1638.647862][T29004] Call Trace: [ 1638.647871][T29004] [ 1638.647881][T29004] dump_stack_lvl+0xe8/0x150 [ 1638.647923][T29004] should_fail_ex+0x410/0x560 [ 1638.647958][T29004] should_failslab+0xa8/0x100 [ 1638.647991][T29004] __kmalloc_cache_node_noprof+0xa5/0x620 [ 1638.648020][T29004] ? __get_vm_area_node+0x155/0x2f0 [ 1638.648051][T29004] ? __get_vm_area_node+0x155/0x2f0 [ 1638.648092][T29004] __get_vm_area_node+0x155/0x2f0 [ 1638.648135][T29004] __vmalloc_node_range_noprof+0x36e/0x16f0 [ 1638.648182][T29004] ? bpf_prog_calc_tag+0x51/0x370 [ 1638.648225][T29004] ? lock_acquire+0x115/0x350 [ 1638.648280][T29004] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1638.648317][T29004] ? bpf_verifier_vlog+0x58d/0x900 [ 1638.648350][T29004] ? bpf_prog_calc_tag+0x51/0x370 [ 1638.648382][T29004] __vmalloc_noprof+0xd2/0x120 [ 1638.648418][T29004] ? bpf_prog_calc_tag+0x51/0x370 [ 1638.648454][T29004] bpf_prog_calc_tag+0x51/0x370 [ 1638.648494][T29004] check_and_resolve_insns+0xc0/0x28e0 [ 1638.648529][T29004] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 1638.648552][T29004] ? check_subprogs+0x413/0x540 [ 1638.648585][T29004] bpf_check+0x1c4e/0x3530 [ 1638.648619][T29004] ? ktime_get_with_offset+0x93/0x2d0 [ 1638.648648][T29004] ? ktime_get_with_offset+0x93/0x2d0 [ 1638.648678][T29004] ? __pfx_bpf_check+0x10/0x10 [ 1638.648702][T29004] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1638.648733][T29004] bpf_prog_load+0x158f/0x1d60 [ 1638.648779][T29004] ? __pfx_bpf_prog_load+0x10/0x10 [ 1638.648841][T29004] __sys_bpf+0xd86/0xe00 [ 1638.648883][T29004] ? __pfx___sys_bpf+0x10/0x10 [ 1638.648913][T29004] ? __lock_acquire+0x747/0x2de0 [ 1638.648942][T29004] ? ksys_write+0x1e6/0x270 [ 1638.648972][T29004] ? __mutex_unlock_slowpath+0x731/0x900 [ 1638.649032][T29004] __ia32_sys_bpf+0xba/0xd0 [ 1638.649065][T29004] __do_fast_syscall_32+0x28b/0x6c0 [ 1638.649092][T29004] ? do_fast_syscall_32+0x33/0x70 [ 1638.649116][T29004] ? asm_int80_emulation+0x1a/0x20 [ 1638.649138][T29004] ? do_int80_emulation+0x299/0x500 [ 1638.649169][T29004] ? trace_irq_disable+0x3b/0x140 [ 1638.649202][T29004] do_fast_syscall_32+0x33/0x70 [ 1638.649227][T29004] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1638.649254][T29004] RIP: 0023:0xf741ef1c [ 1638.649274][T29004] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1638.649292][T29004] RSP: 002b:00000000f543650c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 1638.649315][T29004] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000880 [ 1638.649331][T29004] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 1638.649345][T29004] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1638.649357][T29004] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1638.649371][T29004] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1638.649403][T29004] [ 1638.653414][T29004] syz.2.6813: vmalloc error: size 88, align 0x1, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 1638.653616][T29004] CPU: 0 UID: 0 PID: 29004 Comm: syz.2.6813 Tainted: G L syzkaller #0 PREEMPT(full) [ 1638.653686][T29004] Tainted: [L]=SOFTLOCKUP [ 1638.653707][T29004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1638.653739][T29004] Call Trace: [ 1638.653767][T29004] [ 1638.653790][T29004] dump_stack_lvl+0xe8/0x150 [ 1638.653895][T29004] warn_alloc+0x24d/0x270 [ 1638.653966][T29004] ? __kasan_kmalloc+0x22/0xb0 [ 1638.654041][T29004] ? __pfx_warn_alloc+0x10/0x10 [ 1638.654102][T29004] ? __get_vm_area_node+0x155/0x2f0 [ 1638.654205][T29004] ? __get_vm_area_node+0x2a9/0x2f0 [ 1638.654309][T29004] __vmalloc_node_range_noprof+0x396/0x16f0 [ 1638.654431][T29004] ? lock_acquire+0x115/0x350 [ 1638.654580][T29004] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1638.654675][T29004] ? bpf_verifier_vlog+0x58d/0x900 [ 1638.654757][T29004] ? bpf_prog_calc_tag+0x51/0x370 [ 1638.654839][T29004] __vmalloc_noprof+0xd2/0x120 [ 1638.654924][T29004] ? bpf_prog_calc_tag+0x51/0x370 [ 1638.655017][T29004] bpf_prog_calc_tag+0x51/0x370 [ 1638.655112][T29004] check_and_resolve_insns+0xc0/0x28e0 [ 1638.655204][T29004] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 1638.655257][T29004] ? check_subprogs+0x413/0x540 [ 1638.655338][T29004] bpf_check+0x1c4e/0x3530 [ 1638.655424][T29004] ? ktime_get_with_offset+0x93/0x2d0 [ 1638.655504][T29004] ? ktime_get_with_offset+0x93/0x2d0 [ 1638.655585][T29004] ? __pfx_bpf_check+0x10/0x10 [ 1638.655640][T29004] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1638.655716][T29004] bpf_prog_load+0x158f/0x1d60 [ 1638.655858][T29004] ? __pfx_bpf_prog_load+0x10/0x10 [ 1638.656011][T29004] __sys_bpf+0xd86/0xe00 [ 1638.656116][T29004] ? __pfx___sys_bpf+0x10/0x10 [ 1638.656199][T29004] ? __lock_acquire+0x747/0x2de0 [ 1638.656272][T29004] ? ksys_write+0x1e6/0x270 [ 1638.656344][T29004] ? __mutex_unlock_slowpath+0x731/0x900 [ 1638.656507][T29004] __ia32_sys_bpf+0xba/0xd0 [ 1638.656598][T29004] __do_fast_syscall_32+0x28b/0x6c0 [ 1638.656658][T29004] ? do_fast_syscall_32+0x33/0x70 [ 1638.656727][T29004] ? asm_int80_emulation+0x1a/0x20 [ 1638.656780][T29004] ? do_int80_emulation+0x299/0x500 [ 1638.656841][T29004] ? trace_irq_disable+0x3b/0x140 [ 1638.656924][T29004] do_fast_syscall_32+0x33/0x70 [ 1638.656994][T29004] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1638.657066][T29004] RIP: 0023:0xf741ef1c [ 1638.657118][T29004] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1638.657257][T29004] RSP: 002b:00000000f543650c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 1638.657318][T29004] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000880 [ 1638.657359][T29004] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 1638.657392][T29004] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1638.657431][T29004] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1638.657463][T29004] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1638.657554][T29004] [ 1638.698060][T29004] Mem-Info: [ 1638.698102][T29004] active_anon:13103 inactive_anon:31 isolated_anon:0 [ 1638.698102][T29004] active_file:159 inactive_file:6893 isolated_file:0 [ 1638.698102][T29004] unevictable:0 dirty:182 writeback:0 [ 1638.698102][T29004] slab_reclaimable:7613 slab_unreclaimable:115759 [ 1638.698102][T29004] mapped:37091 shmem:6366 pagetables:2229 [ 1638.698102][T29004] sec_pagetables:0 bounce:0 [ 1638.698102][T29004] kernel_misc_reclaimable:0 [ 1638.698102][T29004] free:1290862 free_pcp:15931 free_cma:0 [ 1638.698264][T29004] Node 0 active_anon:52412kB inactive_anon:124kB active_file:636kB inactive_file:27436kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:148364kB dirty:728kB writeback:0kB shmem:25464kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15740kB pagetables:8772kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1638.698422][T29004] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1638.698574][T29004] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1638.698754][T29004] lowmem_reserve[]: 0 2466 2466 2466 2466 [ 1638.698865][T29004] Node 0 DMA32 free:1218452kB boost:0kB min:33980kB low:42472kB high:50964kB reserved_highatomic:0kB free_highatomic:0kB active_anon:52412kB inactive_anon:124kB active_file:636kB inactive_file:27436kB unevictable:0kB writepending:728kB zspages:488kB present:3129332kB managed:2525760kB mlocked:0kB bounce:0kB free_pcp:54076kB local_pcp:30580kB free_cma:0kB [ 1638.699038][T29004] lowmem_reserve[]: 0 0 0 0 0 [ 1638.710764][T29004] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1638.710936][T29004] lowmem_reserve[]: 0 0 0 0 0 [ 1638.712057][T29004] Node 1 Normal free:3929636kB boost:0kB min:55920kB low:69900kB high:83880kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:9648kB local_pcp:7536kB free_cma:0kB [ 1638.712125][T29004] lowmem_reserve[]: 0 0 0 0 0 [ 1638.712174][T29004] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1638.712301][T29004] Node 0 DMA32: 103*4kB (UME) 1069*8kB (UME) 2679*16kB (ME) 2307*32kB (UME) 1457*64kB (UME) 735*128kB (UME) 307*256kB (UME) 119*512kB (UME) 58*1024kB (UME) 11*2048kB (UME) 167*4096kB (UM) = 1218452kB [ 1638.712471][T29004] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1638.712576][T29004] Node 1 Normal: 2*4kB (M) 8*8kB (UM) 5*16kB (UM) 2*32kB (M) 8*64kB (UM) 5*128kB (UM) 5*256kB (UM) 4*512kB (M) 3*1024kB (UM) 7*2048kB (UM) 954*4096kB (UM) = 3929688kB [ 1638.716137][T29004] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1638.716191][T29004] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1638.716242][T29004] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1638.716284][T29004] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1638.716333][T29004] 13452 total pagecache pages [ 1638.716356][T29004] 38 pages in swap cache [ 1638.716385][T29004] Free swap = 124576kB [ 1638.716406][T29004] Total swap = 124996kB [ 1638.716428][T29004] 2097051 pages RAM [ 1638.716456][T29004] 0 pages HighMem/MovableOnly [ 1638.716478][T29004] 433995 pages reserved [ 1638.716498][T29004] 0 pages cma reserved [ 1639.923068][T29008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1639.925473][T29008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1639.959776][T29010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1639.965703][T29010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1640.115430][T29013] FAULT_INJECTION: forcing a failure. [ 1640.115430][T29013] name failslab, interval 1, probability 0, space 0, times 0 [ 1640.115471][T29013] CPU: 0 UID: 0 PID: 29013 Comm: syz.7.6816 Tainted: G L syzkaller #0 PREEMPT(full) [ 1640.115503][T29013] Tainted: [L]=SOFTLOCKUP [ 1640.115512][T29013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1640.115527][T29013] Call Trace: [ 1640.115536][T29013] [ 1640.115547][T29013] dump_stack_lvl+0xe8/0x150 [ 1640.115588][T29013] should_fail_ex+0x410/0x560 [ 1640.115624][T29013] should_failslab+0xa8/0x100 [ 1640.115655][T29013] ? prepare_creds+0x30/0x820 [ 1640.115684][T29013] kmem_cache_alloc_noprof+0x9c/0x600 [ 1640.115722][T29013] ? __pfx___mutex_lock+0x10/0x10 [ 1640.115746][T29013] ? prepare_creds+0x30/0x820 [ 1640.115774][T29013] ? __up_read+0x29c/0x930 [ 1640.115812][T29013] prepare_creds+0x30/0x820 [ 1640.115846][T29013] prepare_exec_creds+0x18/0x220 [ 1640.115882][T29013] bprm_execve+0xe7/0x1590 [ 1640.115910][T29013] ? copy_string_kernel+0x5b4/0x5f0 [ 1640.115948][T29013] ? __pfx_bprm_execve+0x10/0x10 [ 1640.115979][T29013] ? alloc_bprm+0x57d/0x640 [ 1640.116007][T29013] do_execveat_common+0x99f/0xbd0 [ 1640.116041][T29013] ? do_getname+0x151/0x250 [ 1640.116076][T29013] __ia32_compat_sys_execveat+0xcd/0xf0 [ 1640.116108][T29013] __do_fast_syscall_32+0x28b/0x6c0 [ 1640.116144][T29013] ? do_fast_syscall_32+0x33/0x70 [ 1640.116169][T29013] ? asm_int80_emulation+0x1a/0x20 [ 1640.116193][T29013] ? do_int80_emulation+0x299/0x500 [ 1640.116217][T29013] ? trace_irq_disable+0x3b/0x140 [ 1640.116253][T29013] do_fast_syscall_32+0x33/0x70 [ 1640.116281][T29013] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1640.116309][T29013] RIP: 0023:0xf73cef1c [ 1640.116330][T29013] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1640.116350][T29013] RSP: 002b:00000000f53e650c EFLAGS: 00000206 ORIG_RAX: 0000000000000166 [ 1640.116375][T29013] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000680 [ 1640.116393][T29013] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000001000 [ 1640.116407][T29013] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1640.116422][T29013] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1640.116436][T29013] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1640.116471][T29013] [ 1640.697786][T29019] tipc: Enabling of bearer rejected, failed to enable media [ 1640.768695][T29021] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6820'. [ 1640.793322][T25441] usb 4-1: USB disconnect, device number 66 [ 1641.352885][T25441] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1641.375590][T29038] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1641.424133][T29038] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6825'. [ 1641.469376][T29047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1641.470069][T29047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1641.520153][T25441] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1641.521761][T25441] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1641.525306][T25441] usb 4-1: config 0 descriptor?? [ 1641.728528][T25441] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1641.938562][T25441] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1 [ 1641.938588][T25441] [drm] Initialized udl on minor 1 [ 1642.046359][T29051] input: syz0 as /devices/virtual/input/input153 [ 1642.124740][T29053] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6830'. [ 1642.173540][T29030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1642.177394][T29030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1642.193601][T23561] net_ratelimit: 39 callbacks suppressed [ 1642.193724][T23561] bond1: (slave bridge1): failed to get link speed/duplex [ 1642.232753][T29055] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6831'. [ 1642.262250][T29055] netlink: 'syz.2.6831': attribute type 15 has an invalid length. [ 1642.400190][ T6024] bond1: (slave bridge1): failed to get link speed/duplex [ 1642.532974][ T50] bond1: (slave bridge1): failed to get link speed/duplex [ 1642.639434][ T50] bond1: (slave bridge1): failed to get link speed/duplex [ 1642.753073][ T6023] bond1: (slave bridge1): failed to get link speed/duplex [ 1642.859428][ T6024] bond1: (slave bridge1): failed to get link speed/duplex [ 1642.971289][ T6024] bond1: (slave bridge1): failed to get link speed/duplex [ 1643.080441][ T6023] bond1: (slave bridge1): failed to get link speed/duplex [ 1643.190959][ T50] bond1: (slave bridge1): failed to get link speed/duplex [ 1643.278542][T29081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1643.279226][T29081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1643.299490][T25442] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1643.300018][T23561] bond1: (slave bridge1): failed to get link speed/duplex [ 1643.450807][T25442] usb 6-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 1643.452456][T25442] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1643.456467][T25442] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1643.494263][T25442] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1643.494314][T25442] usb 6-1: Product: syz [ 1643.494326][T25442] usb 6-1: Manufacturer: syz [ 1643.494337][T25442] usb 6-1: SerialNumber: syz [ 1643.522848][T25442] ums-sddr09 6-1:1.0: USB Mass Storage device detected [ 1643.538051][T25442] ums-sddr09 6-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 1643.538051][T25442] Please send a copy of this message to and [ 1644.103409][T25442] ums-sddr09 6-1:1.0: probe with driver ums-sddr09 failed with error -32 [ 1644.456000][T29087] netlink: 'syz.4.6841': attribute type 1 has an invalid length. [ 1644.533740][T29087] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1644.542576][T14224] usb 6-1: USB disconnect, device number 20 [ 1644.593800][T29087] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6841'. [ 1644.593835][T29087] netlink: 87 bytes leftover after parsing attributes in process `syz.4.6841'. [ 1644.621128][T29089] bond1: (slave erspan1): making interface the new active one [ 1644.639879][T29089] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 1645.123761][T29093] netlink: 'syz.4.6844': attribute type 11 has an invalid length. [ 1645.171786][T22620] syz_tun (unregistering): left allmulticast mode [ 1645.214450][T29093] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1645.246346][T29093] FAULT_INJECTION: forcing a failure. [ 1645.246346][T29093] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1645.246396][T29093] CPU: 0 UID: 0 PID: 29093 Comm: syz.4.6844 Tainted: G L syzkaller #0 PREEMPT(full) [ 1645.246419][T29093] Tainted: [L]=SOFTLOCKUP [ 1645.246425][T29093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1645.246464][T29093] Call Trace: [ 1645.246473][T29093] [ 1645.246492][T29093] dump_stack_lvl+0xe8/0x150 [ 1645.246535][T29093] should_fail_ex+0x410/0x560 [ 1645.246570][T29093] _copy_from_iter+0x1d3/0x1660 [ 1645.246602][T29093] ? __alloc_skb+0x27a/0x7a0 [ 1645.246627][T29093] ? __alloc_skb+0x27a/0x7a0 [ 1645.246652][T29093] ? __alloc_skb+0x27a/0x7a0 [ 1645.246675][T29093] ? __pfx__copy_from_iter+0x10/0x10 [ 1645.246698][T29093] ? kmem_cache_alloc_node_noprof+0x1f4/0x600 [ 1645.246725][T29093] ? __alloc_skb+0x27a/0x7a0 [ 1645.246747][T29093] ? __alloc_skb+0x27a/0x7a0 [ 1645.246774][T29093] ? netlink_sendmsg+0x64f/0xb20 [ 1645.246796][T29093] ? skb_put+0x112/0x210 [ 1645.246822][T29093] netlink_sendmsg+0x6bb/0xb20 [ 1645.246849][T29093] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1645.246874][T29093] ? aa_sock_msg_perm+0x144/0x210 [ 1645.246895][T29093] ? apparmor_socket_sendmsg+0x98/0x360 [ 1645.246923][T29093] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1645.246944][T29093] sock_sendmsg_nosec+0x14e/0x190 [ 1645.246967][T29093] ____sys_sendmsg+0x54e/0x850 [ 1645.246990][T29093] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1645.247017][T29093] ___sys_sendmsg+0x2a5/0x360 [ 1645.247032][T29093] ? __lock_acquire+0x747/0x2de0 [ 1645.247056][T29093] ? __pfx____sys_sendmsg+0x10/0x10 [ 1645.247071][T29093] ? get_pid_task+0x20/0x1f0 [ 1645.247089][T29093] ? get_pid_task+0x20/0x1f0 [ 1645.247104][T29093] ? get_pid_task+0x20/0x1f0 [ 1645.247144][T29093] ? __fget_files+0x3a2/0x420 [ 1645.247159][T29093] ? __fget_files+0x2a/0x420 [ 1645.247181][T29093] __sys_sendmsg+0x177/0x240 [ 1645.247199][T29093] ? __pfx___sys_sendmsg+0x10/0x10 [ 1645.247224][T29093] ? __might_fault+0xaf/0x130 [ 1645.247251][T29093] __do_fast_syscall_32+0x28b/0x6c0 [ 1645.247272][T29093] ? do_fast_syscall_32+0x33/0x70 [ 1645.247289][T29093] ? asm_int80_emulation+0x1a/0x20 [ 1645.247305][T29093] ? do_int80_emulation+0x299/0x500 [ 1645.247323][T29093] ? trace_irq_disable+0x3b/0x140 [ 1645.247348][T29093] do_fast_syscall_32+0x33/0x70 [ 1645.247366][T29093] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1645.247387][T29093] RIP: 0023:0xf73fef1c [ 1645.247402][T29093] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1645.247417][T29093] RSP: 002b:00000000f541650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1645.247434][T29093] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000340 [ 1645.247446][T29093] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1645.247457][T29093] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1645.247466][T29093] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1645.247481][T29093] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1645.247504][T29093] [ 1645.772690][ T62] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1645.772732][ T62] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 42893 - 0 [ 1646.024524][ T62] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1646.024570][ T62] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 42893 - 0 [ 1646.212947][ T62] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1646.212993][ T62] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 42893 - 0 [ 1646.462179][ T62] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1646.462222][ T62] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 42893 - 0 [ 1646.705555][T17347] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1646.722315][T17347] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1646.723891][T17347] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1646.724232][T29099] syz.4.6848 (29099): drop_caches: 2 [ 1646.749876][T17347] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1646.753274][T17347] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1646.951751][T25441] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 1646.952222][T25441] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1646.954982][T25445] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 1646.957390][T25445] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 1646.957925][T25445] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1646.998089][T25441] usb 4-1: USB disconnect, device number 67 [ 1647.371081][ T62] bridge_slave_1: left allmulticast mode [ 1647.371111][ T62] bridge_slave_1: left promiscuous mode [ 1647.371446][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 1647.404756][ T62] bridge_slave_0: left allmulticast mode [ 1647.404787][ T62] bridge_slave_0: left promiscuous mode [ 1647.405069][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 1647.469400][T25441] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1647.622379][T25441] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1647.623409][T25441] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1647.627824][T25441] usb 4-1: config 0 descriptor?? [ 1647.834429][T25441] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1647.856585][ T62] bond2 (unregistering): (slave erspan1): Releasing active interface [ 1647.959215][ T5785] usb 8-1: new high-speed USB device number 69 using dummy_hcd [ 1648.075881][T25441] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1 [ 1648.075909][T25441] [drm] Initialized udl on minor 1 [ 1648.109301][ T5785] usb 8-1: Using ep0 maxpacket: 16 [ 1648.110094][ T5785] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1648.111452][ T5785] usb 8-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1648.111485][ T5785] usb 8-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1648.111511][ T5785] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1648.111546][ T5785] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1648.116621][ T5785] usb 8-1: config 0 descriptor?? [ 1648.237893][ T62] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1648.258820][ T62] bridge0 (unregistering): left allmulticast mode [ 1648.338812][ T62] bond1 (unregistering): (slave bridge1): Removing an active aggregator [ 1648.348585][ T62] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 1648.370230][ T62] bond3 (unregistering): (slave bridge2): Releasing backup interface [ 1648.370261][ T62] bridge2 (unregistering): left promiscuous mode [ 1648.406415][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1648.406874][ T62] bond_slave_0: left allmulticast mode [ 1648.432383][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1648.433145][ T62] bond_slave_1: left allmulticast mode [ 1648.434878][ T62] bond0 (unregistering): Released all slaves [ 1648.488403][ T62] bond1 (unregistering): Released all slaves [ 1648.555138][ T5785] usbhid 8-1:0.0: can't add hid device: -71 [ 1648.555258][ T5785] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1648.557640][ T62] bond2 (unregistering): Released all slaves [ 1648.581958][ T5785] usb 8-1: USB disconnect, device number 69 [ 1648.697494][ T62] bond3 (unregistering): Released all slaves [ 1648.751662][ T62] bond4 (unregistering): Released all slaves [ 1648.797728][ T62] bond5 (unregistering): Released all slaves [ 1648.835948][ T62] bond6 (unregistering): (slave veth3): Releasing active interface [ 1648.837961][ T62] bond6 (unregistering): Released all slaves [ 1648.872080][T28465] Bluetooth: hci2: command tx timeout [ 1648.910456][T25441] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1648.910897][T25441] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1648.925829][T14224] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1648.927571][T14224] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1648.928148][T25441] usb 4-1: USB disconnect, device number 68 [ 1648.933801][T14224] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1649.118752][ T62] tipc: Disabling bearer [ 1649.119062][ T62] tipc: Left network mode [ 1649.871661][T25425] usb 8-1: new high-speed USB device number 70 using dummy_hcd [ 1650.007300][T29158] net_ratelimit: 22 callbacks suppressed [ 1650.007322][T29158] veth0: mtu less than device minimum [ 1650.091967][T25425] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 1650.096681][T25425] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1650.120100][T25425] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1650.120132][T25425] usb 8-1: Product: syz [ 1650.120149][T25425] usb 8-1: Manufacturer: syz [ 1650.120166][T25425] usb 8-1: SerialNumber: syz [ 1650.342336][T14207] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1650.360147][T25425] snd-usb-6fire 8-1:1.0: unable to receive device firmware state. [ 1650.360199][T25425] snd-usb-6fire 8-1:1.0: probe with driver snd-usb-6fire failed with error -71 [ 1650.367088][T25425] usb 8-1: USB disconnect, device number 70 [ 1650.501491][T14207] usb 4-1: Using ep0 maxpacket: 8 [ 1650.503167][T14207] usb 4-1: New USB device found, idVendor=99fa, idProduct=8988, bcdDevice=54.41 [ 1650.505517][T14207] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1650.505903][T29108] bridge0: port 1(bridge_slave_0) entered blocking state [ 1650.506040][T29108] bridge0: port 1(bridge_slave_0) entered disabled state [ 1650.506274][T29108] bridge_slave_0: entered allmulticast mode [ 1650.528796][T14207] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1650.528889][T14207] usb 4-1: Product: syz [ 1650.528938][T14207] usb 4-1: Manufacturer: syz [ 1650.528993][T14207] usb 4-1: SerialNumber: syz [ 1650.530369][T29108] bridge_slave_0: entered promiscuous mode [ 1650.599457][T29108] bridge0: port 2(bridge_slave_1) entered blocking state [ 1650.599612][T29108] bridge0: port 2(bridge_slave_1) entered disabled state [ 1650.599791][T29108] bridge_slave_1: entered allmulticast mode [ 1650.605029][T29108] bridge_slave_1: entered promiscuous mode [ 1650.766561][T29108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1650.795784][T29108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1650.847523][T14207] gspca_main: spca506-2.14.0 probing 99fa:8988 [ 1650.942887][T29108] team0: Port device team_slave_0 added [ 1650.960522][T28465] Bluetooth: hci2: command tx timeout [ 1650.983627][T29108] team0: Port device team_slave_1 added [ 1651.028044][T29171] fuse: Bad value for 'fd' [ 1651.185395][T14207] usb 4-1: USB disconnect, device number 69 [ 1651.242977][T29108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1651.242997][T29108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1651.243043][T29108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1651.352958][T29108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1651.352978][T29108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1651.353007][T29108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1651.700773][T29108] hsr_slave_0: entered promiscuous mode [ 1651.703477][T29108] hsr_slave_1: entered promiscuous mode [ 1651.704303][T29108] debugfs: 'hsr0' already exists in 'hsr' [ 1651.705118][T29108] Cannot create hsr debugfs directory [ 1651.980645][ T62] hsr_slave_0: left promiscuous mode [ 1651.983030][ T62] hsr_slave_1: left promiscuous mode [ 1651.983985][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1651.984008][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1651.985242][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1651.985263][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1652.036120][ T62] veth1_macvtap: left promiscuous mode [ 1652.036159][ T62] veth0_macvtap: left promiscuous mode [ 1652.036316][ T62] veth1_vlan: left promiscuous mode [ 1652.036479][ T62] veth0_vlan: left promiscuous mode [ 1652.754569][T25425] usb 8-1: new high-speed USB device number 71 using dummy_hcd [ 1652.811807][ T62] team0 (unregistering): Port device team_slave_1 removed [ 1652.833988][ T62] team0 (unregistering): Port device team_slave_0 removed [ 1652.909414][T25425] usb 8-1: Using ep0 maxpacket: 32 [ 1652.910531][T25425] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1652.911796][T25425] usb 8-1: config 0 has no interfaces? [ 1652.916488][T25425] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1652.916515][T25425] usb 8-1: Product: syz [ 1652.916531][T25425] usb 8-1: Manufacturer: syz [ 1652.916547][T25425] usb 8-1: SerialNumber: syz [ 1652.978684][T25425] usb 8-1: config 0 descriptor?? [ 1653.029626][T28465] Bluetooth: hci2: command tx timeout [ 1653.164270][ T5295] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1653.284243][T29192] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6864'. [ 1653.645471][T28465] Bluetooth: hci4: unexpected event for opcode 0x201c [ 1653.706902][T28465] Bluetooth: hci4: unexpected event for opcode 0x201c [ 1653.805772][ T62] IPVS: stop unused estimator thread 0... [ 1653.963943][T29190] netlink: 3568 bytes leftover after parsing attributes in process `syz.3.6869'. [ 1654.096304][T29108] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1654.121197][T29108] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1654.122182][T29108] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1654.153144][T29108] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1654.158082][T29108] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1654.187275][T29108] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1654.188173][T29108] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1654.215481][T29108] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1654.215741][T14224] usb 8-1: USB disconnect, device number 71 [ 1654.382789][ T5295] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1654.481013][T29108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1654.533886][T29108] 8021q: adding VLAN 0 to HW filter on device team0 [ 1654.568781][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 1654.568927][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1654.639193][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 1654.639315][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1654.999321][T29108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1655.111217][T28465] Bluetooth: hci2: command tx timeout [ 1655.223086][T29108] veth0_vlan: entered promiscuous mode [ 1655.264543][T29108] veth1_vlan: entered promiscuous mode [ 1655.398992][T29108] veth0_macvtap: entered promiscuous mode [ 1655.432378][T29108] veth1_macvtap: entered promiscuous mode [ 1656.029373][T14211] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1656.170735][T14211] usb 4-1: device descriptor read/64, error -71 [ 1656.310574][ T5295] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1656.345657][T29108] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1656.402886][T29281] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6881'. [ 1656.442282][T14211] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1656.581764][T29108] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1656.599470][T14211] usb 4-1: device descriptor read/64, error -71 [ 1656.721870][T14211] usb usb4-port1: attempt power cycle [ 1656.863205][T23561] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1656.864143][ T62] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1656.864194][ T62] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1656.864237][ T62] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1657.069456][T14211] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1657.116324][T14211] usb 4-1: device descriptor read/8, error -71 [ 1657.349699][T14211] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1657.373360][T14211] usb 4-1: device descriptor read/8, error -71 [ 1657.480502][T14211] usb usb4-port1: unable to enumerate USB device [ 1657.710693][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1657.710716][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1657.823648][T23561] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1657.823674][T23561] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1658.281253][T29303] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6883'. [ 1659.356752][T29310] trusted_key: encrypted_key: insufficient parameters specified [ 1659.615974][ T5295] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1660.429799][ T5785] hid_parser_main: 217 callbacks suppressed [ 1660.429820][ T5785] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1660.478445][ T5785] hid-generic 0000:0000:0000.0041: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1660.506298][T29326] kernel read not supported for file /memory.events (pid: 29326 comm: syz.2.6886) [ 1660.506536][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 1660.506552][ T30] audit: type=1800 audit(1792926334.804:9218): pid=29326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6886" name="memory.events" dev="mqueue" ino=172826 res=0 errno=-22 [ 1660.932460][ T5785] logitech-hidpp-device 0005:046D:B012.0042: hidraw1: BLUETOOTH HID v0.07 Device [syz1] on syz1 [ 1660.933427][T29336] netlink: 'syz.3.6889': attribute type 4 has an invalid length. [ 1660.974412][T29336] netlink: 'syz.3.6889': attribute type 4 has an invalid length. [ 1661.079270][T14207] usb 8-1: new high-speed USB device number 72 using dummy_hcd [ 1661.173509][T29338] fido_id[29338]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1661.239527][T14207] usb 8-1: Using ep0 maxpacket: 8 [ 1661.242398][T14207] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1661.242451][T14207] usb 8-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1661.244068][T14207] usb 8-1: config 4 interface 0 has no altsetting 0 [ 1661.247921][T14207] usb 8-1: string descriptor 0 read error: -22 [ 1661.248016][T14207] usb 8-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1661.319919][T14207] usb 8-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1661.325907][T14207] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1661.326291][T14207] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1661.326342][T14207] usb 8-1: media controller created [ 1661.389074][T14207] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1661.577013][T29332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1661.577670][T29332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1661.619777][T14207] zl10353_read_register: readreg error (reg=127, ret==0) [ 1661.777493][T14207] usb 8-1: USB disconnect, device number 72 [ 1662.209570][T29361] netlink: 'syz.7.6895': attribute type 1 has an invalid length. [ 1662.277291][T29361] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1662.295705][T29361] bond9: (slave bond10): making interface the new active one [ 1662.297545][T29361] bond9: (slave bond10): Enslaving as an active interface with an up link [ 1662.505237][T29371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1662.508771][T29371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1662.581301][T14207] usb 8-1: new high-speed USB device number 73 using dummy_hcd [ 1662.608640][T29373] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6897'. [ 1662.662373][T29371] veth0: entered promiscuous mode [ 1662.717600][T29377] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6899'. [ 1662.740214][T14207] usb 8-1: Using ep0 maxpacket: 8 [ 1662.741967][T14207] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1662.746555][T14207] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1662.746606][T14207] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1662.785743][T14207] usb 8-1: config 0 descriptor?? [ 1662.806032][T29373] veth0 (unregistering): left promiscuous mode [ 1662.832328][T29381] netlink: 88 bytes leftover after parsing attributes in process `syz.8.6899'. [ 1662.994887][T14207] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1663.576713][T29393] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6903'. [ 1663.576764][T29393] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6903'. [ 1664.639228][T25445] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1664.672767][T29416] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6911'. [ 1664.789486][T25445] usb 4-1: Using ep0 maxpacket: 16 [ 1664.790510][T25445] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1664.792181][T25445] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1664.792205][T25445] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1664.795849][T25445] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1664.795876][T25445] usb 4-1: Product: syz [ 1664.795892][T25445] usb 4-1: Manufacturer: syz [ 1664.795915][T25445] usb 4-1: SerialNumber: syz [ 1664.811683][T25445] usb 4-1: config 0 descriptor?? [ 1664.877398][T25445] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1664.877426][T25445] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1665.268938][ T5785] usb 8-1: USB disconnect, device number 73 [ 1665.406276][T29419] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6912'. [ 1665.453921][T29419] netlink: 88 bytes leftover after parsing attributes in process `syz.7.6912'. [ 1665.491356][T25445] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1665.492441][T25445] em28xx 4-1:0.0: Config register raw data: 0x96 [ 1665.703880][T25445] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 1665.703900][T25445] em28xx 4-1:0.0: No AC97 audio processor [ 1665.738753][T25445] usb 4-1: USB disconnect, device number 74 [ 1665.758245][T25445] em28xx 4-1:0.0: Disconnecting em28xx [ 1665.783463][T25445] em28xx: Freeing device [ 1666.063131][T29430] tipc: Enabling of bearer rejected, media not registered [ 1666.839253][T25439] usb 8-1: new high-speed USB device number 74 using dummy_hcd [ 1666.991237][T25439] usb 8-1: Using ep0 maxpacket: 8 [ 1666.993053][T25439] usb 8-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1666.998789][T25439] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 1666.998826][T25439] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1666.998851][T25439] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1667.062101][T25439] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1667.062122][T25439] usb 8-1: Product: syz [ 1667.062133][T25439] usb 8-1: Manufacturer: syz [ 1667.062145][T25439] usb 8-1: SerialNumber: syz [ 1667.085176][T25439] usb 8-1: config 0 descriptor?? [ 1667.131272][T25439] snd_usb_toneport 8-1:0.0: Line 6 TonePort UX2 found [ 1667.368885][T29448] netlink: 'syz.7.6922': attribute type 1 has an invalid length. [ 1667.463826][T29448] bond11: entered promiscuous mode [ 1667.464410][T29448] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1667.601313][T25439] snd_usb_toneport 8-1:0.0: cannot get proper max packet size [ 1667.601559][T25439] snd_usb_toneport 8-1:0.0: Line 6 TonePort UX2 now disconnected [ 1667.615069][T25439] snd_usb_toneport 8-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 1667.625401][T29467] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1667.660077][T29467] bond11: (slave bond12): making interface the new active one [ 1667.660105][T29467] bond12: entered promiscuous mode [ 1667.663060][T29467] bond11: (slave bond12): Enslaving as an active interface with an up link [ 1667.665300][T29471] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1667.901187][ T30] audit: type=1326 audit(1792926342.204:9219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29474 comm="syz.4.6928" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fef1c code=0x7ffc0000 [ 1667.901470][ T30] audit: type=1326 audit(1792926342.204:9220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29474 comm="syz.4.6928" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fef1c code=0x7ffc0000 [ 1667.902730][ T30] audit: type=1326 audit(1792926342.204:9221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29474 comm="syz.4.6928" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fef1c code=0x7ffc0000 [ 1667.902796][ T30] audit: type=1326 audit(1792926342.204:9222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29474 comm="syz.4.6928" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fef1c code=0x7ffc0000 [ 1667.902838][ T30] audit: type=1326 audit(1792926342.204:9223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29474 comm="syz.4.6928" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=305 compat=1 ip=0xf73fef1c code=0x7ffc0000 [ 1667.902881][ T30] audit: type=1326 audit(1792926342.204:9224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29474 comm="syz.4.6928" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fef1c code=0x7ffc0000 [ 1667.902924][ T30] audit: type=1326 audit(1792926342.204:9225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29474 comm="syz.4.6928" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fef1c code=0x7ffc0000 [ 1667.903398][ T30] audit: type=1326 audit(1792926342.204:9226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29474 comm="syz.4.6928" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fef1c code=0x7ffc0000 [ 1667.903635][ T30] audit: type=1326 audit(1792926342.204:9227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29474 comm="syz.4.6928" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fef1c code=0x7ffc0000 [ 1667.903843][ T30] audit: type=1326 audit(1792926342.204:9228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29474 comm="syz.4.6928" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf73fef1c code=0x7ffc0000 [ 1667.907773][T29475] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6928'. [ 1667.952120][T25445] usb 8-1: USB disconnect, device number 74 [ 1668.645388][T29484] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6929'. [ 1668.951758][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.951802][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1670.052122][T29506] netlink: 'syz.7.6939': attribute type 354 has an invalid length. [ 1670.285477][T29511] netlink: 'syz.2.6941': attribute type 4 has an invalid length. [ 1670.287130][T25445] logitech-hidpp-device 0005:046D:B012.0043: hidraw0: BLUETOOTH HID v0.07 Device [syz1] on syz1 [ 1670.336269][T29513] netlink: 'syz.2.6941': attribute type 4 has an invalid length. [ 1670.464994][T29512] fido_id[29512]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1671.049405][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 1671.049585][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1671.113985][T25445] dummy0: entered promiscuous mode [ 1671.150099][T23552] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 36585 - 0 [ 1671.167338][T23552] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 36585 - 0 [ 1671.244607][T23552] bond2: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 1671.244958][T23552] bond2: (slave veth3): making interface the new active one [ 1671.283947][T23552] bond2: active interface up! [ 1671.303809][T23561] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 36585 - 0 [ 1671.305569][ T50] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 36585 - 0 [ 1672.576697][T29552] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6947'. [ 1674.377856][T29595] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6957'. [ 1675.782455][T29630] netlink: 'syz.4.6965': attribute type 4 has an invalid length. [ 1676.083264][T29635] trusted_key: encrypted_key: insufficient parameters specified [ 1676.504956][T29644] syz_tun: entered allmulticast mode [ 1676.684589][T29644] dvmrp6: entered allmulticast mode [ 1676.750710][T29643] syz_tun: left allmulticast mode [ 1677.048813][T29653] FAULT_INJECTION: forcing a failure. [ 1677.048813][T29653] name failslab, interval 1, probability 0, space 0, times 0 [ 1677.048892][T29653] CPU: 0 UID: 0 PID: 29653 Comm: syz.7.6969 Tainted: G L syzkaller #0 PREEMPT(full) [ 1677.048924][T29653] Tainted: [L]=SOFTLOCKUP [ 1677.048933][T29653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1677.048948][T29653] Call Trace: [ 1677.048958][T29653] [ 1677.048967][T29653] dump_stack_lvl+0xe8/0x150 [ 1677.049008][T29653] should_fail_ex+0x410/0x560 [ 1677.049043][T29653] should_failslab+0xa8/0x100 [ 1677.049076][T29653] ? do_getname+0x2e/0x250 [ 1677.049108][T29653] kmem_cache_alloc_noprof+0x9c/0x600 [ 1677.049145][T29653] ? do_getname+0x2e/0x250 [ 1677.049183][T29653] do_getname+0x2e/0x250 [ 1677.049212][T29653] ? getname_flags+0x11/0x20 [ 1677.049246][T29653] user_statfs+0x97/0x1c0 [ 1677.049282][T29653] ? __lock_acquire+0x747/0x2de0 [ 1677.049310][T29653] ? __pfx_user_statfs+0x10/0x10 [ 1677.049343][T29653] ? ksys_write+0x1e6/0x270 [ 1677.049382][T29653] __ia32_compat_sys_statfs+0x11a/0x360 [ 1677.049419][T29653] ? __pfx___ia32_compat_sys_statfs+0x10/0x10 [ 1677.049454][T29653] ? __fget_files+0x3a2/0x420 [ 1677.049476][T29653] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1677.049508][T29653] ? lock_acquire+0x115/0x350 [ 1677.049551][T29653] ? __might_fault+0xaf/0x130 [ 1677.049589][T29653] __do_fast_syscall_32+0x28b/0x6c0 [ 1677.049616][T29653] ? do_fast_syscall_32+0x33/0x70 [ 1677.049641][T29653] ? asm_int80_emulation+0x1a/0x20 [ 1677.049663][T29653] ? do_int80_emulation+0x299/0x500 [ 1677.049687][T29653] ? trace_irq_disable+0x3b/0x140 [ 1677.049721][T29653] do_fast_syscall_32+0x33/0x70 [ 1677.049746][T29653] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1677.049774][T29653] RIP: 0023:0xf73cef1c [ 1677.049795][T29653] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1677.049815][T29653] RSP: 002b:00000000f53e650c EFLAGS: 00000206 ORIG_RAX: 0000000000000063 [ 1677.049847][T29653] RAX: ffffffffffffffda RBX: 0000000080001380 RCX: 0000000000000000 [ 1677.049863][T29653] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1677.049877][T29653] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1677.049891][T29653] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1677.049905][T29653] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1677.049952][T29653] [ 1677.604836][T29663] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1677.949668][T25425] usb 4-1: new full-speed USB device number 75 using dummy_hcd [ 1678.064973][T29676] wireguard: wg0: Could not create IPv6 socket [ 1678.065000][T29676] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 1678.110848][T25425] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1678.112522][T25425] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1678.112552][T25425] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1678.112608][T25425] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1678.160135][T25425] usb 4-1: config 0 descriptor?? [ 1678.167390][T25425] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1678.167471][T25425] dvb-usb: bulk message failed: -22 (3/0) [ 1678.198578][T25425] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1678.208959][T25425] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1678.209020][T25425] usb 4-1: media controller created [ 1678.226233][T25425] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1678.246748][T25425] dvb-usb: bulk message failed: -22 (6/0) [ 1678.246844][T25425] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1678.266505][T25425] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input154 [ 1678.281722][T25425] dvb-usb: schedule remote query interval to 150 msecs. [ 1678.281745][T25425] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1678.431303][T25442] usb 4-1: USB disconnect, device number 75 [ 1678.536085][T25442] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1678.847261][T29687] netlink: 3 bytes leftover after parsing attributes in process `syz.2.6977'. [ 1678.847968][T29687] unsupported nlmsg_type 40 [ 1678.973762][T29689] Invalid logical block size (-55) [ 1679.125376][T29693] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6981'. [ 1679.172020][T29693] bridge2: port 1(erspan0) entered blocking state [ 1679.172169][T29693] bridge2: port 1(erspan0) entered disabled state [ 1679.172278][T29693] erspan0: entered allmulticast mode [ 1679.175426][T29693] erspan0: entered promiscuous mode [ 1679.176949][T29693] bridge2: port 1(erspan0) entered blocking state [ 1679.177260][T29693] bridge2: port 1(erspan0) entered forwarding state [ 1679.234068][T29693] erspan0: left allmulticast mode [ 1679.234104][T29693] erspan0: left promiscuous mode [ 1679.234287][T29693] bridge2: port 1(erspan0) entered disabled state [ 1679.272258][T29693] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1679.336323][T29695] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6980'. [ 1679.677947][T29704] trusted_key: encrypted_key: insufficient parameters specified [ 1679.778136][T29707] netlink: 10 bytes leftover after parsing attributes in process `syz.4.6984'. [ 1681.087245][T29725] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6990'. [ 1681.556532][T29742] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6993'. [ 1681.714027][T29751] trusted_key: encrypted_key: insufficient parameters specified [ 1682.957350][T29770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1682.958860][T29770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1683.206146][T29773] syzkaller0: left promiscuous mode [ 1683.206165][T29773] syzkaller0: left allmulticast mode [ 1683.224112][T29773] fuse: Bad value for 'rootmode' [ 1683.244406][T29771] netlink: 'syz.2.7003': attribute type 10 has an invalid length. [ 1683.296150][T29771] bond0: (slave netdevsim1): Releasing backup interface [ 1683.321649][T29771] netdevsim netdevsim2 netdevsim1: left promiscuous mode [ 1683.321847][T29771] netdevsim netdevsim2 netdevsim1: left allmulticast mode [ 1683.337930][T29771] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1683.357086][T29771] team0: Port device netdevsim1 added [ 1683.481099][T25439] usb 8-1: new full-speed USB device number 75 using dummy_hcd [ 1683.635067][T25439] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1683.637885][T25439] usb 8-1: not running at top speed; connect to a high speed hub [ 1683.637924][T25439] usb 8-1: New USB device found, idVendor=0b95, idProduct=2790, bcdDevice=de.90 [ 1683.865096][T25439] usb 8-1: config 178 has an invalid interface number: 212 but max is 0 [ 1683.865121][T25439] usb 8-1: config 178 has no interface number 0 [ 1683.865145][T25439] usb 8-1: config 178 interface 212 has no altsetting 0 [ 1683.964345][T25439] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1683.964378][T25439] usb 8-1: Product: syz [ 1683.964396][T25439] usb 8-1: Manufacturer: syz [ 1683.964421][T25439] usb 8-1: SerialNumber: syz [ 1684.296423][T25439] usb 8-1: USB disconnect, device number 75 [ 1684.527331][T29795] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7010'. [ 1685.315674][T29817] netlink: 'syz.8.7017': attribute type 10 has an invalid length. [ 1685.337727][T29817] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1685.351011][T29817] team0: Port device netdevsim1 added [ 1685.378634][T29817] netlink: 'syz.8.7017': attribute type 10 has an invalid length. [ 1685.411200][T29817] team0: Port device netdevsim1 removed [ 1686.079412][T29814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1686.081028][T29814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1686.636036][T29838] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7024'. [ 1686.825186][T29841] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1687.104090][T29845] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1687.702354][T29863] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7030'. [ 1688.265692][T29871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1688.266213][T29871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1688.307743][T29871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1688.308060][T29871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1688.475338][T25425] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1688.645938][T25425] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1688.672864][T25425] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1688.703510][T25425] usb 4-1: config 0 descriptor?? [ 1688.975557][T25425] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1688.978668][T25425] [drm:udl_init] *ERROR* Selecting channel failed [ 1689.040244][T25425] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1 [ 1689.040273][T25425] [drm] Initialized udl on minor 1 [ 1689.063795][T25425] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1689.064281][T25425] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1689.092237][T25425] usb 4-1: USB disconnect, device number 76 [ 1689.100274][T14207] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1689.929317][T25442] usb 4-1: new full-speed USB device number 77 using dummy_hcd [ 1690.080399][T25442] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1690.082152][T25442] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1690.082217][T25442] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1690.085334][T25442] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1690.085355][T25442] usb 4-1: Product: syz [ 1690.085367][T25442] usb 4-1: Manufacturer: syz [ 1690.085378][T25442] usb 4-1: SerialNumber: syz [ 1690.088531][T25442] usb 4-1: config 0 descriptor?? [ 1690.159851][T25442] usb 4-1: selecting invalid altsetting 0 [ 1690.362718][T25425] usb 4-1: USB disconnect, device number 77 [ 1691.129303][T25445] usb 8-1: new high-speed USB device number 76 using dummy_hcd [ 1691.223638][T29898] FAULT_INJECTION: forcing a failure. [ 1691.223638][T29898] name failslab, interval 1, probability 0, space 0, times 0 [ 1691.223667][T29898] CPU: 0 UID: 0 PID: 29898 Comm: syz.3.7040 Tainted: G L syzkaller #0 PREEMPT(full) [ 1691.223690][T29898] Tainted: [L]=SOFTLOCKUP [ 1691.223696][T29898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1691.223706][T29898] Call Trace: [ 1691.223712][T29898] [ 1691.223719][T29898] dump_stack_lvl+0xe8/0x150 [ 1691.223749][T29898] should_fail_ex+0x410/0x560 [ 1691.223777][T29898] should_failslab+0xa8/0x100 [ 1691.223801][T29898] __kmalloc_cache_noprof+0x9e/0x600 [ 1691.223819][T29898] ? __kmalloc_cache_noprof+0x148/0x600 [ 1691.223835][T29898] ? x509_cert_parse+0xfa/0x7a0 [ 1691.223851][T29898] ? x509_cert_parse+0xfa/0x7a0 [ 1691.223873][T29898] x509_cert_parse+0xfa/0x7a0 [ 1691.223897][T29898] x509_key_preparse+0x64/0x6d0 [ 1691.223915][T29898] ? down_read+0x2b9/0x320 [ 1691.223938][T29898] asymmetric_key_preparse+0xb9/0x1b0 [ 1691.223966][T29898] __key_create_or_update+0x360/0xa90 [ 1691.223991][T29898] ? __pfx___key_create_or_update+0x10/0x10 [ 1691.224008][T29898] ? lookup_user_key+0x1101/0x1230 [ 1691.224047][T29898] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 1691.224084][T29898] key_create_or_update+0x42/0x60 [ 1691.224106][T29898] __se_sys_add_key+0x349/0x420 [ 1691.224130][T29898] ? __pfx___se_sys_add_key+0x10/0x10 [ 1691.224156][T29898] ? __might_fault+0xaf/0x130 [ 1691.224180][T29898] ? __ia32_sys_add_key+0x20/0xc0 [ 1691.224204][T29898] __do_fast_syscall_32+0x28b/0x6c0 [ 1691.224223][T29898] ? do_fast_syscall_32+0x33/0x70 [ 1691.224241][T29898] ? asm_int80_emulation+0x1a/0x20 [ 1691.224257][T29898] ? do_int80_emulation+0x299/0x500 [ 1691.224275][T29898] ? trace_irq_disable+0x3b/0x140 [ 1691.224300][T29898] do_fast_syscall_32+0x33/0x70 [ 1691.224319][T29898] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1691.224339][T29898] RIP: 0023:0xf7f53f1c [ 1691.224353][T29898] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1691.224367][T29898] RSP: 002b:00000000f540650c EFLAGS: 00000206 ORIG_RAX: 000000000000011e [ 1691.224392][T29898] RAX: ffffffffffffffda RBX: 0000000080000040 RCX: 0000000000000000 [ 1691.224404][T29898] RDX: 0000000080000200 RSI: 0000000000000114 RDI: 00000000fffffffe [ 1691.224415][T29898] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1691.224425][T29898] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1691.224435][T29898] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1691.224459][T29898] [ 1691.341372][T25445] usb 8-1: Using ep0 maxpacket: 8 [ 1691.351111][T25445] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1691.359505][T25445] usb 8-1: config 0 has no interfaces? [ 1691.359546][T25445] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1691.423172][T25445] usb 8-1: config 0 descriptor?? [ 1691.652839][T29905] netlink: 3 bytes leftover after parsing attributes in process `syz.8.7041'. [ 1691.764595][T25445] usb 8-1: USB disconnect, device number 76 [ 1691.849420][ T5785] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1691.996156][T29907] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1691.996198][T29907] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 36585 - 0 [ 1692.027059][ T5785] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1692.037637][ T5785] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1692.056508][ T5785] usb 4-1: config 0 descriptor?? [ 1692.067136][ T5785] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1692.694659][T29907] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1692.694704][T29907] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 36585 - 0 [ 1692.999648][T29907] team0: Port device netdevsim1 removed [ 1693.003113][T29907] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1693.003183][T29907] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 36585 - 0 [ 1693.083296][T29903] sit0: entered promiscuous mode [ 1693.083496][T29903] netlink: 'syz.3.7043': attribute type 1 has an invalid length. [ 1693.083515][T29903] netlink: 9 bytes leftover after parsing attributes in process `syz.3.7043'. [ 1693.199057][T29907] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1693.204961][T29907] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 36585 - 0 [ 1693.242373][ T5785] gspca_stv06xx: HDCS-1000/1100 sensor detected [ 1693.678603][T29926] trusted_key: encrypted_key: insufficient parameters specified [ 1694.277668][T29932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1694.281665][T29932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1694.742343][T29903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1694.744166][T29903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1694.930638][T29939] netlink: 'syz.4.7051': attribute type 1 has an invalid length. [ 1695.016926][T29939] bond2: entered promiscuous mode [ 1695.017523][T29939] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1695.085419][T29939] bond2: (slave bridge2): making interface the new active one [ 1695.085447][T29939] bridge2: entered promiscuous mode [ 1695.102839][T29939] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 1695.226656][T29935] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7050'. [ 1695.247237][T29935] geneve0: entered promiscuous mode [ 1695.247266][T29935] geneve0: entered allmulticast mode [ 1695.718228][T29953] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7055'. [ 1695.733562][T29953] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7055'. [ 1695.983946][ T5785] STV06xx 4-1:0.0: probe with driver STV06xx failed with error -71 [ 1696.008157][ T5785] usb 4-1: USB disconnect, device number 78 [ 1696.317007][T29963] trusted_key: encrypted_key: insufficient parameters specified [ 1696.631161][T29971] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1696.813893][T29978] netlink: 'syz.7.7065': attribute type 1 has an invalid length. [ 1696.856634][T29978] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1696.911612][T29978] bond13: (slave veth5): Enslaving as an active interface with a down link [ 1698.056644][T30005] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1698.445460][T30020] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7078'. [ 1698.445500][T30020] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7078'. [ 1698.500261][ T155] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1698.500313][ T155] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1698.500341][ T155] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1698.500367][ T155] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1698.754102][T30027] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7080'. [ 1698.756891][T30027] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7080'. [ 1698.817097][T30028] tipc: Started in network mode [ 1698.817119][T30028] tipc: Node identity , cluster identity 4711 [ 1698.817138][T30028] tipc: Failed to set node id, please configure manually [ 1698.817184][T30028] tipc: Enabling of bearer rejected, failed to enable media [ 1699.661931][T30056] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1699.779491][T30059] trusted_key: encrypted_key: insufficient parameters specified [ 1699.936220][T30065] trusted_key: encrypted_key: insufficient parameters specified [ 1700.467479][T30070] netlink: 79 bytes leftover after parsing attributes in process `syz.4.7089'. [ 1700.995605][T30077] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7091'. [ 1700.995655][T30077] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7091'. [ 1701.233179][T30079] netlink: 9 bytes leftover after parsing attributes in process `syz.4.7092'. [ 1701.266266][T30079] netlink: 5 bytes leftover after parsing attributes in process `syz.4.7092'. [ 1701.266379][T30079] 0ªî{X¹¦: renamed from gretap0 [ 1701.293313][T30079] 0ªî{X¹¦: entered allmulticast mode [ 1701.308308][T30079] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 1701.503629][T30085] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7095'. [ 1701.784340][T30089] bridge0: port 2(bridge_slave_1) entered disabled state [ 1701.785112][T30089] bridge0: port 1(bridge_slave_0) entered disabled state [ 1701.824612][T30089] team0: Port device bridge0 removed [ 1701.891533][T30089] bridge_slave_0: left allmulticast mode [ 1701.891564][T30089] bridge_slave_0: left promiscuous mode [ 1701.891800][T30089] bridge0: port 1(bridge_slave_0) entered disabled state [ 1701.943555][T30089] bridge_slave_1: left allmulticast mode [ 1701.943577][T30089] bridge_slave_1: left promiscuous mode [ 1701.946752][T30089] bridge0: port 2(bridge_slave_1) entered disabled state [ 1701.984576][T30089] bond0: (slave bond_slave_0): Releasing backup interface [ 1702.018524][T30089] bond0: (slave bond_slave_1): Releasing backup interface [ 1702.079559][T30089] team0: Port device team_slave_0 removed [ 1702.128820][T30089] team0: Port device team_slave_1 removed [ 1702.137418][T30089] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1702.137444][T30089] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1702.164735][T30089] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1702.164763][T30089] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1702.200072][T30089] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1702.832153][T30109] input: syz0 as /devices/virtual/input/input155 [ 1702.948908][T30112] netlink: 'syz.8.7105': attribute type 1 has an invalid length. [ 1703.051393][T30112] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1703.146124][T30117] bond1: (slave geneve2): making interface the new active one [ 1703.163300][T30117] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1703.191596][T30121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1703.192092][T30121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1703.559609][T30123] FAULT_INJECTION: forcing a failure. [ 1703.559609][T30123] name failslab, interval 1, probability 0, space 0, times 0 [ 1703.559649][T30123] CPU: 0 UID: 0 PID: 30123 Comm: syz.8.7107 Tainted: G L syzkaller #0 PREEMPT(full) [ 1703.559681][T30123] Tainted: [L]=SOFTLOCKUP [ 1703.559690][T30123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1703.559705][T30123] Call Trace: [ 1703.559715][T30123] [ 1703.559725][T30123] dump_stack_lvl+0xe8/0x150 [ 1703.559767][T30123] should_fail_ex+0x410/0x560 [ 1703.559802][T30123] should_failslab+0xa8/0x100 [ 1703.559834][T30123] __kmalloc_noprof+0xf9/0x710 [ 1703.559857][T30123] ? rcu_is_watching+0x16/0xb0 [ 1703.559928][T30123] ? tomoyo_realpath_from_path+0xef/0x640 [ 1703.559955][T30123] ? tomoyo_realpath_from_path+0xef/0x640 [ 1703.559987][T30123] tomoyo_realpath_from_path+0xef/0x640 [ 1703.560024][T30123] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1703.560058][T30123] tomoyo_path_number_perm+0x246/0x5f0 [ 1703.560095][T30123] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1703.560129][T30123] ? __lock_acquire+0x747/0x2de0 [ 1703.560199][T30123] ? __fget_files+0x2a/0x420 [ 1703.560225][T30123] ? __fget_files+0x2a/0x420 [ 1703.560247][T30123] ? __fget_files+0x3a2/0x420 [ 1703.560268][T30123] ? __fget_files+0x2a/0x420 [ 1703.560295][T30123] security_file_ioctl_compat+0xc3/0x2a0 [ 1703.560333][T30123] __ia32_compat_sys_ioctl+0x139/0x950 [ 1703.560366][T30123] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1703.560394][T30123] ? __fget_files+0x3a2/0x420 [ 1703.560416][T30123] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1703.560448][T30123] ? lock_acquire+0x115/0x350 [ 1703.560491][T30123] ? __might_fault+0xaf/0x130 [ 1703.560528][T30123] __do_fast_syscall_32+0x28b/0x6c0 [ 1703.560556][T30123] ? do_fast_syscall_32+0x33/0x70 [ 1703.560581][T30123] ? asm_int80_emulation+0x1a/0x20 [ 1703.560603][T30123] ? do_int80_emulation+0x299/0x500 [ 1703.560628][T30123] ? trace_irq_disable+0x3b/0x140 [ 1703.560663][T30123] do_fast_syscall_32+0x33/0x70 [ 1703.560690][T30123] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1703.560717][T30123] RIP: 0023:0xf7fb4f1c [ 1703.560738][T30123] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1703.560758][T30123] RSP: 002b:00000000f546650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1703.560783][T30123] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0405602 [ 1703.560800][T30123] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 1703.560815][T30123] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1703.560828][T30123] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1703.560842][T30123] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1703.560877][T30123] [ 1703.563920][T30123] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1704.270556][T30130] syzkaller0: entered promiscuous mode [ 1704.270582][T30130] syzkaller0: entered allmulticast mode [ 1704.328703][T30137] __nla_validate_parse: 1 callbacks suppressed [ 1704.328723][T30137] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7112'. [ 1704.396947][T30143] syzkaller0: entered promiscuous mode [ 1704.396974][T30143] syzkaller0: entered allmulticast mode [ 1704.398074][T30144] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7110'. [ 1704.559416][T25439] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1704.619683][T30151] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7115'. [ 1704.719194][T25439] usb 4-1: Using ep0 maxpacket: 32 [ 1704.721128][T25439] usb 4-1: New USB device found, idVendor=041e, idProduct=3042, bcdDevice= 0.40 [ 1704.723591][T25439] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 1704.723628][T25439] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1023 [ 1704.723665][T25439] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1704.723690][T25439] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1704.723713][T25439] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 1704.727786][T25439] usb 4-1: string descriptor 0 read error: -22 [ 1704.727940][T25439] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1704.819512][T30141] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1704.826687][T25439] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1704.826746][T25439] usb 4-1: MIDIStreaming interface descriptor not found [ 1704.826766][T25439] usb 4-1: too many endpoints [ 1704.967121][T25439] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -12 [ 1705.024672][ T5785] usb 4-1: USB disconnect, device number 79 [ 1706.142135][T30174] FAULT_INJECTION: forcing a failure. [ 1706.142135][T30174] name failslab, interval 1, probability 0, space 0, times 0 [ 1706.142176][T30174] CPU: 0 UID: 0 PID: 30174 Comm: syz.2.7122 Tainted: G L syzkaller #0 PREEMPT(full) [ 1706.142208][T30174] Tainted: [L]=SOFTLOCKUP [ 1706.142217][T30174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1706.142232][T30174] Call Trace: [ 1706.142241][T30174] [ 1706.142251][T30174] dump_stack_lvl+0xe8/0x150 [ 1706.142291][T30174] should_fail_ex+0x410/0x560 [ 1706.142325][T30174] should_failslab+0xa8/0x100 [ 1706.142356][T30174] __kmalloc_cache_noprof+0x9e/0x600 [ 1706.142382][T30174] ? inet6_rtm_newroute+0x988/0x1a30 [ 1706.142405][T30174] ? inet6_rtm_newroute+0x988/0x1a30 [ 1706.142435][T30174] inet6_rtm_newroute+0x988/0x1a30 [ 1706.142469][T30174] ? kasan_quarantine_put+0xbb/0x1f0 [ 1706.142495][T30174] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 1706.142520][T30174] ? nlmon_xmit+0xb0/0x100 [ 1706.142560][T30174] ? __pfx_hook_capable+0x10/0x10 [ 1706.142585][T30174] ? __dev_queue_xmit+0x29b/0x3920 [ 1706.142648][T30174] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 1706.142672][T30174] rtnetlink_rcv_msg+0x802/0xc00 [ 1706.142712][T30174] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1706.142761][T30174] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1706.142799][T30174] ? __copy_skb_header+0xa3/0x4a0 [ 1706.142835][T30174] netlink_rcv_skb+0x226/0x4a0 [ 1706.142867][T30174] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1706.142905][T30174] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1706.142950][T30174] ? netlink_deliver_tap+0x2e/0x1b0 [ 1706.142979][T30174] ? netlink_deliver_tap+0x2e/0x1b0 [ 1706.143017][T30174] netlink_unicast+0x8ef/0xa80 [ 1706.143071][T30174] netlink_sendmsg+0x7f0/0xb20 [ 1706.143109][T30174] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1706.143144][T30174] ? aa_sock_msg_perm+0x144/0x210 [ 1706.143175][T30174] ? apparmor_socket_sendmsg+0x98/0x360 [ 1706.143213][T30174] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1706.143244][T30174] sock_sendmsg_nosec+0x14e/0x190 [ 1706.143276][T30174] ____sys_sendmsg+0x54e/0x850 [ 1706.143305][T30174] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1706.143347][T30174] ___sys_sendmsg+0x2a5/0x360 [ 1706.143367][T30174] ? __lock_acquire+0x747/0x2de0 [ 1706.143400][T30174] ? __pfx____sys_sendmsg+0x10/0x10 [ 1706.143426][T30174] ? kstrtoull+0x137/0x1d0 [ 1706.143491][T30174] ? __fget_files+0x3a2/0x420 [ 1706.143513][T30174] ? __fget_files+0x2a/0x420 [ 1706.143544][T30174] __sys_sendmmsg+0x2de/0x4e0 [ 1706.143575][T30174] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1706.143643][T30174] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 1706.143677][T30174] __do_fast_syscall_32+0x28b/0x6c0 [ 1706.143705][T30174] ? do_fast_syscall_32+0x33/0x70 [ 1706.143730][T30174] ? asm_int80_emulation+0x1a/0x20 [ 1706.143767][T30174] ? do_int80_emulation+0x299/0x500 [ 1706.143791][T30174] ? trace_irq_disable+0x3b/0x140 [ 1706.143826][T30174] do_fast_syscall_32+0x33/0x70 [ 1706.143852][T30174] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1706.143880][T30174] RIP: 0023:0xf741ef1c [ 1706.143901][T30174] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1706.143922][T30174] RSP: 002b:00000000f543650c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 1706.143946][T30174] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000800002c0 [ 1706.143963][T30174] RDX: 000000000000009f RSI: 0000000000000000 RDI: 0000000000000000 [ 1706.143978][T30174] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1706.143992][T30174] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1706.144006][T30174] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1706.144039][T30174] [ 1706.834548][T30178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1706.834914][T30178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1707.201661][T30178] tc_dump_action: action bad kind [ 1707.840272][T30188] vlan4: entered allmulticast mode [ 1707.840297][T30188] bond0: entered allmulticast mode [ 1707.843232][T30188] bridge0: port 1(vlan4) entered blocking state [ 1707.843992][T30188] bridge0: port 1(vlan4) entered disabled state [ 1707.853502][T30188] vlan4: entered promiscuous mode [ 1707.853570][T30188] bond0: entered promiscuous mode [ 1708.027355][T30191] syzkaller0: entered promiscuous mode [ 1708.027380][T30191] syzkaller0: entered allmulticast mode [ 1708.046522][T30190] tipc: Enabled bearer , priority 0 [ 1708.066776][T30190] tipc: Resetting bearer [ 1708.067536][T30190] ±ÿ: renamed from lo (while UP) [ 1709.371011][T14209] usb 8-1: new high-speed USB device number 77 using dummy_hcd [ 1709.437970][T30230] PKCS7: Unsupported SignedData version [ 1709.438841][T30230] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1709.438860][T30230] IPv6: NLM_F_CREATE should be set when creating new route [ 1709.520528][T14209] usb 8-1: Using ep0 maxpacket: 32 [ 1709.523999][T14209] usb 8-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1709.557135][T14209] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1709.557169][T14209] usb 8-1: Product: syz [ 1709.557188][T14209] usb 8-1: Manufacturer: syz [ 1709.557207][T14209] usb 8-1: SerialNumber: syz [ 1709.584367][T14209] usb 8-1: config 0 descriptor?? [ 1709.616153][T14209] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1710.956116][T14209] gspca_ov534_9: reg_w failed -71 [ 1711.240253][T14209] gspca_ov534_9: Unknown sensor 0000 [ 1711.240352][T14209] ov534_9 8-1:0.0: probe with driver ov534_9 failed with error -22 [ 1711.265022][T14209] usb 8-1: USB disconnect, device number 77 [ 1711.443394][T30254] netlink: 'syz.8.7148': attribute type 30 has an invalid length. [ 1711.443414][T30254] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7148'. [ 1711.443435][T30254] bond0: option arp_missed_max: invalid value (0) [ 1711.443450][T30254] bond0: option arp_missed_max: allowed values 1 - 255 [ 1712.249745][ T5785] usb 8-1: new high-speed USB device number 78 using dummy_hcd [ 1712.410387][ T5785] usb 8-1: Using ep0 maxpacket: 8 [ 1712.413973][ T5785] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1712.415792][ T5785] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1712.415819][ T5785] usb 8-1: config 0 has no interface number 0 [ 1712.415860][ T5785] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1712.415907][ T5785] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1712.417965][ T5785] usb 8-1: config 0 descriptor?? [ 1712.444529][ T5785] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1712.661156][T30280] netlink: 'syz.8.7157': attribute type 21 has an invalid length. [ 1712.661174][T30280] netlink: 'syz.8.7157': attribute type 7 has an invalid length. [ 1712.666181][T30279] tipc: Started in network mode [ 1712.666221][T30279] tipc: Node identity 5a414ca32e33, cluster identity 4711 [ 1712.667747][T30279] tipc: Enabled bearer , priority 0 [ 1712.742723][T25439] usb 8-1: USB disconnect, device number 78 [ 1712.759868][T30279] tipc: Resetting bearer [ 1712.782814][T14209] hid-generic 0000:0000:FFFFFFFD.0044: unknown main item tag 0x0 [ 1712.782855][T14209] hid-generic 0000:0000:FFFFFFFD.0044: unknown main item tag 0x0 [ 1712.785485][T14209] hid-generic 0000:0000:FFFFFFFD.0044: hidraw0: HID v0.09 Device [syz0] on syz0 [ 1712.849224][ T5785] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1712.965581][T30283] fido_id[30283]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1712.999948][ T5785] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1713.001912][ T5785] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1713.001971][ T5785] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1713.005893][ T5785] usb 4-1: config 0 descriptor?? [ 1713.046783][ T5785] pwc: Askey VC010 type 2 USB webcam detected. [ 1713.074581][T30288] xt_connbytes: Forcing CT accounting to be enabled [ 1713.498979][T30292] netlink: 'syz.8.7163': attribute type 10 has an invalid length. [ 1713.507585][T30292] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1713.524350][T30292] team0: Port device netdevsim1 added [ 1713.528717][T30292] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7163'. [ 1713.657467][T30303] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7167'. [ 1713.739368][T14209] tipc: Node number set to 1953647779 [ 1713.845275][T30308] netlink: 48 bytes leftover after parsing attributes in process `syz.7.7168'. [ 1713.847459][T30308] netlink: 'syz.7.7168': attribute type 15 has an invalid length. [ 1713.883016][T30308] vxlan0: entered promiscuous mode [ 1713.900560][T30208] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 6090 - 0 [ 1713.900680][T30208] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 6090 - 0 [ 1713.900721][T30208] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 6090 - 0 [ 1713.900761][T30208] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 6090 - 0 [ 1714.078385][T30313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1714.079043][T30313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1714.749500][T25445] usb 8-1: new high-speed USB device number 79 using dummy_hcd [ 1714.755282][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 1714.755303][ T30] audit: type=1326 audit(1792926389.054:9242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30336 comm="syz.2.7178" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741ef1c code=0x7ffc0000 [ 1714.757231][ T30] audit: type=1326 audit(1792926389.054:9243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30336 comm="syz.2.7178" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf741ef1c code=0x7ffc0000 [ 1714.767034][ T30] audit: type=1326 audit(1792926389.064:9244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30336 comm="syz.2.7178" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741ef1c code=0x7ffc0000 [ 1714.767116][ T30] audit: type=1326 audit(1792926389.064:9245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30336 comm="syz.2.7178" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741ef1c code=0x7ffc0000 [ 1714.767164][ T30] audit: type=1326 audit(1792926389.064:9246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30336 comm="syz.2.7178" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf741ef1c code=0x7ffc0000 [ 1714.767213][ T30] audit: type=1326 audit(1792926389.064:9247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30336 comm="syz.2.7178" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741ef1c code=0x7ffc0000 [ 1714.767269][ T30] audit: type=1326 audit(1792926389.064:9248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30336 comm="syz.2.7178" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=363 compat=1 ip=0xf741ef1c code=0x7ffc0000 [ 1714.767318][ T30] audit: type=1326 audit(1792926389.064:9249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30336 comm="syz.2.7178" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741ef1c code=0x7ffc0000 [ 1714.767363][ T30] audit: type=1326 audit(1792926389.064:9250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30336 comm="syz.2.7178" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741ef1c code=0x7ffc0000 [ 1714.798469][ T30] audit: type=1326 audit(1792926389.064:9251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30336 comm="syz.2.7178" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf741ef1c code=0x7ffc0000 [ 1714.953193][T25445] usb 8-1: device descriptor read/64, error -71 [ 1715.189802][T25445] usb 8-1: new high-speed USB device number 80 using dummy_hcd [ 1715.319291][T25445] usb 8-1: device descriptor read/64, error -71 [ 1715.430432][T25445] usb usb8-port1: attempt power cycle [ 1715.659571][ T5785] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1715.660681][ T5785] pwc: recv_control_msg error -71 req 04 val 1000 [ 1715.661150][ T5785] pwc: recv_control_msg error -71 req 04 val 1300 [ 1715.661672][ T5785] pwc: recv_control_msg error -71 req 04 val 1400 [ 1715.662374][ T5785] pwc: recv_control_msg error -71 req 02 val 2000 [ 1715.662935][ T5785] pwc: recv_control_msg error -71 req 02 val 2100 [ 1715.663543][ T5785] pwc: recv_control_msg error -71 req 04 val 1500 [ 1715.664711][ T5785] pwc: recv_control_msg error -71 req 02 val 2500 [ 1715.666628][ T5785] pwc: recv_control_msg error -71 req 02 val 2400 [ 1715.667068][ T5785] pwc: recv_control_msg error -71 req 02 val 2600 [ 1715.667511][ T5785] pwc: recv_control_msg error -71 req 02 val 2900 [ 1715.668853][ T5785] pwc: recv_control_msg error -71 req 02 val 2800 [ 1715.669634][ T33] INFO: task kworker/0:5:25440 blocked for more than 143 seconds. [ 1715.669660][ T33] Tainted: G L syzkaller #0 [ 1715.669674][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1715.669685][ T33] task:kworker/0:5 state:D stack:22288 pid:25440 tgid:25440 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1715.669762][ T33] Workqueue: usb_hub_wq hub_event [ 1715.670130][ T33] Call Trace: [ 1715.670139][ T33] [ 1715.670152][ T33] __schedule+0x17dd/0x5820 [ 1715.670192][ T33] ? __lock_acquire+0x747/0x2de0 [ 1715.670228][ T33] ? rcu_is_watching+0x16/0 ** replaying previous printk message ** [ 1715.670228][ T33] ? rcu_is_watching+0x16/0xb0 [ 1715.670269][ T33] ? look_up_lock_class+0x57/0x110 [ 1715.670300][ T33] ? __pfx___schedule+0x10/0x10 [ 1715.670332][ T33] ? lock_acquire+0x115/0x350 [ 1715.670368][ T33] ? schedule+0x90/0x2b0 [ 1715.670406][ T33] schedule+0x164/0x2b0 [ 1715.670443][ T33] schedule_timeout+0xc0/0x2c0 [ 1715.670475][ T33] ? __pfx_schedule_timeout+0x10/0x10 [ 1715.670509][ T33] ? do_raw_spin_lock+0x12b/0x2f0 [ 1715.670556][ T33] ? _raw_spin_unlock_irq+0x23/0x50 [ 1715.670590][ T33] ? wait_for_completion+0x26d/0x5d0 [ 1715.670614][ T33] wait_for_completion+0x2c5/0x5d0 [ 1715.670652][ T33] ? __pfx_wait_for_completion+0x10/0x10 [ 1715.670683][ T33] ? kobject_put+0x50f/0x550 [ 1715.670719][ T33] i2c_del_adapter+0x292/0x440 [ 1715.670762][ T33] ? __pfx_i2c_del_adapter+0x10/0x10 [ 1715.670794][ T33] ? dvb_usbv2_exit+0x94d/0xb80 [ 1715.670828][ T33] dvb_usbv2_probe+0x4bb/0x3950 [ 1715.670888][ T33] ? __pfx_dvb_usbv2_probe+0x10/0x10 [ 1715.670917][ T33] ? __pm_runtime_set_status+0xa96/0xd80 [ 1715.670954][ T33] usb_probe_interface+0x788/0xe50 [ 1715.672330][ T5785] pwc: recv_control_msg error -71 req 04 val 1100 [ 1715.673231][ T5785] pwc: recv_control_msg error -71 req 04 val 1200 [ 1715.681421][ T5785] pwc: Registered as video103. [ 1715.683664][ T5785] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input156 [ 1715.694465][ T5785] usb 4-1: USB disconnect, device number 80 [ 1715.710843][ T33] ? __pfx_usb_probe_interface+0x10/0x10 [ 1715.710956][ T33] ? kernfs_create_link+0x1cd/0x240 [ 1715.711037][ T33] ? sysfs_do_create_link_sd+0xe0/0x110 [ 1715.711127][ T33] ? driver_sysfs_add+0x1fe/0x210 [ 1715.711197][ T33] ? __pfx_usb_probe_interface+0x10/0x10 [ 1715.711288][ T33] really_probe+0x254/0xae0 [ 1715.713675][ T33] __driver_probe_device+0x1e8/0x360 [ 1715.713761][ T33] driver_probe_device+0x4f/0x240 [ 1715.713841][ T33] __device_attach_driver+0x270/0x410 [ 1715.713917][ T33] bus_for_each_drv+0x258/0x2f0 [ 1715.714000][ T33] ? __pfx___device_attach_driver+0x10/0x10 [ 1715.714079][ T33] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1715.714179][ T33] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1715.714303][ T33] __device_attach+0x2c4/0x450 [ 1715.714374][ T33] ? __pfx___device_attach+0x10/0x10 [ 1715.714435][ T33] ? do_raw_spin_unlock+0xf5/0x200 [ 1715.714500][ T33] ? _raw_spin_unlock+0x28/0x50 [ 1715.714603][ T33] device_initial_probe+0xa1/0xd0 [ 1715.714675][ T33] bus_probe_device+0x12a/0x220 [ 1715.714755][ T33] device_add+0x7d7/0xb80 [ 1715.714857][ T33] usb_set_configuration+0x1bb5/0x2260 [ 1715.714949][ T33] usb_generic_driver_probe+0x8d/0x150 [ 1715.714984][ T33] usb_probe_device+0x1c3/0x3b0 [ 1715.715020][ T33] ? __pfx_usb_probe_device+0x10/0x10 [ 1715.715049][ T33] really_probe+0x254/0xae0 [ 1715.715080][ T33] __driver_probe_device+0x1e8/0x360 [ 1715.715107][ T33] driver_probe_device+0x4f/0x240 [ 1715.715136][ T33] __device_attach_driver+0x270/0x410 [ 1715.715218][ T33] bus_for_each_drv+0x258/0x2f0 [ 1715.715325][ T33] ? __pfx___device_attach_driver+0x10/0x10 [ 1715.719521][ T33] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1715.719664][ T33] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1715.719972][ T33] __device_attach+0x2c4/0x450 [ 1715.720058][ T33] ? __pfx___device_attach+0x10/0x10 [ 1715.720121][ T33] ? do_raw_spin_unlock+0xf5/0x200 [ 1715.720192][ T33] ? _raw_spin_unlock+0x28/0x50 [ 1715.720289][ T33] device_initial_probe+0xa1/0xd0 [ 1715.720361][ T33] bus_probe_device+0x12a/0x220 [ 1715.720453][ T33] device_add+0x7d7/0xb80 [ 1715.720552][ T33] usb_new_device+0x9aa/0x1690 [ 1715.720646][ T33] ? __pfx_usb_new_device+0x10/0x10 [ 1715.720725][ T33] ? _raw_spin_unlock_irq+0x23/0x50 [ 1715.720917][ T33] hub_event+0x28e8/0x4d30 [ 1715.722442][ T33] ? do_raw_spin_unlock+0xf5/0x200 [ 1715.722702][ T33] ? __pfx_hub_event+0x10/0x10 [ 1715.722833][ T33] ? rcu_is_watching+0x16/0xb0 [ 1715.722949][ T33] ? process_scheduled_works+0x97a/0x1630 [ 1715.723034][ T33] process_scheduled_works+0xc3d/0x1630 [ 1715.723205][ T33] ? __pfx_process_scheduled_works+0x10/0x10 [ 1715.723315][ T33] ? assign_work+0x3cf/0x5d0 [ 1715.723409][ T33] worker_thread+0xa47/0xfb0 [ 1715.725061][ T33] kthread+0x38b/0x480 [ 1715.725143][ T33] ? __pfx_worker_thread+0x10/0x10 [ 1715.725232][ T33] ? __pfx_kthread+0x10/0x10 [ 1715.725305][ T33] ret_from_fork+0x514/0xb70 [ 1715.725366][ T33] ? save_fpregs_to_fpstate+0x176/0x200 [ 1715.725456][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 1715.726141][ T33] ? load_gs_index+0x97/0xc0 [ 1715.726235][ T33] ? __switch_to+0xc78/0x1410 [ 1715.726349][ T33] ? __pfx_kthread+0x10/0x10 [ 1715.726428][ T33] ret_from_fork_asm+0x1a/0x30 [ 1715.726538][ T33] [ 1715.726795][ T33] [ 1715.726795][ T33] Showing all locks held in the system: [ 1715.726834][ T33] locks held by pr/ttyS0/32: 2, last CPU#0: [ 1715.726876][ T33] #0: ffffffff8fc33e18 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 1715.727057][ T33] #1: ffffffff9bdc4998 (&port_lock_key){-.-.}-{3:3}, at: raw_spin_rq_lock_nested+0xb2/0x160 [ 1715.728551][ T33] locks held by khungtaskd/33: 1, last CPU#1: [ 1715.728567][ T33] #0: ffffffff8fd5a360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1715.733757][ T33] locks held by acpid/4985: 1, on CPU#0: [ 1715.734171][ T33] #0: ffffffff8fd609e8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x388/0x760 [ 1715.734389][ T33] locks held by klogd/4989: 1, last CPU#0: [ 1715.734430][ T33] #0: ffffffff8fe94680 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x5f/0x600 [ 1715.734612][ T33] locks held by getty/5391: 2, on CPU#0: [ 1715.734659][ T33] #0: ffff888036b2c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1715.734800][ T33] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 1715.734983][ T33] locks held by kworker/1:6/5785: 7, on CPU#1: [ 1715.735024][ T33] #0: ffff88801c175948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1715.736142][ T33] #1: ffffc90004f6fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1715.736207][ T33] #2: ffff88802b5521d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 1715.736267][ T33] #3: ffff88806a9d61d8 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xfc/0x9a0 [ 1715.736435][ T33] #4: ffff88802c2381a0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 1715.736492][ T33] #5: ffffffff90cda8c0 (input_mutex){+.+.}-{4:4}, at: __input_unregister_device+0x2d8/0x650 [ 1715.736546][ T33] #6: ffffffff8fd609e8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2cb/0x760 [ 1715.737082][ T33] locks held by udevd/23177: 4, on CPU#1: [ 1715.737101][ T33] #0: ffff88803c77bbd8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xa4/0xca0 [ 1715.737165][ T33] #1: ffff8880326d7880 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5d/0x420 [ 1715.737252][ T33] #2: ffff888027b5f788 (kn->active#29){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 1715.737676][ T33] #3: ffff8880233bb1d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 1715.737863][ T33] locks held by kworker/0:5/25440: 5, on CPU#0: [ 1715.737910][ T33] #0: ffff88801c175948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1715.738072][ T33] #1: ffffc9000def7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1715.738242][ T33] #2: ffff88802b4e61d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 1715.738404][ T33] #3: ffff8880233bb1d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 1715.738539][ T33] #4: ffff888033d8d1a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 1715.738889][ T33] locks held by kworker/0:14/25445: 6, last CPU#0: [ 1715.738937][ T33] #0: ffff88801c175948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1715.751750][ T33] #1: ffffc9000d84fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1715.751964][ T33] #2: ffff88802b71e1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 1715.752141][ T33] #3: ffff88802b7ba568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x20a1/0x4d30 [ 1715.752311][ T33] #4: ffff88802b682560 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x20c9/0x4d30 [ 1715.752467][ T33] #5: ffffffff90b0fae8 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x14d/0x1810 [ 1715.752635][ T33] locks held by syz-executor/25653: 3, last CPU#1: [ 1715.752679][ T33] #0: ffffffff8fe3a150 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10a/0x470 [ 1715.764566][ T33] #1: ffff88804f94b440 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 1715.764818][ T33] #2: ffff88802d0d8f80 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 1715.765028][ T33] locks held by syz-executor/26222: 4, last CPU#1: [ 1715.765071][ T33] #0: ffffffff8fe3a150 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10a/0x470 [ 1715.765221][ T33] #1: ffff888035fc6540 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 1715.765420][ T33] #2: ffff88802d0dd900 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 1715.765628][ T33] #3: ffffffff8fd5a360 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 1715.765825][ T33] locks held by kworker/u8:1/30203: 3, last CPU#1: [ 1715.765866][ T33] #0: ffff88801c0ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1715.766038][ T33] #1: ffffc9000536fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: psi_task_switch+0x57/0x7d0 [ 1715.806260][ T33] #2: ffffffff9bcf1778 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0xb7/0x420 [ 1715.806366][ T33] [ 1715.806373][ T33] ============================================= [ 1715.806373][ T33] [ 1715.806426][ T33] NMI backtrace for cpu 1 [ 1715.806490][ T33] CPU: 1 UID: 0 PID: 33 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1715.806600][ T33] Tainted: [L]=SOFTLOCKUP [ 1715.806621][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1715.806685][ T33] Call Trace: [ 1715.806708][ T33] [ 1715.806738][ T33] dump_stack_lvl+0xe8/0x150 [ 1715.806831][ T33] nmi_cpu_backtrace+0x274/0x2d0 [ 1715.806910][ T33] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1715.806984][ T33] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 1715.807075][ T33] sys_info+0x135/0x170 [ 1715.807149][ T33] watchdog+0xfd2/0x1030 [ 1715.807259][ T33] ? watchdog+0x1c7/0x1030 [ 1715.807355][ T33] kthread+0x38b/0x480 [ 1715.807424][ T33] ? __pfx_watchdog+0x10/0x10 [ 1715.807487][ T33] ? __pfx_kthread+0x10/0x10 [ 1715.807556][ T33] ret_from_fork+0x514/0xb70 [ 1715.807628][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 1715.807689][ T33] ? __switch_to+0xc78/0x1410 [ 1715.807797][ T33] ? __pfx_kthread+0x10/0x10 [ 1715.807863][ T33] ret_from_fork_asm+0x1a/0x30 [ 1715.807991][ T33] [ 1715.808105][ T33] Sending NMI from CPU 1 to CPUs 0: [ 1715.808171][ C0] NMI backtrace for cpu 0 [ 1715.808188][ C0] CPU: 0 UID: 0 PID: 32 Comm: pr/ttyS0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1715.808214][ C0] Tainted: [L]=SOFTLOCKUP [ 1715.808222][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1715.808234][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 1715.808265][ C0] Code: e8 2e 93 4a fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 9f f3 c0 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 1715.808282][ C0] RSP: 0018:ffffc90000a878b8 EFLAGS: 00000002 [ 1715.808299][ C0] RAX: 1ffffffff37b8900 RBX: 00000000000003fd RCX: 0000000000000000 [ 1715.808313][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 1715.808325][ C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 1715.808338][ C0] R10: dffffc0000000000 R11: ffffffff857e6360 R12: dffffc0000000000 [ 1715.808354][ C0] R13: 0000000000000000 R14: ffffffff9bdc49c0 R15: 0000000000000000 [ 1715.808367][ C0] FS: 0000000000000000(0000) GS:ffff888123a48000(0000) knlGS:0000000000000000 [ 1715.808383][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1715.808396][ C0] CR2: 00000000578cc21c CR3: 000000007f38c000 CR4: 00000000003526f0 [ 1715.808414][ C0] Call Trace: [ 1715.808421][ C0] [ 1715.808430][ C0] wait_for_lsr+0x184/0x2f0 [ 1715.808460][ C0] __serial8250_console_fifo_write+0xcd/0x3e0 [ 1715.808498][ C0] serial8250_console_write+0xa7e/0x1200 [ 1715.808530][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 1715.808556][ C0] ? __schedule+0x17f3/0x5820 [ 1715.808595][ C0] nbcon_emit_next_record+0xef5/0x1a90 [ 1715.808629][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 1715.808658][ C0] ? nbcon_context_try_acquire+0x819/0xbd0 [ 1715.808691][ C0] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 1715.808722][ C0] nbcon_kthread_func+0x6d9/0x8d0 [ 1715.808750][ C0] ? nbcon_kthread_func+0x163/0x8d0 [ 1715.808772][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1715.808799][ C0] ? __kthread_parkme+0x71/0x1f0 [ 1715.808829][ C0] ? __kthread_parkme+0x199/0x1f0 [ 1715.808869][ C0] kthread+0x38b/0x480 [ 1715.808889][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1715.808911][ C0] ? __pfx_kthread+0x10/0x10 [ 1715.808932][ C0] ret_from_fork+0x514/0xb70 [ 1715.808954][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1715.808973][ C0] ? __switch_to+0xc78/0x1410 [ 1715.809003][ C0] ? __pfx_kthread+0x10/0x10 [ 1715.809024][ C0] ret_from_fork_asm+0x1a/0x30 [ 1715.809052][ C0] [ 1715.830794][ T33] Kernel panic - not syncing: hung_task: blocked tasks [ 1717.144057][ T33] CPU: 1 UID: 0 PID: 33 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1717.154841][ T33] Tainted: [L]=SOFTLOCKUP [ 1717.159180][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1717.169272][ T33] Call Trace: [ 1717.172573][ T33] [ 1717.175529][ T33] vpanic+0x56d/0xa60 [ 1717.179577][ T33] ? __pfx___schedule+0x10/0x10 [ 1717.184456][ T33] ? __pfx_vpanic+0x10/0x10 [ 1717.189159][ T33] panic+0xc5/0xd0 [ 1717.192986][ T33] ? __pfx_panic+0x10/0x10 [ 1717.197503][ T33] ? preempt_schedule_common+0x7f/0xd0 [ 1717.203004][ T33] ? preempt_schedule_thunk+0x16/0x40 [ 1717.208411][ T33] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 1717.214635][ T33] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 1717.220830][ T33] watchdog+0x102b/0x1030 [ 1717.225222][ T33] ? watchdog+0x1c7/0x1030 [ 1717.229703][ T33] kthread+0x38b/0x480 [ 1717.233805][ T33] ? __pfx_watchdog+0x10/0x10 [ 1717.238704][ T33] ? __pfx_kthread+0x10/0x10 [ 1717.243323][ T33] ret_from_fork+0x514/0xb70 [ 1717.247938][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 1717.253108][ T33] ? __switch_to+0xc78/0x1410 [ 1717.257819][ T33] ? __pfx_kthread+0x10/0x10 [ 1717.262467][ T33] ret_from_fork_asm+0x1a/0x30 [ 1717.267271][ T33] [ 1717.270463][ T33] Kernel Offset: disabled [ 1717.274803][ T33] Rebooting in 86400 seconds..